Re: [Freeipa-users] deleting ipa user

2015-05-04 Thread Tomas Babej
On 04/30/2015 02:31 PM, Andy Thompson wrote: It appears that f82 is the user object and f87 is the group object. So you are right, I don't think f82 is what we were looking for, it just happened to have the username in it when I grepped without filtering the uniqueid. I'm not sure why it was

Re: [Freeipa-users] deleting ipa user

2015-04-30 Thread Andy Thompson
> > It appears that f82 is the user object and f87 is the group object. So you > > are > right, I don't think f82 is what we were looking for, it just happened to have > the username in it when I grepped without filtering the uniqueid. I'm not > sure why it was having problems with the user grou

Re: [Freeipa-users] deleting ipa user

2015-04-30 Thread thierry bordaz
On 04/30/2015 12:41 PM, Andy Thompson wrote: You got a first replica where you failed to delete the entry. You got a second replica where you succeeded to delete the entry. On first replica you can see messages like: [29/Apr/2015:07:21:32 -0400] ldbm_back_delete - conn=0 op=0 Turning a tombston

Re: [Freeipa-users] deleting ipa user

2015-04-30 Thread Andy Thompson
> You got a first replica where you failed to delete the entry. > You got a second replica where you succeeded to delete the entry. > > On first replica you can see messages like: > > [29/Apr/2015:07:21:32 -0400] ldbm_back_delete - conn=0 op=0 Turning a > tombstone into a tombstone! "nsuniqueid=7

Re: [Freeipa-users] deleting ipa user

2015-04-30 Thread thierry bordaz
On 04/29/2015 07:15 PM, Andy Thompson wrote: -Original Message- From: thierry bordaz [mailto:tbor...@redhat.com] Sent: Wednesday, April 29, 2015 1:07 PM To: Andy Thompson Cc: Ludwig Krispenz; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] deleting ipa user On 04

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> -Original Message- > From: thierry bordaz [mailto:tbor...@redhat.com] > Sent: Wednesday, April 29, 2015 1:07 PM > To: Andy Thompson > Cc: Ludwig Krispenz; Martin Kosek; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] deleting ipa user > > On 04/29/2015

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread thierry bordaz
On 04/29/2015 06:45 PM, Andy Thompson wrote: -Original Message- From: thierry bordaz [mailto:tbor...@redhat.com] Sent: Wednesday, April 29, 2015 12:28 PM To: Andy Thompson Cc: Ludwig Krispenz; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] deleting ipa user On 04/29

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> -Original Message- > From: thierry bordaz [mailto:tbor...@redhat.com] > Sent: Wednesday, April 29, 2015 12:28 PM > To: Andy Thompson > Cc: Ludwig Krispenz; Martin Kosek; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] deleting ipa user > > On 04/29/2015

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread thierry bordaz
On 04/29/2015 05:58 PM, Andy Thompson wrote: dn: nsuniqueid=7e1a1f87-e82611e4-99f1b343- f0abc1a8,cn=username,cn=groups,c n=accounts,dc=mhbenp,dc=lin nscpentrywsi: dn: nsuniqueid=7e1a1f87-e82611e4-99f1b343- f0abc1a8,cn=username,cn=groups,c n=accounts,dc=mhbenp,dc=lin nscpentrywsi: objectClass;

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> This is looking like that on the replica where the errors are logged. > The entry is a tombstone but can not be find with the nsuniqueid. > If on that server you do > > ldapsearch -LLL -o ldif-wrap=no -Hldap://mdhixnpipa02 -x -D "cn=directory > manager" -W -b "dc=..." > "(&(objectclass=nstombs

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> > dn: > > nsuniqueid=7e1a1f87-e82611e4-99f1b343- > f0abc1a8,cn=username,cn=groups,c > > n=accounts,dc=mhbenp,dc=lin > > nscpentrywsi: dn: > > nsuniqueid=7e1a1f87-e82611e4-99f1b343- > f0abc1a8,cn=username,cn=groups,c > > n=accounts,dc=mhbenp,dc=lin > > nscpentrywsi: objectClass;vucsn-55364a4200050

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread thierry bordaz
On 04/29/2015 05:35 PM, Andy Thompson wrote: -Original Message- From: Ludwig Krispenz [mailto:lkris...@redhat.com] Sent: Wednesday, April 29, 2015 11:28 AM To: Andy Thompson Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] deleting ipa user On 04

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Ludwig Krispenz
On 04/29/2015 05:35 PM, Andy Thompson wrote: -Original Message- From: Ludwig Krispenz [mailto:lkris...@redhat.com] Sent: Wednesday, April 29, 2015 11:28 AM To: Andy Thompson Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] deleting ipa user On 04

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> -Original Message- > From: Ludwig Krispenz [mailto:lkris...@redhat.com] > Sent: Wednesday, April 29, 2015 11:28 AM > To: Andy Thompson > Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] deleting ipa user > > > O

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Ludwig Krispenz
On 04/29/2015 05:08 PM, Andy Thompson wrote: -Original Message- From: Ludwig Krispenz [mailto:lkris...@redhat.com] Sent: Wednesday, April 29, 2015 10:59 AM To: Andy Thompson Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] deleting ipa user On

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> -Original Message- > From: Ludwig Krispenz [mailto:lkris...@redhat.com] > Sent: Wednesday, April 29, 2015 10:59 AM > To: Andy Thompson > Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] deleting ipa user > > > O

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Ludwig Krispenz
On 04/29/2015 04:49 PM, Andy Thompson wrote: -Original Message- From: Ludwig Krispenz [mailto:lkris...@redhat.com] Sent: Wednesday, April 29, 2015 10:51 AM To: Andy Thompson Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] deleting ipa user did

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Ludwig Krispenz
Subject: Re: [Freeipa-users] deleting ipa user can you do the followin search on both servers ? ldapsearch -LLL -o ldif-wrap=no -h xxx p xxx -x -D "cn=directory manager" - w xxx -b "dc=xxx " "(&(objectclass=nstombstone)(nsuniqueid=7e1a1f87-e82611e4-99f1b343- f0abc

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> -Original Message- > From: Ludwig Krispenz [mailto:lkris...@redhat.com] > Sent: Wednesday, April 29, 2015 10:51 AM > To: Andy Thompson > Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] deleting ipa user > > did you run t

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> -Original Message- > From: Ludwig Krispenz [mailto:lkris...@redhat.com] > Sent: Wednesday, April 29, 2015 10:28 AM > To: Andy Thompson > Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] deleting ipa user > > can you do the

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Ludwig Krispenz
jectClass -Original Message- From: Ludwig Krispenz [mailto:lkris...@redhat.com] Sent: Wednesday, April 29, 2015 10:07 AM To: Andy Thompson Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] deleting ipa user On 04/29/2015 03:40 PM, Andy Thompson wrote

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> -Original Message- > From: Ludwig Krispenz [mailto:lkris...@redhat.com] > Sent: Wednesday, April 29, 2015 10:07 AM > To: Andy Thompson > Cc: thierry bordaz; Martin Kosek; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] deleting ipa user > > > O

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Ludwig Krispenz
On 04/29/2015 03:40 PM, Andy Thompson wrote: -Original Message- From: Ludwig Krispenz [mailto:lkris...@redhat.com] Sent: Wednesday, April 29, 2015 9:22 AM To: thierry bordaz Cc: Andy Thompson; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] deleting ipa user On 04

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> -Original Message- > From: Ludwig Krispenz [mailto:lkris...@redhat.com] > Sent: Wednesday, April 29, 2015 9:22 AM > To: thierry bordaz > Cc: Andy Thompson; Martin Kosek; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] deleting ipa user > > > On 0

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Ludwig Krispenz
: [Freeipa-users] deleting ipa user On 04/29/2015 01:26 PM, Andy Thompson wrote: I'm trying to delete an IPA account and I get a generic "operations error" when trying to remove it. It looks like something is messed up with the group object. The user doesn't show up in the ipau

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread thierry bordaz
On 04/29/2015 02:43 PM, Andy Thompson wrote: -Original Message- From: Martin Kosek [mailto:mko...@redhat.com] Sent: Wednesday, April 29, 2015 8:31 AM To: Andy Thompson; freeipa-users@redhat.com; Ludwig Krispenz; Thierry Bordaz Subject: Re: [Freeipa-users] deleting ipa user On 04/29/2015

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Andy Thompson
> -Original Message- > From: Martin Kosek [mailto:mko...@redhat.com] > Sent: Wednesday, April 29, 2015 8:31 AM > To: Andy Thompson; freeipa-users@redhat.com; Ludwig Krispenz; Thierry > Bordaz > Subject: Re: [Freeipa-users] deleting ipa user > > On 04/29/2015 01:26

Re: [Freeipa-users] deleting ipa user

2015-04-29 Thread Martin Kosek
On 04/29/2015 01:26 PM, Andy Thompson wrote: > I'm trying to delete an IPA account and I get a generic "operations error" > when trying to remove it. It looks like something is messed up with the > group object. The user doesn't show up in the ipausers group and there also > isn't a group obje