Perfect! Thanks for all the help Rob!
Jamal
On Wed 14 Feb 2018 at 19:08, Rob Crittenden <rcritten(a)redhat.com> wrote:
Jamal Mahmoud wrote:
> Thank you Thierry for your help!
>
> I just deleted all the entries and hey presto! Oxygen is no longer
> lingering around. Except that in my defaultServerList entry, oxygen is
> still there, i have a feeling that is affecting something somewhere, or
> will in the future. Would anyone know how to fix this?
> after running:
>
> ldapsearch -LLL -D "cn=directory manager" -W -b
"dc=eggvfx,dc=ie"
> "(objectclass=*)" | grep oxygen
>
> The output is:
> defaultServerList: oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie>
> nitrogen.eggvfx.ie <
http://nitrogen.eggvfx.ie> lithium.eggvfx.ie
> <
http://lithium.eggvfx.ie>
You can use ldapmodify to drop the oxygen entry.
defaultServerList is used for some kinds of discovery (DUA profiles).
rob
>
> Thanks again for your help!
> Jamal
>
> <
http://www.egg.ie/>
>
>
>
> *Jamal Mahmoud* / Pipeline TD
> jamal.mahmoud(a)egg.ie <mailto:jamal.mahmoud@egg.ie>
>
> 35 Fitzwilliam Street Upper, Dublin.
> P: +353 1 6345440
>
> Twitter <
https://twitter.com/EggPost> Facebook
> <
https://www.facebook.com/egg.post/> LinkedIn
> <
http://www.linkedin.com/in/jamalmahmoud> Vimeo
> <
https://vimeo.com/user9887735>
>
>
> On 14 February 2018 at 16:20, thierry bordaz <tbordaz(a)redhat.com
> <mailto:tbordaz@redhat.com>> wrote:
>
> I think it is okay to do the delete.
> topology plugin is a reader of master container and should take into
> account those changes. Now it may require a restart.
>
> Just for your information I will be out of the office tonight being
> back Feb 23rd
>
> best regards
> thierry
>
> On 02/14/2018 04:25 PM, Jamal Mahmoud wrote:
>> Would it hurt to try running those ldapdelete commands? or would
>> that make it worse?
>>
>> Thanks for your help Thierry,
>>
>> <
http://www.egg.ie/>
>>
>>
>>
>> *Jamal Mahmoud* / Pipeline TD
>> jamal.mahmoud(a)egg.ie <mailto:jamal.mahmoud@egg.ie>
>>
>> 35 Fitzwilliam Street Upper, Dublin.
>> P: +353 1 6345440 <tel:+353%201%20634%205440>
>>
>> Twitter <
https://twitter.com/EggPost> Facebook
>> <
https://www.facebook.com/egg.post/> LinkedIn
>> <
http://www.linkedin.com/in/jamalmahmoud> Vimeo
>> <
https://vimeo.com/user9887735>
>>
>>
>>
>>
>>
>> On 14 February 2018 at 14:56, thierry bordaz <tbordaz(a)redhat.com
>> <mailto:tbordaz@redhat.com>> wrote:
>>
>> Hummm... to be honest I have not the skill of support guys to
>> get rid of conflicts in IPA :(
>>
>> Removing the conflicts entries under 'masters' should relax
>> topology plugin to accept deletion of the segments.
>> You may ping again freeipa-users to get more advice how to
>> repair a topology with conflicts entries.
>>
>> We know that we have a former server that is a conflict entry
>> under 'master'.
>> Also that it exists segments to that server, likely because
>> topology plugin hit the same issues than others IPA CLI.
>>
>> On 02/14/2018 03:43 PM, Jamal Mahmoud wrote:
>>> Haha! I almost went ahead and ran those deletes without
>>> thinking! Sick of oxygen at this point!
>>> Okay so I grepped oxygen from that output file and if i'm not
>>> mistaken there are references to it in the topology.
>>>
>>> dn: cn=nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
>>> <
http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
>,cn=domain,cn=topology,cn=ipa,cn=
>>> cn: nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
>>> <
http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie>
>>> ipaReplTopoSegmentRightNode: oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie>
>>> dn: cn=nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
>>> <
http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
>,cn=ca,cn=topology,cn=ipa,cn=etc,
>>> cn: nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
>>> <
http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie>
>>> ipaReplTopoSegmentRightNode: oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie>
>>> dn: cn=oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=mast
>>> cn: oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie>
>>>
>>>
>>> I see that some of the lines have been truncated but you can
>>> see the start of some lines point to segment nodes with
>>> Nitrogen, is it okay still to run this ldapdelete?
>>>
>>>
>>> <
http://www.egg.ie/>
>>>
>>>
>>>
>>> *Jamal Mahmoud* / Pipeline TD
>>> jamal.mahmoud(a)egg.ie <mailto:jamal.mahmoud@egg.ie>
>>>
>>> 35 Fitzwilliam Street Upper, Dublin.
>>> P: +353 1 6345440 <tel:+353%201%20634%205440>
>>>
>>> Twitter <
https://twitter.com/EggPost> Facebook
>>> <
https://www.facebook.com/egg.post/> LinkedIn
>>> <
http://www.linkedin.com/in/jamalmahmoud> Vimeo
>>> <
https://vimeo.com/user9887735>
>>>
>>>
>>>
>>>
>>>
>>> On 14 February 2018 at 14:37, thierry bordaz
>>> <tbordaz(a)redhat.com <mailto:tbordaz@redhat.com>> wrote:
>>>
>>> Okay,
>>>
>>> So master 'oxygen' was a conflicts as well as all its
>>> services (NTP, KDC...).
>>> My understanding is that 'oxygen' is no longer part of
>>> the topology. So I think removing all its children and
>>> then the master would solve your issue.
>>>
>>> ldapdelete -D "cn=directory manager" -W
>>> "cn=oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>
>>>
>>> ldapdelete -D "cn=directory manager" -W
>>>
"cn=NTP+nsuniqueid=65aeb78a-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>
>>> ldapdelete -D "cn=directory manager" -W
>>>
"cn=KDC+nsuniqueid=65aeb78c-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>
>>> ldapdelete -D "cn=directory manager" -W
>>>
"cn=KPASSWD+nsuniqueid=65aeb78d-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>
>>> ldapdelete -D "cn=directory manager" -W
>>>
"cn=HTTP+nsuniqueid=72cba68b-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>
>>> ldapdelete -D "cn=directory manager" -W
>>>
"cn=OTPD+nsuniqueid=72cba68c-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>
>>> ldapdelete -D "cn=directory manager" -W
>>>
"cn=KEYS+nsuniqueid=72cba68d-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>
>>> But before doing that I would first check if it remains
>>> reference to oxygen somewhere.
>>>
>>> ldapsearch -LLL -D "cn=directory manager" -W -b
>>> "dc=eggvfx,dc=ie" "(objectclass=*)" >
/tmp/all_db
>>>
>>> then search for 'oxygen' into /tmp/all_db and check it
>>> appears only in those conflict entries.
>>>
>>>
>>> On 02/14/2018 03:22 PM, Jamal Mahmoud wrote:
>>>> Here it is! If there is anything else don't hesitate to
>>>> ask me!
>>>>
>>>> [root@lithium ~]# ldapsearch -D "cn=directory
manager"
>>>> -W -b "cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>> "(nsds5ReplConflict=*)" dn
>>>> Enter LDAP Password:
>>>> # extended LDIF
>>>> #
>>>> # LDAPv3
>>>> # base <cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie>
with
>>>> scope subtree
>>>> # filter: (nsds5ReplConflict=*)
>>>> # requesting: dn
>>>> #
>>>>
>>>> # oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
>>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa, etc, eg
>>>> gvfx.ie <
http://gvfx.ie>
>>>> dn: cn=oxygen.eggvfx.ie
>>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=mast
>>>> ers,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>
>>>> # NTP + 65aeb78a-04de11e8-a003fb96-902b0a77,
>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
562f6f20-04de11
>>>> e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
>>>> <
http://eggvfx.ie>
>>>> dn:
>>>> cn=NTP+nsuniqueid=65aeb78a-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>>> <
http://oxygen.eggvfx.ie>+
>>>>
nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg
>>>> gvfx,dc=ie
>>>>
>>>> # KDC + 65aeb78c-04de11e8-a003fb96-902b0a77,
>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
562f6f20-04de11
>>>> e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
>>>> <
http://eggvfx.ie>
>>>> dn:
>>>> cn=KDC+nsuniqueid=65aeb78c-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>>> <
http://oxygen.eggvfx.ie>+
>>>>
nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg
>>>> gvfx,dc=ie
>>>>
>>>> # KPASSWD + 65aeb78d-04de11e8-a003fb96-902b0a77,
>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
562f6f20-04
>>>> de11e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
>>>> <
http://eggvfx.ie>
>>>> dn:
>>>>
cn=KPASSWD+nsuniqueid=65aeb78d-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx
>>>>
.ie+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,d
>>>> c=eggvfx,dc=ie
>>>>
>>>> # HTTP + 72cba68b-04de11e8-a003fb96-902b0a77,
>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
562f6f20-04de1
>>>> 1e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
>>>> <
http://eggvfx.ie>
>>>> dn:
>>>> cn=HTTP+nsuniqueid=72cba68b-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>>> <
http://oxygen.eggvfx.ie>
>>>>
+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
>>>> ggvfx,dc=ie
>>>>
>>>> # OTPD + 72cba68c-04de11e8-a003fb96-902b0a77,
>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
562f6f20-04de1
>>>> 1e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
>>>> <
http://eggvfx.ie>
>>>> dn:
>>>> cn=OTPD+nsuniqueid=72cba68c-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>>> <
http://oxygen.eggvfx.ie>
>>>>
+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
>>>> ggvfx,dc=ie
>>>>
>>>> # KEYS + 72cba68d-04de11e8-a003fb96-902b0a77,
>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
562f6f20-04de1
>>>> 1e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
>>>> <
http://eggvfx.ie>
>>>> dn:
>>>> cn=KEYS+nsuniqueid=72cba68d-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>>> <
http://oxygen.eggvfx.ie>
>>>>
+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
>>>> ggvfx,dc=ie
>>>>
>>>> # search result
>>>> search: 2
>>>> result: 0 Success
>>>>
>>>> # numResponses: 8
>>>> # numEntries: 7
>>>>
>>>> Many Thanks,
>>>>
>>>> <
http://www.egg.ie/>
>>>>
>>>>
>>>>
>>>> *Jamal Mahmoud* / Pipeline TD
>>>> jamal.mahmoud(a)egg.ie <mailto:jamal.mahmoud@egg.ie>
>>>>
>>>> 35 Fitzwilliam Street Upper, Dublin
>>>> <
https://maps.google.com/?q=35+Fitzwilliam+Street+Upper,+Dublin&entry=...
>.
>>>> P: +353 1 6345440 <tel:+353%201%20634%205440>
>>>>
>>>> Twitter <
https://twitter.com/EggPost> Facebook
>>>> <
https://www.facebook.com/egg.post/> LinkedIn
>>>> <
http://www.linkedin.com/in/jamalmahmoud> Vimeo
>>>> <
https://vimeo.com/user9887735>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On 14 February 2018 at 14:00, thierry bordaz
>>>> <tbordaz(a)redhat.com <mailto:tbordaz@redhat.com>>
wrote:
>>>>
>>>> Jamal,
>>>>
>>>> sorry to iterate but I would like to have a complete
>>>> view before deleting entries.
>>>>
>>>> What is the outpout of
>>>> ldapsearch -D "cn=directory manager" -W -b
>>>> "cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>> "(nsds5ReplConflict=*)" dn
>>>>
>>>>
>>>> On 02/14/2018 02:43 PM, Jamal Mahmoud wrote:
>>>>> Oh i see! Here is the output from that command:
>>>>>
>>>>> [root@lithium ~]# ldapsearch -D "cn=directory
>>>>> manager" -W -b
>>>>>
"cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
>>>>>
"(|(objectclass=*)(objectclass=nstombstone)(objectclass=ldapsubentry))"
>>>>> Enter LDAP Password:
>>>>> # extended LDIF
>>>>> #
>>>>> # LDAPv3
>>>>> # base
<cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie>
>>>>> with scope subtree
>>>>> # filter:
>>>>>
(|(objectclass=*)(objectclass=nstombstone)(objectclass=ldapsubentry))
>>>>> # requesting: ALL
>>>>> #
>>>>>
>>>>> # masters, ipa, etc, eggvfx.ie
<
http://eggvfx.ie>
>>>>> dn: cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: top
>>>>> cn: masters
>>>>>
>>>>> # nitrogen.eggvfx.ie
<
http://nitrogen.eggvfx.ie>,
>>>>> masters, ipa, etc, eggvfx.ie
<
http://eggvfx.ie>
>>>>> dn: cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> ipaMaxDomainLevel: 1
>>>>> ipaMinDomainLevel: 0
>>>>> ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie
>>>>> ipaReplTopoManagedSuffix: o=ipaca
>>>>> cn: nitrogen.eggvfx.ie
<
http://nitrogen.eggvfx.ie>
>>>>> objectClass: top
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaReplTopoManagedServer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: ipaSupportedDomainLevelConfig
>>>>>
>>>>> # 4184b79c-efc211e7-a445c156-0137f91d,
>>>>> lithium.eggvfx.ie <
http://lithium.eggvfx.ie>,
>>>>> masters, ipa, etc, eg
>>>>> gvfx.ie <
http://gvfx.ie>
>>>>> dn:
>>>>> nsuniqueid=4184b79c-efc211e7-a445c156-0137f91d,cn=
lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie>,cn=mas
>>>>> ters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> nstombstonecsn: 5a4b902b001c00070000
>>>>> nsParentUniqueId:
0ae096b3-9c8a11e7-917dfdf1-4323123d
>>>>> ipaMaxDomainLevel: 1
>>>>> ipaMinDomainLevel: 0
>>>>> ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie
>>>>> cn: lithium.eggvfx.ie
<
http://lithium.eggvfx.ie>
>>>>> objectClass: top
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaReplTopoManagedServer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: ipaSupportedDomainLevelConfig
>>>>> objectClass: nsTombstone
>>>>>
>>>>> # NTP, nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=NTP,cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> cn: NTP
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 45
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>>
>>>>> # KDC, nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=KDC,cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> cn: KDC
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 10
>>>>> ipaConfigString: kdcProxyEnabled
>>>>> ipaConfigString: pkinitEnabled
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>>
>>>>> # KPASSWD, nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=KPASSWD,cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> cn: KPASSWD
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 20
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>>
>>>>> # HTTP, nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=HTTP,cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> cn: HTTP
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 40
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>>
>>>>> # OTPD, nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=OTPD,cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> cn: OTPD
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 80
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>>
>>>>> # KEYS, nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=KEYS,cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> cn: KEYS
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 41
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>>
>>>>> # CA, nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=CA,cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> cn: CA
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 50
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>>
>>>>> # DNS, nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=DNS,cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> cn: DNS
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 30
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>>
>>>>> # DNSKeySync, nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=DNSKeySync,cn=nitrogen.eggvfx.ie
>>>>> <
http://nitrogen.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=
>>>>> ie
>>>>> cn: DNSKeySync
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 110
>>>>> ipaConfigString: dnssecVersion 1
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>>
>>>>> # lithium.eggvfx.ie
<
http://lithium.eggvfx.ie>,
>>>>> masters, ipa, etc, eggvfx.ie
<
http://eggvfx.ie>
>>>>> dn: cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: top
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaReplTopoManagedServer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: ipaSupportedDomainLevelConfig
>>>>> cn: lithium.eggvfx.ie
<
http://lithium.eggvfx.ie>
>>>>> ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie
>>>>> ipaReplTopoManagedSuffix: o=ipaca
>>>>> ipaMinDomainLevel: 0
>>>>> ipaMaxDomainLevel: 1
>>>>>
>>>>> # NTP, lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=NTP,cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 45
>>>>> cn: NTP
>>>>>
>>>>> # KDC, lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=KDC,cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 10
>>>>> ipaConfigString: kdcProxyEnabled
>>>>> ipaConfigString: pkinitEnabled
>>>>> cn: KDC
>>>>>
>>>>> # KPASSWD, lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=KPASSWD,cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 20
>>>>> cn: KPASSWD
>>>>>
>>>>> # HTTP, lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=HTTP,cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 40
>>>>> cn: HTTP
>>>>>
>>>>> # OTPD, lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=OTPD,cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 80
>>>>> cn: OTPD
>>>>>
>>>>> # KEYS, lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=KEYS,cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 41
>>>>> cn: KEYS
>>>>>
>>>>> # CA, lithium.eggvfx.ie
<
http://lithium.eggvfx.ie>,
>>>>> masters, ipa, etc, eggvfx.ie
<
http://eggvfx.ie>
>>>>> dn: cn=CA,cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 50
>>>>> ipaConfigString: caRenewalMaster
>>>>> cn: CA
>>>>>
>>>>> # DNS, lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=DNS,cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 30
>>>>> cn: DNS
>>>>>
>>>>> # DNSKeySync, lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie>, masters, ipa,
etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=DNSKeySync,cn=lithium.eggvfx.ie
>>>>> <
http://lithium.eggvfx.ie
>,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=i
>>>>> e
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 110
>>>>> ipaConfigString: dnssecVersion 1
>>>>> cn: DNSKeySync
>>>>>
>>>>> # oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie>
+
>>>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa,
>>>>> etc, eg
>>>>> gvfx.ie <
http://gvfx.ie>
>>>>> dn: cn=oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=mast
>>>>> ers,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: top
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaReplTopoManagedServer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: ipaSupportedDomainLevelConfig
>>>>> cn: oxygen.eggvfx.ie
<
http://oxygen.eggvfx.ie>
>>>>> ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie
>>>>> ipaReplTopoManagedSuffix: o=ipaca
>>>>> ipaMinDomainLevel: 0
>>>>> ipaMaxDomainLevel: 1
>>>>>
>>>>> # NTP + 65aeb78a-04de11e8-a003fb96-902b0a77,
>>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
>>>>> 562f6f20-04de11
>>>>> e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
>>>>> <
http://eggvfx.ie>
>>>>> dn:
>>>>>
cn=NTP+nsuniqueid=65aeb78a-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie>+
>>>>>
nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg
>>>>> gvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 45
>>>>> cn: NTP
>>>>>
>>>>> # KDC + 65aeb78c-04de11e8-a003fb96-902b0a77,
>>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
>>>>> 562f6f20-04de11
>>>>> e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
>>>>> <
http://eggvfx.ie>
>>>>> dn:
>>>>>
cn=KDC+nsuniqueid=65aeb78c-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie>+
>>>>>
nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg
>>>>> gvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 10
>>>>> ipaConfigString: kdcProxyEnabled
>>>>> ipaConfigString: pkinitEnabled
>>>>> cn: KDC
>>>>>
>>>>> # KPASSWD + 65aeb78d-04de11e8-a003fb96-902b0a77,
>>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
>>>>> 562f6f20-04
>>>>> de11e8-a003fb96-902b0a77, masters, ipa, etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn:
>>>>>
cn=KPASSWD+nsuniqueid=65aeb78d-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx
>>>>>
.ie+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,d
>>>>> c=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 20
>>>>> cn: KPASSWD
>>>>>
>>>>> # HTTP + 72cba68b-04de11e8-a003fb96-902b0a77,
>>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
>>>>> 562f6f20-04de1
>>>>> 1e8-a003fb96-902b0a77, masters, ipa, etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn:
>>>>>
cn=HTTP+nsuniqueid=72cba68b-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie>
>>>>>
+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
>>>>> ggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 40
>>>>> cn: HTTP
>>>>>
>>>>> # OTPD + 72cba68c-04de11e8-a003fb96-902b0a77,
>>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
>>>>> 562f6f20-04de1
>>>>> 1e8-a003fb96-902b0a77, masters, ipa, etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn:
>>>>>
cn=OTPD+nsuniqueid=72cba68c-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie>
>>>>>
+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
>>>>> ggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 80
>>>>> cn: OTPD
>>>>>
>>>>> # KEYS + 72cba68d-04de11e8-a003fb96-902b0a77,
>>>>> oxygen.eggvfx.ie <
http://oxygen.eggvfx.ie> +
>>>>> 562f6f20-04de1
>>>>> 1e8-a003fb96-902b0a77, masters, ipa, etc,
>>>>> eggvfx.ie <
http://eggvfx.ie>
>>>>> dn:
>>>>>
cn=KEYS+nsuniqueid=72cba68d-04de11e8-a003fb96-902b0a77,cn=
oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie>
>>>>>
+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
>>>>> ggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 41
>>>>> cn: KEYS
>>>>>
>>>>> # CA, oxygen.eggvfx.ie
<
http://oxygen.eggvfx.ie> +
>>>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa,
etc
>>>>> , eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=CA,cn=oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,c
>>>>> n=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 50
>>>>> cn: CA
>>>>>
>>>>> # DNS, oxygen.eggvfx.ie
<
http://oxygen.eggvfx.ie> +
>>>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa,
et
>>>>> c, eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=DNS,cn=oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,
>>>>> cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 30
>>>>> cn: DNS
>>>>>
>>>>> # DNSKeySync, oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie> +
>>>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters,
>>>>> ipa, etc, eggvfx.ie <
http://eggvfx.ie>
>>>>> dn: cn=DNSKeySync,cn=oxygen.eggvfx.ie
>>>>> <
http://oxygen.eggvfx.ie
>+nsuniqueid=562f6f20-04de11e8-a003fb96-90
>>>>> 2b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
>>>>> objectClass: nsContainer
>>>>> objectClass: ipaConfigObject
>>>>> objectClass: top
>>>>> ipaConfigString: enabledService
>>>>> ipaConfigString: startOrder 110
>>>>> ipaConfigString: dnssecVersion 1
>>>>> cn: DNSKeySync
>>>>>
>>>>> # search result
>>>>> search: 2
>>>>>