Ralph Crongeyer wrote:
Well I got it fixed by using ApacheDirectoryStudio and searching for
the
old stuck replica and deleted all of it's entries, which fixed the issues,
I wish I would have gotten this email sooner, I would have tried what
you suggested.
Thanks for your help with this.
Sure, sorry it took so long.
You may want to run: ipa-replica-manage del replica.server --force --cleanup
Just to ensure you got everything.
rob
Ralph
On Wed, Oct 24, 2018 at 5:43 PM Rob Crittenden <rcritten(a)redhat.com
<mailto:rcritten@redhat.com>> wrote:
Ralph Crongeyer via FreeIPA-users wrote:
> So it does allow me to login, however there is a popup that says:
> "Some operations failed.", and a link "View details", when I
click on
> that it shows:
> "invalid 'PKINIT enabled server': all masters must have IPA master
role"
> And there is a button that says "OK", when I click on that it
shows this:
Ok. Start by running:
$ kinit admin
$ ipa domainlevel-get
If it is 1 you can try
$ ipa server-del --ignore-topology-disconnect --ignore-last-of-role
--force replica.server
rob
>
>
> Runtime error
>
> Web UI got in unrecoverable state during "runtime" phase.
>
>
> Technical details:
>
> y.server_config is undefined
>
freeipa/ipa/</y.update_password_expiration@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:37187
>
start_runtime@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:17296
>
register_phases/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1253
>
_run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3476
>
forEach@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:29752
>
_run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3440
>
next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899
>
_run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626
> c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960
>
d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246
>
_run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548
>
next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899
>
_run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626
> c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960
>
d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246
>
_run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548
>
next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899
>
_run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626
> c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960
> l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886
>
d/this.resolve@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873
>
dojo/promise/all/</</</<@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:85255
> c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960
> l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886
>
d/this.resolve@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873
>
register_phases/</<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1092
>
on_success@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:34471
>
freeipa/rpc/</a.concurrent_command/t.on_success_all@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:57200
>
freeipa/rpc/</a.concurrent_command/t.command_completed@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56993
>
freeipa/rpc/</a.concurrent_command/t.success_handler@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56830
>
freeipa/rpc/</a.concurrent_command/t.execute/n.on_success</<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56380
>
freeipa/rpc/</a.command/l.register_handlers/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:53826
> f@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:49586
>
dojo/on/</i.emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45192
>
dojo/on/</i.emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45808
>
emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:48712
> c@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:52469
>
l@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:24877
>
fireWith@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:25702
> k@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:5346
>
t/<@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:9152
>
> On Tue, Oct 23, 2018 at 4:07 PM Rob Crittenden
<rcritten(a)redhat.com <mailto:rcritten@redhat.com>
> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>>
wrote:
>
> Ralph Crongeyer via FreeIPA-users wrote:
> > Can this be manually removed? W currently can't login to the web
> portal
> > due to this issue.
>
> I don't understand how one master is affecting the web server of
> another. By design they are independent. Can you provide
details on how
> login is failing?
>
> rob
>
> >
> > On Fri, Oct 19, 2018 at 8:42 AM Ralph Crongeyer
> <rcrongeyer(a)gmail.com <mailto:rcrongeyer@gmail.com>
<mailto:rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com>>
> > <mailto:rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com>
<mailto:rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com>>>>
wrote:
> >
> > The goal is to remove the replica server from the
master. No split
> > brain. I need to remove this as we can't login to the portal
> because
> > of this.
> >
> >
> > On Thu, Oct 18, 2018 at 5:23 PM Rob Crittenden
> <rcritten(a)redhat.com <mailto:rcritten@redhat.com>
<mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>
> > <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>
<mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>>> wrote:
> >
> > Ralph Crongeyer via FreeIPA-users wrote:
> > > Hi List,
> > > I have a master server that had a replica
installed. The
> > replica has
> > > been uninstalled. When I try to run
"ipa-replica-manage del
> > --force
> > > replica.server" it fails with:
> > > invalid 'PKINIT enabled server': all masters must
have IPA
> > master role
> > > enabled
> > >
> > > How can I delete this replica?
> >
> > What is your ultimate goal here? In your previous
post it
> > sounded like
> > you are trying to create a split-brain. IPA doesn't
like those
> > and does
> > what it can to prevent them.
> >
> > rob
> >
> >
> >
> > _______________________________________________
> > FreeIPA-users mailing list --
freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
> <mailto:freeipa-users@lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>>
> > To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
> <mailto:freeipa-users-leave@lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>>
> > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > List Guidelines:
> https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> >
>
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
> To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>