Also:

# ldapsearch -D "cn=Directory Manager" -W -b "dc=my.net" "(&(objectClass=ldapSubEntry)(nsds5ReplConflict=*))"
nsds5ReplConflict
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <dc=my,dc=net) with scope subtree
# filter: (&(objectClass=ldapSubEntry)(nsds5ReplConflict=*))
# requesting: nsds5ReplConflict
#

# search result
search: 2
result: 0 success

# numResponses: 1
#


On 10/10/2018 07:54 AM, Bret Wortman via FreeIPA-users wrote:

I've got a DNS entry that really isn't there.

# nslookup sys001
;; connection timed out; no servers could be reached
# ipa dnsrecord-find my.net sys001 --all --raw
  dn: idnsname=sys001+nsuniqueid=7523898c-b29311e8-85ddf5f7-bbec4d04,idnsname=my.net.,cn=dns,dc=my,dc=net
  idnsname: sys001
  arecord: 192.168.75.50
  objectClass: top
  objectClass: idnsrecord
# ldapdelete -D "cn=DirectoryManager" -W -p 389 -h ipa.my.net -x uid=nsuniqueid=
7523898c-b29311e8-85ddf5f7-bbec4d04,cn=dns,dc=my,dc=net

That last command just goes off into the weeds and never returns. I picked it up from this article: https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/managing_replication-solving_common_replication_conflicts but the format seems a bit different so I'm concerned that I'm not getting the delete command right.

How can I get rid of this entry-that's-not-an-entry? We'd like to reuse this IP but can't.


--
photo
Bret Wortman
Founder, Damascus Products, LLC

855-644-2783 | bret@wrapbuddies.co

http://wrapbuddies.co/

10332 Main St Suite 319 Fairfax, VA 22030






_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org