Hi
A bit late I realise but I noticed ...
https://www.freeipa.org/page/Domain_Levels
(# ipa domainlevel-get)
IPA 4.5 is likely domain level 1. According to the ipa-replica-del man page:
<-- snip
To manage IPA replication agreements in a domain at domain level 1, use IPA CLI or Web UI,
see `ipa help topology` for additional information.
<-- snip
When I decommissioned a site recently with 2 IPA servers, I followed this advice and ended
up using this command from a remote IPA server:
# ipa server-del <IPA_name_to_decom>
Which initially threw errors, giving very specific messages about how replication would
fail due to missing topology agreements should the server removal carry on, allowing me to
sort those agreements out separately. Once all the agreements were in place to support the
removal of the server, the command removed all topology agreements related to this server
and then deleted the server altogether.
In our environment, one of the the servers to be decomm'ed was the CA renewal server
so I had to move that first - these are tasks I perform very rarely (once so far!) and
have little knowledge of - all the tools worked really well, I went home on time and slept
well!
Regards
Angus
________________________________
From: Satish Patel via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
Sent: 20 September 2019 02:51
To: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org>
Cc: Dmitry Perets <dmitry.perets(a)gmail.com>; Satish Patel
<satish.txt(a)gmail.com>
Subject: [Freeipa-users] Re: remove bad replica from list not working
You are awesome!!!
ipa topologysegment-del works!! and i am successfully able to remove bad replica
On Thu, Sep 19, 2019 at 6:08 PM Dmitry Perets via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
Hi,
Try using these, to delete replication agreements:
ipa topologysegment-find
ipa topologysegment-del
Then you can repeat "ipa-replica-manage del".
---
Regards,
Dmitry Perets
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.fe...
List Guidelines:
https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ffedorap...
List Archives:
https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.f...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.fe...
List Guidelines:
https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ffedorap...
List Archives:
https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.f...