Cannot delete old server after migration

[Ronald Wimmer]

I followed the guide at 
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/htm... 
to migrate my server (including CA renewal master).

When I try to uninstall tho old server according to 
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/htm... 
I get the following error message:

ipa server-del idm1.linux.mydomain.at

Removing ipa1.linux.mydomain.at from replication topology, please wait...
ipa: ERROR: Server removal aborted:

Removal of 'ipa1.linux.mydomain.at' leads to disconnected topology in 
suffix 'ca':
Topology does not allow server idm1.linux.mydomain.at to replicate with 
servers:
     ipa5.linux.mydomain.at
     ipa2.linux.mydomain.at
     ipa6.linux.mydomain.at
Topology does not allow server ipa2.linux.mydomain.at to replicate with 
servers:
     ipa5.linux.mydomain.at
     idm1.linux.mydomain.at
Topology does not allow server ipa5.linux.mydomain.at to replicate with 
servers:
     ipa2.linux.mydomain.at
     idm1.linux.mydomain.at
     ipa6.linux.mydomain.at
Topology does not allow server ipa6.linux.mydomain.at to replicate with 
servers:
     ipa5.linux.mydomain.at
     idm1.linux.mydomain.at.

How do I get rid of the remaining replication agreements?

Cheers,
Ronald

[Florence Blanc-Renaud]

On 4/29/20 3:11 PM, Ronald Wimmer via FreeIPA-users wrote:
> I followed the guide at 
> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/htm... 
> to migrate my server (including CA renewal master).
>
> When I try to uninstall tho old server according to 
> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/htm... 
> I get the following error message:
>
> ipa server-del idm1.linux.mydomain.at
>
> Removing ipa1.linux.mydomain.at from replication topology, please wait...
> ipa: ERROR: Server removal aborted:
>
> Removal of 'ipa1.linux.mydomain.at' leads to disconnected topology in 
> suffix 'ca':

Hi,
you can check your replication topology using the web UI and need to 
make sure that each server is connected to at least another one, for the 
domain suffix and for the CA suffix, and that removing the server will 
not create a disconnected topology. Navigate to IPA Server > Topology > 
Topology Graph.
If it's not the case (as hinted by the error message), you need to 
create replication agreements and only then will you be able to delete 
the node.
If you are sure of what you're doing, you can use the 
--ignore-topology-disconnect option to force the removal.

HTH,
flo
> Topology does not allow server idm1.linux.mydomain.at to replicate with 
> servers:
>      ipa5.linux.mydomain.at
>      ipa2.linux.mydomain.at
>      ipa6.linux.mydomain.at
> Topology does not allow server ipa2.linux.mydomain.at to replicate with 
> servers:
>      ipa5.linux.mydomain.at
>      idm1.linux.mydomain.at
> Topology does not allow server ipa5.linux.mydomain.at to replicate with 
> servers:
>      ipa2.linux.mydomain.at
>      idm1.linux.mydomain.at
>      ipa6.linux.mydomain.at
> Topology does not allow server ipa6.linux.mydomain.at to replicate with 
> servers:
>      ipa5.linux.mydomain.at
>      idm1.linux.mydomain.at.
>
> How do I get rid of the remaining replication agreements?
>
> Cheers,
> Ronald
> _______________________________________________
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/[e-mail]...