Error on ipa-replica-install (replication agreement already exists)

[Ronald Wimmer]

I tried to promote an ipa-client to an ipa-replica. That particular host 
has previously been a replica but has been removed due to a faulty base 
OS configuration. When I do an ldapsearch from the top of the LDAP tree 
(dc=linux,dc=mydomain,dc=at) I could not find any entries before 
ipa-client-install.

ipa-replica-install fails with "DEBUG The ipa-replica-install command 
failed, exception: ScriptError: A replication agreement for this host 
already exists. It needs to be removed." Why do I get this error? I 
cannot find ANY topology-related entries in LDAP.

Cheers,
Ronald

[François Cami]

On Tue, Apr 13, 2021 at 12:52 PM Ronald Wimmer via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org&gt; wrote:
>  I tried to promote an ipa-client to an ipa-replica. That particular host
>  has previously been a replica but has been removed due to a faulty base
>  OS configuration. When I do an ldapsearch from the top of the LDAP tree
>  (dc=linux,dc=mydomain,dc=at) I could not find any entries before
>  ipa-client-install. 
Look in cn=config instead.

François

>  ipa-replica-install fails with "DEBUG The ipa-replica-install
> command
>  failed, exception: ScriptError: A replication agreement for this host
>  already exists. It needs to be removed." Why do I get this error? I
>  cannot find ANY topology-related entries in LDAP.
>
>  Cheers,
>  Ronald
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[Ronald Wimmer]

On 13.04.21 12:57, François Cami wrote:
>  On Tue, Apr 13, 2021 at 12:52 PM Ronald Wimmer via FreeIPA-users
>  <freeipa-users(a)lists.fedorahosted.org&gt; wrote:
> >
> > I tried to promote an ipa-client to an ipa-replica. That particular host
> > has previously been a replica but has been removed due to a faulty base
> > OS configuration. When I do an ldapsearch from the top of the LDAP tree
> > (dc=linux,dc=mydomain,dc=at) I could not find any entries before
> > ipa-client-install.
>  
>  Look in cn=config instead. 
Thanks. Apache Directory Studio was not showing it by default. Any ideas 
why?

After removing the meTo-Entry on the other side ipa-replica-install 
worked as expected. Thanks a lot!

Cheers,
Ronald

[Florence Blanc-Renaud]

On 4/13/21 2:44 PM, Ronald Wimmer via FreeIPA-users wrote:
>  On 13.04.21 12:57, François Cami wrote:
> > On Tue, Apr 13, 2021 at 12:52 PM Ronald Wimmer via FreeIPA-users
> > <freeipa-users(a)lists.fedorahosted.org&gt; wrote:
> >>
> >> I tried to promote an ipa-client to an ipa-replica. That particular host
> >> has previously been a replica but has been removed due to a faulty base
> >> OS configuration. When I do an ldapsearch from the top of the LDAP tree
> >> (dc=linux,dc=mydomain,dc=at) I could not find any entries before
> >> ipa-client-install.
> >
> > Look in cn=config instead.
>  
>  Thanks. Apache Directory Studio was not showing it by default. Any ideas 
>  why? 
IIRC Apache Directory Studio is able to fetch the base DNs from the root 
DSE. This means it performs a search equivalent to
# ldapsearch -x -b "" -s base namingContexts
to get the list of base DNs.

In 389-ds implementation, cn=config is not published in the list of 
namingContexts because it's containing operational data. There is a 
discussion whether it should be shown in namingContexts in 
https://github.com/389ds/389-ds-base/issues/2689

flo

>  
>  After removing the meTo-Entry on the other side ipa-replica-install 
>  worked as expected. Thanks a lot!
>  
>  Cheers,
>  Ronald
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: 
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives: 
>  https://lists.fedorahosted.org/archives/list/[e-mail]... 
>  
>  Do not reply to spam on the list, report it: 
>  https://pagure.io/fedora-infrastructure