<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Hello,</span></div><div><span><br></span></div><div><span>I used --force to delete myreplica from mymaster. And then run</span><span> ipa-replica-install on the myreplica again.</span></div><div><span>This time everything seems ok until it comes to the end:</span></div><div><span><br></span></div><div><span>Applying LDAP updates<br>Restarting the directory server<br>Restarting the KDC<br>Restarting the web server<br>creation of replica failed: Command '/bin/systemctl restart ipa.service' returned non-zero exit status 1<br><br>Your system may be partly configured.<br>Run /usr/sbin/ipa-server-install --uninstall to clean up.<br></span></div><div><br><span></span></div><div><span>And this is the error message at the end of /var/log/ipareplica-install.log:</span></div><div><span><br></span></div><div><span>2012-06-22T02:02:01Z DEBUG stderr=Job failed. See system journal and 'systemctl status' for details.<br><br>2012-06-22T02:02:01Z DEBUG Command '/bin/systemctl restart ipa.service' returned non-zero exit status 1<br> File "/sbin/ipa-replica-install", line 494, in <module><br> main()<br><br> File "/sbin/ipa-replica-install", line 488, in main<br> ipaservices.knownservices.ipa.enable()<br><br> File "/usr/lib/python2.7/site-packages/ipapython/platform/fedora16.py", line 101, in enable<br> self.restart(instance_name)<br><br> File "/usr/lib/python2.7/site-packages/ipapython/platform/systemd.py", line 85, in restart<br> ipautil.run(["/bin/systemctl", "restart", self.service_instance(instance_name)], capture_output=capture_output)<br><br> File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 304, in run<br> raise CalledProcessError(p.returncode, args)<br><br>Should I run </span><span>ipa-server-install </span><span>--uninstall on myreplica now?</span></div><div><br><span></span></div><div><span>Thanks,</span></div><div><span>George<br></span></div><div><br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Rob Crittenden <rcritten@redhat.com><br> <b><span style="font-weight: bold;">To:</span></b> george he <george_he7@yahoo.com> <br><b><span style="font-weight: bold;">Cc:</span></b> "freeipa-users@redhat.com" <freeipa-users@redhat.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, June 21, 2012 4:35 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Freeipa-users] replica installation clean up<br> </font> </div> <br> george he wrote:<br>> Hi,<br>><br>> after ipa-replica-install and ipa-replica-install --uninstall, now I get<br>><br>> [root@myreplica ~]# ipa-replica-install --setup-ca<br>> /var/lib/ipa/replica-info.gpg<br>> .<br>> .<br>> .<br>> Connection check OK<br>> The host myreplica already exists on the master server. Depending on<br>> your configuration, you may perform the following:<br>><br>> Remove the replication agreement, if any:<br>> % ipa-replica-manage del myreplica<br>> Remove the host entry:<br>> % ipa host-del myreplica<br>><br>> If I run this on myreplica:<br>> [root@myreplica ~]# ipa-replica-manage del myreplica<br>> IPA is not configured on this system.<br>> [root@myreplica ~]# ipa host-del myreplica<br>> ipa: ERROR: Kerberos error: ('Unspecified GSS failure. Minor code may<br>> provide more information', 851968)/('Cannot find KDC for requested<br>> realm', -1765328230)<br>><br>> If I un this on mymaster:<br>> [root@mymaster ~]# ipa-replica-manage del myreplica<br>> Unable to delete replica myreplica: {'desc': "Can't contact LDAP server"}<br>> [root@mymaster ~]# ipa host-del myreplica<br>> ipa: ERROR: invalid 'hostname': An IPA master host cannot be deleted or<br>> disabled<br>><br>> How do I clean up the unsuccessful installation - uninstallation of a<br>> replica?<br><br>Ideally you remove the agreement before deleting the replica, hence the <br>LDAP error. Add the --force flag:<br><br># ipa-replica-manage del myreplica.fqdn --force<br><br>Then you should be able to delete the host entry.<br><br>rob<br><br><br><br> </div> </div> </blockquote></div> </div></body></html>