<html dir="ltr"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style type="text/css" id="owaParaStyle"></style> </head> <body fpstyle="1" ocsi="0"> <div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi, <div><br> </div> <div>This is what I have. </div> <div><br> </div> <div>ipa01 - master</div> <div>ipa02 - replica</div> <div>ipa03 - replica</div> <div><br> </div> <div>ipa02 crashed, and re-setup </div> <div><br> </div> <div>I used the gpg file from master and trying to re-create the replica: </div> <div>ipa-replica-install ipa02.gpg </div> <div><br> </div> <div>gives: </div> <div><br> </div> <div> <div>The host ipa02.local.zone already exists on the master server.</div> <div>You should remove it before proceeding:</div> <div> % ipa host-del <span style="font-size: 10pt;">ipa02.local.zone</span></div> </div> <div><span style="font-size: 10pt;"><br> </span></div> <div><span style="font-size: 10pt;"><br> </span></div> <div><span style="font-size: 10pt;">I login to the master server and if I do </span>ipa-replica-manage list , it shows: <span style="font-size: 10pt;">ipa02.local.zone: master</span></div> <div>Trying to delete it with <span style="font-size: 10pt;">ipa host-del </span><span style="font-size: 10pt;">ipa02.local.zone fails saying:</span></div> <div><span style="font-size: 10pt;"> </span>ipa: ERROR: invalid 'hostname': An IPA master host cannot be deleted or disabled</div> <div><br> </div> <div>ipa-replica-manage del <span style="font-size: 10pt;">ipa02.local.zone</span><span style="font-size: 10pt;"> fails saying: </span></div> <div>'ipa01.local.zone' has no replication agreement for 'ipa02.local.zone'</div> <div><br> </div> <div><br> </div> <div>I searched the mailing list and it was suggested that I should do a ldapsearch and ldapdelete. </div> <div><br> </div> <div>here is the search: </div> <div><br> </div> <div> <div>ldapsearch -LLL -x -b cn=ipa02.local.zone,cn=masters,cn=ipa,cn=etc,dc=ipa,dc=dc01</div> <div><br> </div> <div>dn: cn=ipa02.local.zone,cn=masters,cn=ipa,cn=etc,dc=ipa,dc=dc01</div> <div>objectClass: top</div> <div>objectClass: nsContainer</div> <div>cn: ipa02.local.zone</div> <div><br> </div> <div>dn: cn=KDC,cn=ipa02.local.zone,cn=masters,cn=ipa,cn=etc,dc=ipa,dc=dc01</div> <div>objectClass: nsContainer</div> <div>objectClass: ipaConfigObject</div> <div>objectClass: top</div> <div>ipaConfigString: enabledService</div> <div>ipaConfigString: startOrder 10</div> <div>cn: KDC</div> <div><br> </div> <div>dn: cn=KPASSWD,cn=ipa02.local.zone,cn=masters,cn=ipa,cn=etc,dc=ipa,dc=sp</div> <div> il</div> <div>objectClass: nsContainer</div> <div>objectClass: ipaConfigObject</div> <div>objectClass: top</div> <div>ipaConfigString: enabledService</div> <div>ipaConfigString: startOrder 20</div> <div>cn: KPASSWD</div> <div><br> </div> <div>dn: cn=MEMCACHE,cn=ipa02.local.zone,cn=masters,cn=ipa,cn=etc,dc=ipa,dc=s</div> <div> pil</div> <div>objectClass: nsContainer</div> <div>objectClass: ipaConfigObject</div> <div>objectClass: top</div> <div>ipaConfigString: enabledService</div> <div>ipaConfigString: startOrder 39</div> <div>cn: MEMCACHE</div> <div><br> </div> <div>dn: cn=HTTP,cn=ipa02.local.zone,cn=masters,cn=ipa,cn=etc,dc=ipa,dc=dc01</div> <div>objectClass: nsContainer</div> <div>objectClass: ipaConfigObject</div> <div>objectClass: top</div> <div>ipaConfigString: enabledService</div> <div>ipaConfigString: startOrder 40</div> <div>cn: HTTP</div> <div><br> </div> <div>dn: cn=DNS,cn=ipa02.local.zone,cn=masters,cn=ipa,cn=etc,dc=ipa,dc=dc01</div> <div>objectClass: nsContainer</div> <div>objectClass: ipaConfigObject</div> <div>objectClass: top</div> <div>ipaConfigString: enabledService</div> <div>ipaConfigString: startOrder 30</div> <div>cn: DNS</div> </div> <div><br> </div> <div><br> </div> <div>I tried delete, but I get: </div> <div><br> </div> <div>ldapdelete -x -D 'cn=KDC,cn=ipa02.local.zone,cn=masters,cn=ipa,cn=etc,dc=ipa,dc=dc01'</div> <div><br> </div> <div> <div>ldap_bind: Server is unwilling to perform (53)</div> <div><span class="Apple-tab-span" style="white-space:pre"></span>additional info: Unauthenticated binds are not allowed</div> </div> <div><br> </div> <div>I have located that there is -W </div> <div><br> </div> <div>ldapdelete -x -D 'cn=KDC,cn=ipa02.local.zone,cn=masters,cn=ipa,cn=etc,dc=ipa,dc=dc01' -W </div> <div>it askes for LDAP Password: </div> <div><br> </div> <div>Entering the password gives: ldap_bind: Inappropriate authentication (48) </div> <div><br> </div> <div><br> </div> <div>Can anyone who faced similar issues help me on how do I fix it ? </div> <div><br> </div> <div><br> </div> <div>Cheers,</div> <div>Shashi</div> <div><br> </div> <div><br> </div> </div> </body> </html>