<div dir="ltr">
<p class="">The now dead IPA server is still seen as authoritative for the domain.</p><p class="">[root@freeipa-prod-a-033 centos]# dig NS <a href="http://cloud.foo.com">cloud.foo.com</a> +short</p>
<p class=""><a href="http://freeipa-prod-b-032.cloud.foo.com">freeipa-prod-b-032.cloud.foo.com</a>.</p>
<p class=""><a href="http://freeipa-prod-a-033.cloud.foo.com">freeipa-prod-a-033.cloud.foo.com</a>.</p>
<p class=""><a href="http://freeipa-prod-a-031.cloud.foo.com">freeipa-prod-a-031.cloud.foo.com</a>.</p></div><div class="gmail_extra"><br><div class="gmail_quote">On 5 November 2015 at 17:32, Andrew Holway <span dir="ltr"><<a href="mailto:andrew.holway@gmail.com" target="_blank">andrew.holway@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Actually I'm starting to feel like this is a bug. Managed to get the old IPA server back up and ran .<div><br></div><div>"ipa-server-install --uninstall" </div><div><br></div><div>Which completed successfully and gave the advice: </div><div><br></div><div>
<p>Replication agreements with the following IPA masters found: freeipa-</p>
<p><a href="http://prod-b-032.cloud.foo.com" target="_blank">prod-b-032.cloud.foo.com</a>. Removing any replication agreements before</p>
<p>uninstalling the server is strongly recommended. You can remove replication</p>
<p>agreements by running the following command on any other IPA master:</p>
<p>$ ipa-replica-manage del <a href="http://freeipa-prod-a-031.cloud.foo.com" target="_blank">freeipa-prod-a-031.cloud.foo.com</a></p><p><br></p><p>Running this command on the other IPA servers gives the following:</p><p><br></p><p>[root@freeipa-prod-a-033 centos]# ipa-replica-manage del <a href="http://freeipa-prod-a-031.cloud.foo.com" target="_blank">freeipa-prod-a-031.cloud.foo.com</a></p><span class=""><p>p11-kit: ipa.p11-kit: x-public-key-info: invalid or unsupported attribute</p><p>
</p></span><p>'<a href="http://freeipa-prod-a-033.cloud.dcmn.com" target="_blank">freeipa-prod-a-033.cloud.dcmn.com</a>' has no replication agreement for '<a href="http://freeipa-prod-a-031.cloud.foo.com" target="_blank">freeipa-prod-a-031.cloud.foo.com</a>'</p><p><br></p><p>I dont see anything in the logs.</p><p><br></p><p>Thanks,</p><p><br></p><p>Andrew</p></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On 5 November 2015 at 16:58, Andrew Holway <span dir="ltr"><<a href="mailto:andrew.holway@gmail.com" target="_blank">andrew.holway@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">
<p>One of our FreeIPA replicas had its filesystem hosed so we want to remove it. Can someone show me the sequence of commands to remove a down replica?</p><p>Thanks,</p><p>Andrew</p><p><br></p><p><br></p><p>[root@freeipa-prod-a-033 centos]# ipa-replica-manage list</p>
<p>p11-kit: ipa.p11-kit: x-public-key-info: invalid or unsupported attribute</p>
<p><a href="http://freeipa-prod-a-031.cloud.foo.com" target="_blank">freeipa-prod-a-031.cloud.foo.com</a>: master</p>
<p><a href="http://freeipa-prod-a-033.cloud.foo.com" target="_blank">freeipa-prod-a-033.cloud.foo.com</a>: master</p>
<p><a href="http://freeipa-prod-b-032.cloud.foo.com" target="_blank">freeipa-prod-b-032.cloud.foo.com</a>: master</p>
<p>[root@freeipa-prod-a-033 centos]# ipa-replica-manage del --force <a href="http://freeipa-prod-a-031.foo.dcmn.com" target="_blank">freeipa-prod-a-031.foo.dcmn.com</a></p>
<p>p11-kit: ipa.p11-kit: x-public-key-info: invalid or unsupported attribute</p>
<p>'<a href="http://freeipa-prod-a-033.cloud.foo.com" target="_blank">freeipa-prod-a-033.cloud.foo.com</a>' has no replication agreement for '<a href="http://freeipa-prod-a-031.cloud.dcmn.com" target="_blank">freeipa-prod-a-031.cloud.dcmn.com</a>'</p></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>