<html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hello, comments inline <div class="moz-cite-prefix">On 01.06.2016 20:34, Michael Rainey (Contractor) wrote: </div> <blockquote cite="mid:mVpNeli7EgLUEDcmBuUe_M2sb--7X3EXXquPWt3mdhzPGfyxfc-owfYnVDGtiF4GWU9DpkxVEjo@cipher.nrlssc.navy.mil" type="cite"> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> My apologies for the duplicate thread, but from my vantage point I did not see any signs of my message making it to the mailing list. My original message was not posted back to me, nor was your reply posted to me. </blockquote> Ok, no problem <blockquote cite="mid:mVpNeli7EgLUEDcmBuUe_M2sb--7X3EXXquPWt3mdhzPGfyxfc-owfYnVDGtiF4GWU9DpkxVEjo@cipher.nrlssc.navy.mil" type="cite"> Now back to your reply. I did try the command you suggested and it does appear to have removed the last remnants of my first server. Are there any additional steps I should perform to verify things are as they once were? </blockquote> You can try ipa-replica-manage list, ipa-csreplica-manage list, list-ruv, and ipa-replica-manage list -v <hostname> to see if there are some leftovers Martin <blockquote cite="mid:mVpNeli7EgLUEDcmBuUe_M2sb--7X3EXXquPWt3mdhzPGfyxfc-owfYnVDGtiF4GWU9DpkxVEjo@cipher.nrlssc.navy.mil" type="cite"> I did notice some of the systems on the network will not carry my kerberos credentials over to another machine when using SSH. The working systems log me in with no problems when using ssh <hostname>. While other systems will prompt me for a password. Has anyone had similar problems and what did they do to fix the problem? <div class="moz-signature">Michael Rainey </div> <div class="moz-cite-prefix">On 05/31/2016 11:10 PM, Martin Basti wrote: </div> <blockquote cite="mid:8d3233db-e7ac-cc2f-13bb-ce29f09cf0ad@redhat.com" type="cite"> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> <div class="moz-cite-prefix">On 31.05.2016 17:36, Michael Rainey (Contractor) wrote: </div> <blockquote cite="mid:wqAA78ST8PQYIqfE4geqcrGZ45kfKn1FmGYwwM0AZDOhQGTU9aGVpJ6n457ypW8jxNZRfRWocH0@cipher.nrlssc.navy.mil" type="cite"> <meta http-equiv="content-type" content="text/html; charset=windows-1252"> Greetings community, I've run into an interesting problem which may be old hat to all of you. I was working to bring down my IPA master server and did it improperly. It was a rookie mistake, but I'm willing to view it as an exercise in recovering from a massive system failure. The original master server is gone with no way of recovering and I have managed to replace the server by promoting one of my replicas, but I find myself in a situation where I cannot remove the original master server from the LDAP directory. It is still seen as a master server and the webUI will not let me delete the system from directory server. Is there a process somewhere that will walk me through demoting the old server so I can delete it from the directory and officially promote its replacement? For reference, I followed the steps located at this link. Centos 7.2 / freeIPA 4.2 Your help is greatly appreciated. <div class="moz-signature">-- Michael Rainey </div> <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> Hello, can you next time please continue with just one thread please? You haven't replied if this works for you <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/archives/freeipa-users/2016-May/msg00521.html"><a class="moz-txt-link-freetext" href="https://www.redhat.com/archives/freeipa-users/2016-May/msg00521.html">https://www.redhat.com/archives/freeipa-users/2016-May/msg00521.html</a></a> regards, Martin </blockquote> </blockquote> </body> </html>