<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">This pretty much describes my issue:</div><div class=""><br class=""></div><div class=""><a href="https://access.redhat.com/solutions/136993" class="">https://access.redhat.com/solutions/136993</a></div><div class=""><br class=""></div><div class="">ipa-server.x86_64 3.0.0-50.el6.centos.3</div><div class=""><br class=""></div><div class="">But it’s a little more complicated than that.</div><div class=""><br class=""></div><div class="">My goal at this point is just to get to one master with no replication, no remnants of replication, no dangling this or that in either the the main LDAP or the CA instance.</div><div class=""><br class=""></div><div class="">But, I think I’ve hosed it up pretty good, all things replication that is.</div><div class=""><br class=""></div><div class="">So there is only one live server now, <a href="http://sso-109.nym1.placeiq.net" class="">sso-109.nym1.placeiq.net</a></div><div class=""><br class=""></div><div class="">But in going through the steps in that article I noticed something strange.</div><div class=""><br class=""></div><div class="">Notice the ReplicaBindDN principalname in the first command, that server no longer exists</div><div class="">And notice the the ID, 40. Then look at the output from the next command.</div><div class=""><br class=""></div><div class="">ID 40 is actually sso-109, am I reading that right?? </div><div class=""><br class=""></div><div class="">and of course CLEANRUV40 gives "error 53 unwilling to perform” - which is expected ?? I think, maybe I don’t know :(</div><div class=""><br class=""></div><div class="">So uh, how do I un-F… myself here?</div><div class=""><br class=""></div><div class="">Can I like manually delete that replication instance 40?</div><div class=""><br class=""></div><div class="">If I’m saying, I just want one master, no replicas (will of course create a replica once I’m sure my one master is squared away), should I be able to get the db to a state with no nsDS5Replica entries?</div><div class=""><br class=""></div><div class=""><div class="">[root@sso-109:(NYM) slapd-PKI-IPA]$ ldapsearch -xLLL -D "cn=directory manager" -W -s sub -b cn=config objectclass=nsds5replica</div><div class="">Enter LDAP Password:</div><div class="">dn: cn=replica,cn=dc\3Dplaceiq\2Cdc\3Dnet,cn=mapping tree,cn=config</div><div class="">cn: replica</div><div class="">nsDS5Flags: 1</div><div class="">objectClass: top</div><div class="">objectClass: nsds5replica</div><div class="">objectClass: extensibleobject</div><div class="">nsDS5ReplicaType: 3</div><div class="">nsDS5ReplicaRoot: dc=placeiq,dc=net</div><div class="">nsds5ReplicaLegacyConsumer: off</div><div class="">nsDS5ReplicaId: 40</div><div class="">nsDS5ReplicaBindDN: cn=replication manager,cn=config</div><div class="">nsDS5ReplicaBindDN: <a href="mailto:krbprincipalname=ldap/sso-110.nym1.placeiq.net@placeiq.net" class="">krbprincipalname=ldap/sso-110.nym1.placeiq.net@PLACEIQ.NET</a></div><div class=""> ,cn=services,cn=accounts,dc=placeiq,dc=net</div><div class="">nsState:: KAAAAAAAAADkKWRYAAAAAAAAAAAAAAAADwAAAAAAAAASAAAAAAAAAA==</div><div class="">nsDS5ReplicaName: 889b4308-86c311e6-95188dad-28da3cc2</div><div class="">nsds5ReplicaChangeCount: 13615</div><div class="">nsds5replicareapactive: 0</div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div class="">[root@sso-109:(NYM) slapd-PKI-IPA]$ ldapsearch -xLLL -D "cn=directory manager" -W -b dc=placeiq,dc=net \</div><div class="">> '(&(nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff)(objectclass=nstombstone))'</div><div class="">Enter LDAP Password:</div><div class="">ldap_bind: Invalid credentials (49)</div><div class="">[root@sso-109:(NYM) slapd-PKI-IPA]$ ldapsearch -xLLL -D "cn=directory manager" -W -b dc=placeiq,dc=net '(&(nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff)(objectclass=nstombstone))'</div><div class="">Enter LDAP Password:</div><div class="">dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,dc=placeiq,dc=net</div><div class="">objectClass: top</div><div class="">objectClass: nsTombstone</div><div class="">objectClass: extensibleobject</div><div class="">nsds50ruv: {replicageneration} 52b07d23000000040000</div><div class="">nsds50ruv: {replica 40 <a href="ldap://sso-109.nym1.placeiq.net:389" class="">ldap://sso-109.nym1.placeiq.net:389</a>} 57ede5500007002800</div><div class=""> 00 58642aad000100280000</div><div class="">dc: placeiq</div><div class="">nsruvReplicaLastModified: {replica 40 <a href="ldap://sso-109.nym1.placeiq.net:389" class="">ldap://sso-109.nym1.placeiq.net:389</a>} 586</div><div class=""> 42a9e</div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><br class=""><div class=""> <div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><table width="550px" bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" style="color: rgb(51, 51, 51); font-size: 13.3333px; orphans: 2; widows: 2; font-family: 'Times New Roman';" class=""><tbody class=""><tr height="10" class=""></tr><tr border="0" cellspacing="0" cellpadding="0" class=""><td style="font-family: arial, sans-serif; margin: 0px; padding: 6px 0px 0px; color: rgb(136, 136, 136); width: 550px; border-top-width: 8px; border-top-style: solid; border-top-color: rgb(103, 89, 163);" class=""><table width="100%" border="0" cellspacing="0" cellpadding="0" class=""><tbody class=""><tr class=""><th rowspan="3" style="border-right-width: 1px; border-right-style: solid; border-right-color: rgb(210, 210, 210); padding-right: 1px; width: 90px;" class=""><a href="http://www.placeiq.com/" target="_blank" style="color: rgb(17, 85, 204);" class=""></a><a href="http://www.placeiq.com/" target="_blank" style="color: rgb(17, 85, 204);" class=""></a><a href="http://www.placeiq.com/" target="_blank" style="color: rgb(17, 85, 204);" class=""><img src="https://ci3.googleusercontent.com/proxy/tFn1I-GEOnccUtv8DHHEc49-6g3x3CbuQKzbfl2Z1BObEy0Qz6QebJimpP96TK3Za5MXwXTuwBZaobKp22nYAG3NdxAC0Q=s0-d-e1-ft#https://marketing.placeiq.net/images/placeiq.png" alt="" style="width: 80px;" class=""></a></th><td align="left" style="font-family: sans-serif; margin: 0px; color: rgb(136, 136, 136); line-height: 10px; padding-left: 10px; padding-top: 5px;" class=""><span style="color: rgb(94, 95, 94); font-family: Trebuchet, sans-serif; font-size: 16px; font-weight: bold;" class="">Jim Richard</span></td><th rowspan="3" style="padding-right: 1px; width: 40px; padding-left: 5px;" class=""><a href="https://twitter.com/placeiq" target="_blank" style="color: rgb(17, 85, 204);" class=""></a><a href="https://twitter.com/placeiq" target="_blank" style="color: rgb(17, 85, 204);" class=""></a><a href="https://twitter.com/placeiq" target="_blank" style="color: rgb(17, 85, 204);" class=""><img src="https://ci4.googleusercontent.com/proxy/490PXYv9O6OiIp_DL4vuabJqVn53fMon5xNYZdftCVea9ySR2LcFDHe6Cdntb2G68uDAuA6FgLny8wKWLFWpsrPAt_FtLaE=s0-d-e1-ft#https://marketing.placeiq.net/images/twitter1.png" alt="" style="width: 35px;" class=""></a></th><th rowspan="3" style="padding-right: 1px; width: 40px;" class=""><a href="https://www.facebook.com/PlaceIQ" target="_blank" style="color: rgb(17, 85, 204);" class=""></a><a href="https://www.facebook.com/PlaceIQ" target="_blank" style="color: rgb(17, 85, 204);" class=""><img src="https://ci3.googleusercontent.com/proxy/fztHf1lRKLQYcAxebqfp2PYXCwVap3GobHVIbyp0j3NcuJOY16bUAZBibVOFf-fd1GsiuhrOfYy6dSwhlCwWU8ZUlw9OX5I=s0-d-e1-ft#https://marketing.placeiq.net/images/facebook.png" alt="" style="width: 35px;" class=""></a></th><th rowspan="3" style="padding-right: 1px; width: 40px;" class=""><a href="https://www.linkedin.com/company/placeiq" target="_blank" style="color: rgb(17, 85, 204);" class=""></a><a href="https://www.linkedin.com/company/placeiq" target="_blank" style="color: rgb(17, 85, 204);" class=""><img src="https://ci5.googleusercontent.com/proxy/H26ThD7R6DOqxoLTgzi6k5SMrHoF2Tj44xI_7XlD9KfOIiGwe1WIMc5iQBxUBA9EuIyJMdaRXrhZTOrnkrn8O9Rf1FP9UQU=s0-d-e1-ft#https://marketing.placeiq.net/images/linkedin.png" alt="" style="width: 35px;" class=""></a></th></tr><tr class=""><td align="left" style="font-family: Trebuchet, sans-serif; margin: 0px; font-size: 9px; text-transform: uppercase; font-weight: bold; color: rgb(136, 136, 136); line-height: 10px; padding-left: 10px; padding-top: 7px;" class=""><span rowspan="1" class="">SYSTEM ADMINISTRATOR III</span></td></tr><tr class=""><td align="left" style="font-family: sans-serif; margin: 0px; color: rgb(136, 136, 136); line-height: 10px; padding-left: 10px; padding-top: 3px;" class=""><font face="Georgia, sans-serif" class=""><span style="font-size: 10px;" class=""><i class="">(646) 338-8905 </i></span></font> </td></tr></tbody></table></td></tr></tbody></table><a href="http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/" class=""><br style="color: rgb(51, 51, 51); font-family: 'Open Sans', sans-serif; font-size: 13.3333px; font-variant-ligatures: normal; line-height: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);" class=""><img src="https://marketing.placeiq.net/images/Alibaba.png" alt="PlaceIQ:Alibaba" style="font-family: 'open sans', sans-serif; font-size: 13px;" class=""></a></div></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline"> </div> <br class=""></body></html>