[Freeipa-users] replica installation clean up

[george he]

Hello,

Since I didn't get any reply on this, I just went ahead and did
/ipa-server-install --uninstall 

to clean up and did

 ipa-replica-manage del myreplica --force

on mymaster
After these I did ipa-replica-install again but this time I get

ipa         : CRITICAL Failed to load replica-s4u2proxy.ldif: Command '/usr/bin/ldapmodify -h myreplica -v -f /tmp/tmpExxi0H -x -D cn=Directory Manager -y /tmp/tmpa12oUA' returned non-zero exit status 1


Any suggestions on this?

Thanks,
George



>________________________________
> From: george he <george_he7 at yahoo.com>
>To: Rob Crittenden <rcritten at redhat.com> 
>Cc: "freeipa-users at redhat.com" <freeipa-users at redhat.com> 
>Sent: Thursday, June 21, 2012 10:28 PM
>Subject: Re: [Freeipa-users] replica installation clean up
> 
>
>Hello,
>
>
>I used --force to delete myreplica from mymaster. And then runipa-replica-install on the myreplica again.
>This time everything seems ok until it comes to the end:
>
>
>Applying LDAP updates
>Restarting the directory server
>Restarting the KDC
>Restarting the web server
>creation of replica failed: Command '/bin/systemctl restart ipa.service' returned non-zero exit status 1
>
>Your system may be partly configured.
>Run /usr/sbin/ipa-server-install --uninstall to clean up.
>
>
>
>And this is the error message at the end of /var/log/ipareplica-install.log:
>
>
>2012-06-22T02:02:01Z DEBUG stderr=Job failed. See system journal and 'systemctl status' for details.
>
>2012-06-22T02:02:01Z DEBUG Command '/bin/systemctl restart ipa.service' returned non-zero exit status 1
>  File "/sbin/ipa-replica-install", line 494, in <module>
>    main()
>
>  File "/sbin/ipa-replica-install", line 488, in main
>    ipaservices.knownservices.ipa.enable()
>
>  File "/usr/lib/python2.7/site-packages/ipapython/platform/fedora16.py", line 101, in enable
>    self.restart(instance_name)
>
>  File "/usr/lib/python2.7/site-packages/ipapython/platform/systemd.py", line 85, in restart
>    ipautil.run(["/bin/systemctl", "restart", self.service_instance(instance_name)], capture_output=capture_output)
>
>  File
 "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 304, in run
>    raise CalledProcessError(p.returncode, args)
>
>Should I run ipa-server-install --uninstall on myreplica now?
>
>
>Thanks,
>George
>
>
>
>
>>________________________________
>> From: Rob Crittenden <rcritten at redhat.com>
>>To: george he <george_he7 at yahoo.com> 
>>Cc: "freeipa-users at redhat.com" <freeipa-users at redhat.com> 
>>Sent: Thursday, June 21, 2012 4:35 PM
>>Subject: Re: [Freeipa-users] replica installation clean up
>> 
>>george he wrote:
>>> Hi,
>>>
>>> after ipa-replica-install and ipa-replica-install --uninstall, now I get
>>>
>>> [root at myreplica ~]# ipa-replica-install --setup-ca
>>> /var/lib/ipa/replica-info.gpg
>>> .
>>> .
>>> .
>>> Connection check OK
>>> The host myreplica already exists on the master server. Depending on
>>> your configuration, you may perform the following:
>>>
>>> Remove the replication agreement, if any:
>>> % ipa-replica-manage del myreplica
>>> Remove the host entry:
>>> % ipa host-del myreplica
>>>
>>> If I run this on myreplica:
>>> [root at myreplica ~]# ipa-replica-manage del myreplica
>>> IPA is not configured on this system.
>>> [root at myreplica ~]# ipa host-del myreplica
>>> ipa: ERROR: Kerberos error: ('Unspecified GSS failure. Minor code may
>>> provide more information', 851968)/('Cannot find KDC for requested
>>> realm',
 -1765328230)
>>>
>>> If I un this on mymaster:
>>> [root at mymaster ~]# ipa-replica-manage del myreplica
>>> Unable to delete replica myreplica: {'desc': "Can't contact LDAP server"}
>>> [root at mymaster ~]# ipa host-del myreplica
>>> ipa: ERROR: invalid 'hostname': An IPA master host cannot be deleted or
>>> disabled
>>>
>>> How do I clean up the unsuccessful installation - uninstallation of a
>>> replica?
>>
>>Ideally you remove the agreement before deleting the replica, hence the 
>>LDAP error. Add the --force flag:
>>
>># ipa-replica-manage del myreplica.fqdn --force
>>
>>Then you should be able to delete the host entry.
>>
>>rob
>>
>>
>>
>>
>_______________________________________________
>Freeipa-users mailing list
>Freeipa-users at redhat.com
>https://www.redhat.com/mailman/listinfo/freeipa-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120622/9d200858/attachment.htm>