[Freeipa-users] EXTERNAL: Re: Can't delete group because it states it's not found

[Joseph, Matthew (EXP)]

Hey Rob,

It couldn't find the group when I did your command. I replaced show with find and was able to find the dn number.
I can use the ldapdelete command to delete the entry right?

Thanks,

Matt

-----Original Message-----
From: Rob Crittenden [mailto:rcritten at redhat.com] 
Sent: Tuesday, April 14, 2015 12:01 PM
To: Joseph, Matthew (EXP); freeipa-users at redhat.com
Subject: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states it's not found

Joseph, Matthew (EXP) wrote:
> Hello,
> 
>  
> 
> I'm trying to delete a group in IdM but when I do a ipa group-del
> "group" it states the following;
> 
> Ipa: ERROR: "group": group not found
> 
>  
> 
> I do an ipa group-find and it displays the group with the current memebers.
> 
>  
> 
> I look in the WebgUI and I can see the group in there but it has no
> information. If I try to view the group or delete it from there it again
> states that the group is not found.
> 
>  
> 
> Anyone see this before?

Run ipa group-show --all --raw <groupname> and look at the dn value. It
may be a replication conflict entry. You'd need to delete that manually
using something like ldapdelete.

rob