[Freeipa-users] ipa server-del

[Petr Vobornik]

On 05/04/2017 12:41 AM, Ian Harding wrote:
> Is there any way this can be made to work?  This server does not exist
> in real life or seemingly in FreeIPA, but a ghost of it does.
>
> ianh at vm-ian-laptop:~$ ipa server-find freeipa-dal.bpt.rocks
> --------------------
> 1 IPA server matched
> --------------------
>   Server name: freeipa-dal.bpt.rocks
>   Min domain level: 0
>   Max domain level: 0
> ----------------------------
> Number of entries returned 1
> ----------------------------
> ianh at vm-ian-laptop:~$ ipa server-del freeipa-dal.bpt.rocks
> Removing freeipa-dal.bpt.rocks from replication topology, please wait...
> ipa: ERROR: freeipa-dal.bpt.rocks: server not found
> ianh at vm-ian-laptop:~$ ipa server-del freeipa-dal.bpt.rocks --force
> Removing freeipa-dal.bpt.rocks from replication topology, please wait...
> ipa: ERROR: freeipa-dal.bpt.rocks: server not found
> ianh at vm-ian-laptop:~$ ipa server-del freeipa-dal.bpt.rocks --force
> --continue
> Removing freeipa-dal.bpt.rocks from replication topology, please wait...
> ipa: WARNING: Forcing removal of freeipa-dal.bpt.rocks
> ---------------------
> Deleted IPA server ""
> ---------------------
>   Failed to remove: freeipa-dal.bpt.rocks
> ianh at vm-ian-laptop:~$
>
> - Ian
>

This looks like a bug to me.

Probably some LDAP search ended with "not found" result which then was 
incorrectly interpreted as "server not found".

To know where the issue is it would help switch IPA framework on server 
to debug mode [1] and provide httpd/error_log and dirsrv/$domain/access 
log from time of execution of the command.

[1] https://www.freeipa.org/page/Troubleshooting#Administration_Framework

-- 
Petr Vobornik