Deleting or demoting a replica removes the IdM replica from the server/replica topology so that it no longer processes IdM requests and it also removes the host machine itself from the IdM domain.
On an IdM server, obtain a Kerberos ticket before running IdM tools.
[root@replica ~]# kinit admin
List all of the configured replication agreements for the IdM domain.
[root@replica ~]# ipa-replica-manage list
Directory Manager password:
Removing the replica from the topology involves deleting all the agreements between the replica and the other servers in the IdM domain and all of the data about the replica in the domain configuration.
[root@replica ~]# ipa-replica-manage del replica.example.com
If the replica was configured with its own CA, then also use the
ipa-csreplica-manage command to remove all of the replication agreements between the certificate databases for the replica.
This is required if the replica itself was configured with a Dogtag Certificate System CA. It is not required if only the master server or other replicas were configured with a CA.
[root@replica ~]# ipa-csreplica-manage del replica.example.com
On the replica, uninstall the replica packages.
[root@replica ~]# ipa-server-install --uninstall -U