How to delete the orphaned IPA master references from LDAP database ?
Issue
When removing a disconnected IPA replica server which had replication agreements with multiple IPA hosts, the meta-data for that replica is still contained on still running IPA servers. This does not allow you to remove the disconnected IPA server completely. There are special tasks you can use to remove this meta-data. For example:
Initial topology: (simple triangle)
2 - 3
\ /
1
# on host1:
ipa-replica-manage disconnect host1 host2
ipa-replica-manage del host3 # not sure if this one is relevant here
# on host2:
ipa-server-install --uninstall -U
# on host1:
ipa-replica-prepare -p $ADMINPW --ip-address=$HOST2_IP $HOST2
# on host2:
sftp root@$HOST1:/var/lib/ipa/replica-info-$HOST2.gpg
ipa-replica-install -U --setup-dns --forwarder=$DNSFORWARD -w $ADMINPW -p $ADMINPW /dev/shm/replica-info-$HOST2.gpg
...
The host qe-blade-04.testrelm.com already exists on the master server. Depending on your configuration, you may perform the following:
Remove the replication agreement, if any:
% ipa-replica-manage del qe-blade-04.testrelm.com
Remove the host entry:
% ipa host-del qe-blade-04.testrelm.com
# on host1:
ipa-replica-manage del $HOST2
'$HOST1' has no replication agreement for '$HOST2'
ipa host-del $HOST2
ipa: ERROR: invalid 'hostname': An IPA master host cannot be deleted or disabled
Environment
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat IPA replication Setup
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.