IPA does not prevent the deletion of the last admin making IPA tools unusable there should be a prompt when deleting certain objects

Solution Verified - Updated -

Issue

...in a world of genius, I deleted the IPA admin user. While I still do maintain control of the LDAP "cn=Directory Manager" ID, kerberos and IPA tools won't work without this ID. Why are we allowed to delete it / and/or how do we re-create it?

I've attempted to manually recreate it (or under a different ID giving it access to the admins group) but cannot get the auth magic to actually work even though the right info is in the userPassword field. Seems like deleting the admin user shouldn't be allowed for moments when someone like me has a retarded moment. :-)

Environment

Red Hat Enterprise Linux

6.2

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.