Alexander Bokovoy via FreeIPA-devel wrote:
On ke, 10 maalis 2021, Rob Crittenden via FreeIPA-devel wrote:
> I don't know if this is something odd with my setup so before
> investigating I thought I'd ask.
>
> I was testing an upgrade change so I installed one server and then added
> a replica with a CA. Doing this number of rounds of install/uninstall on
> the replica and it would frequently fail trying to get a keytab for DS.
>
> I noticed that after uninstall the ldap principal for the server
> remained. How I have no idea.
>
> Anyone else seen this?
How did you remove the replica? There is a particular process you need
to follow first:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...
I missed that the ldap principal is purposely kept. We should probably
test for that during replica installation and fail gracefully if it
already exists (or delete it if the server otherwise doesn't exist yet).
rob