hi fraser,
thanks for the explanation of the source of this conflict. i manually added the other member and removed the conflict.
stijn
On 6/1/21 11:33 AM, Fraser Tweedale wrote:
On Mon, May 31, 2021 at 08:50:43PM +0200, Stijn De Weirdt via FreeIPA-users wrote:
hello all,
in our setup ipa-healthcheck reports an issue with a replication conflict on "dn: cn=Enterprise ACME Administrators,ou=groups,o=ipaca"
the conflict and valid entry are almost identical:
Valid Entry:
dn: cn=Enterprise ACME Administrators,ou=groups,o=ipaca cn: Enterprise ACME Administrators description: ACME RA accounts objectClass: top objectClass: groupOfUniqueNames uniqueMember: uid=acme-master2.domain,ou=people,o=ipaca uniqueMember: uid=ipara,ou=people,o=ipaca
with the conflicting entry the same, except for the line
uniqueMember: uid=acme-master1.domain,ou=people,o=ipaca
i would like some guidance what this means and how to proceed: delete the conflicting entry, swap to the conflicting entry, merge it (somehow)
Hello Stijn. This conflict probably arose during simultaneous upgrade or installation of multiple replicas.
To remediate, merge the entry: keep all uniqueMember values from both the conflict and prevailing entries.
Cheers, Fraser
many thanks,
stijn _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure