Gentlemen, i'm very worried about breaking the entire cluster with something irreversible. Not sure what caused the missed ipaconfigstring or probably this is not the root cause. The replica nodes and winsync are still operational but ipa-replica-manage drops an error about ipaconfigstring and i badly need to fix it.
now it becomes even more weird
[root@idm0]# ldapmodify -vvvv -x -D 'cn=directory manager' -W ldap_initialize( <DEFAULT> ) Enter LDAP Password: dn: cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc> changetype: modify add: ipaConfigString ipaConfigString: <domain controller>
add ipaConfigString: <domain controller> modifying entry "cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>" modify complete
Rechecking
[root@idm0]# ldapmodify -vvvv -x -D 'cn=directory manager' -W ldap_initialize( <DEFAULT> ) Enter LDAP Password: dn: cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc> changetype: modify add: ipaConfigString ipaConfigString: <domain controller>
add ipaConfigString: <domain controller> modifying entry "cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>" ldap_modify: Type or value exists (20)
Now
[root@idm0]# ldapsearch -Y GSSAPI -b cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc> SASL/GSSAPI authentication started SASL username: ... SASL SSF: 56 SASL data security layer installed. # extended LDIF # # LDAPv3 # base <cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>> with scope subtree # filter: (objectclass=*) # requesting: ALL #
... dn: cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc> cn: <domain controller> objectClass: ipaConfigObject objectClass: nsContainer objectClass: top
??? where is ipaConfigString???
# search result search: 4 result: 0 Success
# numResponses: 2 # numEntries: 1
and this attribute also:
[root@idm0]# ldapsearch -Y GSSAPI -b cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc> ncpentrywsi SASL/GSSAPI authentication started SASL username: ... SASL SSF: 56 SASL data security layer installed. # extended LDIF # # LDAPv3 # base <cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>> with scope subtree # filter: (objectclass=*) # requesting: ncpentrywsi #
...
dn: cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>
# search result search: 4 result: 0 Success
# numResponses: 2 # numEntries: 1
It doesn't seem to be there as well....
I can see these searches in access and nothing suspicious in errors, the replication and updates from domain controller are being performed constantly Ready to provide any more details.
Great thanks.