Gentlemen, i'm very worried about breaking the entire cluster with something
irreversible.
Not sure what caused the missed ipaconfigstring or probably this is not the root cause.
The replica nodes and winsync are still operational but ipa-replica-manage drops an error
about ipaconfigstring and i badly need to fix it.
now it becomes even more weird
[root@idm0]# ldapmodify -vvvv -x -D 'cn=directory manager' -W
ldap_initialize( <DEFAULT> )
Enter LDAP Password:
dn: cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>
changetype: modify
add: ipaConfigString
ipaConfigString: <domain controller>
add ipaConfigString:
<domain controller>
modifying entry "cn=<domain
controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>"
modify complete
Rechecking
[root@idm0]# ldapmodify -vvvv -x -D 'cn=directory manager' -W
ldap_initialize( <DEFAULT> )
Enter LDAP Password:
dn: cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>
changetype: modify
add: ipaConfigString
ipaConfigString: <domain controller>
add ipaConfigString:
<domain controller>
modifying entry "cn=<domain
controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>"
ldap_modify: Type or value exists (20)
Now
[root@idm0]# ldapsearch -Y GSSAPI -b cn=<domain
controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>
SASL/GSSAPI authentication started
SASL username: ...
SASL SSF: 56
SASL data security layer installed.
# extended LDIF
#
# LDAPv3
# base <cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>> with
scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
...
dn: cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>
cn: <domain controller>
objectClass: ipaConfigObject
objectClass: nsContainer
objectClass: top
??? where is ipaConfigString???
# search result
search: 4
result: 0 Success
# numResponses: 2
# numEntries: 1
and this attribute also:
[root@idm0]# ldapsearch -Y GSSAPI -b cn=<domain
controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc> ncpentrywsi
SASL/GSSAPI authentication started
SASL username: ...
SASL SSF: 56
SASL data security layer installed.
# extended LDIF
#
# LDAPv3
# base <cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>> with
scope subtree
# filter: (objectclass=*)
# requesting: ncpentrywsi
#
...
dn: cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>
# search result
search: 4
result: 0 Success
# numResponses: 2
# numEntries: 1
It doesn't seem to be there as well....
I can see these searches in access and nothing suspicious in errors, the replication and
updates from domain controller are being performed constantly
Ready to provide any more details.
Great thanks.