[Freeipa-users] Re: Replication failed after ipa-server-upgrade

skrawczenko--- via FreeIPA-users wrote:

i'm checking with ldapsearch -Y GSSAPI -b cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>

and there's just

dn: ... cn: <domain controller> objectClass: ipaConfigObject objectClass: nsContainer objectClass: top

right after ldapmodify

[root@idm0 ~]# ipa-replica-manage list unexpected error: u'ipaconfigstring'

like something is not letting the attribute to be added or removes it immediately.

That is sure curious.

Thierry, do you know if the topology plugin would mess with this kind of entry?

rob