Thanks to you both for the tips. I was able to get into LDAP directly and
remove the entries causing the problems. Once I had done that, the domain
level change was a breeze!
On Thu, Sep 7, 2017 at 1:25 PM, Rob Crittenden <rcritten(a)redhat.com> wrote:
Kristian Petersen via FreeIPA-users wrote:
> I am trying to set the domain level for my IPA servers to level 1 from
> level 0. When I attempt to run:
>
> ipa domainlevel-set 1
>
> I get the following error:
>
> ipa: ERROR: Domain Level cannot be raised to 1, existing replication
> conflicts have to be resolved.
>
> At the moment, the server has no replicas. All of them have been
removed.
>
> -bash-4.2$ ipa-replica-manage list
>
ipa1.chem.byu.edu <
http://ipa1.chem.byu.edu>: master
>
> Any ideas as to why I am still getting this error?
Removing agreements doesn't remove the entries that were created due to
confict. See this to clean things up:
https://access.redhat.com/documentation/en-us/red_hat_
directory_server/9.0/html/administration_guide/managing_
replication-solving_common_replication_conflicts
rob
--
Kristian Petersen
System Administrator
Dept. of Chemistry and Biochemistry