Thanks to you both for the tips.  I was able to get into LDAP directly and remove the entries causing the problems.  Once I had done that, the domain level change was a breeze!

On Thu, Sep 7, 2017 at 1:25 PM, Rob Crittenden <> wrote:
Kristian Petersen via FreeIPA-users wrote:
> I am trying to set the domain level for my IPA servers to level 1 from
> level 0.  When I attempt to run:
> ipa domainlevel-set 1
> I get the following error:
> ipa: ERROR: Domain Level cannot be raised to 1, existing replication
> conflicts have to be resolved.
> At the moment, the server has no replicas.  All of them have been removed.
> -bash-4.2$ ipa-replica-manage list
> <>: master
> Any ideas as to why I am still getting this error?

Removing agreements doesn't remove the entries that were created due to
confict. See this to clean things up:


Kristian Petersen
System Administrator
Dept. of Chemistry and Biochemistry