Looks like I've somehow managed to get my 3 IPA servers out of
sync:
[root@ipa3 ~]# ipa-replica-manage list
ipa3.my.net:master
ipa4.my.net:master
ipa5.my.net:master
[root@ipa3 ~]# ipa host-find
solr14.my.net
---------------
0 hosts matched
---------------
----------------------------
Number of entries returned 0
----------------------------
On ipa4:
[root@ipa3 ~]# ipa host-find
solr14.my.net
---------------
1 hosts matched
---------------
Host name:
solr14.my.net
----------------------------
Number of entries returned 1
----------------------------
On ipa5:
[root@ipa3 ~]# ipa host-find
solr14.my.net
---------------
1 hosts matched
---------------
Host name:
solr14.my.net
Principal name: host/solr14.my.net(a)MY.NET
<mailto:host/solr14.my.net@MY.NET>
:
:
----------------------------
Number of entries returned 1
----------------------------
So they've obviously stopped talking. What's the right way to get them
back in sync and ensure that they don't drift again? Is there a
replication entry that's "stuck" and causing this?
On each master run: ipa-replica-manage list -v `hostname`
That will give you the replication status.
You can try to wake up an agreement with: ipa-replica-manage force-sync
--from <host>
rob