Agreed! I would love to know if that is possible... seems like it should be.
As mentioned previously, preprod still has the agreements, but prod does not.
Not really sure how I should proceed. I'm a bit stuck, not wanting to further break anything. For now, auth is still working in both envs.
---
[root@ipa-preprod-1201]# ipa topologysegment-find domain
------------------
5 segments matched
------------------
Segment name: ipa-preprod-1201-to-ipa-preprod-1202
Left node: ipa-preprod-1201
Right node: ipa-preprod-1202
Connectivity: both
Segment name: ipa-preprod-1201-to-ipa-prod-1201
Left node: ipa-preprod-1201
Right node: ipa-prod-1201
Connectivity: both
Segment name: ipa-preprod-1202-to-ipa-prod-1201
Left node: ipa-preprod-1202
Right node: ipa-prod-1201
Connectivity: both
Segment name: ipa-prod-1201-to-ipa-prod-1202
Left node: ipa-prod-1201
Right node: ipa-prod-1202
Connectivity: both
Segment name: ipa-prod-1202-to-ipa-preprod-1201
Left node: ipa-prod-1202
Right node: ipa-preprod-1201
Connectivity: both
[root@ipa-prod-1201]# ipa topologysegment-find domain
------------------
2 segments matched
------------------
Segment name: ipa-preprod-1201-to-ipa-preprod-1202
Left node: ipa-preprod-1201
Right node: ipa-preprod-1202
Connectivity: both
Segment name: ipa-prod-1201-to-ipa-prod-1202
Left node: ipa-prod-1201
Right node: ipa-prod-1202
Connectivity: both
----------------------------
Number of entries returned 2
----------------------------
I think part of the problem is that when I did the ipa-replica-manage del, it removed the preprod servers:
[root@ipa-prod-1201]# ipa server-find
---------------------
2 IPA servers matched
---------------------
Server name: ipa-prod-1201
Min domain level: 0
Max domain level: 1
Server name: ipa-prod-1202
Min domain level: 0
Max domain level: 1
----------------------------
Number of entries returned 2
----------------------------
but they still exist on the preprod side:
[root@ipa-preprod-1201]# ipa server-find
---------------------
4 IPA servers matched
---------------------
Server name: ipa-preprod-1201
Min domain level: 0
Max domain level: 1
Server name: ipa-preprod-1202
Min domain level: 0
Max domain level: 1
Server name: ipa-prod-1201
Min domain level: 0
Max domain level: 1
Server name: ipa-prod-1202
Min domain level: 0
Max domain level: 1
----------------------------
Number of entries returned 4
----------------------------