I tried using ipa-backup but it keeps aborting claiming there's not enough space on
the target device but nothing even comes close to 100% usage. Is there another way to
export to LDIF?
--
Bret Wortman
bret.wortman(a)damascusgrp.com
On Fri, Jun 4, 2021, at 9:01 AM, Rob Crittenden wrote:
> Bret Wortman wrote:
> > So I started removing ipa2c7 this morning but am not getting very far...
> >
> > [root@ipa1 httpd]# ipa-replica-manage del
ipa2c7.our.net --force
> > Connection to 'ipa2c7.our.net' failed:
> > Forcing removal of
ipa2c7.our.net
> > Skipping calculation to determine if one or more masters would be orphaned.
> > Deleting replication agreements between
ipa2c7.our.net and
ipa1.our.net,
ipa2.our.net,
ipa3.our.net
> > Failed to get list of agreements from 'ipa2c7.our.net':
> > Forcing removal on 'ipa1.our.net'
> > Any DNA range on 'ipa2c7.our.net' will be lost
> > Deleted replication agreement from 'ipa1.our.net' to
'ipa2c7.our.net'
> > Failed to determine agreement type for 'ipa2.our.net':
> > Unable to remove replication agreement for
ipa2c7.our.net from
ipa2.our.net.
> > Failed to determine agreement type for 'ipa3.our.net':
> > Unable to remove replication agreement for
ipa2c7.our.net from
ipa3.our.net.
> > Background task created to clean replication data. This may take a while.
> > This may be safely interrupted with Ctrl+C
> > :
> > ^C
> > Wait for task interrupted. It will continue to run in the background
> > Failed to cleanup
ipa2c7.our.net entries: Not allowed on non-leaf entry
> > You may need to manually remove them from the tree
> > Failed to cleanup
ipa2c7.our.net DNS entries: no matching entry found
> > You may need to manually remove them from the tree
> > [root@ipa1 httpd]# ipa-replica-manage list
> >
ipa2.our.net: master
> >
ipa3.our.net: master
> >
ipa1.our.net: master
> >
ipa2c7.our.net: master
> >
> > Any suggestions for other ways to remove the replica so I can remove the host
and its DNS entries and then see what crud is left behind in LDAP?
>
> I'd probably start by exporting to ldif and using simple grep on the
> data and in /etc/dirsrv/slapd-DOMAIN/dse.ldif to find occurences
>
> Then use something like Apache Studio or ldapmodify/ldapdelete to do the
> removal.
>
> rob
>
> >
> >
>
>