Dmitry Perets via FreeIPA-users wrote:
>
> Exactly as the others report, I can no longer login to the WebUI. It says
"invalid
> 'PKINIT enabled server': all masters must have IPA master role enabled"
and
> then throws an exception:
>
UPDATE: To resolve it, you can delete the following subtree entirely:
DN:
cn=<fqdn-of-your-stuck-replica>,cn=masters,cn=ipa,cn=etc,dc=ims,dc=telekom,dc=de
I think it should be marked as an issue... failed replica shouldn't affect WebUI of
other masters...
ipa-replica-manage del <master> --cleanup --force will clean these
entries up, and others.
rob