So I started removing ipa2c7 this morning but am not getting very
far...
[root@ipa1 httpd]# ipa-replica-manage del
ipa2c7.our.net --force
Connection to 'ipa2c7.our.net' failed:
Forcing removal of
ipa2c7.our.net
Skipping calculation to determine if one or more masters would be orphaned.
Deleting replication agreements between
ipa2c7.our.net and
ipa1.our.net,
ipa2.our.net,
ipa3.our.net
Failed to get list of agreements from 'ipa2c7.our.net':
Forcing removal on 'ipa1.our.net'
Any DNA range on 'ipa2c7.our.net' will be lost
Deleted replication agreement from 'ipa1.our.net' to 'ipa2c7.our.net'
Failed to determine agreement type for 'ipa2.our.net':
Unable to remove replication agreement for
ipa2c7.our.net from
ipa2.our.net.
Failed to determine agreement type for 'ipa3.our.net':
Unable to remove replication agreement for
ipa2c7.our.net from
ipa3.our.net.
Background task created to clean replication data. This may take a while.
This may be safely interrupted with Ctrl+C
:
^C
Wait for task interrupted. It will continue to run in the background
Failed to cleanup
ipa2c7.our.net entries: Not allowed on non-leaf entry
You may need to manually remove them from the tree
Failed to cleanup
ipa2c7.our.net DNS entries: no matching entry found
You may need to manually remove them from the tree
[root@ipa1 httpd]# ipa-replica-manage list
ipa2.our.net: master
ipa3.our.net: master
ipa1.our.net: master
ipa2c7.our.net: master
Any suggestions for other ways to remove the replica so I can remove the host and its DNS
entries and then see what crud is left behind in LDAP?
I'd probably start by exporting to ldif and using simple grep on the
data and in /etc/dirsrv/slapd-DOMAIN/dse.ldif to find occurences
Then use something like Apache Studio or ldapmodify/ldapdelete to do the
removal.
rob