On 15-03-2021 17:44, Rob Crittenden wrote:
Kees Bakker via FreeIPA-users wrote:
> Hi,
>
> After removing one of the replicas the SRV records in DNS remained. I'm talking
> about _kpasswd._udp _kerberos._udp _kerberos._tcp _kerberos-master._udp etc
>
> Two questions.
> 1. Is this a known problem?
> 2. Is there a (simple?) command to remove these SRV entries?
>
> I can remove them manually, so it's not a big deal.
>
I'd check to see if the server or host entry still exists.
ipa server-show
ipa host-show
rob
Well, I did a `ipa-server-install --uninstall --unattended` on that host. So, no
it
doesn't exist anymore.
I did `ipa-replica-manage del` at the start of the removal. As far as I can tell
it all went OK, except that I got the following error.
# ipa-replica-manage del iparep3.ghs.nl
Updating DNS system records
ipa: ERROR: unable to resolve host name iparep3.ghs.nl. to IP address, ipa-ca DNS record
will be incomplete
-----------------------------------
Deleted IPA server "iparep3.ghs.nl"
-----------------------------------
Next, I checked and saw that ipa-ca is alright. The replica was removed.
The topology is OK. All seems well, except that the SRV records were not
updated. I've now corrected that manually.
--
Kees