I've had a short conversation about this in irc channel, but figured I'd open a
ticket to keep a track of things.
We are trying to reinstall a replica (replica-x1) but it errors out with the above error
message. The logs of ipa-replica-install.log are belowI've tried following a similar
issue hereRe: [Freeipa-users] Error setting up Replication: ldap service principal
|
| |
Re: [Freeipa-users] Error setting up Replication: ldap service principal
| |
|
but am having problem executing a command as suggested by Ludwig.I'm tryingdb2index.pl
-D cn='Directory Manager' -v -w - -t entryrdn
on the server.pop.domain (source server) but that just gives --help message. At any rate
speaking to Rob this may not even be the correct step to take.PS: I have made sure to
uninstall the original replica and also ipa-replica del replica-x1.pop --force on the
source server.2018-01-05T21:23:57Z DEBUG Process finished, return
code=02018-01-05T21:23:57Z DEBUG stdout=add objectclass:2018-01-05T21:23:57Z DEBUG
stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-DOMAIN-LOCAL.socket/??base
)2018-01-05T21:23:57Z DEBUG duration: 0 seconds2018-01-05T21:23:57Z DEBUG [5/7]:
enable GSSAPI for replication2018-01-05T21:23:57Z DEBUG flushing
ldaps://replica-x1.pop.domain.local:636 from SchemaCache2018-01-05T21:23:57Z DEBUG
retrieving schema for SchemaCache url=ldaps://replica-x1.pop.domain.local:636
conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x74bd098>2018-01-05T21:24:00Z
DEBUG flushing ldaps://server.pop.domain.local:636 from SchemaCache2018-01-05T21:24:00Z
DEBUG retrieving schema for SchemaCache url=ldaps://server.pop.domain.local:636
conn=<ldap.ldapobject.SimpleLDAPObject instance at 0xb76f128>2018-01-05T21:24:03Z
DEBUG Unable to find entry for
(krbprincipalname=ldap/replica-x1.pop.domain.local(a)domain.local)
on server.pop.domain.local:636......2018-01-05T21:27:37Z DEBUG Unable to find entry for
(krbprincipalname=ldap/replica-x1.pop.domain.local(a)domain.local)
on server.pop.domain.local:6362018-01-05T21:27:39Z DEBUG Traceback (most recent call
last):2018-01-05T21:27:39Z DEBUG [error] RuntimeError: One of the ldap service
principals is missing. Replication agreement cannot be converted.2018-01-05T21:27:39Z
DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line
171, in execute2018-01-05T21:27:39Z DEBUG The ipa-replica-install command failed,
exception: RuntimeError: One of the ldap service principals is missing. Replication
agreement cannot be converted.root(a)replica-x1.pop.domain.local: /var/log/ipa$
Show replies by thread