That's for adding/removing replication segments to the topology. To
completely remove the node:
ipa-replica-manage del <node name>
Especially for a dead/disconnected I also run the --force and --cleanup
flags:
ipa-replica-manage del -f -c <node name>
Once in a while there may still be a stranded segment so I check after
(greps are just to keep output concise):
ipa topologysegment-find domain | grep Segm | grep <node>
ipa topologysegment-find ca | grep Segm | grep <node>
If any exist THEN you can use ipa topologysegment-del <domain|ca> <segment
name>
--
John Duino
jduino(a)oblong.com
On Wed, Mar 7, 2018 at 11:52 AM, Andrew Meyer via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
I am trying to follow HowTo/Remove replica in a managed topology -
FreeIPA
<
https://www.freeipa.org/page/HowTo/Remove_replica_in_a_managed_topology> to
remove replica servers correctly. However when I do this I am running into
an error:
[andrew.meyer@infra-test-ipa ~]$ ipa topologysegment-del
Suffix name: domain
Segment name: freeipa01.east.gatewayblend.net-to-freeipa01.stl1.
gatewayblend.net
ipa: ERROR: Server is unwilling to perform: Removal of Segment disconnects
topology.Deletion not allowed.
[andrew.meyer@infra-test-ipa ~]$
However I came across this -
Issue #6266: Cannot uninstall server in disconnected topology - freeipa -
Pagure <
https://pagure.io/freeipa/issue/6266>
Issue #6266: Cannot uninstall server in disconnected topology - freeipa -
Pagure
<
https://pagure.io/freeipa/issue/6266>
Can I use the workaround or is there a better method?
In this case I do not have any topology disconnected:
[andrew.meyer@infra-test-ipa ~]$ ipa topologysegment-find domain --all
------------------
6 segments matched
------------------
dn: cn=freeipa01.east.gatewayblend.net-to-freeipa01.
stl1.gatewayblend.net,cn=domain,cn=topology,cn=ipa,cn=
etc,dc=gatewayblend,dc=net
Segment name: freeipa01.east.gatewayblend.net-to-freeipa01.stl1.
gatewayblend.net
Left node:
freeipa01.east.gatewayblend.net
Right node:
freeipa01.stl1.gatewayblend.net
Connectivity: both
iparepltoposegmentstatus: autogen
objectclass: iparepltoposegment, top
dn: cn=freeipa01.east.gatewayblend.net-to-infra-
test-ipa2.gatewayblend.net,cn=domain,cn=topology,cn=ipa,cn=
etc,dc=gatewayblend,dc=net
Segment name: freeipa01.east.gatewayblend.net-to-infra-test-ipa2.
gatewayblend.net
Left node:
freeipa01.east.gatewayblend.net
Right node:
infra-test-ipa2.gatewayblend.net
Connectivity: both
iparepltoposegmentstatus: autogen
objectclass: iparepltoposegment, top
dn: cn=freeipa01.stl1.gatewayblend.net-to-freeipa03.
stl1.gatewayblend.net,cn=domain,cn=topology,cn=ipa,cn=
etc,dc=gatewayblend,dc=net
Segment name: freeipa01.stl1.gatewayblend.net-to-freeipa03.stl1.
gatewayblend.net
Left node:
freeipa01.stl1.gatewayblend.net
Right node:
freeipa03.stl1.gatewayblend.net
Connectivity: both
iparepltoposegmentstatus: autogen
objectclass: iparepltoposegment, top
dn: cn=freeipa03.east.gatewayblend.net-to-infra-
test-ipa.gatewayblend.net,cn=domain,cn=topology,cn=ipa,cn=
etc,dc=gatewayblend,dc=net
Segment name: freeipa03.east.gatewayblend.net-to-infra-test-ipa.
gatewayblend.net
Left node:
freeipa03.east.gatewayblend.net
Right node:
infra-test-ipa.gatewayblend.net
Connectivity: both
iparepltoposegmentstatus: autogen
objectclass: iparepltoposegment, top
dn: cn=infra-test-ipa.gatewayblend.net-to-infra-
freeipa1-aws.gatewayblend.net,cn=domain,cn=topology,cn=ipa,
cn=etc,dc=gatewayblend,dc=net
Segment name: infra-test-ipa.gatewayblend.net-to-infra-freeipa1-aws.
gatewayblend.net
Left node:
infra-test-ipa.gatewayblend.net
Right node:
infra-freeipa1-aws.gatewayblend.net
Connectivity: left-right
iparepltoposegmentstatus: autogen
objectclass: iparepltoposegment, top
dn: cn=infra-test-ipa.gatewayblend.net-to-infra-
test-ipa2.gatewayblend.net,cn=domain,cn=topology,cn=ipa,cn=
etc,dc=gatewayblend,dc=net
Segment name: infra-test-ipa.gatewayblend.net-to-infra-test-ipa2.
gatewayblend.net
Left node:
infra-test-ipa.gatewayblend.net
Right node:
infra-test-ipa2.gatewayblend.net
Connectivity: both
iparepltoposegmentstatus: autogen
objectclass: iparepltoposegment, top
----------------------------
Number of entries returned 6
----------------------------
[andrew.meyer@infra-test-ipa ~]$
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org