Ralph Crongeyer via FreeIPA-users wrote:
So it does allow me to login, however there is a popup that says: "Some operations failed.", and a link "View details", when I click on that it shows: "invalid 'PKINIT enabled server': all masters must have IPA master role" And there is a button that says "OK", when I click on that it shows this:
Ok. Start by running:
$ kinit admin $ ipa domainlevel-get
If it is 1 you can try
$ ipa server-del --ignore-topology-disconnect --ignore-last-of-role --force replica.server
rob
Runtime error
Web UI got in unrecoverable state during "runtime" phase.
Technical details:
y.server_config is undefined freeipa/ipa/</y.update_password_expiration@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:37187 start_runtime@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:17296 register_phases/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1253 _run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3476 forEach@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:29752 _run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3440 next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899 _run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626 c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246 _run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548 next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899 _run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626 c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246 _run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548 next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899 _run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626 c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886 d/this.resolve@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873 dojo/promise/all/</</</<@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:85255 c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886 d/this.resolve@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873 register_phases/</<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1092 on_success@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:34471 freeipa/rpc/</a.concurrent_command/t.on_success_all@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:57200 freeipa/rpc/</a.concurrent_command/t.command_completed@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56993 freeipa/rpc/</a.concurrent_command/t.success_handler@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56830 freeipa/rpc/</a.concurrent_command/t.execute/n.on_success</<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56380 freeipa/rpc/</a.command/l.register_handlers/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:53826 f@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:49586 dojo/on/</i.emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45192 dojo/on/</i.emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45808 emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:48712 c@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:52469 l@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:24877 fireWith@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:25702 k@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:5346 t/<@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:9152
On Tue, Oct 23, 2018 at 4:07 PM Rob Crittenden <rcritten@redhat.com mailto:rcritten@redhat.com> wrote:
Ralph Crongeyer via FreeIPA-users wrote: > Can this be manually removed? W currently can't login to the web portal > due to this issue. I don't understand how one master is affecting the web server of another. By design they are independent. Can you provide details on how login is failing? rob > > On Fri, Oct 19, 2018 at 8:42 AM Ralph Crongeyer <rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com> > <mailto:rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com>>> wrote: > > The goal is to remove the replica server from the master. No split > brain. I need to remove this as we can't login to the portal because > of this. > > > On Thu, Oct 18, 2018 at 5:23 PM Rob Crittenden <rcritten@redhat.com <mailto:rcritten@redhat.com> > <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>> wrote: > > Ralph Crongeyer via FreeIPA-users wrote: > > Hi List, > > I have a master server that had a replica installed. The > replica has > > been uninstalled. When I try to run "ipa-replica-manage del > --force > > replica.server" it fails with: > > invalid 'PKINIT enabled server': all masters must have IPA > master role > > enabled > > > > How can I delete this replica? > > What is your ultimate goal here? In your previous post it > sounded like > you are trying to create a split-brain. IPA doesn't like those > and does > what it can to prevent them. > > rob > > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org <mailto:freeipa-users@lists.fedorahosted.org> > To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org <mailto:freeipa-users-leave@lists.fedorahosted.org> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org >
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...