Ralph Crongeyer wrote:
Well I got it fixed by using ApacheDirectoryStudio and searching for the old stuck replica and deleted all of it's entries, which fixed the issues, I wish I would have gotten this email sooner, I would have tried what you suggested.
Thanks for your help with this.
Sure, sorry it took so long.
You may want to run: ipa-replica-manage del replica.server --force --cleanup
Just to ensure you got everything.
rob
Ralph
On Wed, Oct 24, 2018 at 5:43 PM Rob Crittenden <rcritten@redhat.com mailto:rcritten@redhat.com> wrote:
Ralph Crongeyer via FreeIPA-users wrote: > So it does allow me to login, however there is a popup that says: > "Some operations failed.", and a link "View details", when I click on > that it shows: > "invalid 'PKINIT enabled server': all masters must have IPA master role" > And there is a button that says "OK", when I click on that it shows this: Ok. Start by running: $ kinit admin $ ipa domainlevel-get If it is 1 you can try $ ipa server-del --ignore-topology-disconnect --ignore-last-of-role --force replica.server rob > > > Runtime error > > Web UI got in unrecoverable state during "runtime" phase. > > > Technical details: > > y.server_config is undefined > freeipa/ipa/</y.update_password_expiration@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:37187 > start_runtime@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:17296 > register_phases/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1253 > _run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3476 > forEach@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:29752 > _run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3440 > next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899 > _run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626 > c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 > d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246 > _run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548 > next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899 > _run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626 > c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 > d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246 > _run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548 > next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899 > _run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626 > c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 > l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886 > d/this.resolve@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873 > dojo/promise/all/</</</<@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:85255 > c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 > l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886 > d/this.resolve@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873 > register_phases/</<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1092 > on_success@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:34471 > freeipa/rpc/</a.concurrent_command/t.on_success_all@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:57200 > freeipa/rpc/</a.concurrent_command/t.command_completed@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56993 > freeipa/rpc/</a.concurrent_command/t.success_handler@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56830 > freeipa/rpc/</a.concurrent_command/t.execute/n.on_success</<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56380 > freeipa/rpc/</a.command/l.register_handlers/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:53826 > f@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:49586 > dojo/on/</i.emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45192 > dojo/on/</i.emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45808 > emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:48712 > c@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:52469 > l@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:24877 > fireWith@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:25702 > k@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:5346 > t/<@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:9152 > > On Tue, Oct 23, 2018 at 4:07 PM Rob Crittenden <rcritten@redhat.com <mailto:rcritten@redhat.com> > <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>> wrote: > > Ralph Crongeyer via FreeIPA-users wrote: > > Can this be manually removed? W currently can't login to the web > portal > > due to this issue. > > I don't understand how one master is affecting the web server of > another. By design they are independent. Can you provide details on how > login is failing? > > rob > > > > > On Fri, Oct 19, 2018 at 8:42 AM Ralph Crongeyer > <rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com> <mailto:rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com>> > > <mailto:rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com> <mailto:rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com>>>> wrote: > > > > The goal is to remove the replica server from the master. No split > > brain. I need to remove this as we can't login to the portal > because > > of this. > > > > > > On Thu, Oct 18, 2018 at 5:23 PM Rob Crittenden > <rcritten@redhat.com <mailto:rcritten@redhat.com> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>> > > <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>>> wrote: > > > > Ralph Crongeyer via FreeIPA-users wrote: > > > Hi List, > > > I have a master server that had a replica installed. The > > replica has > > > been uninstalled. When I try to run "ipa-replica-manage del > > --force > > > replica.server" it fails with: > > > invalid 'PKINIT enabled server': all masters must have IPA > > master role > > > enabled > > > > > > How can I delete this replica? > > > > What is your ultimate goal here? In your previous post it > > sounded like > > you are trying to create a split-brain. IPA doesn't like those > > and does > > what it can to prevent them. > > > > rob > > > > > > > > _______________________________________________ > > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org <mailto:freeipa-users@lists.fedorahosted.org> > <mailto:freeipa-users@lists.fedorahosted.org <mailto:freeipa-users@lists.fedorahosted.org>> > > To unsubscribe send an email to > freeipa-users-leave@lists.fedorahosted.org <mailto:freeipa-users-leave@lists.fedorahosted.org> > <mailto:freeipa-users-leave@lists.fedorahosted.org <mailto:freeipa-users-leave@lists.fedorahosted.org>> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > List Guidelines: > https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > > > > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org <mailto:freeipa-users@lists.fedorahosted.org> > To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org <mailto:freeipa-users-leave@lists.fedorahosted.org> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org >