So it does allow me to login, however there is a popup that says: "Some operations failed.", and a link "View details", when I click on that it shows: "invalid 'PKINIT enabled server': all masters must have IPA master role" And there is a button that says "OK", when I click on that it shows this:
Runtime error
Web UI got in unrecoverable state during "runtime" phase. Technical details: y.server_config is undefined freeipa/ipa/</y.update_password_expiration@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:37187 start_runtime@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:17296 register_phases/<@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1253 _run_phase/<@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3476 forEach@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:29752 _run_phase@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3440 next_phase@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899 _run_phase/<@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626 c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246 _run_phase@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548 next_phase@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899 _run_phase/<@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626 c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246 _run_phase@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548 next_phase@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899 _run_phase/<@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626 c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886 d/this.resolve@ https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873 dojo/promise/all/</</</<@ https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:85255 c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886 d/this.resolve@ https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873 register_phases/</<@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1092 on_success@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:34471 freeipa/rpc/</a.concurrent_command/t.on_success_all@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:57200 freeipa/rpc/</a.concurrent_command/t.command_completed@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56993 freeipa/rpc/</a.concurrent_command/t.success_handler@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56830 freeipa/rpc/</a.concurrent_command/t.execute/n.on_success</<@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56380 freeipa/rpc/</a.command/l.register_handlers/<@ https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:53826 f@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:49586 dojo/on/</i.emit@ https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45192 dojo/on/</i.emit@ https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45808 emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:48712 c@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:52469 l@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:24877 fireWith@ https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:25702 k@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:5346 t/<@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:9152
On Tue, Oct 23, 2018 at 4:07 PM Rob Crittenden rcritten@redhat.com wrote:
Ralph Crongeyer via FreeIPA-users wrote:
Can this be manually removed? W currently can't login to the web portal due to this issue.
I don't understand how one master is affecting the web server of another. By design they are independent. Can you provide details on how login is failing?
rob
On Fri, Oct 19, 2018 at 8:42 AM Ralph Crongeyer <rcrongeyer@gmail.com mailto:rcrongeyer@gmail.com> wrote:
The goal is to remove the replica server from the master. No split brain. I need to remove this as we can't login to the portal because of this. On Thu, Oct 18, 2018 at 5:23 PM Rob Crittenden <rcritten@redhat.com <mailto:rcritten@redhat.com>> wrote: Ralph Crongeyer via FreeIPA-users wrote: > Hi List, > I have a master server that had a replica installed. The replica has > been uninstalled. When I try to run "ipa-replica-manage del --force > replica.server" it fails with: > invalid 'PKINIT enabled server': all masters must have IPA master role > enabled > > How can I delete this replica? What is your ultimate goal here? In your previous post it sounded like you are trying to create a split-brain. IPA doesn't like those and does what it can to prevent them. rob
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to
freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...