Well I got it fixed by using ApacheDirectoryStudio and searching for the old stuck replica and deleted all of it's entries, which fixed the issues, I wish I would have gotten this email sooner, I would have tried what you suggested.
Thanks for your help with this.
Ralph
On Wed, Oct 24, 2018 at 5:43 PM Rob Crittenden rcritten@redhat.com wrote:
Ralph Crongeyer via FreeIPA-users wrote:
So it does allow me to login, however there is a popup that says: "Some operations failed.", and a link "View details", when I click on that it shows: "invalid 'PKINIT enabled server': all masters must have IPA master
role"
And there is a button that says "OK", when I click on that it shows this:
Ok. Start by running:
$ kinit admin $ ipa domainlevel-get
If it is 1 you can try
$ ipa server-del --ignore-topology-disconnect --ignore-last-of-role --force replica.server
rob
Runtime error
Web UI got in unrecoverable state during "runtime" phase.
Technical details:
y.server_config is undefined freeipa/ipa/</y.update_password_expiration@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:37187
start_runtime@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:17296
register_phases/<@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1253
_run_phase/<@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3476
forEach@
https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:29752
_run_phase@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3440
next_phase@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899
_run_phase/<@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626
c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 d/t.then@
https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246
_run_phase@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548
next_phase@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899
_run_phase/<@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626
c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 d/t.then@
https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246
_run_phase@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548
next_phase@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899
_run_phase/<@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626
c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886 d/this.resolve@
https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873
dojo/promise/all/</</</<@
https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:85255
c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960 l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886 d/this.resolve@
https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873
register_phases/</<@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1092
on_success@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:34471
freeipa/rpc/</a.concurrent_command/t.on_success_all@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:57200
freeipa/rpc/</a.concurrent_command/t.command_completed@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56993
freeipa/rpc/</a.concurrent_command/t.success_handler@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56830
freeipa/rpc/</a.concurrent_command/t.execute/n.on_success</<@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56380
freeipa/rpc/</a.command/l.register_handlers/<@
https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:53826
f@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:49586 dojo/on/</i.emit@
https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45192
dojo/on/</i.emit@
https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45808
emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:48712 c@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:52469 l@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:24877 fireWith@
https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:25702
k@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:5346 t/<@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:9152
On Tue, Oct 23, 2018 at 4:07 PM Rob Crittenden <rcritten@redhat.com mailto:rcritten@redhat.com> wrote:
Ralph Crongeyer via FreeIPA-users wrote: > Can this be manually removed? W currently can't login to the web portal > due to this issue. I don't understand how one master is affecting the web server of another. By design they are independent. Can you provide details on
how
login is failing? rob > > On Fri, Oct 19, 2018 at 8:42 AM Ralph Crongeyer <rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com> > <mailto:rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com>>>
wrote:
> > The goal is to remove the replica server from the master. No
split
> brain. I need to remove this as we can't login to the portal because > of this. > > > On Thu, Oct 18, 2018 at 5:23 PM Rob Crittenden <rcritten@redhat.com <mailto:rcritten@redhat.com> > <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>>
wrote:
> > Ralph Crongeyer via FreeIPA-users wrote: > > Hi List, > > I have a master server that had a replica installed. The > replica has > > been uninstalled. When I try to run "ipa-replica-manage
del
> --force > > replica.server" it fails with: > > invalid 'PKINIT enabled server': all masters must have
IPA
> master role > > enabled > > > > How can I delete this replica? > > What is your ultimate goal here? In your previous post it > sounded like > you are trying to create a split-brain. IPA doesn't like
those
> and does > what it can to prevent them. > > rob > > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org <mailto:freeipa-users@lists.fedorahosted.org> > To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org <mailto:freeipa-users-leave@lists.fedorahosted.org> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...
>
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to
freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...