Kathy Zhu via FreeIPA-users wrote: > Hello team, > > We use ipa_check_consistency > <https://github.com/peterpakos/checkipaconsistency/blob/master/README.md> tool > to check IPA master consistency every night via cron. One of the masters > failed at Ghost last night. Here is the check for Ghost: > > |ldapsearch -o ldif-wrap=no -ZZ -LLLx -h ipa1.example.com > <http://ipa1.example.com> -D ||"cn=Directory Manager"| |-W -s sub > -b ||"dc=example,dc=com"| > |"(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))"| > |nscpentrywsi| > > What is the significance of this inconsistency? Is there a way to fix > this other than reinitialize?
It is a check for unused RUV. Did you recently remove a server? ipa-replica-manage(1) has several commands to help identify and clean these up. For the gory details see https://directory.fedoraproject.org/docs/389ds/howto/howto-cleanruv.html rob _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
