On May 27, 2012, at 1:27 AM, Rob Crittenden wrote:
> Tomasz 'Zen' Napierała wrote:
>> Hi,
>>
>> I'm trying to install replica server that prevously failed to initialize.
>> Host ldap-s1 - first server
>> Host ldap-s2 - reinstalled server
>>
>> After ipa-replica-install on ldap-s2, I got:
>> Connection check OK
>> The host ldap-s2.xxx already exists on the master server. Depending on your
>> configuration, you may perform the following:
>>
>> Remove the replication agreement, if any:
>> % ipa-replica-manage del ldap-s2.xxx
>> Remove the host entry:
>> % ipa host-del ldap-s2.xxx
>>
>> So I tried to do that, but:
>> ipa-replica-manage del ldap-s2.xxx
>> Unable to delete replica ldap-s2.xxx: {'desc': "Can't contact LDAP server"}
>>
>> ldap-s1 tried to connect to ldap-s2 but obviously failed.
>> Then I did:
>> ipa host-del ldap-s2.xxx
>> ---------------------------------
>> Deleted host "ldap-s2.xxx"
>> ---------------------------------
>>
>> I prepared replica faile again, scped it to ldap-s2 and ran
>> ipa-replica-install again:
>> […]
>> [16/29]: configuring ssl for ds instance
>> [17/29]: configuring certmap.conf
>> [18/29]: configure autobind for root
>> [19/29]: configure new location for managed entries
>> [20/29]: restarting directory server
>> [21/29]: setting up initial replication
>> Starting replication, please wait until this has completed.
>> [ldap-s1.xxx] reports: Update failed! Status: [-2 - System error]
>> creation of replica failed: Failed to start replication
>>
>> Your system may be partly configured.
>> Run /usr/sbin/ipa-server-install --uninstall to clean up.
>>
>> During the attempt I got this on ldap-s1
>> [26/May/2012:19:24:04 +0000] slapi_ldap_bind - Error: could not perform
>> interactive bind for id [] mech [GSSAPI]: error -2 (Local error)
>> [26/May/2012:19:24:07 +0000] slapd_ldap_sasl_interactive_bind - Error: could
>> not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local
>> error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
>> Minor code may provide more information (Server ldap/ldap-s2.xxx@XXX not
>> found in Kerberos database)) errno 2 (No such file or directory)
>>
>> and
>> [root@ldap-s1 ~]# ipa-replica-manage del ldap-s2.xxx
>> Unable to delete replica ldap-s2.xxx: {'info': 'SASL(-1): generic failure:
>> GSSAPI Error: Unspecified GSS failure. Minor code may provide more
>> information (Server ldap/ldap-s2.xxx@XXX not found in Kerberos database)',
>> 'desc': 'Local error'}
>>
>> Anyone has any ideas how to fix that??
>>
>> Regards,
>
> ipa-replica-manage del --force ldap-s2.xxx
>
> You'll want to restart the dirsrv service on ldap-s1 before attemping to
> re-install ldap-s2.
Thanks, I think you didn't notice my next email. I just did that exactly after
reading ipa-replica-manage manage ;)
Regards,
--
Tomasz 'Zen' Napierała
[email protected]
_______________________________________________
Freeipa-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-users
