Ralph Crongeyer via FreeIPA-users wrote:
So it does allow me to login, however there is a popup that says:
"Some operations failed.", and a link "View details", when I click
on
that it shows:
"invalid 'PKINIT enabled server': all masters must have IPA master
role"
And there is a button that says "OK", when I click on that it shows this:
Ok. Start by running:
$ kinit admin
$ ipa domainlevel-get
If it is 1 you can try
$ ipa server-del --ignore-topology-disconnect --ignore-last-of-role
--force replica.server
rob
Runtime error
Web UI got in unrecoverable state during "runtime" phase.
Technical details:
y.server_config is undefined
freeipa/ipa/</y.update_password_expiration@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:37187
start_runtime@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:17296
register_phases/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1253
_run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3476
forEach@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:29752
_run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3440
next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899
_run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626
c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960
d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246
_run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548
next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899
_run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626
c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960
d/t.then@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:62246
_run_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3548
next_phase@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3899
_run_phase/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:3626
c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960
l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886
d/this.resolve@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873
dojo/promise/all/</</</<@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:85255
c@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60960
l@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:60886
d/this.resolve@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:61873
register_phases/</<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:1092
on_success@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:34471
freeipa/rpc/</a.concurrent_command/t.on_success_all@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:57200
freeipa/rpc/</a.concurrent_command/t.command_completed@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56993
freeipa/rpc/</a.concurrent_command/t.success_handler@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56830
freeipa/rpc/</a.concurrent_command/t.execute/n.on_success</<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:56380
freeipa/rpc/</a.command/l.register_handlers/<@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:53826
f@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:49586
dojo/on/</i.emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45192
dojo/on/</i.emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:45808
emit@https://ipaca-01.example.com/ipa/ui/js/dojo/dojo.js?v=40504:1:48712
c@https://ipaca-01.example.com/ipa/ui/js/freeipa/app.js?40504:1:52469
l@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:24877
fireWith@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:4:25702
k@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:5346
t/<@https://ipaca-01.example.com/ipa/ui/js/libs/jquery.js?v=40504:6:9152
On Tue, Oct 23, 2018 at 4:07 PM Rob Crittenden <rcritten(a)redhat.com
<mailto:rcritten@redhat.com>> wrote:
Ralph Crongeyer via FreeIPA-users wrote:
> Can this be manually removed? W currently can't login to the web
portal
> due to this issue.
I don't understand how one master is affecting the web server of
another. By design they are independent. Can you provide details on how
login is failing?
rob
>
> On Fri, Oct 19, 2018 at 8:42 AM Ralph Crongeyer
<rcrongeyer(a)gmail.com <mailto:rcrongeyer@gmail.com>
> <mailto:rcrongeyer@gmail.com <mailto:rcrongeyer@gmail.com>>>
wrote:
>
> The goal is to remove the replica server from the master. No split
> brain. I need to remove this as we can't login to the portal
because
> of this.
>
>
> On Thu, Oct 18, 2018 at 5:23 PM Rob Crittenden
<rcritten(a)redhat.com <mailto:rcritten@redhat.com>
> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>>
wrote:
>
> Ralph Crongeyer via FreeIPA-users wrote:
> > Hi List,
> > I have a master server that had a replica installed. The
> replica has
> > been uninstalled. When I try to run "ipa-replica-manage del
> --force
> > replica.server" it fails with:
> > invalid 'PKINIT enabled server': all masters must have IPA
> master role
> > enabled
> >
> > How can I delete this replica?
>
> What is your ultimate goal here? In your previous post it
> sounded like
> you are trying to create a split-brain. IPA doesn't like those
> and does
> what it can to prevent them.
>
> rob
>
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
> To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...