On 4/13/21 2:44 PM, Ronald Wimmer via FreeIPA-users wrote:
On 13.04.21 12:57, François Cami wrote:
> On Tue, Apr 13, 2021 at 12:52 PM Ronald Wimmer via FreeIPA-users
> <freeipa-users(a)lists.fedorahosted.org> wrote:
>>
>> I tried to promote an ipa-client to an ipa-replica. That particular host
>> has previously been a replica but has been removed due to a faulty base
>> OS configuration. When I do an ldapsearch from the top of the LDAP tree
>> (dc=linux,dc=mydomain,dc=at) I could not find any entries before
>> ipa-client-install.
>
> Look in cn=config instead.
Thanks. Apache Directory Studio was not showing it by default. Any ideas
why?
IIRC Apache Directory Studio is able to fetch the base DNs from the root
DSE. This means it performs a search equivalent to
# ldapsearch -x -b "" -s base namingContexts
to get the list of base DNs.
In 389-ds implementation, cn=config is not published in the list of
namingContexts because it's containing operational data. There is a
discussion whether it should be shown in namingContexts in
https://github.com/389ds/389-ds-base/issues/2689
flo
After removing the meTo-Entry on the other side ipa-replica-install
worked as expected. Thanks a lot!
Cheers,
Ronald
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure