Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 896699
Description of problem: running ipa-replica-manage remotely with -H option does not appear to delete DNS SRV records. [root@rhel6-5 shm]# ipa-replica-manage -p $ADMINPW -H $MASTER del $REPLICA -f Deleting replication agreements between rhel6-5.testrelm.com and rhel6-4.testrelm.com ipa: INFO: Setting agreement cn=meTorhel6-4.testrelm.com,cn=replica,cn=dc\=testrelm\,dc\=com,cn=mapping tree,cn=config schedule to 2358-2359 0 to force synch ipa: INFO: Deleting schedule 2358-2359 0 from agreement cn=meTorhel6-4.testrelm.com,cn=replica,cn=dc\=testrelm\,dc\=com,cn=mapping tree,cn=config ipa: INFO: Replication Update in progress: FALSE: status: 0 Replica acquired successfully: Incremental update succeeded: start: 0: end: 0 Deleted replication agreement from 'rhel6-4.testrelm.com' to 'rhel6-5.testrelm.com' Background task created to clean replication data. This may take a while. This may be safely interrupted with Ctrl+C [root@rhel6-5 shm]# dig @$MASTER +short _kerberos-master._tcp.testrelm.com srv|grep $REPLICA 0 100 88 rhel6-5.testrelm.com. Version-Release number of selected component (if applicable): ipa-server-3.0.0-22.el6.x86_64 How reproducible: always? Steps to Reproduce: On MASTER: 1. Install IPA Server 2. ipa-replica-prepare -p $ADMINPW --ip-address=$REPLICA_IP $REPLICA On REPLICA: 3. sftp $MASTER:/var/lib/ipa/replica-info-$REPLICA.gpg . 4. ipa-replica-install -U --setup-dns --forwarder=$DNSFORWARD --setup-ca -w $ADMINPW -p $ADMINPW replica-info-$REPLICA.gpg 5. ipa-replica-manage -p $ADMINPW -H $MASTER del $REPLICA -f 6. dig @$MASTER +short _kerberos-master._tcp.testrelm.com srv|grep $REPLICA On MASTER: Actual results: Deletes replication agreement but, leaves behind the DNS SRV records Expected results: No DNS SRV records left behind so that it functions the same as when ipa-replica-manage del is run from the remote server directly. Additional info:
This is a restored ticket that was originally #3362. Moving to appropriate milestone.
Petr, isn't this a duplicate with some of the recent DNS SRV cleanup tickets?
I'm not aware of a duplicate but it does not mean that it does not exist :-)
This was fixed as side effect of #2008
Metadata Update from @mkosek: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.4
Login to comment on this ticket.