#4235 ipa-replica-manage -H does not delete DNS SRV records
Closed: Fixed None Opened 10 years ago by mkosek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 896699

Description of problem:

running ipa-replica-manage remotely with -H option does not appear to delete
DNS SRV records.


[root@rhel6-5 shm]# ipa-replica-manage -p $ADMINPW -H $MASTER del $REPLICA -f
Deleting replication agreements between rhel6-5.testrelm.com and
rhel6-4.testrelm.com
ipa: INFO: Setting agreement
cn=meTorhel6-4.testrelm.com,cn=replica,cn=dc\=testrelm\,dc\=com,cn=mapping
tree,cn=config schedule to 2358-2359 0 to force synch
ipa: INFO: Deleting schedule 2358-2359 0 from agreement
cn=meTorhel6-4.testrelm.com,cn=replica,cn=dc\=testrelm\,dc\=com,cn=mapping
tree,cn=config
ipa: INFO: Replication Update in progress: FALSE: status: 0 Replica acquired
successfully: Incremental update succeeded: start: 0: end: 0
Deleted replication agreement from 'rhel6-4.testrelm.com' to
'rhel6-5.testrelm.com'
Background task created to clean replication data. This may take a while.
This may be safely interrupted with Ctrl+C

[root@rhel6-5 shm]# dig @$MASTER +short _kerberos-master._tcp.testrelm.com
srv|grep $REPLICA
0 100 88 rhel6-5.testrelm.com.


Version-Release number of selected component (if applicable):
ipa-server-3.0.0-22.el6.x86_64

How reproducible:
always?


Steps to Reproduce:
On MASTER:
1.  Install IPA Server
2.  ipa-replica-prepare -p $ADMINPW --ip-address=$REPLICA_IP $REPLICA

On REPLICA:
3.  sftp $MASTER:/var/lib/ipa/replica-info-$REPLICA.gpg .
4.  ipa-replica-install -U --setup-dns --forwarder=$DNSFORWARD --setup-ca -w
$ADMINPW -p $ADMINPW replica-info-$REPLICA.gpg
5.  ipa-replica-manage -p $ADMINPW -H $MASTER del $REPLICA -f
6.  dig @$MASTER +short _kerberos-master._tcp.testrelm.com srv|grep $REPLICA

On MASTER:

Actual results:

Deletes replication agreement but, leaves behind the DNS SRV records

Expected results:

No DNS SRV records left behind so that it functions the same as when
ipa-replica-manage del is run from the remote server directly.


Additional info:

This is a restored ticket that was originally #3362. Moving to appropriate milestone.

Petr, isn't this a duplicate with some of the recent DNS SRV cleanup tickets?

I'm not aware of a duplicate but it does not mean that it does not exist :-)

This was fixed as side effect of #2008

Metadata Update from @mkosek:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.4

7 years ago

Login to comment on this ticket.

Metadata