When uninstalling a single FreeIPA master in domain level 1, the uninstaller calls server-del command which checks whether the topology is not being disconnected and that last CA/DNS/DNSSec server is not being removed.
The latter check obviously always fails when there is only a single master and --ignore-last-of-role has to be passed to the uninstaller.
in this case the whole server-del invocation can be skipped as it makes no sense in single-node topology anyway.
Turns out the check is there but it is broken. Moving to 4.4.3 milestone.
Metadata Update from @mbabinsk:
- Issue assigned to mbabinsk
- Issue set to the milestone: FreeIPA 4.4.3
to comment on this ticket.