Oddly, I am having the same problem not too many days later, so I thought I 
would just reply here. I was in the middle of bringing up a new replica when 
the hardware panicked or something. Last messages to console:
```
Upgrading IPA:. Estimated time: 1 minute 30 seconds
  [1/9]: stopping directory server
  [2/9]: saving configuration
  [3/9]: disabling listeners
  [4/9]: enabling DS global lock
  [5/9]: starting directory server
  [6/9]: upgrading server
```

I've tried everything in the thread, starting with the link Mark Reynolds sent 
above. I found the current replication and did the `cleanruv` path (not the 
`all` variant) for the open transaction, then checked it on the other master. 
Still getting the `invalid 'PKINIT enabled server': all masters must have IPA 
master role enabled` message.

Also tried the `ipa-replica-manage del replica.server --force` and `ipa 
server-del --ignore-topology-disconnect --ignore-last-of-role --force 
replica.server` command and got the same error message for both commands.

Any ideas of what I might additionally try?

Thanks for your help!
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

Reply via email to