Oddly, I am having the same problem not too many days later, so I thought I would just reply here. I was in the middle of bringing up a new replica when the hardware panicked or something. Last messages to console: ``` Upgrading IPA:. Estimated time: 1 minute 30 seconds [1/9]: stopping directory server [2/9]: saving configuration [3/9]: disabling listeners [4/9]: enabling DS global lock [5/9]: starting directory server [6/9]: upgrading server ```
I've tried everything in the thread, starting with the link Mark Reynolds sent above. I found the current replication and did the `cleanruv` path (not the `all` variant) for the open transaction, then checked it on the other master. Still getting the `invalid 'PKINIT enabled server': all masters must have IPA master role enabled` message. Also tried the `ipa-replica-manage del replica.server --force` and `ipa server-del --ignore-topology-disconnect --ignore-last-of-role --force replica.server` command and got the same error message for both commands. Any ideas of what I might additionally try? Thanks for your help! _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org