I've got a bunch of replication errors that I'm trying to resolve with a 
re-initialization, but the biggest one right now is that one of my IPA replicas 
has inconsistent LDAP attributes and I'm not sure of the best way to proceed.

The inconsistent attributes are:

* ipaUniqueID
* krbPrincipalKey
* krbExtraData
* krbLastPwdChange

Certainly at least the first two seem really significant. I'm hesitant to 
re-initialize and overwrite data about one of the IPA servers itself.

Should I try to delete it as a replica? Try to manually update the data on the 
replicas with bad data? Just re-initialize from a replica with good data? For 
the latter two options, how can I determine which data is the correct data?
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to