Bug 754739

Summary:	Master Server should not list uninstalled Replicas
Product:	Red Hat Enterprise Linux 7	Reporter:	Namita Soman <nsoman>
Component:	ipa	Assignee:	Martin Kosek <mkosek>
Status:	CLOSED NOTABUG	QA Contact:	IDM QE LIST <seceng-idm-qe-list>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.0	CC:	dpal, jgalipea, mkosek
Target Milestone:	rc	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-01-16 12:12:02 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Namita Soman 2011-11-17 15:44:43 UTC

Description of problem:
When a master server and replica are installed, ipa-replica-manage list will list the 2 servers in the topology. But when replica is uninstalled, it is still listed. This can lead to lost time (possibly, not proven) or other unwanted issues when master attempts to replicate its data to rest of the servers, and cannot reach this uninstalled replica

If a ipa-replica-manage del is done before uninstalling, this replica will not be listed. 

Seeing this behaviour in ipa-csreplica-manage as well.

Version-Release number of selected component (if applicable):
ipa-server-2.1.3-9.el6.x86_64

How reproducible:
always

Steps to Reproduce:
1. install master, replica
2. ipa-replica-manage list - will list both servers
3. uninstall replica
4. ipa-replica-manage list
  
Actual results:
will list both servers

Expected results:
should list only master

Additional info:

Comment 2 Martin Kosek 2011-11-18 07:44:09 UTC

Rob, could we just remove replication agreements when ipa-server-install --uninstall is run? It seems that an obligation to run "ipa-replica-manage del" just confuses users.

Comment 3 Rob Crittenden 2011-11-18 15:04:41 UTC

This will require one be authenticated in order to uninstall (either via GSSAPI with right credentials or with DM password). I've resisted this in the past, perhaps we should bring it up on the public devel list for discussion.

Comment 5 Dmitri Pal 2011-12-05 17:20:18 UTC

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2163

Comment 9 Martin Kosek 2015-01-16 12:12:02 UTC

`ipa-replica-manage del` step was missing, see

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/removing-replica.html

Given the FreeIPA behaves as designed, closing this ticket.