Bug 757798

Summary: DOC: Missing replica-demotion
Product: Red Hat Enterprise Linux 6 Reporter: Sigbjorn Lie <sigbjorn>
Component: doc-Identity_Management_GuideAssignee: Deon Ballard <dlackey>
Status: CLOSED CURRENTRELEASE QA Contact: ecs-bugs
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.2CC: jskeoch, mkosek, rcritten
Target Milestone: rcKeywords: Documentation
Target Release: 6.3   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-06-21 23:16:43 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Sigbjorn Lie 2011-11-28 17:51:07 UTC
On 11/28/2011 03:11 PM, Simo Sorce wrote:
> On Sun, 2011-11-27 at 18:53 +0100, Sigbjorn Lie wrote:
>> Perhaps an opertunity for improvements here? My suggestions:
>>
>> * First off, add to the documentation to remove the replica on
>> another 
>> IPA server before uninstalling the IPA replica?
>
> We should probably do this, can you open a doc bug ?
>

Comment 1 Sigbjorn Lie 2011-11-28 17:54:14 UTC
In addition:

> * Where did the CA instance go? I see nothing in the documentation
> about 
> this, but I found a ipa-ca-install command.

The CA component is always optional on replicas. You do not necessarily
want to have a CA replica in every single FreeIPA replica. Usually a few
CA instance (perhaps one or two per geography will suffice).

So you should either pass --setup-ca at ipa-replica-install time or call
ipa-ca-install later.

Comment 3 Rob Crittenden 2011-11-28 22:11:35 UTC
Deon, they will want to do something like:

On the replica to be removed, show all replication agreements:
# ipa-replica-manage list
Directory Manager password: 

ipa.example.com: master
replica.example.com: master

For each server in the list (other than our own, of course):
# ipa-replica-manage del ipa.example.com

Now you can uninstall the replica:
# ipa-server-install --uninstall -U

On a remaining server clean up all references to the old replica:
# ipa host-del replica.example.com

Comment 7 Deon Ballard 2012-06-21 23:16:43 UTC
Closing.