On 11/28/2011 03:11 PM, Simo Sorce wrote: > On Sun, 2011-11-27 at 18:53 +0100, Sigbjorn Lie wrote: >> Perhaps an opertunity for improvements here? My suggestions: >> >> * First off, add to the documentation to remove the replica on >> another >> IPA server before uninstalling the IPA replica? > > We should probably do this, can you open a doc bug ? >
In addition: > * Where did the CA instance go? I see nothing in the documentation > about > this, but I found a ipa-ca-install command. The CA component is always optional on replicas. You do not necessarily want to have a CA replica in every single FreeIPA replica. Usually a few CA instance (perhaps one or two per geography will suffice). So you should either pass --setup-ca at ipa-replica-install time or call ipa-ca-install later.
Deon, they will want to do something like: On the replica to be removed, show all replication agreements: # ipa-replica-manage list Directory Manager password: ipa.example.com: master replica.example.com: master For each server in the list (other than our own, of course): # ipa-replica-manage del ipa.example.com Now you can uninstall the replica: # ipa-server-install --uninstall -U On a remaining server clean up all references to the old replica: # ipa host-del replica.example.com
Added this section: http://documentation-stage.bne.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/removing-replica.html
Closing.