#5526 two topology suffixes for domain suffix after upgrade
Closed: Fixed None Opened 8 years ago by mbabinsk.

After upgrade from freeipa 4.2.3 to current master (HEAD at2c5a662fd80f7152834dfebf45628d3a7b8a68bf) and setting domain level to 1, ipa topologysuffix-find shows not two, but three managed suffixes:

# ipa topologysuffix-find
---------------------------
3 topology suffixes matched
---------------------------
  Suffix name: ca
  Managed LDAP suffix DN: o=ipaca

  Suffix name: domain
  Managed LDAP suffix DN: dc=ipa,dc=test

  Suffix name: realm
  Managed LDAP suffix DN: dc=ipa,dc=test

This causes ipa-replica-manage del and topology checks during server uninstall to fail with:

ipa-replica-manage del client1.ipa.test
Checking connectivity in topology suffix 'ca'
'replica1.ipa.test' is not a part of topology suffix 'ca'
Not checking connectivity
unexpected error: u'domain'

master:

  • a84b7d2 topology: Make sure the old 'realm' topology suffix is not used

I accidentally pushed wrong patch, fix has been pushed here.
master:

  • dcb5c2a topology: Fix: Make sure the old 'realm' topology suffix is not used

Metadata Update from @mbabinsk:
- Issue assigned to tbabej
- Issue set to the milestone: FreeIPA 4.3

7 years ago

Login to comment on this ticket.

Metadata