freeipa

#5588 [RFE] change `ipa-replica-manage del` into an API method for domain level 1
Closed: Fixed Opened by pvoborni.

Closed: Fixed
Reopen Issue

This proposal follows the effort for centralized topology management started in 4.3 release.

ipa-replica-manage del method for domain level 1 nowdays doesn't do any operations which requires directory manager password nor does it require to contact any other replicas like on domain level 0. Therefore this method can be safely moved to API.

The new API method should have the same functionality as the ipa-replica-manage del including the limitation that it can't be run on the server which is removed. The reason is that some changes(like dns cleanup) would not be replicated to other replicas.

It will:

  • reduce the usage of ipa-replica-manage tool which should be used only for winsync management in a future
  • allow ipa-server-install --uninstall to run the method automatically at the beginning of uninstallation so that administrator won't have to call it manually - this fact is often ignored by admins.

Additional requirements

  • it should also work as a cleanup method - should be able to run multiple times if some part of the original removal did no happen from whatever reason.
  • ipa-replica-manage should call this API method for backwards compatibility
  • ipa-server-install --uninstall should work even if the API method was run - for backwards compatibility

4.4 priority

Requires also Web UI part, see design.

master:

  • d8ae2b4055284de8c1baf76819d6611978f83cc6 ipaserver module for working with managed topology
  • db882ae8d6eba768e08be9317e386f8ab3c8fcf7 delegate removal of master DNS record and replica keys to separate functions
  • a6eb87bd68295e15ea19f5cb274cffbef5954d04 server-del: perform full master removal in managed topology
  • 081941a5b9c9ac8832c465b857032e474bb9b09f CI test suite for server-del
  • 47decc9b843b1b1d292511bcc8a24f8ac85745c0 ipa-replica-manage: use server_del when removing domain level 1 replica
  • 31ffe1a12922b5118c847cbd6ac1ca9ea232ef94 remove the master from managed topology during uninstallation

master:

  • e65ce4fedc8e8e4f16c8d0c56f7618a84e8e7f85 Add support to change button css class on confirm dialog
  • 7f4de88ea1da11d4111a917672c0cb7ab9866c90 Add button for server-del command

Metadata Update from @pvoborni:
- Issue assigned to mbabinsk
- Issue set to the milestone: FreeIPA 4.4
Metadata
None
None
None
Low
enhancement
Installation
1
http://www.freeipa.org/page/V4/Manage_replication_topology_4_4
http://www.freeipa.org/page/V4/Manage_replication_topology_4_4/Test_Plan#Test_case:_ipa_server-del_command
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.