28.6. Removing a Replica
Deleting or demoting a replica removes the IdM replica from the server/replica topology so that it no longer processes IdM requests and it also removes the host machine itself from the IdM domain.
- On an IdM server, obtain a Kerberos ticket before running IdM tools.
kinit admin
[root@replica ~]# kinit admin
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - List all of the configured replication agreements for the IdM domain.
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Removing the replica from the topology involves deleting all the agreements between the replica and the other servers in the IdM domain and all of the data about the replica in the domain configuration.
ipa-replica-manage del replica.example.com
[root@replica ~]# ipa-replica-manage del replica.example.com
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - If the replica was configured with its own CA, then also use the
ipa-csreplica-manage
command to remove all of the replication agreements between the certificate databases for the replica.This is required if the replica itself was configured with a Dogtag Certificate System CA. It is not required if only the master server or other replicas were configured with a CA.ipa-csreplica-manage del replica.example.com
[root@replica ~]# ipa-csreplica-manage del replica.example.com
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - On the replica, uninstall the replica packages.
ipa-server-install --uninstall -U
[root@replica ~]# ipa-server-install --uninstall -U
Copy to Clipboard Copied! Toggle word wrap Toggle overflow