[Freeipa-devel] one-direction segments in ipaca suffix do not merge

[Petr Vobornik]

On 12/03/2015 02:00 PM, Ludwig Krispenz wrote:
>
> On 12/03/2015 01:50 PM, Oleg Fayans wrote:
>> Hi all,
>>
>> Should not these two one-directional segments in ipaca suffix be
>> merged automatically?
> yes they should, and normally do. What is your scenario when you get
> this, can you reproduce ?

I encountered it yesterday bu:
* on A. `ipa-server-install --setup-dns`
* on: B `ipa-replica-install --setup-ca`
* on: C `ipa-replica-install --setup-ca`

It created: A <-> B <-> C

Agreements were not joined. Don't remember if in both suffixes.

Btw,
After I created A <-> C and removed B using `ipa-replica-manage del B`. 
I've encountered DS on A on 100%CPU for quite some time ~ 30s or more.

I can provide logs/access for all 3 machines.

>>
>> $ ipa topologysegment-find ipaca
>> ------------------
>> 2 segments matched
>> ------------------
>>   Segment name: master.justfor.test-to-replica1.justfor.test
>>   Left node: master.justfor.test
>>   Right node: replica1.justfor.test
>>   Connectivity: left-right
>>
>>   Segment name: replica1.justfor.test-to-master.justfor.test
>>   Left node: replica1.justfor.test
>>   Right node: master.justfor.test
>>   Connectivity: left-right
>> ----------------------------
>> Number of entries returned 2
>> ----------------------------
>>
>>
>


-- 
Petr Vobornik