[Freeipa-users] IPA-Server v3.0 Replication Broken

[Dan Ouellet]

Thank you for your reply.

An "ldapsearch" revealed that the buffer is set to 64k on both the master and the replica.

I will increase to size to 2M and test to see if this resolves the problem.

Best regards,

Dan 
 


-----Original Message-----
From: David Kupka [mailto:dkupka at redhat.com] 
Sent: Thursday, January 29, 2015 8:55 AM
To: Auerbach, Steven; IPA User Maillist (freeipa-users at redhat.com)
Cc: Dan Ouellet
Subject: Re: [Freeipa-users] IPA-Server v3.0 Replication Broken

On 01/29/2015 02:43 PM, Auerbach, Steven wrote:
> We have a pair of IPA Servers for our network. Our servers  are Oracle Linux 6 x86_64 with the ipa-server.3.0.X packages [up to date as distributed by Oracle Linux].
>
> Recently we noticed that the master (IPA01) is replicating fine to the designated replicant. But changes that are made on the replicant do not get back to the master.
>
> This is true when ipa-clients register (if the registration script grabs the replicant for registration then the host enrollment and DNS will not make it back to the master.
> This is true when users make a password change. If the password process grabs the master then replication to the replicant is fine, but if the change process grabs the replicant it will not make it back to the master. Then the user login is broken.
> This is true when, in the IPA Admin Web Interface we delete a host entry or DNS record. If done on the master the change replicates to the replicant. If the change is made on the replicant it does not make it to the master.
>
> We have not found anything in the documentation that helps us understand where to proceed or what to do to diagnose the replication problem. We have tried removing the replicant from the IPA server configuration and powering off the box, creating a new server and reconstructing a new replica on that new server. The problem persists. We suspect the issue lies in some configuration somewhere on the master, but know not where to go next.
>
> Anyone have a similar experience and overcome it? We will take any advice we can get!
>
> With appreciation and respect;
>
> Steven Auerbach
> Systems Administrator
> State University System of Florida
> Board of Governors
> 325 West Gaines Street
> Tallahassee, Florida 32399
> (850) 245-9592 | Fax (850) 245-0419
> www.flbog.edu
> [BOG-wordmark-wideFOR EMAIL-color]
>
>
>
>
Hi,
this looks similar to: 
https://www.redhat.com/archives/freeipa-users/2015-January/msg00331.html 
and https://fedorahosted.org/freeipa/ticket/4807

Did you try to raise the nsslapd-sasl-max-buffer-size?

-- 
David Kupka