<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi there,<div class=""><br class=""></div><div class="">I’ve installed ipa-server-3.0.0-42.el6.centos.x86_64 on CentOS 6.6 servers.</div><div class="">Configured first as a master. Configured second as a replica.</div><div class="">Everything went smooth, no errors.</div><div class="">If I create a user on the master, it automatically shows up on the replica.</div><div class="">BUT If I create a user on the replica, I cannot see on the master the created user. (or if i delete a user on replica which was created on master, it stays on the masters)</div><div class=""><br class=""></div><div class="">I’ve tried to force-sync the master without luck:</div><div class=""><br class=""></div><div class=""><div class="">[root@centosm ~]# ipa-replica-manage force-sync --from centosr.macp.sh</div><div class="">ipa: INFO: Setting agreement cn=meTocentosm.macp.sh,cn=replica,cn=dc\=macp\,dc\=sh,cn=mapping tree,cn=config schedule to 2358-2359 0 to force synch</div><div class="">ipa: INFO: Deleting schedule 2358-2359 0 from agreement cn=meTocentosm.macp.sh,cn=replica,cn=dc\=macp\,dc\=sh,cn=mapping tree,cn=config</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Example:</div><div class=""><div class="">[root@centosr ~]# ipa user-add</div><div class="">First name: test</div><div class="">Last name: test</div><div class="">User login [ttest]:</div><div class="">------------------</div><div class="">Added user "ttest"</div><div class="">------------------</div><div class=""> User login: ttest</div><div class=""> First name: test</div><div class=""> Last name: test</div><div class=""> Full name: test test</div><div class=""> Display name: test test</div><div class=""> Initials: tt</div><div class=""> Home directory: /home/ttest</div><div class=""> GECOS field: test test</div><div class=""> Login shell: /bin/sh</div><div class=""> Kerberos principal: <a href="mailto:ttest@MACP.SH" class="">ttest@MACP.SH</a></div><div class=""> Email address: <a href="mailto:ttest@macp.sh" class="">ttest@macp.sh</a></div><div class=""> UID: 1213900501</div><div class=""> GID: 1213900501</div><div class=""> Password: False</div><div class=""> Kerberos keys available: False</div></div><div class=""><br class=""></div><div class=""><div class="">[root@centosm ~]# ipa user-show ttest</div><div class="">ipa: ERROR: ttest: user not found</div></div><div class=""><br class=""></div><div class="">I’ve checked replication statuses:</div><div class=""><br class=""></div><div class="">Master:</div><div class=""><div class="">[root@centosm ~]# ldapsearch -x -h centosm.macp.sh -D "cn=directory manager" -w xxxxxx1 -b cn=config '(objectclass=nsds5replicationagreement)'</div><div class=""># extended LDIF</div><div class="">#</div><div class=""># LDAPv3</div><div class=""># base <cn=config> with scope subtree</div><div class=""># filter: (objectclass=nsds5replicationagreement)</div><div class=""># requesting: ALL</div><div class="">#</div><div class=""><br class=""></div><div class=""># meTocentosr.macp.sh, replica, dc\3Dmacp\2Cdc\3Dsh, mapping tree, config</div><div class="">dn: cn=meTocentosr.macp.sh,cn=replica,cn=dc\3Dmacp\2Cdc\3Dsh,cn=mapping tree,c</div><div class=""> n=config</div><div class="">cn: meTocentosr.macp.sh</div><div class="">objectClass: nsds5replicationagreement</div><div class="">objectClass: top</div><div class="">nsDS5ReplicaTransportInfo: LDAP</div><div class="">description: me to centosr.macp.sh</div><div class="">nsDS5ReplicaRoot: dc=macp,dc=sh</div><div class="">nsDS5ReplicaHost: centosr.macp.sh</div><div class="">nsds5replicaTimeout: 120</div><div class="">nsDS5ReplicaPort: 389</div><div class="">nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof idnssoaserial</div><div class=""> entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount</div><div class="">nsDS5ReplicaBindMethod: SASL/GSSAPI</div><div class="">nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn krblasts</div><div class=""> uccessfulauth krblastfailedauth krbloginfailedcount</div><div class="">nsds5replicareapactive: 0</div><div class="">nsds5replicaLastUpdateStart: 20150127162748Z</div><div class="">nsds5replicaLastUpdateEnd: 20150127162751Z</div><div class="">nsds5replicaChangesSentSinceStartup:: NDoxMzkxLzMg</div><div class="">nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd</div><div class=""> ate succeeded</div><div class="">nsds5replicaUpdateInProgress: FALSE</div><div class="">nsds5replicaLastInitStart: 20150127145831Z</div><div class="">nsds5replicaLastInitEnd: 20150127145834Z</div><div class="">nsds5replicaLastInitStatus: 0 Total update succeeded</div><div class=""><br class=""></div><div class=""># search result</div><div class="">search: 2</div><div class="">result: 0 Success</div><div class=""><br class=""></div><div class=""># numResponses: 2</div><div class=""># numEntries: 1</div></div><div apple-content-edited="true" class=""> <div style="orphans: auto; text-align: start; text-indent: 0px; widows: auto; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="orphans: auto; text-align: start; text-indent: 0px; widows: auto; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="orphans: auto; text-align: start; text-indent: 0px; widows: auto; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="orphans: auto; text-align: start; text-indent: 0px; widows: auto; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; widows: auto;" class=""><br class=""></div><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; widows: auto;" class="">Slave:</div><div style="orphans: auto; text-align: start; text-indent: 0px; widows: auto;" class=""><div class="">[root@centosr ~]# ldapsearch -x -h centosr.macp.sh -D "cn=directory manager" -w almafa12 -b cn=config '(objectclass=nsds5replicationagreement)'</div><div class=""># extended LDIF</div><div class="">#</div><div class=""># LDAPv3</div><div class=""># base <cn=config> with scope subtree</div><div class=""># filter: (objectclass=nsds5replicationagreement)</div><div class=""># requesting: ALL</div><div class="">#</div><div class=""><br class=""></div><div class=""># meTocentosm.macp.sh, replica, dc\3Dmacp\2Cdc\3Dsh, mapping tree, config</div><div class="">dn: cn=meTocentosm.macp.sh,cn=replica,cn=dc\3Dmacp\2Cdc\3Dsh,cn=mapping tree,c</div><div class=""> n=config</div><div class="">cn: meTocentosm.macp.sh</div><div class="">objectClass: nsds5replicationagreement</div><div class="">objectClass: top</div><div class="">nsDS5ReplicaTransportInfo: LDAP</div><div class="">description: me to centosm.macp.sh</div><div class="">nsDS5ReplicaRoot: dc=macp,dc=sh</div><div class="">nsDS5ReplicaHost: centosm.macp.sh</div><div class="">nsds5replicaTimeout: 120</div><div class="">nsDS5ReplicaPort: 389</div><div class="">nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof idnssoaserial</div><div class=""> entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount</div><div class="">nsDS5ReplicaBindMethod: SASL/GSSAPI</div><div class="">nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn krblasts</div><div class=""> uccessfulauth krblastfailedauth krbloginfailedcount</div><div class="">nsds50ruv: {replicageneration} 54c7a797000000040000</div><div class="">nsds50ruv: {replica 4 <a href="ldap://centosm.macp.sh:389" class="">ldap://centosm.macp.sh:389</a>}</div><div class="">nsds50ruv: {replica 3 <a href="ldap://centosr.macp.sh:389" class="">ldap://centosr.macp.sh:389</a>} 54c7a79b000000030000 54c7a7a</div><div class=""> 1000400030000</div><div class="">nsruvReplicaLastModified: {replica 4 <a href="ldap://centosm.macp.sh:389" class="">ldap://centosm.macp.sh:389</a>} 00000000</div><div class="">nsruvReplicaLastModified: {replica 3 <a href="ldap://centosr.macp.sh:389" class="">ldap://centosr.macp.sh:389</a>} 00000000</div><div class="">nsds5ReplicaStripAttrs: modifiersName modifyTimestamp internalModifiersName in</div><div class=""> ternalModifyTimestamp</div><div class="">nsds5replicareapactive: 0</div><div class="">nsds5replicaLastUpdateStart: 20150127162747Z</div><div class="">nsds5replicaLastUpdateEnd: 20150127162747Z</div><div class="">nsds5replicaChangesSentSinceStartup:</div><div class="">nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd</div><div class=""> ate started</div><div class="">nsds5replicaUpdateInProgress: FALSE</div><div class="">nsds5replicaLastInitStart: 0</div><div class="">nsds5replicaLastInitEnd: 0</div><div class=""><br class=""></div><div class=""># search result</div><div class="">search: 2</div><div class="">result: 0 Success</div><div class=""><br class=""></div><div class=""># numResponses: 2</div><div class=""># numEntries: 1</div><div class=""><br class=""></div><div class=""><div class="">[root@centosm ~]# ipa-replica-manage list</div><div class="">centosm.macp.sh: master</div><div class="">centosr.macp.sh: master</div><div class="">[root@centosm ~]# ipa-replica-manage -v list centosr.macp.sh</div><div class="">centosm.macp.sh: replica</div><div class=""> last init status: None</div><div class=""> last init ended: None</div><div class=""> last update status: 0 Replica acquired successfully: Incremental update started</div><div class=""> last update ended: 2015-01-27 16:29:00+00:00</div><div class="">[root@centosm ~]#</div></div><div class=""><br class=""></div><div class=""><div class="">[root@centosr ~]# ipa-replica-manage list</div><div class="">centosm.macp.sh: master</div><div class="">centosr.macp.sh: master</div><div class="">[root@centosr ~]# ipa-replica-manage list -v centosm.macp.sh</div><div class="">centosr.macp.sh: replica</div><div class=""> last init status: 0 Total update succeeded</div><div class=""> last init ended: 2015-01-27 14:58:34+00:00</div><div class=""> last update status: 0 Replica acquired successfully: Incremental update started</div><div class=""> last update ended: None</div><div class="">[root@centosr ~]#</div></div><div class=""><br class=""></div><div class="">Probably I’m missing something really obvious, so if anyone can tell me what, I would be really grateful :).</div></div><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; widows: auto;" class=""><br class="Apple-interchange-newline">Kind regards,</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; widows: auto;" class="">Csaba Kollar</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; widows: auto;" class=""><br class=""></div><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; widows: auto;" class=""><br class=""></div></div></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline"> </div> <br class=""></div></body></html> <br> <span style="font-family:Helvetica;font-size:12px">***** Email confidentiality notice *****</span><br style="font-family:Helvetica;font-size:12px"><br style="font-family:Helvetica;font-size:12px"><span style="font-family:Helvetica;font-size:12px">Xanadu Consultancy Limited is a limited company registered in Ireland with registered number 500416 and VAT registered number IE 9793319P. Our registered office is at Floor 2, River House, Blackpool Retail & Business Park, Cork, Ireland. We have a branch office registered in England and Wales with company number FC030315, whose address is at Unit 710 Highgate Studios, 53-79 Highgate Road, London, NW5 1TL.</span><br style="font-family:Helvetica;font-size:12px"><br style="font-family:Helvetica;font-size:12px"><span style="font-family:Helvetica;font-size:12px">This message is intended solely for the addressee and may contain confidential information. If you have received this message in error, please send it back to us, and immediately and permanently delete it. Do not use, copy or disclose the information contained in this message or in any attachment. Xanadu Consultancy Limited cannot accept liability for any statements made which are clearly the sender’s own and not expressly made on behalf of Xanadu Consultancy Limited.</span>