<div dir="ltr">Ok, so removing all replicas + uninstall and remove all ruv (except master) via cleanruv script seems to works. Thanks everybody for help, I'll try it in production now <div><br></div><div>Vasek</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, May 5, 2015 at 4:49 PM, Mark Reynolds <span dir="ltr"><<a href="mailto:mareynol@redhat.com" target="_blank">mareynol@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5"><br> <br> On 05/05/2015 07:49 AM, Ludwig Krispenz wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <br> On 05/05/2015 01:27 PM, Martin Kosek wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> On 05/05/2015 12:38 PM, Vaclav Adamec wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Hi,<br> I tried migrate to newest version IPA, but result is quite unstable and<br> removing old replicas ends with RUV which cannot be decoded (it stucked in<br> queue forever):<br> <br> ipa-replica-manage del <a href="http://ipa-master-dmz002.test.com" target="_blank">ipa-master-dmz002.test.com</a> -fc<br> Cleaning a master is irreversible.<br> This should not normally be require, so use cautiously.<br> Continue to clean master? [no]: yes<br> <br> ipa-replica-manage list-ruv<br> unable to decode: {replica 8} 55091239000400080000 55091239000400080000<br> unable to decode: {replica 7} 552f84cd000300070000 552f84cd000300070000<br> unable to decode: {replica 11} 551a42f70000000b0000 551aa3140001000b0000<br> unable to decode: {replica 15} 551e82e10001000f0000 551e82e10001000f0000<br> unable to decode: {replica 14} 551e82ec0001000e0000 551e82ec0001000e0000<br> unable to decode: {replica 20} 552f4b72000600140000 552f4b72000600140000<br> unable to decode: {replica 10} 551a25af0001000a0000 551a25af0001000a0000<br> unable to decode: {replica 3} 551e864c000300030000 551e864c000300030000<br> unable to decode: {replica 5} 55083ad2000300050000 55083ad2000300050000<br> unable to decode: {replica 9} 550913e7000000090000 550913e7000000090000<br> unable to decode: {replica 19} 55210193000300130000 55210193000300130000<br> unable to decode: {replica 12} 551a48290000000c0000 551a48c50000000c0000<br> <a href="http://ipa-master-dmz001.test.com:389" target="_blank">ipa-master-dmz001.test.com:389</a>: 25<br> <a href="http://ipa-master-dmz002.test.com:389" target="_blank">ipa-master-dmz002.test.com:389</a>: 21<br> <br> it is possible to clear this queue and leave only valid servers ?<br> <br> Thanks in advance<br> <br> ipa-client-4.1.0-18.el7_1.3.x86_64<br> ipa-server-4.1.0-18.el7_1.3.x86_64<br> </blockquote> Ludwig or Thierry, do you know? The questions about RUV cleaning seems to be<br> recurring, I suspect there will be a pattern (bug) and not just configuration<br> issue.<br> </blockquote> we have seen this in a recent thread, and it is clear that the RUV is corrupted and cannot be decoded, but we don't have a scenario how this is state is reached.<br> </blockquote></div></div> The cleaning task (cleanAllRUV) can remove these invalid replica RUVs (RUV's missing the ldap URL). To reproduce these "invalid" RUV's it requires replication being disabled and re-enabled with a different replica id.<br> <br> To manually clean these invalid RUV elements, outside of using the IPA CLI, you can directly issue the cleanAllRUV task to the Directory Server using ldapmodify:<br> <br> # ldapmodify -D "cn=directory manager" -W -a<br> dn: cn=clean 8, cn=cleanallruv, cn=tasks, cn=config<br> objectclass: extensibleObject<br> replica-base-dn: dc=example,dc=com<br> replica-id: 8<br> cn: clean 8<br> <br> Run these one at a time, as there is a current limit of running 4 concurrent tasks. It is best to monitor the Directory Server errors log, or search on the task entry itself, to see when it has finished before firing off the next task.<br> <br> For more on using cleanAllRUV see:<br> <br> <a href="http://www.port389.org/docs/389ds/howto/howto-cleanruv.html#cleanallruv" target="_blank">http://www.port389.org/docs/389ds/howto/howto-cleanruv.html#cleanallruv</a><br> <a href="http://www.port389.org/docs/389ds/design/cleanallruv-design.html" target="_blank">http://www.port389.org/docs/389ds/design/cleanallruv-design.html</a><br> <br> Regards,<br> Mark<span class="HOEnZb"><font color="#888888"><br> <br> -- <br> Manage your subscription for the Freeipa-users mailing list:<br> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> Go to <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project<br> </font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">-- May the fox be with you ...<br> /\<br> (~(<br> ) ) /\_/\<br> (_=---_(@ @)<br> ( \ / <br> /|/----\|\ V<br> " " " "<br><br><br></div> </div>