<div dir="ltr">This tool cannot clear undecoded RUVs, I had sucess only with <a href="http://cleanallruv.pl">cleanallruv.pl</a> script. Btw anybody know about some IDM training in Europe (RedHat/FreeIPA) ?<div><br></div><div>Vasek</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, May 6, 2015 at 8:22 AM, Martin Kosek <span dir="ltr"><<a href="mailto:mkosek@redhat.com" target="_blank">mkosek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On 05/05/2015 04:49 PM, Mark Reynolds wrote:<br> ><br> ><br> > On 05/05/2015 07:49 AM, Ludwig Krispenz wrote:<br> >><br> >> On 05/05/2015 01:27 PM, Martin Kosek wrote:<br> >>> On 05/05/2015 12:38 PM, Vaclav Adamec wrote:<br> >>>> Hi,<br> >>>> I tried migrate to newest version IPA, but result is quite unstable and<br> >>>> removing old replicas ends with RUV which cannot be decoded (it stucked in<br> >>>> queue forever):<br> >>>><br> >>>> ipa-replica-manage del <a href="http://ipa-master-dmz002.test.com" target="_blank">ipa-master-dmz002.test.com</a> -fc<br> >>>> Cleaning a master is irreversible.<br> >>>> This should not normally be require, so use cautiously.<br> >>>> Continue to clean master? [no]: yes<br> >>>><br> >>>> ipa-replica-manage list-ruv<br> >>>> unable to decode: {replica 8} 55091239000400080000 55091239000400080000<br> >>>> unable to decode: {replica 7} 552f84cd000300070000 552f84cd000300070000<br> >>>> unable to decode: {replica 11} 551a42f70000000b0000 551aa3140001000b0000<br> >>>> unable to decode: {replica 15} 551e82e10001000f0000 551e82e10001000f0000<br> >>>> unable to decode: {replica 14} 551e82ec0001000e0000 551e82ec0001000e0000<br> >>>> unable to decode: {replica 20} 552f4b72000600140000 552f4b72000600140000<br> >>>> unable to decode: {replica 10} 551a25af0001000a0000 551a25af0001000a0000<br> >>>> unable to decode: {replica 3} 551e864c000300030000 551e864c000300030000<br> >>>> unable to decode: {replica 5} 55083ad2000300050000 55083ad2000300050000<br> >>>> unable to decode: {replica 9} 550913e7000000090000 550913e7000000090000<br> >>>> unable to decode: {replica 19} 55210193000300130000 55210193000300130000<br> >>>> unable to decode: {replica 12} 551a48290000000c0000 551a48c50000000c0000<br> >>>> <a href="http://ipa-master-dmz001.test.com:389" target="_blank">ipa-master-dmz001.test.com:389</a>: 25<br> >>>> <a href="http://ipa-master-dmz002.test.com:389" target="_blank">ipa-master-dmz002.test.com:389</a>: 21<br> >>>><br> >>>> it is possible to clear this queue and leave only valid servers ?<br> >>>><br> >>>> Thanks in advance<br> >>>><br> >>>> ipa-client-4.1.0-18.el7_1.3.x86_64<br> >>>> ipa-server-4.1.0-18.el7_1.3.x86_64<br> >>> Ludwig or Thierry, do you know? The questions about RUV cleaning seems to be<br> >>> recurring, I suspect there will be a pattern (bug) and not just configuration<br> >>> issue.<br> >> we have seen this in a recent thread, and it is clear that the RUV is<br> >> corrupted and cannot be decoded, but we don't have a scenario how this is<br> >> state is reached.<br> > The cleaning task (cleanAllRUV) can remove these invalid replica RUVs (RUV's<br> > missing the ldap URL). To reproduce these "invalid" RUV's it requires<br> > replication being disabled and re-enabled with a different replica id.<br> ><br> > To manually clean these invalid RUV elements, outside of using the IPA CLI, you<br> > can directly issue the cleanAllRUV task to the Directory Server using ldapmodify:<br> ><br> > # ldapmodify -D "cn=directory manager" -W -a<br> > dn: cn=clean 8, cn=cleanallruv, cn=tasks, cn=config<br> > objectclass: extensibleObject<br> > replica-base-dn: dc=example,dc=com<br> > replica-id: 8<br> > cn: clean 8<br> ><br> > Run these one at a time, as there is a current limit of running 4 concurrent<br> > tasks. It is best to monitor the Directory Server errors log, or search on the<br> > task entry itself, to see when it has finished before firing off the next task.<br> ><br> > For more on using cleanAllRUV see:<br> ><br> > <a href="http://www.port389.org/docs/389ds/howto/howto-cleanruv.html#cleanallruv" target="_blank">http://www.port389.org/docs/389ds/howto/howto-cleanruv.html#cleanallruv</a><br> > <a href="http://www.port389.org/docs/389ds/design/cleanallruv-design.html" target="_blank">http://www.port389.org/docs/389ds/design/cleanallruv-design.html</a><br> ><br> > Regards,<br> > Mark<br> <br> </div></div>Just for the record, ipa-replica-manage has a CLI for the CleanAllRUV task<br> management:<br> <br> # man ipa-replica-manage<br> ...<br> list-ruv<br> - List the replication IDs on this server.<br> <br> clean-ruv [REPLICATION_ID]<br> - Run the CLEANALLRUV task to remove a replication ID.<br> <br> abort-clean-ruv [REPLICATION_ID]<br> - Abort a running CLEANALLRUV task.<br> <br> list-clean-ruv<br> - List all running CLEANALLRUV and abort CLEANALLRUV tasks.<br> ...<br> <div class="HOEnZb"><div class="h5"><br> --<br> Manage your subscription for the Freeipa-users mailing list:<br> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> Go to <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project<br> </div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">-- May the fox be with you ...<br> /\<br> (~(<br> ) ) /\_/\<br> (_=---_(@ @)<br> ( \ / <br> /|/----\|\ V<br> " " " "<br><br><br></div> </div>