<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> Dear Ludwig, <div class=""><br class=""> </div> <div class="">Thanks for your help in IRC to guide me in running the right commands.</div> <div class=""><br class=""> </div> <div class="">Here is the output, toto1 and toto2 are CA master, and toto3 and toto4 are non CA master. The problematic replica was toto3, and after re-init, we haven’t seen any errors in the log anymore.</div> <div class=""><br class=""> </div> <div class=""><a href="https://paste.fedoraproject.org/paste/j8c30CZPyh8rPymjbKSvZF5M1UNdIGYhyRLivL9gydE=" class="">https://paste.fedoraproject.org/paste/j8c30CZPyh8rPymjbKSvZF5M1UNdIGYhyRLivL9gydE=</a></div> <div class=""><br class=""> </div> <div class="">I also ran ipa-replica-manage on all replicas to all replicas, so total of 16 command, and found all of them reported “incremental update succeeded”.</div> <div class=""><br class=""> </div> <div class="">As discussed, I’m not sure what I’m looking at with the RUV stuff above, and any explanation for a newcomer to ldap / ds / freeipa would be greatly appreciated.</div> <div class=""><br class=""> </div> <div class="">Thanks a lot for your help!</div> <div class=""><br class=""> </div> <div class="">Kind regards,</div> <div class="">Christophe aka Trefex</div> <div class=""><br class=""> <div> <blockquote type="cite" class=""> <div class="">On 18 May 2017, at 17:04, Christophe TREFOIS <<a href="mailto:christophe.trefois@uni.lu" class="">christophe.trefois@uni.lu</a>> wrote:</div> <br class="Apple-interchange-newline"> <div class=""> <div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> Hi Ludwig, <div class=""><br class=""> </div> <div class="">Since we were scared, we did a full re-init of that specific replica from the CA master, and it looks like the issue is not appearing anymore.</div> <div class=""><br class=""> </div> <div class="">Is this sufficient, or should we still investigate ?</div> <div class=""><br class=""> </div> <div class="">Thanks for your help!</div> <div class="">Christophe<br class=""> <div class=""> <div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> <div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> <div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> <p style="font-family: Arial, sans-serif; font-size: 10pt; line-height: 16px; color: rgb(33, 33, 33);" class=""> <span style="color: rgb(61, 59, 59); display: inline;" class="">-- </span></p> <p style="font-family: Arial, sans-serif; font-size: 10pt; line-height: 16px; color: rgb(33, 33, 33);" class=""> <span style="font-weight: bold; color: rgb(61, 59, 59); display: inline;" class="">Dr Christophe Trefois, Dipl.-Ing.</span><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><span style="display: inline;" class=""></span><br class=""> <span style="color: rgb(61, 59, 59); display: inline; font-size: 7.5pt;" class="">Technical Specialist / Post-Doc</span></p> <p style="font-family: Arial, sans-serif; font-size: 7.5pt; line-height: 16px;" class=""> <span style="font-weight: bold; color: rgb(61, 59, 59); display: inline;" class="">UNIVERSITÉ DU LUXEMBOURG</span><br class=""> <span style="display: inline;" class=""><br class=""> </span><span style="font-weight: bold; color: rgb(61, 59, 59); display: inline;" class="">LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE</span><br class=""> <span style="color: rgb(61, 59, 59); display: inline;" class="">Campus Belval | House of Biomedicine<span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><br class=""> <span class="Apple-converted-space">6, avenue du Swing </span><br class=""> L-4367 Belvaux<span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span></span><br class=""> <span style="color: rgb(61, 59, 59); display: inline;" class="">T:<span class="Apple-converted-space"> </span></span><span style="color: rgb(61, 59, 59); display: inline;" class="">+352 46 66 44 6124</span><span class="Apple-converted-space"> </span><br class=""> <span style="color: rgb(61, 59, 59); display: inline;" class="">F:<span class="Apple-converted-space"> </span></span><span style="color: rgb(61, 59, 59); display: inline;" class="">+352 46 66 44 6949</span><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><span style="display: inline;" class=""><br class=""> </span><a href="http://www.uni.lu/lcsb" style="color: rgb(0, 109, 189); display: inline;" class="">http://www.uni.lu/lcsb</a></p> <p style="font-family: Arial, sans-serif; font-size: 14px; line-height: 16px;" class=""> <a href="https://www.facebook.com/trefex" style="display: inline;" class=""><img width="24" height="24" data-filename="facebook.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/facebook.png" alt="Facebook" class=""></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a href="https://twitter.com/Trefex" style="display: inline;" class=""><img width="24" height="24" data-filename="twitter.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/twitter.png" alt="Twitter" class=""></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a href="https://plus.google.com/+ChristopheTrefois/" style="display: inline;" class=""><img width="24" height="24" data-filename="googleplus.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/googleplus.png" alt="Google Plus" class=""></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a href="https://www.linkedin.com/in/trefoischristophe" style="display: inline;" class=""><img width="24" height="24" data-filename="linkedin.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/linkedin.png" alt="Linkedin" class=""></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a href="http://skype:Trefex?call" style="display: inline;" class=""><img width="24" height="24" data-filename="skype.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/skype.png" alt="skype" class=""></a></p> <div style="font-family: Arial, sans-serif; font-size: 14px; line-height: 16px;" class=""> <br class="webkit-block-placeholder"> </div> <p style="font-family: Arial, sans-serif; color: rgb(61, 59, 59); font-size: 9px; line-height: 16px;" class=""> ----<br class=""> This message is confidential and may contain privileged information.<span class="Apple-converted-space"> </span><br class=""> It is intended for the named recipient only.<span class="Apple-converted-space"> </span><br class=""> If you receive it in error please notify me and permanently delete the original message and any copies.<span class="Apple-converted-space"> </span><br class=""> ----<br class=""> </p> <span class="Apple-converted-space"> </span></div> </div> </div> </div> <br class=""> <div class=""> <blockquote type="cite" class=""> <div class="">On 18 May 2017, at 16:11, Ludwig Krispenz <<a href="mailto:lkrispen@redhat.com" class="">lkrispen@redhat.com</a>> wrote:</div> <br class="Apple-interchange-newline"> <div class=""> <div bgcolor="#FFFFFF" text="#000000" class="">hi,<br class=""> <br class=""> there was a change that in the case of a missing csn ds would not silently use a "close" one and continue, but log an error, backoff and retry - after updates on other masters the staring csn coudl change and replication continue.<br class=""> <br class=""> Now, in your case the csn reported missing: 59095fe1000b00120000<br class=""> has a time stamp from May,3rd, so it could very well be correct that this csn is no longer found in the changelog.<br class=""> <br class=""> To continue analysis, could you provide the replicaids of all your current replicas, and which is the replicaid of the sever logging the change and the ruvs of the replicas from all servers.<br class=""> ldapsearch .... -D "cn=directory manager" .... -b cn=config "objectclass=nsds5replica" nsds50ruv<br class=""> <br class=""> Regards,<br class=""> Ludwig<br class=""> <br class=""> <div class="moz-cite-prefix">On 05/18/2017 03:09 PM, Christophe TREFOIS wrote:<br class=""> </div> <blockquote cite="mid:522A7500-1BA1-434A-BAAB-B1C1C0EB524B@uni.lu" type="cite" class=""> <meta http-equiv="Context-Type" content="text/html; charset=utf-8" class=""> <div class="">Hi all,</div> <div class=""><br class=""> </div> <div class="">Did a yum update on one of my replicas, non CA master, and upgrade was successful (ipupgrade.log) said so. </div> <div class=""><br class=""> </div> <div class=""><br class=""> </div> <div class="">Hwoever, now every few seconds I get the following message. <a moz-do-not-send="true" href="https://paste.fedoraproject.org/paste/wS4x9KvD3EB0gv2HAsj6X15M1UNdIGYhyRLivL9gydE=" class=""> https://paste.fedoraproject.org/paste/wS4x9KvD3EB0gv2HAsj6X15M1UNdIGYhyRLivL9gydE=</a></div> <div class=""><br class=""> </div> <div class="">Does anybody know how to proceed and if this is important?</div> <div class="">ipa-replica-manage says, backing off, retrying later, so not sure if replication happens successfully or not and what to do ??</div> <div class=""><br class=""> </div> <div class="">Setup: CentOS 7.3 all up-to-date, 2 CA master, 2 non CA master in diamond replication.</div> <div class=""><br class=""> </div> <div class="">Remaining replicas were upgraded today as well, and don’t seem to complain. Only 1 of them complains.</div> <div class=""><br class=""> </div> <div class="">389-ds-base-libs-1.3.5.10-20.el7_3.x86_64</div> <div class="">389-ds-base-1.3.5.10-20.el7_3.x86_64</div> <div class=""><br class=""> </div> <div class=""><br class=""> </div> <div class=""> <div class="">[root@lums3 ~]# rpm -qa | grep ipa</div> <div class="">libipa_hbac-1.14.0-43.el7_3.14.x86_64</div> <div class="">python-iniparse-0.4-9.el7.noarch</div> <div class="">ipa-admintools-4.4.0-14.el7.centos.7.noarch</div> <div class="">python2-ipaserver-4.4.0-14.el7.centos.7.noarch</div> <div class="">python2-ipalib-4.4.0-14.el7.centos.7.noarch</div> <div class="">sssd-ipa-1.14.0-43.el7_3.14.x86_64</div> <div class="">python-ipaddress-1.0.16-2.el7.noarch</div> <div class="">python2-ipaclient-4.4.0-14.el7.centos.7.noarch</div> <div class="">ipa-server-common-4.4.0-14.el7.centos.7.noarch</div> <div class="">ipa-client-common-4.4.0-14.el7.centos.7.noarch</div> <div class="">ipa-client-4.4.0-14.el7.centos.7.x86_64</div> <div class="">ipa-common-4.4.0-14.el7.centos.7.noarch</div> <div class="">python-libipa_hbac-1.14.0-43.el7_3.14.x86_64</div> <div class="">ipa-server-4.4.0-14.el7.centos.7.x86_64</div> </div> <div class=""><br class=""> </div> <div class="">Thanks a lot for any pointers,</div> <div class="">Christophe </div> <div class=""> <div class=""> <div class=""> <div class=""> <p class=""><span class="">-- </span></p> <p class=""><span class="">Dr Christophe Trefois, Dipl.-Ing.</span><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><span class=""></span><br class=""> <span class="">Technical Specialist / Post-Doc</span></p> <p class=""><span class="">UNIVERSITÉ DU LUXEMBOURG</span><br class=""> <span class=""><br class=""> </span><span class="">LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE</span><br class=""> <span class="">Campus Belval | House of Biomedicine<span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><br class=""> <span class="Apple-converted-space">6, avenue du Swing </span><br class=""> L-4367 Belvaux<span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span></span><br class=""> <span class="">T:<span class="Apple-converted-space"> </span></span><span class="">+352 46 66 44 6124</span><span class="Apple-converted-space"> </span><br class=""> <span class="">F:<span class="Apple-converted-space"> </span></span><span class="">+352 46 66 44 6949</span><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><span class=""><br class=""> </span><a moz-do-not-send="true" href="http://www.uni.lu/lcsb" class="">http://www.uni.lu/lcsb</a></p> <p class=""><a moz-do-not-send="true" href="https://www.facebook.com/trefex" class=""><img moz-do-not-send="true" data-filename="facebook.png" alt="Facebook" class="" height="24" width="24"></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a moz-do-not-send="true" href="https://twitter.com/Trefex" class=""><img moz-do-not-send="true" data-filename="twitter.png" alt="Twitter" class="" height="24" width="24"></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a moz-do-not-send="true" href="https://plus.google.com/+ChristopheTrefois/" class=""><img moz-do-not-send="true" data-filename="googleplus.png" alt="Google Plus" class="" height="24" width="24"></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a moz-do-not-send="true" href="https://www.linkedin.com/in/trefoischristophe" class=""><img moz-do-not-send="true" data-filename="linkedin.png" alt="Linkedin" class="" height="24" width="24"></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a moz-do-not-send="true" class=""><img moz-do-not-send="true" data-filename="skype.png" alt="skype" class="" height="24" width="24"></a></p> <div class=""><br class="webkit-block-placeholder"> </div> <p class="">----<br class=""> This message is confidential and may contain privileged information.<span class="Apple-converted-space"> </span><br class=""> It is intended for the named recipient only.<span class="Apple-converted-space"> </span><br class=""> If you receive it in error please notify me and permanently delete the original message and any copies.<span class="Apple-converted-space"> </span><br class=""> ----<br class=""> </p> <span class="Apple-converted-space"> </span></div> </div> </div> </div> <br class=""> <br class=""> <fieldset class="mimeAttachmentHeader"></fieldset> <br class=""> </blockquote> <br class=""> <pre class="moz-signature" cols="72">-- Red Hat GmbH, <a class="moz-txt-link-freetext" href="http://www.de.redhat.com/">http://www.de.redhat.com/</a>, Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243, Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric Shander</pre> </div> -- <br class=""> Manage your subscription for the Freeipa-users mailing list:<br class=""> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" class="">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br class=""> Go to <a href="http://freeipa.org" class="">http://freeipa.org</a> for more info on the project</div> </blockquote> </div> <br class=""> </div> </div> -- <br class=""> Manage your subscription for the Freeipa-users mailing list:<br class=""> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" class="">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br class=""> Go to http://freeipa.org for more info on the project</div> </blockquote> </div> <br class=""> </div> </body> </html>