[Freeipa-users] Replicas in a state of confusion

Thu Feb 16 00:22:59 UTC 2012

On 02/10/2012 01:00 PM, Ian Levesque wrote:
> On Feb 10, 2012, at 1:36 PM, Rich Megginson wrote:
>
>>>>> This may be related to https://fedorahosted.org/389/ticket/273 and
>>>>> https://fedorahosted.org/389/ticket/274 which have been fixed in
>>>>> 1.2.10
>>>> In this case Ian please open a bugzilla, it looks like we need to
>>>> address this in RHEL6.
>>> I'll confess that I don't fully understand what tombstone is... Regardless, I'm not sure that either of those tickets apply to the issue at hand. As I understand it, Ticket 273 outlines an issue with searching for tombstone entries after successfully setting up a replica (which as far as I'm hearing, we haven't done). And ticket 274 concerns indexing the tombstone entries. I am able to search for tombstone entries (http://pastebin.com/raw.php?i=a4ytYZvt) and don't see the errors specified in ticket 274.
>> in 1.2.9.9 the ruv tombstone entry was indexed correctly, so that's why you see it.
>>
>> For ticket 274, you would only see those errors if you actually attempt to reindex the entryrdn index.
>>
>>> That said, perhaps there's some bug with tombstone re: the automountmap entries in my LDAP instance. Do you think that would be sufficient to cause the replication issues I'm seeing?
>> It could be.  Taken together, both of those tickets resolve problems with tombstone indexes.  At any rate, I would like to know if you can reproduce your issues with 1.2.10.rc1
>>
>> To confirm, the first step would be to examine your entryrdn index to see what the problematic entries look like e.g.
>>
>> dbscan -f /var/lib/dirsrv/slapd-DOMAIN/db/userRoot/entryrdn.db4 | grep -C 2 automountmapname=auto.direct
> Here's the output from the primary:
>
> 139:cn=global_policy
>    ID: 139; RDN: "cn=global_policy"; NRDN: "cn=global_policy"
> 13:nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct
>    ID: 13; RDN: "nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct"; NRDN: "nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct"
> 141:krbprincipalname=ldap/sbgrid-directory.in.hwlab at sbgrid.org
>    ID: 141; RDN: "krbprincipalname=ldap/sbgrid-directory.in.hwlab at SBGRID.ORG"; NRDN: "krbprincipalname=ldap/sbgrid-directory.in.hwlab at sbgrid.org"
> --
> 450:nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master
>    ID: 450; RDN: "nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master"; NRDN: "nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master"
> 451:nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct
>    ID: 451; RDN: "nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct"; NRDN: "nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct"
> 452:nsuniqueid=61a1ff04-370b11e1-80c28103-f403dc04,description=/- auto.direct
>    ID: 452; RDN: "nsuniqueid=61a1ff04-370b11e1-80c28103-f403dc04,description=/- auto.direct"; NRDN: "nsuniqueid=61a1ff04-370b11e1-80c28103-f403dc04,description=/- auto.direct"
> --
> 466:automountmapname=auto.master
>    ID: 466; RDN: "automountmapname=auto.master"; NRDN: "automountmapname=auto.master"
> 467:automountmapname=auto.direct
>    ID: 467; RDN: "automountmapname=auto.direct"; NRDN: "automountmapname=auto.direct"
> 468:description=/- auto.direct
>    ID: 468; RDN: "description=/- auto.direct"; NRDN: "description=/- auto.direct"
> --
>    ID: 12; RDN: "nsuniqueid=3c37a106-eadf11e0-b9798103-f403dc04,automountmapname=auto.master"; NRDN: "nsuniqueid=3c37a106-eadf11e0-b9798103-f403dc04,automountmapname=auto.master"
> C11:cn=default
>    ID: 13; RDN: "nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct"; NRDN: "nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct"
> C11:cn=default
>    ID: 261; RDN: "nsuniqueid=ee37db01-ee0511e0-b8f78103-f403dc04,automountMapName=auto_master"; NRDN: "nsuniqueid=ee37db01-ee0511e0-b8f78103-f403dc04,automountmapname=auto_master"
> --
>    ID: 450; RDN: "nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master"; NRDN: "nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master"
> C449:cn=test
>    ID: 451; RDN: "nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct"; NRDN: "nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct"
> C449:cn=test
>    ID: 456; RDN: "nsuniqueid=7bdfdb01-371311e1-80c28103-f403dc04,automountmapname=auto_nfs"; NRDN: "nsuniqueid=7bdfdb01-371311e1-80c28103-f403dc04,automountmapname=auto_nfs"
> --
>    ID: 464; RDN: "nsuniqueid=bdbd5105-371411e1-80c28103-f403dc04,description=home"; NRDN: "nsuniqueid=bdbd5105-371411e1-80c28103-f403dc04,description=home"
> C465:cn=default
>    ID: 467; RDN: "automountmapname=auto.direct"; NRDN: "automountmapname=auto.direct"
> C465:cn=default
>    ID: 466; RDN: "automountmapname=auto.master"; NRDN: "automountmapname=auto.master"
> --
> P139:cn=global_policy
>    ID: 132; RDN: "cn=SBGRID.ORG"; NRDN: "cn=sbgrid.org"
> P13:nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct
>    ID: 11; RDN: "cn=default"; NRDN: "cn=default"
> P141:krbprincipalname=ldap/sbgrid-directory.in.hwlab at sbgrid.org
> --
> P450:nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master
>    ID: 449; RDN: "cn=test"; NRDN: "cn=test"
> P451:nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct
>    ID: 449; RDN: "cn=test"; NRDN: "cn=test"
> P452:nsuniqueid=61a1ff04-370b11e1-80c28103-f403dc04,description=/- auto.direct
> --
> P466:automountmapname=auto.master
>    ID: 465; RDN: "cn=default"; NRDN: "cn=default"
> P467:automountmapname=auto.direct
>    ID: 465; RDN: "cn=default"; NRDN: "cn=default"
> P468:description=/- auto.direct
>
>
> The secondary replica doesn't have the same entries:
>
> 253:automountmapname=auto.master
>    ID: 253; RDN: "automountmapname=auto.master"; NRDN: "automountmapname=auto.master"
> 254:automountmapname=auto.direct
>    ID: 254; RDN: "automountmapname=auto.direct"; NRDN: "automountmapname=auto.direct"
> 255:description=/- auto.direct
>    ID: 255; RDN: "description=/- auto.direct"; NRDN: "description=/- auto.direct"
> --
>    ID: 25; RDN: "cn=posix-ids"; NRDN: "cn=posix-ids"
> C252:cn=default
>    ID: 254; RDN: "automountmapname=auto.direct"; NRDN: "automountmapname=auto.direct"
> C252:cn=default
>    ID: 253; RDN: "automountmapname=auto.master"; NRDN: "automountmapname=auto.master"
> --
> P253:automountmapname=auto.master
>    ID: 252; RDN: "cn=default"; NRDN: "cn=default"
> P254:automountmapname=auto.direct
>    ID: 252; RDN: "cn=default"; NRDN: "cn=default"
> P255:description=/- auto.direct
>
Sorry for not getting back to you sooner.  I can't say for sure, but it 
does look like you are running into some of the tombstone issues we have 
fixed in 1.2.10.1-1 (now in updates-testing)
In addition, if you are getting this:
NSMMReplicationPlugin - repl_set_mtn_referrals: could not set referrals 
for replica - err 20 <https://fedorahosted.org/389/ticket/282>
https://fedorahosted.org/389/ticket/282
You may have deleted and re-added replicas - in that case, you may want 
to follow the cleanruv procedure here - 
http://directory.fedoraproject.org/wiki/Howto:CLEANRUV
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120215/6a9d7802/attachment.htm>