[Freeipa-users] multi-master replication

[Craig White]

From: freeipa-users-bounces at redhat.com [mailto:freeipa-users-bounces at redhat.com] On Behalf Of Rich Megginson
Sent: Monday, October 27, 2014 1:39 PM
To: freeipa-users at redhat.com
Subject: Re: [Freeipa-users] multi-master replication

On 10/27/2014 12:41 PM, Craig White wrote:
From: freeipa-users-bounces at redhat.com<mailto:freeipa-users-bounces at redhat.com> [mailto:freeipa-users-bounces at redhat.com] On Behalf Of Dmitri Pal
Sent: Monday, October 27, 2014 11:22 AM
To: freeipa-users at redhat.com<mailto:freeipa-users at redhat.com>
Subject: Re: [Freeipa-users] multi-master replication

On 10/27/2014 01:41 PM, Craig White wrote:
Maybe fixed - seems to be replicating now...

https://bugzilla.redhat.com/show_bug.cgi?id=953653

Why don't they incorporate that into the released RHEL version?

I think we did. Into 7.0.

What was the fix?  In 389-ds-base we increased the default sasl buffer size from 2k to 64k.  Did IPA in 7.0 increase the default sasl buffer size to 256k?

What did you do to fix the problem?  Did you increase the sasl buffer size to be > 64k?

If you feel this should be fixed in RHEL 6.x, please file a bug against RHEL 6.x and/or open a support ticket.  But if the problem is that the default sasl buffer size setting is too low, then the real problem is - what should the default size be?  Maybe 256k won't be enough for all users?  Should we make the default 500k?  1Mb?
----
# cat buffer-size.ldif
dn: cn=config
changetype: modify
replace: nsslapd-sasl-max-buffer-size
nsslapd-sasl-max-buffer-size: 262144

it may not be enough but it was enough to allow the replica to send data back to the master which solved my immediate problem.

I will file a bug against RHEL 6 when I get a chance to breath later this week.

Craig

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141027/dedfa918/attachment.htm>