[Freeipa-users] ipa-replica-manage re-initialize and database size

[Dominik Korittki]

Hello all,

I am running two ipa3.3.3 instances in a replication on Centos 7 servers.
Last day the rootpartition went full (where the dirsrv databases are stored), because of a big changelog-db.
dirsrv managed to do a graceful shutdown. Luckily, the second master was still working properly, so i could recover the first one from it.

I resized the partition, booted up again and ran
'ipa-replica-manage re-initialize --from ipa02.internal'

Everything seemed to ran fine except for one warnig regarding an issue with the changelog db, heres the log portion of the log /var/log/dirsrv/slapd-INTERNAL/errors on recieving (first) IPA master:
[...]
[23/Apr/2015:10:41:46 +0200] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=internal is going offline; disabling replication
[23/Apr/2015:10:41:47 +0200] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[23/Apr/2015:10:41:55 +0200] - import userRoot: Workers finished; cleaning up...
[23/Apr/2015:10:41:55 +0200] - import userRoot: Workers cleaned up.
[23/Apr/2015:10:41:55 +0200] - import userRoot: Indexing complete.  Post-processing...
[23/Apr/2015:10:41:55 +0200] - import userRoot: Generating numSubordinates complete.
[23/Apr/2015:10:41:55 +0200] - import userRoot: Flushing caches...
[23/Apr/2015:10:41:55 +0200] - import userRoot: Closing files...
[23/Apr/2015:10:41:55 +0200] - import userRoot: Import complete.  Processed 9983 entries in 8 seconds. (1247.88 entries/sec)
[23/Apr/2015:10:41:55 +0200] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=internal is coming online; enabling replication
[23/Apr/2015:10:41:55 +0200] NSMMReplicationPlugin - replica_reload_ruv: Warning: new data for replica dc=internal does not match the data in the changelog.
 Recreating the changelog file. This could affect replication with replica's  consumers in which case the consumers should be reinitialized.
[...]

I am no expert in LDAP or Directory Server, but i noticed a significant size difference of files in /var/lib/dirsrv/slapd-INTERNAL/cldb/:
root at ipa01:~ > du -sch /var/lib/dirsrv/slapd-INTERNAL/cldb/*
0    /var/lib/dirsrv/slapd-INTERNAL/cldb/61e65983-718611e4-8059dc1c-48160578.sema
24M    /var/lib/dirsrv/slapd-INTERNAL/cldb/61e65983-718611e4-8059dc1c-48160578_546f4515000000040000.db
0    /var/lib/dirsrv/slapd-INTERNAL/cldb/9b310907-74a711e4-8059dc1c-48160578.sema
6,8M    /var/lib/dirsrv/slapd-INTERNAL/cldb/9b310907-74a711e4-8059dc1c-48160578_54748540000000600000.db
4,0K    /var/lib/dirsrv/slapd-INTERNAL/cldb/DBVERSION
30M    total

root at ipa02:/var/log > du -sch /var/lib/dirsrv/slapd-INTERNAL/cldb/*
0    /var/lib/dirsrv/slapd-INTERNAL/cldb/98ceaf89-74a711e4-910b9512-1512b1dc.sema
4,7G    /var/lib/dirsrv/slapd-INTERNAL/cldb/98ceaf89-74a711e4-910b9512-1512b1dc_546f4515000000040000.db
0    /var/lib/dirsrv/slapd-INTERNAL/cldb/9cfacd4b-74a711e4-910b9512-1512b1dc.sema
3,7M    /var/lib/dirsrv/slapd-INTERNAL/cldb/9cfacd4b-74a711e4-910b9512-1512b1dc_54748540000000600000.db
4,0K    /var/lib/dirsrv/slapd-INTERNAL/cldb/DBVERSION
4,7G    total


Also, i noticed a difference in the actual database size on both servers:
root at ipa01:~ > du -sch /var/lib/dirsrv/slapd-INTERNAL/db/*
4,0K    /var/lib/dirsrv/slapd-INTERNAL/db/DBVERSION
1,3M    /var/lib/dirsrv/slapd-INTERNAL/db/__db.001
544K    /var/lib/dirsrv/slapd-INTERNAL/db/__db.002
9,6M    /var/lib/dirsrv/slapd-INTERNAL/db/__db.003
1,4M    /var/lib/dirsrv/slapd-INTERNAL/db/ipaca
2,2M    /var/lib/dirsrv/slapd-INTERNAL/db/log.0000124384
101M    /var/lib/dirsrv/slapd-INTERNAL/db/userRoot
115M    total

root at ipa02:/var/log > du -sch /var/lib/dirsrv/slapd-INTERNAL/db/*
4,0K    /var/lib/dirsrv/slapd-INTERNAL/db/DBVERSION
1,7M    /var/lib/dirsrv/slapd-INTERNAL/db/__db.001
544K    /var/lib/dirsrv/slapd-INTERNAL/db/__db.002
9,6M    /var/lib/dirsrv/slapd-INTERNAL/db/__db.003
1,3M    /var/lib/dirsrv/slapd-INTERNAL/db/ipaca
4,3M    /var/lib/dirsrv/slapd-INTERNAL/db/log.0000074356
175M    /var/lib/dirsrv/slapd-INTERNAL/db/userRoot
193M    total

Besides from that, everything seems to be working fine again, including the replication. No errors or warnings regarding this issue are stated in dirsrv-logs. So I'm a bit confused right know wether to believe everything worked fine or not.
Is this behaviour of IPA/Directory Server normal? Many thanks in advance!


Greetings and a nice day,
Dominik Korittki
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150424/ba3a8b9c/attachment.htm>