[Freeipa-users] WG: Re: Haunted servers?

[Ludwig Krispenz]

Hi,
On 06/22/2015 09:48 AM, Christoph Kaminski wrote:
> >
> > from an earlier post it looks like they are from the o=ipaca
> > backend, did you clean the ruvs there ?
>
> we have only done a 'normal' cleanruv... How can I clean them there?
either you try the cleanallruv:

# ldapmodify -D "cn=directory manager" -W -a
dn: cn=clean 8, cn=cleanallruv, cn=tasks, cn=config
objectclass: extensibleObject
replica-base-dn:*o=ipaca*
replica-id: 8
cn: clean 8

you have to set the replicabase dn.

or, if you want to go to the method of running cleanruv individually on all servers you have to use the dn of the ipaca replica:

 > dn: cn=replica,cn=*o**\3Dipaca*,cn=mapping tree,cn=config
 > changetype: modify
 > replace: nsds5task
 > nsds5task:CLEANRUV11
>
> >
> > to know which are the correct current rids for this backend you
> > could do on each active server a search for
> > ... -b "cn=config" "(&(objectclass=nsds5replica)(
> > nsDS5ReplicaRoot=o=ipaca))"  nsDS5ReplicaId
> >
> > then you could search
> >
> > ldapsearch -h <hostname> -D "cn=Directory Manager" -W -b "o=ipaca"
> > "(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-
> > ffffffff))"
> > to see what you have in the ruv and eventually clean them
>
> > On 06/19/2015 01:48 PM, Christoph Kaminski wrote:
> > Ludwig Krispenz <lkrispen at redhat.com> schrieb am 19.06.2015 13:23:43:
> >
> > >
> > > > the first search is for the replication agreements and they keep
> > > > info about the consumer ruv, used in replication session. you cannot
> > > > modify these, but they are maintained in the dse.ldif, you could
> > > > edit the dse.ldif when the server is stopped.
> > >
> > > big thx, we try it and I let you know if it works!
> > >
> >
>
> Greetz
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150622/197b01b4/attachment.htm>