[Freeipa-users] Unable to remove nsTombstone objects

[Rich Megginson]

On 03/18/2015 11:07 AM, Kim Perrin wrote:
> ah, good question. Relevant errors around trying to use the ldif I
> included to remove replica ID 97 --
>
> [18/Mar/2015:04:01:51 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
> Waiting for all the replicas to receive all the deleted replica
> updates...
> [18/Mar/2015:04:01:51 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
> Sending cleanAllRUV task to all the replicas...
> [18/Mar/2015:04:01:51 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
> Cleaning local ruv's...
> [18/Mar/2015:04:01:51 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
> Waiting for all the replicas to be cleaned...
> [18/Mar/2015:04:01:52 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
> Waiting for all the replicas to finish cleaning...
> [18/Mar/2015:04:01:52 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
> Successfully cleaned rid(14).
> [18/Mar/2015:04:20:18 +0000] - WARNING: can't modify task entry
> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
> [18/Mar/2015:04:20:21 +0000] - WARNING: can't modify task entry
> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
> [18/Mar/2015:04:20:23 +0000] - WARNING: can't modify task entry
> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
> [18/Mar/2015:04:20:23 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
> Replica id (97) is already being cleaned
> [18/Mar/2015:04:20:25 +0000] - WARNING: can't modify task entry
> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
> [18/Mar/2015:04:20:27 +0000] - WARNING: can't modify task entry
> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
> [18/Mar/2015:04:20:29 +0000] - WARNING: can't modify task entry
> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
> [18/Mar/2015:04:20:29 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
> Task failed...(-1)
> [18/Mar/2015:04:20:31 +0000] - WARNING: can't modify task entry
> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
> [18/Mar/2015:04:20:31 +0000] - WARNING: can't find task entry
> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'
> [18/Mar/2015:04:24:46 +0000] ipa_range_check_pre_op - [file
> ipa_range_check.c, line 235]: Missing entry to modify.

Not sure what this means.  Anyone?

>
>
>
> On Wed, Mar 18, 2015 at 9:52 AM, Rich Megginson <rmeggins at redhat.com> wrote:
>> On 03/18/2015 10:50 AM, Kim Perrin wrote:
>>> Hi all,
>>> yesterday I cleared up replication problems on my last standing IPA
>>> server. So I somewhat feel like I'm coming out of the tunnel. Today I
>>> want to turn up a replica again. However before doing so I'd like to
>>> clean out the last remnants of data about all previous replicas.
>>> I can't figure out the properly formatted ldif to use to remove the
>>> nsds50ruv and the nsruvReplicaLastModified records in these entries.
>>> Any guidance on the proper ldif to use would be much appreciated --
>>> Here is are the tombstone entries -
>>>
>>> dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,o=ipaca
>>> objectClass: top
>>> objectClass: nsTombstone
>>> objectClass: extensibleobject
>>> nsds50ruv: {replicageneration} 5317a449000000600000
>>> nsds50ruv: {replica 96 ldap://noc1-prd.companyz.com:7389} 5317a455000000
>>> 600000 550878b9000000600000
>>> nsds50ruv: {replica 71 ldap://noc2-prd.companyz.com:7389} 531ce018000000
>>> 470000 531ce069000300470000
>>> nsds50ruv: {replica 76 ldap://noc4-prd.companyz.com:7389} 531cdde8000000
>>> 4c0000 53f659500004004c0000
>>> nsds50ruv: {replica 81 ldap://noc2-prd.companyz.com:7389} 531bf216000000
>>> 510000 531bf265000100510000
>>> nsds50ruv: {replica 86 ldap://noc3-prd.companyz.com:7389} 531a3222000000
>>> 560000 531a3256000400560000
>>> nsds50ruv: {replica 91 ldap://noc2-prd.companyz.com:7389} 5317f7cf000000
>>> 5b0000 531949920000005b0000
>>> nsds50ruv: {replica 97 ldap://util1-prd.companyz.com:7389} 5317a45000000
>>> 0610000 5317a48a000100610000
>>> o: ipaca
>>> nsruvReplicaLastModified: {replica 96 ldap://noc1-prd.companyz.com:7389}
>>>    550878ab
>>> nsruvReplicaLastModified: {replica 71 ldap://noc2-prd.companyz.com:7389}
>>>    00000000
>>> nsruvReplicaLastModified: {replica 76 ldap://noc4-prd.companyz.com:7389}
>>>    00000000
>>> nsruvReplicaLastModified: {replica 81 ldap://noc2-prd.companyz.com:7389}
>>>    00000000
>>> nsruvReplicaLastModified: {replica 86 ldap://noc3-prd.companyz.com:7389}
>>>    00000000
>>> nsruvReplicaLastModified: {replica 91 ldap://noc2-prd.companyz.com:7389}
>>>    00000000
>>> nsruvReplicaLastModified: {replica 97 ldap://util1prd.companyz.com:7389}
>>>    00000000
>>>
>>>
>>>
>>> Using the following to clean these did NOT work -
>>>
>>> dn: cn=clean 97,cn=cleanallruv,cn=tasks,cn=config
>>> changetype: add
>>> objectclass: top
>>> objectclass: extensibleObject
>>> replica-base-dn: dc=companyz,dc=com
>>> replica-id: 97
>>> cn: clean 97
>>>
>> Any errors in /var/log/dirsrv/slapd-DOMAIN/errors?
>>
>> --
>> Manage your subscription for the Freeipa-users mailing list:
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>> Go to http://freeipa.org for more info on the project