[Freeipa-users] Unable to remove nsTombstone objects

Thu Mar 19 09:06:58 UTC 2015

On 03/18/2015 07:21 PM, Rich Megginson wrote:
> On 03/18/2015 11:07 AM, Kim Perrin wrote:
>> ah, good question. Relevant errors around trying to use the ldif I
>> included to remove replica ID 97 --
>>
>> [18/Mar/2015:04:01:51 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
>> Waiting for all the replicas to receive all the deleted replica
>> updates...
>> [18/Mar/2015:04:01:51 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
>> Sending cleanAllRUV task to all the replicas...
>> [18/Mar/2015:04:01:51 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
>> Cleaning local ruv's...
>> [18/Mar/2015:04:01:51 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
>> Waiting for all the replicas to be cleaned...
>> [18/Mar/2015:04:01:52 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
>> Waiting for all the replicas to finish cleaning...
>> [18/Mar/2015:04:01:52 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
>> Successfully cleaned rid(14).
>> [18/Mar/2015:04:20:18 +0000] - WARNING: can't modify task entry
>> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
>> [18/Mar/2015:04:20:21 +0000] - WARNING: can't modify task entry
>> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
>> [18/Mar/2015:04:20:23 +0000] - WARNING: can't modify task entry
>> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
>> [18/Mar/2015:04:20:23 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
>> Replica id (97) is already being cleaned
>> [18/Mar/2015:04:20:25 +0000] - WARNING: can't modify task entry
>> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
>> [18/Mar/2015:04:20:27 +0000] - WARNING: can't modify task entry
>> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
>> [18/Mar/2015:04:20:29 +0000] - WARNING: can't modify task entry
>> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
>> [18/Mar/2015:04:20:29 +0000] NSMMReplicationPlugin - CleanAllRUV Task:
>> Task failed...(-1)
>> [18/Mar/2015:04:20:31 +0000] - WARNING: can't modify task entry
>> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'; No such object (32)
>> [18/Mar/2015:04:20:31 +0000] - WARNING: can't find task entry
>> 'cn=clean 97,cn=cleanallruv,cn=tasks,cn=config'
>> [18/Mar/2015:04:24:46 +0000] ipa_range_check_pre_op - [file
>> ipa_range_check.c, line 235]: Missing entry to modify.
>
> Not sure what this means.  Anyone?
This is related to a direct MOD operation where the target entry is not 
found. This is logged by ipa-range-check but I am not sure if it reveal 
a real problem.
Would you check that at the same time (2015:04:24:46) there is a MOD 
that returns err=32.

The error reported by CleanAllRUV (Task failed) is strange, would you 
dump the RUV entry 
(nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,o=ipaca) to see if the 
clean up 97 occured ?

thanks
thierry
>
>>
>>
>>
>> On Wed, Mar 18, 2015 at 9:52 AM, Rich Megginson <rmeggins at redhat.com> 
>> wrote:
>>> On 03/18/2015 10:50 AM, Kim Perrin wrote:
>>>> Hi all,
>>>> yesterday I cleared up replication problems on my last standing IPA
>>>> server. So I somewhat feel like I'm coming out of the tunnel. Today I
>>>> want to turn up a replica again. However before doing so I'd like to
>>>> clean out the last remnants of data about all previous replicas.
>>>> I can't figure out the properly formatted ldif to use to remove the
>>>> nsds50ruv and the nsruvReplicaLastModified records in these entries.
>>>> Any guidance on the proper ldif to use would be much appreciated --
>>>> Here is are the tombstone entries -
>>>>
>>>> dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,o=ipaca
>>>> objectClass: top
>>>> objectClass: nsTombstone
>>>> objectClass: extensibleobject
>>>> nsds50ruv: {replicageneration} 5317a449000000600000
>>>> nsds50ruv: {replica 96 ldap://noc1-prd.companyz.com:7389} 
>>>> 5317a455000000
>>>> 600000 550878b9000000600000
>>>> nsds50ruv: {replica 71 ldap://noc2-prd.companyz.com:7389} 
>>>> 531ce018000000
>>>> 470000 531ce069000300470000
>>>> nsds50ruv: {replica 76 ldap://noc4-prd.companyz.com:7389} 
>>>> 531cdde8000000
>>>> 4c0000 53f659500004004c0000
>>>> nsds50ruv: {replica 81 ldap://noc2-prd.companyz.com:7389} 
>>>> 531bf216000000
>>>> 510000 531bf265000100510000
>>>> nsds50ruv: {replica 86 ldap://noc3-prd.companyz.com:7389} 
>>>> 531a3222000000
>>>> 560000 531a3256000400560000
>>>> nsds50ruv: {replica 91 ldap://noc2-prd.companyz.com:7389} 
>>>> 5317f7cf000000
>>>> 5b0000 531949920000005b0000
>>>> nsds50ruv: {replica 97 ldap://util1-prd.companyz.com:7389} 
>>>> 5317a45000000
>>>> 0610000 5317a48a000100610000
>>>> o: ipaca
>>>> nsruvReplicaLastModified: {replica 96 
>>>> ldap://noc1-prd.companyz.com:7389}
>>>>    550878ab
>>>> nsruvReplicaLastModified: {replica 71 
>>>> ldap://noc2-prd.companyz.com:7389}
>>>>    00000000
>>>> nsruvReplicaLastModified: {replica 76 
>>>> ldap://noc4-prd.companyz.com:7389}
>>>>    00000000
>>>> nsruvReplicaLastModified: {replica 81 
>>>> ldap://noc2-prd.companyz.com:7389}
>>>>    00000000
>>>> nsruvReplicaLastModified: {replica 86 
>>>> ldap://noc3-prd.companyz.com:7389}
>>>>    00000000
>>>> nsruvReplicaLastModified: {replica 91 
>>>> ldap://noc2-prd.companyz.com:7389}
>>>>    00000000
>>>> nsruvReplicaLastModified: {replica 97 
>>>> ldap://util1prd.companyz.com:7389}
>>>>    00000000
>>>>
>>>>
>>>>
>>>> Using the following to clean these did NOT work -
>>>>
>>>> dn: cn=clean 97,cn=cleanallruv,cn=tasks,cn=config
>>>> changetype: add
>>>> objectclass: top
>>>> objectclass: extensibleObject
>>>> replica-base-dn: dc=companyz,dc=com
>>>> replica-id: 97
>>>> cn: clean 97
>>>>
>>> Any errors in /var/log/dirsrv/slapd-DOMAIN/errors?
>>>
>>> -- 
>>> Manage your subscription for the Freeipa-users mailing list:
>>> https://www.redhat.com/mailman/listinfo/freeipa-users
>>> Go to http://freeipa.org for more info on the project
>