[Freeipa-users] Fwd: Re: IPA RUV unable to decode

[Ludwig Krispenz]

let's keep the info on the list, more peple more ideas

-------- Original Message --------
Subject: 	Re: [Freeipa-users] IPA RUV unable to decode
Date: 	Tue, 5 May 2015 18:32:15 +0200
From: 	Vaclav Adamec <vaclav.adamec at suchy-zleb.cz>
To: 	Ludwig Krispenz <lkrispen at redhat.com>



master:
ipa-replica-manage del <replica_server> -fc
ipa-replica-prepare ... + copy gpg

replicas:
ipa-server-install --uninstall
ipa-replica-install ...

one by one on all replicas (1 CA master and 5 replicas which are also 
set in DNS as SRV records). Plus whole the time there was script/job 
which register clients (ipa-client-install --uninstall + 
ipa-client-install ... --force-join ....  different active replica 
servers - via DNS). Seems that I have some issue with replica itself, it 
seems to work, but when it's loaded with such "heavy" operation replica 
servers goes down (dir process died) even master itself went down with 
minor codes errs in log.


On Tue, May 5, 2015 at 3:25 PM, Ludwig Krispenz <lkrispen at redhat.com 
<mailto:lkrispen at redhat.com>> wrote:


    On 05/05/2015 02:24 PM, Vaclav Adamec wrote:
>     For me it was quite easy to reached this state, I just setup
>     replica on 6 servers (two datacenters, with ~15ms latency, same
>     stable ntp source), run test scripts which add/verify random
>     account, add/remove hosts (unregister seems to be "heaviest"
>     operation to replicas). During these tests I removed some remove
>     servers from replica and try to add them back,
    what exactly did you do:
    ipa-server-install --uninstall
    ipa-server-install ?
    any other commands ?

>     result is like this. Seems that with higher load it happens more
>     often (register/unregister multiple servers, with actual setup it
>     is about 10 new registration in same time to different replica
>     servers), also sometimes I got replication conflicts or dir
>     service complete failure (dirsrv down, started with gssapi minor
>     code error). But even If I stop tests queue is not freed, RUV
>     still there (old replicas).
>
>     On Tue, May 5, 2015 at 1:49 PM, Ludwig Krispenz
>     <lkrispen at redhat.com <mailto:lkrispen at redhat.com>> wrote:
>
>
>         On 05/05/2015 01:27 PM, Martin Kosek wrote:
>
>             On 05/05/2015 12:38 PM, Vaclav Adamec wrote:
>
>                 Hi,
>                   I tried migrate to newest version IPA, but result is
>                 quite unstable and
>                 removing old replicas ends with RUV which cannot be
>                 decoded (it stucked in
>                 queue forever):
>
>                 ipa-replica-manage del ipa-master-dmz002.test.com
>                 <http://ipa-master-dmz002.test.com> -fc
>                 Cleaning a master is irreversible.
>                 This should not normally be require, so use cautiously.
>                 Continue to clean master? [no]: yes
>
>                 ipa-replica-manage list-ruv
>                 unable to decode: {replica 8} 55091239000400080000
>                 55091239000400080000
>                 unable to decode: {replica 7} 552f84cd000300070000
>                 552f84cd000300070000
>                 unable to decode: {replica 11} 551a42f70000000b0000
>                 551aa3140001000b0000
>                 unable to decode: {replica 15} 551e82e10001000f0000
>                 551e82e10001000f0000
>                 unable to decode: {replica 14} 551e82ec0001000e0000
>                 551e82ec0001000e0000
>                 unable to decode: {replica 20} 552f4b72000600140000
>                 552f4b72000600140000
>                 unable to decode: {replica 10} 551a25af0001000a0000
>                 551a25af0001000a0000
>                 unable to decode: {replica 3} 551e864c000300030000
>                 551e864c000300030000
>                 unable to decode: {replica 5} 55083ad2000300050000
>                 55083ad2000300050000
>                 unable to decode: {replica 9} 550913e7000000090000
>                 550913e7000000090000
>                 unable to decode: {replica 19} 55210193000300130000
>                 55210193000300130000
>                 unable to decode: {replica 12} 551a48290000000c0000
>                 551a48c50000000c0000
>                 ipa-master-dmz001.test.com:389
>                 <http://ipa-master-dmz001.test.com:389>: 25
>                 ipa-master-dmz002.test.com:389
>                 <http://ipa-master-dmz002.test.com:389>: 21
>
>                 it is possible to clear this queue and leave only
>                 valid servers ?
>
>                 Thanks in advance
>
>                 ipa-client-4.1.0-18.el7_1.3.x86_64
>                 ipa-server-4.1.0-18.el7_1.3.x86_64
>
>             Ludwig or Thierry, do you know? The questions about RUV
>             cleaning seems to be
>             recurring, I suspect there will be a pattern (bug) and not
>             just configuration
>             issue.
>
>         we have seen this in a recent thread, and it is clear that the
>         RUV is corrupted and cannot be decoded, but we don't have a
>         scenario how this is state is reached.
>
>
>
>
>     -- 
>     -- May the fox be with you ...
>        /\
>       (~(
>        ) )         /\_/\
>       (_=---_(@ @)
>         (          \   /
>         /|/----\|\  V
>         " "     " "
>
>




-- 
-- May the fox be with you ...
    /\
   (~(
    ) )         /\_/\
   (_=---_(@ @)
     (          \   /
     /|/----\|\  V
     " "     " "




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150506/349e9990/attachment.htm>