[Freeipa-users] replication again :-(

[Rich Megginson]

On 05/21/2015 06:25 AM, Janelle wrote:
> On 5/21/15 5:20 AM, thierry bordaz wrote:
>> Hello Janelle,
>>
>> Those 3 RIDs were already present in Node dc2-ipa1, correct ? They 
>> reappeared on others nodes as well ?
>> May be ds2-ipa1 established a replication session with its peers and 
>> send those RIDs.
>> Could you track in all the access logs, when the op 
>> csn=5552f718000300170000 was applied.
>>
>> Note that the two hexa values of replica 23 changed 
>> (5545d61f000200170000 5552f718000300170000 vs 5553e3a3000000170000 
>> 55543240000300170000). Have you recreated a replica 23 ?.
>>
>> Do you have replication logging enabled ?
>>
>> thanks
>> thierry
> Just to help me -- what is the best way to enable the logging level 
> you need?

http://www.port389.org/docs/389ds/FAQ/faq.html#troubleshooting
The Replication log level.

> I thought I did it correctly adding to ldif.dse, but I don't think it 
> took.

You cannot edit dse.ldif while the server is running.  Anyway, 
ldapmodify is the best way to set this value.

> I am used to OpenLDAP, so perhaps there is a different way to do it 
> with 389-ds. Can you suggest settings of logging you want me to use?
>
The Replication log level.

> ~Janelle
>