[Freeipa-users] Master Error with two Master CentOS 7.2

[Rob Crittenden]

Günther J. Niederwimmer wrote:
> Am Dienstag, 26. Januar 2016, 17:13:03 CET schrieb Ludwig Krispenz:
> Hello Ludwig,
>  
>> you got a replicaid (97) leftover form the previous install for the
>> o=ipaca backend. The other backend is ok, ipa-replica-manage del did the
>> cleanup, but ipa-csreplica-manage doesn't. So you have to clean it
>> manually by an ldap command.
> :-(
>  
>> Execute the following mod on one of the servers:
>>
>> ldapmodify -D "cn=directory manager" -W -a
>> dn: cn=clean 97, cn=cleanallruv, cn=tasks, cn=config
>> objectclass: extensibleObject
>> replica-base-dn: o=ipaca
>> replica-id: 97
>> cn: clean 97
> 
> Thanks for the Help but .... 
> 
> I copy all in one line but something is wrong with this mod,  i have only the 
> Help screen with the parameters ?

Add -x after ldapmodify.

After the last line put in an extra linefeed then ctrl-D to submit the
request.

rob

>  
>> On 01/26/2016 04:52 PM, Günther J. Niederwimmer wrote:
>>> Am Dienstag, 26. Januar 2016, 14:48:31 CET schrieb Ludwig Krispenz:
>>>> On 01/26/2016 12:30 PM, Günther J. Niederwimmer wrote:
>>>>> Am Dienstag, 26. Januar 2016, 11:03:27 CET schrieb Ludwig Krispenz:
>>>>>> On 01/26/2016 09:45 AM, Günther J. Niederwimmer wrote:
>>>>>>> I set up a CentOS 7.2 System with two master Server now I found this
>>>>>>> 1000
>>>>>>> x
>>>>>>> Error on my first master?
>>>>>>>
>>>>>>> attrlist_replace - attr_replace (nsslapd-referral,
>>>>>>> ldap://ipa1.xxxxxxx.at:389/ o%3Dipaca) failed.
>>>>>>
>>>>>> did you install and reinstall the replica on the same machine ? The
>>>>>> message is usually related to removed replicaid, which was not properly
>>>>>> cleaned.
>>>>>
>>>>> Yes, I must delete and reinstall the Replica but I have all cleanup I
>>>>> found in the DOC
>>>>>
>>>>> ipa-replica-manage del ipa1.xxxxxxxx.at
>>>>> ipa-csreplica-manage del ipa1.xxxxxxxx..at
>>>>>
>>>>> and create a new
>>>>>
>>>>> ipa-replica-prepare ipa1.xxxxxxx.at
>>>>>
>>>>> the system for ipa1 is a new installed KVM guest., with the same name
>>>>> ipa1.xxxxxxxx.at
>>>>>
>>>>>> can you do some searches ?. On both masters check which is the
>>>>>> replicaID
>>>>>> in use and which are the known ruvs:
>>>>>> ldapsearch -b "cn=config" .... "objectclass=nsds5replica" replicaid
>>>>>> nsds50ruv
>>>>>
>>>>> Please can you give me the full command I am not a professional  for
>>>>> LDAP
>>>>
>>>> ldapsearch -LLL -o ldif-wrap=no -x -h <host> -p 389  -D "cn=directory
>>>> manager" -W -b "cn=config" "objectclass=nsds5replica" nsds5replicaid
>>>> nsds50ruv
>>>>
>>>> for host insert your masters
>>>
>>> Thanks for the help.
>>>
>>> The original master
>>>
>>> dn: cn=replica,cn=dc\3Desslmaier\2Cdc\3Dat,cn=mapping tree,cn=config
>>> nsds5replicaid: 4
>>> nsds50ruv: {replicageneration} 562f579c000000040000
>>> nsds50ruv: {replica 4 ldap://ipa.esslmaier.at:389} 562f57b7000000040000
>>> 56a79264000000040000
>>> nsds50ruv: {replica 5 ldap://ipa1.esslmaier.at:389} 568a1fa2000000050000
>>> 56a5cf73000200050000
>>>
>>> dn: cn=replica,cn=o\3Dipaca,cn=mapping tree,cn=config
>>> nsds5replicaid: 96
>>> nsds50ruv: {replicageneration} 562f57e3000000600000
>>> nsds50ruv: {replica 96 ldap://ipa.esslmaier.at:389} 562f5804000000600000
>>> 56a79021000000600000
>>> nsds50ruv: {replica 91 ldap://ipa1.esslmaier.at:389} 568a1ff70000005b0000
>>> 568a20250006005b0000
>>> nsds50ruv: {replica 97 ldap://ipa1.esslmaier.at:389} 562f5811000000610000
>>> 5630a9c4000000610000
>>>
>>> The first replica master.
>>>
>>> nsds5replicaid: 5
>>> nsds50ruv: {replicageneration} 562f579c000000040000
>>> nsds50ruv: {replica 5 ldap://ipa1.esslmaier.at:389} 568a1fa2000000050000
>>> 56a793fc000000050000
>>> nsds50ruv: {replica 4 ldap://ipa.esslmaier.at:389} 562f57b7000000040000
>>> 56a79264000000040000
>>>
>>> dn: cn=replica,cn=o\3Dipaca,cn=mapping tree,cn=config
>>> nsds5replicaid: 91
>>> nsds50ruv: {replicageneration} 562f57e3000000600000
>>> nsds50ruv: {replica 91 ldap://ipa1.esslmaier.at:389} 568a1ff70000005b0000
>>> 568a20250006005b0000
>>> nsds50ruv: {replica 96 ldap://ipa.esslmaier.at:389} 562f5804000000600000
>>> 56a793a5000000600000
>>> nsds50ruv: {replica 97 ldap://ipa1.esslmaier.at:389} 562f5811000000610000
>>> 5630a9c4000000610000
>>>
>>>>>>> Is this a bad Error ?
>>>>>>>
>>>>>>> Can I do anything
>>>>>>>
>>>>>>> Thanks for a answer,
> 
>