[Freeipa-users] Automatic consistency checking

[Martin Kosek]

On 05/05/2016 04:35 PM, Martin Basti wrote:
> 
> 
> On 05.05.2016 15:54, Andrew Holway wrote:
> 
>     Hello,
> 
>     We've been using Freeipa on Centos for a while and found one day that the
>     replication stuff was broken and that the LDAP database on our pair of IPA
>     servers was inconsistent. We didn't know how long this had been broken for
>     but we were not able to repair it either.
> 
>     We use AWS so we've now deployed RHEL AMI's and are now using IdM so we can
>     get support when this is breaking but I am a bit stuck how to monitor that
>     the replication is still working.
> 
>     So is there some monitoring mechanisms in FreeIPA?
> 
>     Cheers,
> 
>     Andrew
> 
> 
> 
> This is planned for future, you can use 

Right.  This is the long term plan and design:
http://www.freeipa.org/page/V4/Monitor_Replication_Topology

Ludwig (CCed) had some ideas already, I am not sure if all of them are in the
design.

> https://github.com/peterpakos/ipa_check_consistency (community script without 
> any guarantee) to check your servers.