[Freeipa-users] unable to decode: {replica

[lejeczek]

On 01/03/17 08:05, Ludwig Krispenz wrote:
>
> On 02/28/2017 07:52 PM, lejeczek wrote:
>>
>>
>> On 28/02/17 09:45, Petr Vobornik wrote:
>>> On 02/26/2017 11:35 AM, lejeczek wrote:
>>>> hi everyone
>>>>
>>>> I first time see:
>>>>
>>>> unable to decode: {replica 60} 586eaffd000a003c0000 
>>>> 586eaffd000a003c0000
>>>> Replica Update Vectors:
>>>> ....
>>>>
>>>> on all four servers. What would be a correct 
>>>> troubleshooting and fixing this
>>>> problem?
>>>> many thanks,
>>>> L.
>>>>
>>>>
>>>>
>>>
>>> Hello,
>>>
>>> what is the version and OS of your IPA servers and DS?
>>>
>>>  $ rpm -q ipa-server freeipa-server 389-ds-base
>> well I run a Centos 7.x and
>> ~]$ rpm -q ipa-server freeipa-server 389-ds-base
>> ipa-server-4.4.0-14.el7.centos.4.x86_64
>> package freeipa-server is not installed
>> 389-ds-base-1.3.5.10-15.el7_3.x86_64
>>
>> I searched the net and archives but failed to find 
>> anything flagged as "solved".
> if you expect help, you should provide a bit more 
> information than the snippet of an error message. As Petr 
> pointed out this looks like a problem of a corrupted RUV, 
> but we also haven't seen these for a long time.
> Could you describe your deployment, what changed recently 
> (addigng/removing replicas, crashes,.... )
> A mapping of servers and replica Ids, to which server does 
> "60" refer?


If I new what "60" referred to I'd have had not ask the 
question, most likely. I thought it something IPA itself 
cannot decode so how could I?
I ran first - clean-dangling-ruv - which clean a lot, but 
during the cleanup it kept spitting out: unable to decode..
"replica 60" is nothing like a hostname or any other human, 
me, given reference.

I thought it is obvious that these days people start with 
sroogle and later "mailing lists" are last resort and not 
the place to do shop talk, well, very rarely should be.
But, I did NOT sroogle enough, I realize it now.

this fails:

~]$ ipa-replica-manage clean-ruv 60
Directory Manager password:

unable to decode: {replica 60} 586eaffd000a003c0000 
586eaffd000a003c0000
Replica ID 60 not found

but this succeeds:

~]$ ldapmodify -p 389 -h $(hostname) -D "cn=directory 
manager" -Y GSSAPI -a
SASL/GSSAPI authentication started
SASL username: admin at PRIVATE.DOM.MY
SASL SSF: 56
SASL data security layer installed.
dn: cn=clean 60, cn=cleanallruv, cn=tasks, cn=config
objectclass: extensibleObject
replica-base-dn: dc=private,dc=private,dc=my
replica-id: 60
cn: clean 60

adding new entry "cn=clean 60, cn=cleanallruv, cn=tasks, 
cn=config"

logs:

04/Mar/2017:11:59:44.643623797 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task: launching cleanAllRUV thread...
[04/Mar/2017:11:59:44.673317808 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task (rid 60): Cleaning rid (60)...
[04/Mar/2017:11:59:44.675400517 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task (rid 60): Waiting to process all the 
updates from the deleted replica...
[04/Mar/2017:11:59:44.677347412 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task (rid 60): Waiting for all the replicas to 
be online...
[04/Mar/2017:11:59:44.713849540 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task (rid 60): Waiting for all the replicas to 
receive all the deleted replica updates...
[04/Mar/2017:11:59:44.743398566 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task (rid 60): Sending cleanAllRUV task to all 
the replicas...
[04/Mar/2017:11:59:44.784880691 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task (rid 60): Cleaning local ruv's...
[04/Mar/2017:11:59:45.792197518 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task (rid 60): Waiting for all the replicas to 
be cleaned...
[04/Mar/2017:11:59:45.850641867 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task (rid 60): Waiting for all the replicas to 
finish cleaning...
[04/Mar/2017:11:59:45.881786089 +0000] NSMMReplicationPlugin 
- CleanAllRUV Task (rid 60): Successfully cleaned rid(60).

and it is fixed.

thanks!

> Check the ruvs for all suffixes on all servers.
> Try cleaning the RUV, if IPA command does not work do it 
> by ldapmodify
>
> There have been many discussions on this topic in this 
> mailing list, look for "cleanallruv", "haunted servers",..
>
> Ludwig
>>
>>
>>>
>>> Similar issues happened last year, you can search the 
>>> archives for "unable to decode" but a 389-ds fix 
>>> improved the situation. So if you have older version 
>>> then maybe update and then manual cleanup of RUVs might 
>>> help.
>>>
>>
>>
>>
>
> -- 
> Red Hat GmbH,http://www.de.redhat.com/, Registered seat: Grasbrunn,
> Commercial register: Amtsgericht Muenchen, HRB 153243,
> Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric Shander
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170304/f3813a9a/attachment.htm>