[Freeipa-users] Cant locate CSN after yum update

[Ludwig Krispenz]

hi,

there was a change that in the case of a missing csn ds would not 
silently use a "close" one and continue, but log an error, backoff and 
retry - after updates on other masters the staring csn coudl change and 
replication continue.

Now, in your case the csn reported missing: 59095fe1000b00120000
has a time stamp from May,3rd, so it could very well be correct that 
this csn is no longer found in the changelog.

To continue analysis, could you provide the replicaids of all your 
current replicas, and which is the replicaid of the sever logging the 
change and the ruvs of the replicas from all servers.
ldapsearch  .... -D "cn=directory manager" .... -b cn=config 
"objectclass=nsds5replica" nsds50ruv

Regards,
Ludwig

On 05/18/2017 03:09 PM, Christophe TREFOIS wrote:
> Hi all,
>
> Did a yum update on one of my replicas, non CA master, and upgrade was 
> successful (ipupgrade.log) said so.
>
>
> Hwoever, now every few seconds I get the following message. 
> https://paste.fedoraproject.org/paste/wS4x9KvD3EB0gv2HAsj6X15M1UNdIGYhyRLivL9gydE=
>
> Does anybody know how to proceed and if this is important?
> ipa-replica-manage says, backing off, retrying later, so not sure if 
> replication happens successfully or not and what to do ??
>
> Setup: CentOS 7.3 all up-to-date, 2 CA master, 2 non CA master in 
> diamond replication.
>
> Remaining replicas were upgraded today as well, and don't seem to 
> complain. Only 1 of them complains.
>
> 389-ds-base-libs-1.3.5.10-20.el7_3.x86_64
> 389-ds-base-1.3.5.10-20.el7_3.x86_64
>
>
> [root at lums3 ~]# rpm -qa | grep ipa
> libipa_hbac-1.14.0-43.el7_3.14.x86_64
> python-iniparse-0.4-9.el7.noarch
> ipa-admintools-4.4.0-14.el7.centos.7.noarch
> python2-ipaserver-4.4.0-14.el7.centos.7.noarch
> python2-ipalib-4.4.0-14.el7.centos.7.noarch
> sssd-ipa-1.14.0-43.el7_3.14.x86_64
> python-ipaddress-1.0.16-2.el7.noarch
> python2-ipaclient-4.4.0-14.el7.centos.7.noarch
> ipa-server-common-4.4.0-14.el7.centos.7.noarch
> ipa-client-common-4.4.0-14.el7.centos.7.noarch
> ipa-client-4.4.0-14.el7.centos.7.x86_64
> ipa-common-4.4.0-14.el7.centos.7.noarch
> python-libipa_hbac-1.14.0-43.el7_3.14.x86_64
> ipa-server-4.4.0-14.el7.centos.7.x86_64
>
> Thanks a lot for any pointers,
> Christophe
>
> -- 
>
> Dr Christophe Trefois, Dipl.-Ing.
> Technical Specialist / Post-Doc
>
> UNIVERSITÉ DU LUXEMBOURG
>
> LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE
> Campus Belval | House of Biomedicine
> 6, avenue du Swing
> L-4367 Belvaux
> T:+352 46 66 44 6124
> F:+352 46 66 44 6949
> http://www.uni.lu/lcsb
>
> Facebook <https://www.facebook.com/trefex>Twitter 
> <https://twitter.com/Trefex>Google Plus 
> <https://plus.google.com/+ChristopheTrefois/>Linkedin 
> <https://www.linkedin.com/in/trefoischristophe>skype
>
> ----
> This message is confidential and may contain privileged information.
> It is intended for the named recipient only.
> If you receive it in error please notify me and permanently delete the 
> original message and any copies.
> ----
>
>
>
>

-- 
Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric Shander

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170518/6d98ceb9/attachment.htm>