<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 10/14/2013 08:26 PM, janice.psyop
wrote:<br>
</div>
<blockquote
cite="mid:CAAJdFGM2JVdYD30e6+CvQA96=LaWfpM-V6eULGD4yGwNcScgiA@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,<br>
<br>
I've been setting up an IPA server (centos 6.4) with AD trust
(2008R2 domain) following the FC18 freeipa guide.<br>
<br>
Everything has gone smoothly until I ran the ipa-replica-manage
connect command to the AD DC and it seems to be running (no
errors on std out and ps says it is still running), but it has
been running for six hours! We do have ~2000 user entries, but
I didn't think it would take this long to sync up.<br>
</div>
</blockquote>
It's definitely hung up. 2k users should be very quick to sync.<br>
<blockquote
cite="mid:CAAJdFGM2JVdYD30e6+CvQA96=LaWfpM-V6eULGD4yGwNcScgiA@mail.gmail.com"
type="cite">
<div dir="ltr">
<br>
The command I ran was this (see below) and the screen now just
displays repeating "Update in progress". I'm very tempted to
kill it in case something is going horribly wrong (with the AD
user accounts...)<br>
<br>
/usr/sbin/ipa-replica-manage connect --winsync <br>
--passsync=MySecretPass<br>
--binddn=CN=myipasyncuser,CN=Users,DC=domain,DC=com <br>
--bindpw=MySecretPass<br>
--cacert=/etc/openldap/cacerts/DC-CA.cer <br>
-v <a moz-do-not-send="true" href="http://dc.domain.com">dc.domain.com</a><br>
<br>
<br>
Update in progress<br>
Update in progress<br>
Update in progress<br>
Update in progress<br>
Update in progress<br>
Update in progress<br>
Update in progress<br>
<div><br>
</div>
<div><br>
</div>
<div>Is there any way to check the progress of this in case it
is in fact hung up? The last few entries in the
ipa/default.log is from six hours ago:</div>
</div>
</blockquote>
Is there anything of interest in the 389 DS errors log? It's
located at /var/log/dirsrv/slapd-<realm>/errors.<br>
<br>
Thanks,<br>
-NGK<br>
<blockquote
cite="mid:CAAJdFGM2JVdYD30e6+CvQA96=LaWfpM-V6eULGD4yGwNcScgiA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>
<div><br>
</div>
<div>2013-10-14T21:32:45Z 2706 MainThread ipa
INFO Added new sync agreement, waiting for it to become
ready . . .</div>
<div>2013-10-14T21:32:46Z 2706 MainThread ipa
INFO Replication Update in progress: FALSE: status: 0
Replica acquired successfully: Incremental update started:
start: 0: end: 0</div>
<div>2013-10-14T21:32:46Z 2706 MainThread ipa
INFO Agreement is ready, starting replication . . .</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>thanks much,</div>
<div>-J.</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
</body>
</html>