<div dir="ltr">
<p class=""><span class="">sudo ipa-replica-conncheck --replica</span></p><p class=""><span class="">for all replicas comes back with</span></p><p class=""><span class="">...</span></p><p class=""><span class="">The following UDP ports could not be verified as open: 88, 464</span></p>
<p class=""><span class="">This can happen if they are already bound to an application</span></p><p class=""><span class="">and ipa-replica-conncheck cannot attach own UDP responder.</span></p><p class="">Connection from master to replica is OK.<br>
<span class=""></span></p><p class=""><span class=""><br></span></p><p class="">ipa-replica-manage -v list $REPLICA fails w/<br></p><p class="">
</p><p class=""><span class="">Failed to get data from 'REPLICA': Invalid credentials SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context</span></p><p class=""><span class=""><br></span></p>
<p class=""><span class=""><span class="">The common error is: </span>nsds5replicaLastUpdateStatus: -2 - LDAP error: Local error<br></span></p>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Sep 4, 2014 at 11:21 AM, Fredy Sanchez <span dir="ltr"><<a href="mailto:fredy.sanchez@modmed.com" target="_blank">fredy.sanchez@modmed.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I should add that we already tried everything at <a href="https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Replication-Solving_Common_Replication_Conflicts.html" target="_blank">https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Replication-Solving_Common_Replication_Conflicts.html</a></div>
<div class="gmail_extra"><div><div class="h5"><br><br><div class="gmail_quote">On Thu, Sep 4, 2014 at 11:11 AM, Guillermo Fuentes <span dir="ltr"><<a href="mailto:guillermo.fuentes@modernizingmedicine.com" target="_blank">guillermo.fuentes@modernizingmedicine.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello list,<br>
<br>
We’re running FreeIPA with a master and 3 replicas. The replication<br>
stopped working and currently we’re adding resources only to the<br>
master. This is the environment we have:<br>
m1:<br>
OS: CentOS release 6.5<br>
FreeIPA: 3.0.0-37<br>
CA: pki-ca-9.0.3<br>
<br>
<br>
# ipa-replica-manage list -v `hostname`<br>
<a href="http://m2.example.com" target="_blank">m2.example.com</a>: replica<br>
last init status: None<br>
last init ended: None<br>
last update status: 49 - LDAP error: Invalid credentials<br>
last update ended: None<br>
<a href="http://m3.example.com" target="_blank">m3.example.com</a>: replica<br>
last init status: None<br>
last init ended: None<br>
last update status: 0 Replica acquired successfully: Incremental<br>
update succeeded<br>
last update ended: 2014-09-04 14:28:44+00:00<br>
<a href="http://m4.example.com" target="_blank">m4.example.com</a>: replica<br>
last init status: None<br>
last init ended: None<br>
last update status: -2 - LDAP error: Local error<br>
last update ended: None<br>
<br>
m2:<br>
OS: CentOS release 6.5<br>
FreeIPA: 3.0.0-37<br>
<br>
# ipa-replica-manage list -v `hostname`<br>
<a href="http://m1.example.com" target="_blank">m1.example.com</a>: replica<br>
last init status: None<br>
last init ended: None<br>
last update status: -1 Incremental update has failed and requires<br>
administrator actionLDAP error: Can't contact LDAP server<br>
last update ended: 2014-09-03 22:53:21+00:00<br>
<br>
m3:<br>
OS: CentOS release 6.5<br>
FreeIPA: 3.0.0-37<br>
<br>
# ipa-replica-manage list -v `hostname`<br>
<a href="http://m1.example.com" target="_blank">m1.example.com</a>: replica<br>
last init status: None<br>
last init ended: None<br>
last update status: 0 Replica acquired successfully: Incremental<br>
update succeeded<br>
last update ended: 2014-09-04 14:31:51+00:00<br>
<br>
m4:<br>
OS: CentOS release 6.5<br>
FreeIPA: 3.3.3-28<br>
<br>
# ipa-replica-manage list -v `hostname`<br>
<a href="http://m1.example.com" target="_blank">m1.example.com</a>: replica<br>
last init status: None<br>
last init ended: None<br>
last update status: 49 Unable to acquire replicaLDAP error: Invalid<br>
credentials<br>
last update ended: None<br>
<br>
<br>
Note that although m3 reports “Incremental update succeeded”, users<br>
created on m1 are not replicated to m3, and users created on m3 are<br>
not replicated back to m1.<br>
<br>
We’ve tried different things including re-initializing m2.<br>
<br>
Can somebody point me in the right direction to get replication going again?<br>
<br>
Thanks in advance!<br>
<span><font color="#888888"><br>
Guillermo<br>
<br>
--<br>
Manage your subscription for the Freeipa-users mailing list:<br>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
Go To <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project</font></span></blockquote></div><br><br clear="all"><div><br></div></div></div><span class="HOEnZb"><font color="#888888">-- <br>
<div dir="ltr"><div style="text-align:right">
<div style="text-align:left"><div><div>Cheers,</div><div><br></div><div>Fredy Sanchez</div><div>IT Manager @ Modernizing Medicine</div><div><a href="tel:561-880-2998%20x237" value="+15618802998" target="_blank">561-880-2998 x237</a></div>
<div><a href="mailto:fredy.sanchez@modmed.com" target="_blank">fredy.sanchez@modmed.com</a></div>
<div><br></div><div>Need IT support? Visit <a href="https://mmit.zendesk.com" target="_blank">https://mmit.zendesk.com</a></div></div></div><div style="text-align:left"><div style="width:650px"><div style="padding-top:10px;float:left">
<ul style="color:rgb(153,153,153);font-family:ubuntu;font-size:8pt;line-height:15px;padding:0px;list-style:none"><li><br></li></ul></div></div></div><div style="text-align:left"><div style="color:rgb(0,0,0);font-family:Times;font-size:medium;min-width:650px">
<div style="padding-top:10px;font-family:ubuntu,verdana,arial,sans-serif;font-size:8pt;line-height:15px;float:left;color:rgb(153,153,153)"><ul style="margin:0px;padding:0px;list-style:none"><li style="padding:0px;margin:0px">
<b style="line-height:normal;font-family:arial,sans-serif;font-size:13px;color:rgb(34,34,34)"><br></b></li></ul></div></div></div></div></div>
</font></span></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div style="text-align:right"><div style="text-align:left"><div><div>Cheers,</div><div><br></div><div>Fredy Sanchez</div><div>IT Manager @ Modernizing Medicine</div>
<div>561-880-2998 x237</div><div><a href="mailto:fredy.sanchez@modmed.com" target="_blank">fredy.sanchez@modmed.com</a></div><div><br></div><div>Need IT support? Visit <a href="https://mmit.zendesk.com" target="_blank">https://mmit.zendesk.com</a></div>
</div></div><div style="text-align:left"><div style="width:650px"><div style="padding-top:10px;float:left"><ul style="color:rgb(153,153,153);font-family:ubuntu;font-size:8pt;line-height:15px;padding:0px;list-style:none">
<li>
<br></li></ul></div></div></div><div style="text-align:left"><div style="color:rgb(0,0,0);font-family:Times;font-size:medium;min-width:650px"><div style="padding-top:10px;font-family:ubuntu,verdana,arial,sans-serif;font-size:8pt;line-height:15px;float:left;color:rgb(153,153,153)">
<ul style="margin:0px;padding:0px;list-style:none"><li style="padding:0px;margin:0px"><b style="line-height:normal;font-family:arial,sans-serif;font-size:13px;color:rgb(34,34,34)"><br></b></li></ul></div></div></div></div>
</div>
</div>