<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
let's keep the info on the list, more peple more ideas<br>
<div class="moz-forward-container"><br>
-------- Original Message --------
<table class="moz-email-headers-table" border="0" cellpadding="0"
cellspacing="0">
<tbody>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">Subject:
</th>
<td>Re: [Freeipa-users] IPA RUV unable to decode</td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">Date: </th>
<td>Tue, 5 May 2015 18:32:15 +0200</td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">From: </th>
<td>Vaclav Adamec <a class="moz-txt-link-rfc2396E" href="mailto:vaclav.adamec@suchy-zleb.cz"><vaclav.adamec@suchy-zleb.cz></a></td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">To: </th>
<td>Ludwig Krispenz <a class="moz-txt-link-rfc2396E" href="mailto:lkrispen@redhat.com"><lkrispen@redhat.com></a></td>
</tr>
</tbody>
</table>
<br>
<br>
<div dir="ltr">
<div>master:</div>
<div>ipa-replica-manage del <replica_server> -fc<br>
</div>
<div>ipa-replica-prepare ... + copy gpg<br>
</div>
<div><br>
</div>
<div>replicas:</div>
<div>ipa-server-install --uninstall<br>
</div>
ipa-replica-install ...<br>
<div><br>
</div>
<div>one by one on all replicas (1 CA master and 5 replicas
which are also set in DNS as SRV records). Plus whole the time
there was script/job which register clients
(ipa-client-install --uninstall + ipa-client-install ...
--force-join .... different active replica servers - via
DNS). Seems that I have some issue with replica itself, it
seems to work, but when it's loaded with such "heavy"
operation replica servers goes down (dir process died) even
master itself went down with minor codes errs in log.</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, May 5, 2015 at 3:25 PM, Ludwig
Krispenz <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:lkrispen@redhat.com" target="_blank">lkrispen@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><span class=""> <br>
<div>On 05/05/2015 02:24 PM, Vaclav Adamec wrote:<br>
</div>
</span><span class="">
<blockquote type="cite">
<div dir="ltr">For me it was quite easy to reached
this state, I just setup replica on 6 servers (two
datacenters, with ~15ms latency, same stable ntp
source), run test scripts which add/verify random
account, add/remove hosts (unregister seems to be
"heaviest" operation to replicas). During these
tests I removed some remove servers from replica and
try to add them back,</div>
</blockquote>
</span> what exactly did you do:<br>
ipa-server-install --uninstall <br>
ipa-server-install ?<br>
any other commands ?
<div>
<div class="h5"><br>
<blockquote type="cite">
<div dir="ltr"> result is like this. Seems that with
higher load it happens more often
(register/unregister multiple servers, with actual
setup it is about 10 new registration in same time
to different replica servers), also sometimes I
got replication conflicts or dir service complete
failure (dirsrv down, started with gssapi minor
code error). But even If I stop tests queue is not
freed, RUV still there (old replicas).</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, May 5, 2015 at
1:49 PM, Ludwig Krispenz <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:lkrispen@redhat.com"
target="_blank">lkrispen@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0
0 0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div>
<div><br>
On 05/05/2015 01:27 PM, Martin Kosek
wrote:<br>
<blockquote class="gmail_quote"
style="margin:0 0 0 .8ex;border-left:1px
#ccc solid;padding-left:1ex"> On
05/05/2015 12:38 PM, Vaclav Adamec
wrote:<br>
<blockquote class="gmail_quote"
style="margin:0 0 0
.8ex;border-left:1px #ccc
solid;padding-left:1ex"> Hi,<br>
I tried migrate to newest version
IPA, but result is quite unstable and<br>
removing old replicas ends with RUV
which cannot be decoded (it stucked in<br>
queue forever):<br>
<br>
ipa-replica-manage del <a
moz-do-not-send="true"
href="http://ipa-master-dmz002.test.com"
target="_blank">ipa-master-dmz002.test.com</a>
-fc<br>
Cleaning a master is irreversible.<br>
This should not normally be require,
so use cautiously.<br>
Continue to clean master? [no]: yes<br>
<br>
ipa-replica-manage list-ruv<br>
unable to decode: {replica 8}
55091239000400080000
55091239000400080000<br>
unable to decode: {replica 7}
552f84cd000300070000
552f84cd000300070000<br>
unable to decode: {replica 11}
551a42f70000000b0000
551aa3140001000b0000<br>
unable to decode: {replica 15}
551e82e10001000f0000
551e82e10001000f0000<br>
unable to decode: {replica 14}
551e82ec0001000e0000
551e82ec0001000e0000<br>
unable to decode: {replica 20}
552f4b72000600140000
552f4b72000600140000<br>
unable to decode: {replica 10}
551a25af0001000a0000
551a25af0001000a0000<br>
unable to decode: {replica 3}
551e864c000300030000
551e864c000300030000<br>
unable to decode: {replica 5}
55083ad2000300050000
55083ad2000300050000<br>
unable to decode: {replica 9}
550913e7000000090000
550913e7000000090000<br>
unable to decode: {replica 19}
55210193000300130000
55210193000300130000<br>
unable to decode: {replica 12}
551a48290000000c0000
551a48c50000000c0000<br>
<a moz-do-not-send="true"
href="http://ipa-master-dmz001.test.com:389"
target="_blank">ipa-master-dmz001.test.com:389</a>:
25<br>
<a moz-do-not-send="true"
href="http://ipa-master-dmz002.test.com:389"
target="_blank">ipa-master-dmz002.test.com:389</a>:
21<br>
<br>
it is possible to clear this queue and
leave only valid servers ?<br>
<br>
Thanks in advance<br>
<br>
ipa-client-4.1.0-18.el7_1.3.x86_64<br>
ipa-server-4.1.0-18.el7_1.3.x86_64<br>
</blockquote>
Ludwig or Thierry, do you know? The
questions about RUV cleaning seems to be<br>
recurring, I suspect there will be a
pattern (bug) and not just configuration<br>
issue.<br>
</blockquote>
</div>
</div>
we have seen this in a recent thread, and it
is clear that the RUV is corrupted and cannot
be decoded, but we don't have a scenario how
this is state is reached.<br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div>-- May the fox be with you ...<br>
/\<br>
(~(<br>
) ) /\_/\<br>
(_=---_(@ @)<br>
( \ / <br>
/|/----\|\ V<br>
" " " "<br>
<br>
<br>
</div>
</div>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="gmail_signature">-- May the fox be with you ...<br>
/\<br>
(~(<br>
) ) /\_/\<br>
(_=---_(@ @)<br>
( \ / <br>
/|/----\|\ V<br>
" " " "<br>
<br>
<br>
</div>
</div>
<br>
</div>
<br>
</body>
</html>