<html> <head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 01/03/17 08:05, Ludwig Krispenz wrote: </div> <blockquote cite="mid:58B680BD.1080505@redhat.com" type="cite"> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> <div class="moz-cite-prefix">On 02/28/2017 07:52 PM, lejeczek wrote: </div> <blockquote cite="mid:22d81136-0d79-df33-a041-bbc8a70fad5e@yahoo.co.uk" type="cite"> <meta http-equiv="Context-Type" content="text/html; "> <div class="moz-cite-prefix">On 28/02/17 09:45, Petr Vobornik wrote: </div> <blockquote cite="mid:250983c1-67dc-832c-aefb-f5bf4abb1cd2@redhat.com" type="cite">On 02/26/2017 11:35 AM, lejeczek wrote: <blockquote type="cite">hi everyone I first time see: unable to decode: {replica 60} 586eaffd000a003c0000 586eaffd000a003c0000 Replica Update Vectors: .... on all four servers. What would be a correct troubleshooting and fixing this problem? many thanks, L. </blockquote> Hello, what is the version and OS of your IPA servers and DS? </blockquote> <blockquote cite="mid:250983c1-67dc-832c-aefb-f5bf4abb1cd2@redhat.com" type="cite"> $ rpm -q ipa-server freeipa-server 389-ds-base </blockquote> well I run a Centos 7.x and ~]$ rpm -q ipa-server freeipa-server 389-ds-base ipa-server-4.4.0-14.el7.centos.4.x86_64 package freeipa-server is not installed 389-ds-base-1.3.5.10-15.el7_3.x86_64 I searched the net and archives but failed to find anything flagged as "solved". </blockquote> if you expect help, you should provide a bit more information than the snippet of an error message. As Petr pointed out this looks like a problem of a corrupted RUV, but we also haven't seen these for a long time. Could you describe your deployment, what changed recently (addigng/removing replicas, crashes,.... ) A mapping of servers and replica Ids, to which server does "60" refer? </blockquote> If I new what "60" referred to I'd have had not ask the question, most likely. I thought it something IPA itself cannot decode so how could I? I ran first - clean-dangling-ruv - which clean a lot, but during the cleanup it kept spitting out: unable to decode.. "replica 60" is nothing like a hostname or any other human, me, given reference. I thought it is obvious that these days people start with sroogle and later "mailing lists" are last resort and not the place to do shop talk, well, very rarely should be. But, I did NOT sroogle enough, I realize it now. this fails: ~]$ ipa-replica-manage clean-ruv 60 Directory Manager password: unable to decode: {replica 60} 586eaffd000a003c0000 586eaffd000a003c0000 Replica ID 60 not found but this succeeds: ~]$ ldapmodify -p 389 -h $(hostname) -D "cn=directory manager" -Y GSSAPI -a SASL/GSSAPI authentication started SASL username: <a class="moz-txt-link-abbreviated" href="mailto:admin@PRIVATE.DOM.MY">admin@PRIVATE.DOM.MY</a> SASL SSF: 56 SASL data security layer installed. dn: cn=clean 60, cn=cleanallruv, cn=tasks, cn=config objectclass: extensibleObject replica-base-dn: dc=private,dc=private,dc=my replica-id: 60 cn: clean 60 adding new entry "cn=clean 60, cn=cleanallruv, cn=tasks, cn=config" logs: 04/Mar/2017:11:59:44.643623797 +0000] NSMMReplicationPlugin - CleanAllRUV Task: launching cleanAllRUV thread... [04/Mar/2017:11:59:44.673317808 +0000] NSMMReplicationPlugin - CleanAllRUV Task (rid 60): Cleaning rid (60)... [04/Mar/2017:11:59:44.675400517 +0000] NSMMReplicationPlugin - CleanAllRUV Task (rid 60): Waiting to process all the updates from the deleted replica... [04/Mar/2017:11:59:44.677347412 +0000] NSMMReplicationPlugin - CleanAllRUV Task (rid 60): Waiting for all the replicas to be online... [04/Mar/2017:11:59:44.713849540 +0000] NSMMReplicationPlugin - CleanAllRUV Task (rid 60): Waiting for all the replicas to receive all the deleted replica updates... [04/Mar/2017:11:59:44.743398566 +0000] NSMMReplicationPlugin - CleanAllRUV Task (rid 60): Sending cleanAllRUV task to all the replicas... [04/Mar/2017:11:59:44.784880691 +0000] NSMMReplicationPlugin - CleanAllRUV Task (rid 60): Cleaning local ruv's... [04/Mar/2017:11:59:45.792197518 +0000] NSMMReplicationPlugin - CleanAllRUV Task (rid 60): Waiting for all the replicas to be cleaned... [04/Mar/2017:11:59:45.850641867 +0000] NSMMReplicationPlugin - CleanAllRUV Task (rid 60): Waiting for all the replicas to finish cleaning... [04/Mar/2017:11:59:45.881786089 +0000] NSMMReplicationPlugin - CleanAllRUV Task (rid 60): Successfully cleaned rid(60). and it is fixed. thanks! <blockquote cite="mid:58B680BD.1080505@redhat.com" type="cite"> Check the ruvs for all suffixes on all servers. Try cleaning the RUV, if IPA command does not work do it by ldapmodify There have been many discussions on this topic in this mailing list, look for "cleanallruv", "haunted servers",.. Ludwig <blockquote cite="mid:22d81136-0d79-df33-a041-bbc8a70fad5e@yahoo.co.uk" type="cite"> <blockquote cite="mid:250983c1-67dc-832c-aefb-f5bf4abb1cd2@redhat.com" type="cite"> Similar issues happened last year, you can search the archives for "unable to decode" but a 389-ds fix improved the situation. So if you have older version then maybe update and then manual cleanup of RUVs might help. </blockquote> <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> <pre class="moz-signature" cols="72">-- Red Hat GmbH, <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.de.redhat.com/">http://www.de.redhat.com/</a>, Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243, Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric Shander</pre> <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> </body> </html>