On Feb 24, 2012, at 3:09 PM, JR Aquino wrote:

> ipa-replica-manage del causes tombstone entries to remain in 389 DS.  This 
> has proven to be problematic.
> We can automatically perform the cleanup task at the deletion time to 
> minimize orphans and ghosts in the directory.
> 
> This patch runs the cleanruv action on all masters following a delete.
> https://fedorahosted.org/freeipa/ticket/2303

Instructions for testing this Patch:

0. Setup at least 3 FreeIPA replica servers.

1. Perform the following search  on one of the servers to verify the 
Replica-ID's in the Tombstone:
$ ldapsearch -xLLL -D "cn=directory manager" -W -b dc=example,dc=com \
 '(&(nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff)(objectclass=nstombstone))'

2. Verify that all 3 servers are present in the replica list:
$ ipa-replica-manage list

3. Delete one of the Replicas
$ ipa-replia-manage del ipa#.example.com

4. ReRun the Tombstone search on all remaining servers to confirm the RUV entry 
has been cleaned:
# ldapsearch -xLLL -D "cn=directory manager" -W -b dc=example,dc=com \
 '(&(nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff)(objectclass=nstombstone))'

5. Verify that the replica server has been deleted:
$ ipa-replica-manage list

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to