On 12/03/2015 02:00 PM, Ludwig Krispenz wrote:

On 12/03/2015 01:50 PM, Oleg Fayans wrote:
Hi all,

Should not these two one-directional segments in ipaca suffix be
merged automatically?
yes they should, and normally do. What is your scenario when you get
this, can you reproduce ?

I encountered it yesterday bu:
* on A. `ipa-server-install --setup-dns`
* on: B `ipa-replica-install --setup-ca`
* on: C `ipa-replica-install --setup-ca`

It created: A <-> B <-> C

Agreements were not joined. Don't remember if in both suffixes.

Btw,
After I created A <-> C and removed B using `ipa-replica-manage del B`. I've encountered DS on A on 100%CPU for quite some time ~ 30s or more.

I can provide logs/access for all 3 machines.


$ ipa topologysegment-find ipaca
------------------
2 segments matched
------------------
  Segment name: master.justfor.test-to-replica1.justfor.test
  Left node: master.justfor.test
  Right node: replica1.justfor.test
  Connectivity: left-right

  Segment name: replica1.justfor.test-to-master.justfor.test
  Left node: replica1.justfor.test
  Right node: master.justfor.test
  Connectivity: left-right
----------------------------
Number of entries returned 2
----------------------------





--
Petr Vobornik

--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to