On 12/03/2015 02:00 PM, Ludwig Krispenz wrote:

On 12/03/2015 01:50 PM, Oleg Fayans wrote:
Hi all,

Should not these two one-directional segments in ipaca suffix be
merged automatically?
yes they should, and normally do. What is your scenario when you get
this, can you reproduce ?

I encountered it yesterday bu:
* on A. `ipa-server-install --setup-dns`
* on: B `ipa-replica-install --setup-ca`
* on: C `ipa-replica-install --setup-ca`

It created: A <-> B <-> C

Agreements were not joined. Don't remember if in both suffixes.

After I created A <-> C and removed B using `ipa-replica-manage del B`. I've encountered DS on A on 100%CPU for quite some time ~ 30s or more.

I can provide logs/access for all 3 machines.

$ ipa topologysegment-find ipaca
2 segments matched
  Segment name: master.justfor.test-to-replica1.justfor.test
  Left node: master.justfor.test
  Right node: replica1.justfor.test
  Connectivity: left-right

  Segment name: replica1.justfor.test-to-master.justfor.test
  Left node: replica1.justfor.test
  Right node: master.justfor.test
  Connectivity: left-right
Number of entries returned 2

Petr Vobornik

Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to