Hi,
you could try this operation manually but please, be sure that all the
replicas are up and running:
ldapmodify -a -D "cn=directory manager" -W << EOF
dn: cn=clean 3, cn=cleanallruv, cn=tasks, cn=config
objectclass: extensibleObject
replica-base-dn: <your base dn>
replica-id: 3
replica-force-cleaning: yes
cn: clean 3
EOF
<Your base dn> should be something like dc=ecobee,dc=com ?
that's the way to add a cleanallruv task manually. You should repeat this
with replica id "4"
regards,
German.
On Mon, May 29, 2017 at 5:07 PM, Goran Marik via FreeIPA-users <
freeipa-users@lists.fedorahosted.org> wrote:
> Hi,
>
> We are troubleshooting an sync issue that started after a freeipa upgrade
> (yum update) to the latest Centos 7.3 mid-April. One of the problems that
> happen is that we see stale RUVs that cannot be deleted. Here is the output
> of list-ruv and clean-run:
>
> “””
> ipa-replica-manage list-ruv
> Directory Manager password:
> unable to decode: {replica 3} 57020ed9000600030000 57020ed9000600030000
> unable to decode: {replica 4} 5702fe5b000500040000 5702fe5b000500040000
> Replica Update Vectors:
> inf01.prod.ecobee.com:389: 6
> inf02.dev.ecobee.com:389: 8
> inf01.dev.ecobee.com:389: 7
> inf02.prod.ecobee.com:389: 5
> Certificate Server Replica Update Vectors:
> inf02.prod.ecobee.com:389: 1095
> inf01.dev.ecobee.com:389: 1295
> inf02.dev.ecobee.com:389: 1190
> inf01.prod.ecobee.com:389: 1195
> “””
>
> “””
> ipa-replica-manage clean-ruv 3
> Directory Manager password:
>
> unable to decode: {replica 3} 57020ed9000600030000 57020ed9000600030000
> unable to decode: {replica 4} 5702fe5b000500040000 5702fe5b000500040000
> Replica ID 3 not found
> “””
>
> The ipa_consistecy_script reports this issue as two ghost replicas ("Ghost
> Replicas 2 2 2 2 FAIL”). The
> clean-dangling-ruv reports that that are no dangling RUVs.
>
> Our version is VERSION: 4.4.0, API_VERSION: 2.213, on Centos 7.3.1611
>
> In the list archives, I found one case from 2015 that sound similar and
> was possible fixed, but not confirmed, with a script cleanallruv.pl, but
> I haven’t been able to find more info on that. Any further help would be
> appreciated.
>
>
> Thanks,
> Goran
>
> --
> Goran Marik
> Senior Systems Developer
>
> ecobee
> 250 University Ave, Suite 400
> Toronto, ON M5H 3E5
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
