I encountered a problem where multiple services had duplicate brain splits. There were two replication protocols that overlapped with each other. How can I delete the incorrect replication of the database generation ID? I don't want to do "reinitialize" as it would result in data loss.
env ``` ubuntu16.04 CA freeipa4.3 fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com freeipa4.8 fs-hiido-kerveros-test08.hiido.host.yydevops.com ``` ssh fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com ``` root@fs-hiido-kerberos-21-117-149:/var/log/dirsrv/slapd-YYDEVOPS-COM# ldapsearch -LLL -x -H ldap://localhost:389 -D "cn=Directory Manager" -w xx -b "cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config" "(objectClass=nsds5ReplicationAgreement)" cn nsDS5ReplicaHost nsds5replicaLastUpdateStatus dn: cn=fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerver os-test08.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=m apping tree,cn=config cn: fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerveros- test08.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerveros-test08.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 402 Replication error acquiring replica: unknown error - Replica has different database generation ID, remote replica may nee d to be initialized dn: cn=meTofs-hiido-ipa-65-155.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyyde vops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-ipa-65-155.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-ipa-65-155.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded dn: cn=meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com,cn=replica,cn=dc\3D yydevops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded dn: cn=meToipa-65-189.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc \3Dcom,cn=mapping tree,cn=config cn: meToipa-65-189.hiido.host.yydevops.com nsDS5ReplicaHost: ipa-65-189.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded root@fs-hiido-kerberos-21-117-149:/var/log/dirsrv/slapd-YYDEVOPS-COM# ``` ssh fs-hiido-kerveros-test08.hiido.host.yydevops.com ``` error log [28/Jan/2026:18:22:13.802652193 +0800] - WARN - NSMMReplicationPlugin - repl5_inc_run - agmt="cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com" (fs-hiido-kerberos-21-117-149:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica. [28/Jan/2026:18:22:14.825827647 +0800] - WARN - NSMMReplicationPlugin - repl5_inc_run - agmt="cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-ipa-65-155.hiido.host.yydevops.com" (fs-hiido-ipa-65-155:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica. root@fs-hiido-kerveros-test08:~# cat ref_149.ldif dn: cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config changetype: modify add: nsds5BeginReplicaRefresh nsds5BeginReplicaRefresh: start ldapmodify -H ldap://localhost:389 -Y GSSAPI -f 149_reinit.ldif root@fs-hiido-kerveros-test08:/var/log/dirsrv/slapd-YYDEVOPS-COM# ldapsearch -LLL -x -H ldap://localhost:389 -D "cn=Directory Manager" -w ipaadmin4yycluster -b "cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config" "(objectClass=nsds5ReplicationAgreement)" cn nsDS5ReplicaHost nsds5replicaLastUpdateStatus dn: cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-ipa-65-155 .hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tr ee,cn=config cn: fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-ipa-65-155.hi ido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-ipa-65-155.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: Error (0) Replica acquired successfully: Increme ntal update succeeded dn: cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-kerberos-2 1-117-149.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=m apping tree,cn=config cn: fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-kerberos-21-1 17-149.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: Error (0) Replica acquired successfully: Increme ntal update succeeded ``` ssh fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com ``` root@fs-hiido-kerberos-21-117-149:/var/log/dirsrv/slapd-YYDEVOPS-COM# ldapsearch -LLL -x -H ldap://localhost:389 -D "cn=Directory Manager" -w ipaadmin4yycluster -b "cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config" "(objectClass=nsds5ReplicationAgreement)" cn nsDS5ReplicaHost nsds5replicaLastUpdateStatus dn: cn=fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerver os-test08.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=m apping tree,cn=config cn: fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerveros- test08.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerveros-test08.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded dn: cn=meTofs-hiido-ipa-65-155.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyyde vops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-ipa-65-155.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-ipa-65-155.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded dn: cn=meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com,cn=replica,cn=dc\3D yydevops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 1 Can't acquire busy replica dn: cn=meToipa-65-189.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc \3Dcom,cn=mapping tree,cn=config cn: meToipa-65-189.hiido.host.yydevops.com nsDS5ReplicaHost: ipa-65-189.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 402 Replication error acquiring replica: unknown error - Replica has different database generation ID, remote replica may nee d to be initialized dn: cn=meToipa-65-189.hiido.host.yydevops.com... changetype: modify add: nsds5BeginReplicaRefresh nsds5BeginReplicaRefresh: start ldapmodify -H ldap://localhost:389 -Y GSSAPI -f 189_reinit.ldif root@fs-hiido-kerberos-21-117-149:~# ldapsearch -LLL -x -H ldap://localhost:389 -D "cn=Directory Manager" -w ipaadmin4yycluster -b "cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config" "(objectClass=nsds5ReplicationAgreement)" cn nsDS5ReplicaHost nsds5replicaLastUpdateStatus dn: cn=fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerver os-test08.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=m apping tree,cn=config cn: fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerveros- test08.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerveros-test08.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 402 Replication error acquiring replica: unknown error - Replica has different database generation ID, remote replica may nee d to be initialized dn: cn=meTofs-hiido-ipa-65-155.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyyde vops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-ipa-65-155.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-ipa-65-155.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded dn: cn=meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com,cn=replica,cn=dc\3D yydevops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded dn: cn=meToipa-65-189.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc \3Dcom,cn=mapping tree,cn=config cn: meToipa-65-189.hiido.host.yydevops.com nsDS5ReplicaHost: ipa-65-189.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded ``` -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
