No dice on the rebuild and RUV cleaning. I'm still getting a pile of these on 
dc1-van : 

[15/Jan/2016:17:55:25 +0000] NSMMReplicationPlugin - 
agmt="" (dc1-ipa-dev-nvan:389): Skipping 
update operation with no message_id (uniqueid 
6e6784a0-b5c911e5-b1f1cd78-f19552bb, CSN 569932db000000040000):

I'm also getting these on dc1-nvan: 

[15/Jan/2016:17:45:36 +0000] attrlist_replace - attr_replace (nsslapd-referral, 
ldap:// failed.

-----Original Message-----
From: Ludwig Krispenz [] 
Sent: January-15-16 12:19 AM
To: Nathan Peters
Cc: Rob Crittenden;
Subject: Re: [Freeipa-users] Replication failing on FreeIPA 4.2.0

On 01/15/2016 08:32 AM, Nathan Peters wrote:
> I think I've finally started to make some progress on this.  I did a lot of 
> googling and found some stuff to run manually in 389 ds through ldapmodify 
> commands to clean RUVs.  During this process the server crashed and when it 
> came back online, suddenly all my ghost RUVs were visible through 
> ipa-replica-manage list-ruv.  It was really strange, I had like 5 of them 
> from winsync agreements that kept failing and needing re-initialization, and 
> another 5 from my earlier re-installations of the 2 other domain controllers.
> I ran some more ruv cleanup commands through ldap and they all appear to be 
> gone.  I'm not sure how the crash suddenly made them visible though or why 
> they had to be cleaned through ldapmodify directly and ipa-replica-manage 
> could neither see nor clean them.
After a crash the RUV could be rebuilt from the changelog, and the changelog 
could contain references to cleaned ReplicaIds and so they came to live again. 
The cleanallruv task was enhanced to also clean the changelog, but this fix is 

Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to