Hello. I have four IPA servers replicating in full mesh. All four servers are
This was working for some time but now I see that no replication is occurring
automatically at present.
When I update a user attribute on an IPA server, I see errors like these:
[22/Sep/2016:16:53:49 -0700] attrlist_replace - attr_replace (nsslapd-referral,
[22/Sep/2016:16:58:56 -0700] NSMMReplicationPlugin -
agmt="cn=masterAgreement1-ldap03.xx.com-pki-tomcat" (ldap03:389): Incremental
update failed and requires administrator action
I can reinitialize without errors.
ipa-csreplica-manage re-initialize --from=ldap01.xx.com
ipa-replica-manage re-initialize --from=ldap01.xx.com
Afterwards I see my attribute (and other) changes are replicated on each server
I re-initialize from. But subsequently, replication doesn’t seem to be
I reinitialized according to the steps in Table 8.7, “Replication Errors”, but
subsequent replication isn’t occurring. Any suggestions? Is it safe to
identify one of my four servers as containing up-to-date data, then sever and
reinstate replication relationships with the other three?
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project