Hello.  I have four IPA servers replicating in full mesh.  All four servers are 
running ipa-server-4.2.0-15.0.1.el7_2.19.x86_64.

This was working for some time but now I see that no replication is occurring 
automatically at present.

When I update a user attribute on an IPA server, I see errors like these:
[22/Sep/2016:16:53:49 -0700] attrlist_replace - attr_replace (nsslapd-referral, 
ldap://ldap03.xx.com:389/o%3Dipaca) failed.
[22/Sep/2016:16:58:56 -0700] NSMMReplicationPlugin - 
agmt="cn=masterAgreement1-ldap03.xx.com-pki-tomcat" (ldap03:389): Incremental 
update failed and requires administrator action

I can reinitialize without errors.
ipa-csreplica-manage re-initialize --from=ldap01.xx.com 
ipa-replica-manage re-initialize --from=ldap01.xx.com
Afterwards I see my attribute (and other) changes are replicated on each server 
I re-initialize from.  But subsequently, replication doesn’t seem to be 

I reinitialized according to the steps in Table 8.7, “Replication Errors”, but 
subsequent replication isn’t occurring.  Any suggestions?  Is it safe to 
identify one of my four servers as containing up-to-date data, then sever and 
reinstate replication relationships with the other three?


Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to