hi,


On Mon, Sep 26, 2016 at 3:06 PM, Ludwig Krispenz <lkris...@redhat.com>
wrote:

>
> On 09/26/2016 02:56 PM, Natxo Asenjo wrote:
>
>
> so the command has not been successful in the kdc03. in the dirsrv errors
> log  I see:
>
> [26/Sep/2016:14:50:54 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid
> 71): Not all replicas online, retrying in 640 seconds...
>
> this looks like there is still a replication agreement to one of the no
> longer existing servers.
>
> can you search for "... -b "cn=config" "objectclass=nsds5replicationagreement"
>
>
> and remove the ones no longer needed.
>

allow me to post the output of both commands as separate files

I am not really sure which one I need to remove.

--
Groeten,
natxo
$ ldapsearch -Z -h kdc03.unix.iriszorg.nl -D "cn=Directory Manager" -W -b "cn=config" "objectclass=nsds5replicationagreement" 
Enter LDAP Password: 
# extended LDIF
#
# LDAPv3
# base <cn=config> with scope subtree
# filter: objectclass=nsds5replicationagreement
# requesting: ALL
#

# meTokdc04.unix.iriszorg.nl, replica, dc\3Dunix\2Cdc\3Diriszorg\2Cdc\3Dnl, map
 ping tree, config
dn: cn=meTokdc04.unix.iriszorg.nl,cn=replica,cn=dc\3Dunix\2Cdc\3Diriszorg\2Cdc
 \3Dnl,cn=mapping tree,cn=config
cn: meTokdc04.unix.iriszorg.nl
objectClass: nsds5replicationagreement
objectClass: top
nsDS5ReplicaTransportInfo: LDAP
nsds5ReplicaStripAttrs: modifiersName modifyTimestamp internalModifiersName in
 ternalModifyTimestamp
nsDS5ReplicaRoot: dc=unix,dc=iriszorg,dc=nl
nsDS5ReplicaHost: kdc04.unix.iriszorg.nl
nsds5replicaTimeout: 120
nsDS5ReplicaPort: 389
nsDS5ReplicaBindMethod: SASL/GSSAPI
nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof idnssoaserial
  entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
description: me to kdc04.unix.iriszorg.nl
nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn krblasts
 uccessfulauth krblastfailedauth krbloginfailedcount
nsds50ruv: {replicageneration} 50c101a8000000040000
nsds50ruv: {replica 13 ldap://kdc04.unix.iriszorg.nl:389} 57e4d5080000000d0000
  57e905880001000d0000
nsds50ruv: {replica 12 ldap://kdc03.unix.iriszorg.nl:389} 57e23d170000000c0000
  57e904530004000c0000
nsds50ruv: {replica 3 ldap://kdc02.unix.iriszorg.nl:389} 51d2e0cf002100030000 
 57e4dbd2000400030000
nsruvReplicaLastModified: {replica 13 ldap://kdc04.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 12 ldap://kdc03.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 3 ldap://kdc02.unix.iriszorg.nl:389} 000000
 00
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 20160926131845Z
nsds5replicaLastUpdateEnd: 20160926131845Z
nsds5replicaChangesSentSinceStartup:: MTI6MTkvNDk4MzMg
nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd
 ate succeeded
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 19700101000000Z
nsds5replicaLastInitEnd: 19700101000000Z

# cloneAgreement1-kdc03.unix.iriszorg.nl-pki-tomcat, replica, o\3Dipaca, mappin
 g tree, config
dn: cn=cloneAgreement1-kdc03.unix.iriszorg.nl-pki-tomcat,cn=replica,cn=o\3Dipa
 ca,cn=mapping tree,cn=config
cn: cloneAgreement1-kdc03.unix.iriszorg.nl-pki-tomcat
description: cloneAgreement1-kdc03.unix.iriszorg.nl-pki-tomcat
nsDS5ReplicaBindDN: cn=Replication Manager masterAgreement1-kdc03.unix.iriszor
 g.nl-pki-tomcat,ou=csusers,cn=config
nsDS5ReplicaBindMethod: Simple
nsDS5ReplicaCredentials: {removed}
nsDS5ReplicaHost: kdc01.unix.iriszorg.nl
nsDS5ReplicaPort: 7389
nsDS5ReplicaRoot: o=ipaca
nsDS5ReplicaTransportInfo: TLS
nsds50ruv: {replicageneration} 50c1015c000000600000
nsds50ruv: {replica 96 ldap://kdc01.unix.iriszorg.nl:7389} 50c1016c00000060000
 0 57e8d220000000600000
nsds50ruv: {replica 66 ldap://kdc03.unix.iriszorg.nl:389} 57e23f66000000420000
  57e8cf1b000000420000
nsds50ruv: {replica 71 ldap://kdc03.unix.iriszorg.nl:389} 57e140c7000000470000
  57e141bf000000470000
nsds50ruv: {replica 97 ldap://kdc02.unix.iriszorg.nl:7389} 50c1016800000061000
 0 57e4de1a000200610000
nsds50ruv: {replica 1095 ldap://kdc04.unix.iriszorg.nl:389} 57e4d75a0000044700
 00 57e4d75b000204470000
nsruvReplicaLastModified: {replica 96 ldap://kdc01.unix.iriszorg.nl:7389} 0000
 0000
nsruvReplicaLastModified: {replica 66 ldap://kdc03.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 71 ldap://kdc03.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 97 ldap://kdc02.unix.iriszorg.nl:7389} 0000
 0000
nsruvReplicaLastModified: {replica 1095 ldap://kdc04.unix.iriszorg.nl:389} 000
 00000
objectClass: top
objectClass: nsds5replicationagreement
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 19700101000000Z
nsds5replicaLastUpdateEnd: 19700101000000Z
nsds5replicaChangesSentSinceStartup:
nsds5replicaLastUpdateStatus: -1 Unable to acquire replicaLDAP error: Can't co
 ntact LDAP server
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 19700101000000Z
nsds5replicaLastInitEnd: 19700101000000Z

# masterAgreement1-kdc04.unix.iriszorg.nl-pki-tomcat, replica, o\3Dipaca, mappi
 ng tree, config
dn: cn=masterAgreement1-kdc04.unix.iriszorg.nl-pki-tomcat,cn=replica,cn=o\3Dip
 aca,cn=mapping tree,cn=config
objectClass: top
objectClass: nsds5replicationagreement
cn: masterAgreement1-kdc04.unix.iriszorg.nl-pki-tomcat
nsDS5ReplicaRoot: o=ipaca
nsDS5ReplicaHost: kdc04.unix.iriszorg.nl
nsDS5ReplicaPort: 389
nsDS5ReplicaBindDN: cn=Replication Manager cloneAgreement1-kdc04.unix.iriszorg
 .nl-pki-tomcat,ou=csusers,cn=config
nsDS5ReplicaBindMethod: Simple
nsDS5ReplicaTransportInfo: TLS
description: masterAgreement1-kdc04.unix.iriszorg.nl-pki-tomcat
nsDS5ReplicaCredentials: {removed}
nsds50ruv: {replicageneration} 50c1015c000000600000
nsds50ruv: {replica 1095 ldap://kdc04.unix.iriszorg.nl:389} 57e4d75a0000044700
 00 57e4d75b000204470000
nsds50ruv: {replica 66 ldap://kdc03.unix.iriszorg.nl:389} 57e23f66000000420000
  57e903d8000000420000
nsds50ruv: {replica 96 ldap://kdc01.unix.iriszorg.nl:7389} 50c1016c00000060000
 0 57e39120000000600000
nsds50ruv: {replica 71 ldap://kdc03.unix.iriszorg.nl:389} 57e140c7000000470000
  57e141bf000000470000
nsds50ruv: {replica 97 ldap://kdc02.unix.iriszorg.nl:7389} 50c1016800000061000
 0 57e4de1a000200610000
nsruvReplicaLastModified: {replica 1095 ldap://kdc04.unix.iriszorg.nl:389} 000
 00000
nsruvReplicaLastModified: {replica 66 ldap://kdc03.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 96 ldap://kdc01.unix.iriszorg.nl:7389} 0000
 0000
nsruvReplicaLastModified: {replica 71 ldap://kdc03.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 97 ldap://kdc02.unix.iriszorg.nl:7389} 0000
 0000
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 19700101000000Z
nsds5replicaLastUpdateEnd: 19700101000000Z
nsds5replicaChangesSentSinceStartup:: NjY6MTcvMCA=
nsds5replicaLastUpdateStatus: -1 Incremental update has failed and requires ad
 ministrator actionLDAP error: Can't contact LDAP server
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 19700101000000Z
nsds5replicaLastInitEnd: 19700101000000Z

# search result
search: 3
result: 0 Success

# numResponses: 4
# numEntries: 3
$ ldapsearch -Z -h kdc04.unix.iriszorg.nl -D "cn=Directory Manager" -W -b "cn=config" "objectclass=nsds5replicationagreement" 
Enter LDAP Password: 
# extended LDIF
#
# LDAPv3
# base <cn=config> with scope subtree
# filter: objectclass=nsds5replicationagreement
# requesting: ALL
#

# meTokdc03.unix.iriszorg.nl, replica, dc\3Dunix\2Cdc\3Diriszorg\2Cdc\3Dnl, map
 ping tree, config
dn: cn=meTokdc03.unix.iriszorg.nl,cn=replica,cn=dc\3Dunix\2Cdc\3Diriszorg\2Cdc
 \3Dnl,cn=mapping tree,cn=config
cn: meTokdc03.unix.iriszorg.nl
description: me to kdc03.unix.iriszorg.nl
nsDS5ReplicaBindMethod: SASL/GSSAPI
nsDS5ReplicaHost: kdc03.unix.iriszorg.nl
nsDS5ReplicaPort: 389
nsDS5ReplicaRoot: dc=unix,dc=iriszorg,dc=nl
nsDS5ReplicaTransportInfo: LDAP
nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof idnssoaserial
  entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn krblasts
 uccessfulauth krblastfailedauth krbloginfailedcount
nsds50ruv: {replicageneration} 50c101a8000000040000
nsds50ruv: {replica 12 ldap://kdc03.unix.iriszorg.nl:389} 57e23d170000000c0000
  57e4da9e0002000c0000
nsds50ruv: {replica 13 ldap://kdc04.unix.iriszorg.nl:389} 57e4d5080000000d0000
  57e4d7fe0002000d0000
nsds50ruv: {replica 4 ldap://kdc01.unix.iriszorg.nl:389} 51ce0a85000000040000 
 57e4d799000800040000
nsds50ruv: {replica 3 ldap://kdc02.unix.iriszorg.nl:389} 51d2e0cf002100030000 
 57e4d799000a00030000
nsds5ReplicaStripAttrs: modifiersName modifyTimestamp internalModifiersName in
 ternalModifyTimestamp
nsds5replicaTimeout: 120
nsruvReplicaLastModified: {replica 12 ldap://kdc03.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 13 ldap://kdc04.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 4 ldap://kdc01.unix.iriszorg.nl:389} 000000
 00
nsruvReplicaLastModified: {replica 3 ldap://kdc02.unix.iriszorg.nl:389} 000000
 00
objectClass: nsds5replicationagreement
objectClass: top
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 20160926132023Z
nsds5replicaLastUpdateEnd: 20160926132023Z
nsds5replicaChangesSentSinceStartup:: MTM6Mzc3LzE4ODY1MzggMTI6Ny8wIA==
nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd
 ate succeeded
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 19700101000000Z
nsds5replicaLastInitEnd: 19700101000000Z

# cloneAgreement1-kdc04.unix.iriszorg.nl-pki-tomcat, replica, o\3Dipaca, mappin
 g tree, config
dn: cn=cloneAgreement1-kdc04.unix.iriszorg.nl-pki-tomcat,cn=replica,cn=o\3Dipa
 ca,cn=mapping tree,cn=config
cn: cloneAgreement1-kdc04.unix.iriszorg.nl-pki-tomcat
description: cloneAgreement1-kdc04.unix.iriszorg.nl-pki-tomcat
nsDS5ReplicaBindDN: cn=Replication Manager masterAgreement1-kdc04.unix.iriszor
 g.nl-pki-tomcat,ou=csusers,cn=config
nsDS5ReplicaBindMethod: Simple
nsDS5ReplicaCredentials: {removed}
nsDS5ReplicaHost: kdc03.unix.iriszorg.nl
nsDS5ReplicaPort: 389
nsDS5ReplicaRoot: o=ipaca
nsDS5ReplicaTransportInfo: TLS
nsds50ruv: {replicageneration} 50c1015c000000600000
nsds50ruv: {replica 66 ldap://kdc03.unix.iriszorg.nl:389} 57e23f66000000420000
  57e4da94000000420000
nsds50ruv: {replica 1095 ldap://kdc04.unix.iriszorg.nl:389} 57e4d75a0000044700
 00 57e4d75b000204470000
nsds50ruv: {replica 96 ldap://kdc01.unix.iriszorg.nl:7389} 50c1016c00000060000
 0 57e39120000000600000
nsds50ruv: {replica 71 ldap://kdc03.unix.iriszorg.nl:389} 57e140c7000000470000
  57e141bf000000470000
nsds50ruv: {replica 97 ldap://kdc02.unix.iriszorg.nl:7389} 50c1016800000061000
 0 57e4da96000200610000
nsruvReplicaLastModified: {replica 66 ldap://kdc03.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 1095 ldap://kdc04.unix.iriszorg.nl:389} 000
 00000
nsruvReplicaLastModified: {replica 96 ldap://kdc01.unix.iriszorg.nl:7389} 0000
 0000
nsruvReplicaLastModified: {replica 71 ldap://kdc03.unix.iriszorg.nl:389} 00000
 000
nsruvReplicaLastModified: {replica 97 ldap://kdc02.unix.iriszorg.nl:7389} 0000
 0000
objectClass: top
objectClass: nsds5replicationagreement
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 20160926123516Z
nsds5replicaLastUpdateEnd: 20160926123516Z
nsds5replicaChangesSentSinceStartup:
nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd
 ate succeeded
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 19700101000000Z
nsds5replicaLastInitEnd: 19700101000000Z

# search result
search: 3
result: 0 Success

# numResponses: 3
# numEntries: 2

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to