On 01/03/17 08:05, Ludwig Krispenz wrote:
On 02/28/2017 07:52 PM, lejeczek wrote:
On 28/02/17 09:45, Petr Vobornik wrote:
On 02/26/2017 11:35 AM, lejeczek wrote:
hi everyone
I first time see:
unable to decode: {replica 60} 586eaffd000a003c0000
586eaffd000a003c0000
Replica Update Vectors:
....
on all four servers. What would be a correct
troubleshooting and fixing this
problem?
many thanks,
L.
Hello,
what is the version and OS of your IPA servers and DS?
$ rpm -q ipa-server freeipa-server 389-ds-base
well I run a Centos 7.x and
~]$ rpm -q ipa-server freeipa-server 389-ds-base
ipa-server-4.4.0-14.el7.centos.4.x86_64
package freeipa-server is not installed
389-ds-base-1.3.5.10-15.el7_3.x86_64
I searched the net and archives but failed to find
anything flagged as "solved".
if you expect help, you should provide a bit more
information than the snippet of an error message. As Petr
pointed out this looks like a problem of a corrupted RUV,
but we also haven't seen these for a long time.
Could you describe your deployment, what changed recently
(addigng/removing replicas, crashes,.... )
A mapping of servers and replica Ids, to which server does
"60" refer?
If I new what "60" referred to I'd have had not ask the
question, most likely. I thought it something IPA itself
cannot decode so how could I?
I ran first - clean-dangling-ruv - which clean a lot, but
during the cleanup it kept spitting out: unable to decode..
"replica 60" is nothing like a hostname or any other human,
me, given reference.
I thought it is obvious that these days people start with
sroogle and later "mailing lists" are last resort and not
the place to do shop talk, well, very rarely should be.
But, I did NOT sroogle enough, I realize it now.
this fails:
~]$ ipa-replica-manage clean-ruv 60
Directory Manager password:
unable to decode: {replica 60} 586eaffd000a003c0000
586eaffd000a003c0000
Replica ID 60 not found
but this succeeds:
~]$ ldapmodify -p 389 -h $(hostname) -D "cn=directory
manager" -Y GSSAPI -a
SASL/GSSAPI authentication started
SASL username: ad...@private.dom.my
SASL SSF: 56
SASL data security layer installed.
dn: cn=clean 60, cn=cleanallruv, cn=tasks, cn=config
objectclass: extensibleObject
replica-base-dn: dc=private,dc=private,dc=my
replica-id: 60
cn: clean 60
adding new entry "cn=clean 60, cn=cleanallruv, cn=tasks,
cn=config"
logs:
04/Mar/2017:11:59:44.643623797 +0000] NSMMReplicationPlugin
- CleanAllRUV Task: launching cleanAllRUV thread...
[04/Mar/2017:11:59:44.673317808 +0000] NSMMReplicationPlugin
- CleanAllRUV Task (rid 60): Cleaning rid (60)...
[04/Mar/2017:11:59:44.675400517 +0000] NSMMReplicationPlugin
- CleanAllRUV Task (rid 60): Waiting to process all the
updates from the deleted replica...
[04/Mar/2017:11:59:44.677347412 +0000] NSMMReplicationPlugin
- CleanAllRUV Task (rid 60): Waiting for all the replicas to
be online...
[04/Mar/2017:11:59:44.713849540 +0000] NSMMReplicationPlugin
- CleanAllRUV Task (rid 60): Waiting for all the replicas to
receive all the deleted replica updates...
[04/Mar/2017:11:59:44.743398566 +0000] NSMMReplicationPlugin
- CleanAllRUV Task (rid 60): Sending cleanAllRUV task to all
the replicas...
[04/Mar/2017:11:59:44.784880691 +0000] NSMMReplicationPlugin
- CleanAllRUV Task (rid 60): Cleaning local ruv's...
[04/Mar/2017:11:59:45.792197518 +0000] NSMMReplicationPlugin
- CleanAllRUV Task (rid 60): Waiting for all the replicas to
be cleaned...
[04/Mar/2017:11:59:45.850641867 +0000] NSMMReplicationPlugin
- CleanAllRUV Task (rid 60): Waiting for all the replicas to
finish cleaning...
[04/Mar/2017:11:59:45.881786089 +0000] NSMMReplicationPlugin
- CleanAllRUV Task (rid 60): Successfully cleaned rid(60).
and it is fixed.
thanks!
Check the ruvs for all suffixes on all servers.
Try cleaning the RUV, if IPA command does not work do it
by ldapmodify
There have been many discussions on this topic in this
mailing list, look for "cleanallruv", "haunted servers",..
Ludwig
Similar issues happened last year, you can search the
archives for "unable to decode" but a 389-ds fix
improved the situation. So if you have older version
then maybe update and then manual cleanup of RUVs might
help.
--
Red Hat GmbH,http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric
Shander
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
