Re: [Freeipa-users] Automatic consistency checking
On 05/05/2016 04:35 PM, Martin Basti wrote: > > > On 05.05.2016 15:54, Andrew Holway wrote: > > Hello, > > We've been using Freeipa on Centos for a while and found one day that the > replication stuff was broken and that the LDAP database on our pair of IPA > servers was inconsistent. We didn't know how long this had been broken for > but we were not able to repair it either. > > We use AWS so we've now deployed RHEL AMI's and are now using IdM so we > can > get support when this is breaking but I am a bit stuck how to monitor that > the replication is still working. > > So is there some monitoring mechanisms in FreeIPA? > > Cheers, > > Andrew > > > > This is planned for future, you can use Right. This is the long term plan and design: http://www.freeipa.org/page/V4/Monitor_Replication_Topology Ludwig (CCed) had some ideas already, I am not sure if all of them are in the design. > https://github.com/peterpakos/ipa_check_consistency (community script without > any guarantee) to check your servers. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Automatic consistency checking
On 05.05.2016 15:54, Andrew Holway wrote: Hello, We've been using Freeipa on Centos for a while and found one day that the replication stuff was broken and that the LDAP database on our pair of IPA servers was inconsistent. We didn't know how long this had been broken for but we were not able to repair it either. We use AWS so we've now deployed RHEL AMI's and are now using IdM so we can get support when this is breaking but I am a bit stuck how to monitor that the replication is still working. So is there some monitoring mechanisms in FreeIPA? Cheers, Andrew This is planned for future, you can use https://github.com/peterpakos/ipa_check_consistency (community script without any guarantee) to check your servers. Martin -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Automatic consistency checking
On 05/05/2016 03:54 PM, Andrew Holway wrote: Hello, We've been using Freeipa on Centos for a while and found one day that the replication stuff was broken and that the LDAP database on our pair of IPA servers was inconsistent. We didn't know how long this had been broken for but we were not able to repair it either. We use AWS so we've now deployed RHEL AMI's and are now using IdM so we can get support when this is breaking but I am a bit stuck how to monitor that the replication is still working. So is there some monitoring mechanisms in FreeIPA? Cheers, Andrew Hi Andrew, to check the status of a replica you can use the following command: """ ipa-replica-manage list -v replica1.ipa.test master1.ipa.test: replica last init status: None last init ended: 1970-01-01 00:00:00+00:00 last update status: 0 Replica acquired successfully: Incremental update succeeded last update ended: 2016-05-05 14:29:01+00:00 """ -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
[Freeipa-users] Automatic consistency checking
Hello, We've been using Freeipa on Centos for a while and found one day that the replication stuff was broken and that the LDAP database on our pair of IPA servers was inconsistent. We didn't know how long this had been broken for but we were not able to repair it either. We use AWS so we've now deployed RHEL AMI's and are now using IdM so we can get support when this is breaking but I am a bit stuck how to monitor that the replication is still working. So is there some monitoring mechanisms in FreeIPA? Cheers, Andrew -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
