[389-users] Re: repl-monitor

2017-10-30 Thread Sergei Gerasenko
Say I want to create a nagios check when the lags are getting long. Obviously I don’t want to use the directory manager’s account to retrieve the RUV information. How can I create a user with read-only privileges for this data? If you have a quick pointer, that should be sufficient. Thank you!

[389-users] Re: repl-monitor

2017-10-30 Thread Sergei Gerasenko
>> Is that not a correct way to search for RUVs (both local and agreements’)? I >> get the same results as in the code > Right, entries under cn=config are not "special entries". Only the database > tombstone/RUV entry is. So to see a backend database RUV you need to use > "(&(nsuniqueid=

[389-users] Re: repl-monitor

2017-10-30 Thread Mark Reynolds
On 10/30/2017 02:06 PM, Sergei Gerasenko wrote: >>> Question 1, in the script, the list of RUVs is retrieved like so: >>> >>>     $ruv = $conn->search($replicaroot, "one", >>>               >>>   >>> "(&(nsuniqueid=---)(objectClass=nsTombstone))", >>>              

[389-users] Re: repl-monitor

2017-10-30 Thread Sergei Gerasenko
>> Question 1, in the script, the list of RUVs is retrieved like so: >> >> $ruv = $conn->search($replicaroot, "one", >> >> "(&(nsuniqueid=---)(objectClass=nsTombstone))", >>0, qw(nsds50ruv nsruvReplicaLastModified nsds5AgmtMaxCSN)

[389-users] Re: repl-monitor

2017-10-30 Thread Mark Reynolds
On 10/30/2017 01:03 PM, Sergei Gerasenko wrote: >> Look for:  nsDS5ReplicatedAttributeList >> >> nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof >> idnssoaserial >>   entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount >> >> In this case any update to any one of

[389-users] Re: repl-monitor

2017-10-30 Thread Sergei Gerasenko
> Look for: nsDS5ReplicatedAttributeList > > nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof idnssoaserial > entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount > > In this case any update to any one of these attributes is NOT replicated. So > if you update

[389-users] Re: repl-monitor

2017-10-30 Thread Mark Reynolds
On 10/30/2017 12:37 PM, Sergei Gerasenko wrote: > Hi Mark, > >>> The replication is working. I wrote a script that makes a change on >>> *each* member of the topology and verifies that it got to all the >>> other members. So, it appears that all is good. >> >> Yup, the monitor output looks good >

[389-users] Re: repl-monitor

2017-10-30 Thread Sergei Gerasenko
Hi Mark, >> The replication is working. I wrote a script that makes a change on each >> member of the topology and verifies that it got to all the other members. >> So, it appears that all is good. > > Yup, the monitor output looks good Cool! > Okay, so FreeIPA uses fractional replication and

[389-users] Re: repl-monitor

2017-10-30 Thread Mark Reynolds
On 10/29/2017 10:11 PM, Sergei Gerasenko wrote: > Hi Mark, > > Thank you for the quick response. I’m just beginning to unravel the > mysteries of replication Easier said than done... > , so I really appreciate an expert’s help. > > As you can see in the screenshot, There is no screenshot attached

[389-users] Re: repl-monitor

2017-10-29 Thread Sergei Gerasenko
Hi Mark, Thank you for the quick response. I’m just beginning to unravel the mysteries of replication, so I really appreciate an expert’s help. As you can see in the screenshot, the max db csn is quite a bit ahead. Is that an indication of a problem? Should the server not try to minimize the d

[389-users] Re: repl-monitor

2017-10-29 Thread Mark Reynolds
On 10/29/2017 03:20 PM, Sergei Gerasenko wrote: > My question now is: what’s the difference between the maxcsn of the > agreement and the maxcsn in the RUV? The maxcsn in the RUV is where the database is at, the agreement maxcsn is what the repl agreement has processed. __

[389-users] Re: repl-monitor

2017-10-29 Thread Sergei Gerasenko
After looking at the code for a couple of days, I finally see how the difference is calculated: Delta = Max Consumer CSN - Max Agreement CSN Thus, instead of the max CSN of the RUV, the agreement's maxcsn is used? My question now is: what’s the difference between the maxcsn of the agreement an