Hello,
we are using freeipa in a 4way multi master replication setup.
Servers ipa14,ipa15 and ipa34,ipa35 on
CentOS Linux release 7.3.1611 (Core) with version
ipa-server-common-4.4.0-14.el7.centos.7.noarch.
We have an issue where one of the servers log a missing CSN. It happens
even after
ipa replication reinitialized.
We are guessing that CSN 5a0a27d9000000060000 only exists on ipa35, but we
see it in those files listed on ipa15 and the error is reported there.
Please see attached file with logs.
How can we fix this?
--
*Sándor Juhász*
System Administrator
*ChemAxon* *Ltd*.
Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031
Cell: +36704258964
[root@ipa15 slapd-CXN]# tail /var/log/dirsrv/slapd-CXN/errors
[12/Apr/2018:13:26:05.231364497 +0200] NSMMReplicationPlugin -
agmt="cn=ipa15.bpo.cxn-to-ipa35.bph.cxn" (ipa35:389): Data required to update
replica has been purged from the changelog. The replica must be reinitialized.
[12/Apr/2018:13:26:05.232377892 +0200] agmt="cn=ipa15.bpo.cxn-to-ipa34.bph.cxn"
(ipa34:389) - Can't locate CSN 5a0a27d9000000060000 in the changelog (DB
rc=-30988). If replication stops, the consumer may need to be reinitialized.
[12/Apr/2018:13:26:05.233482709 +0200] NSMMReplicationPlugin - changelog
program - agmt="cn=ipa15.bpo.cxn-to-ipa34.bph.cxn" (ipa34:389): CSN
5a0a27d9000000060000 not found, we aren't as up to date, or we purged
[12/Apr/2018:13:26:05.234574121 +0200] NSMMReplicationPlugin -
agmt="cn=ipa15.bpo.cxn-to-ipa34.bph.cxn" (ipa34:389): Data required to update
replica has been purged from the changelog. The replica must be reinitialized.
[12/Apr/2018:13:26:09.365978165 +0200] agmt="cn=ipa15.bpo.cxn-to-ipa34.bph.cxn"
(ipa34:389) - Can't locate CSN 5a0a27d9000000060000 in the changelog (DB
rc=-30988). If replication stops, the consumer may need to be reinitialized.
[12/Apr/2018:13:26:09.367651068 +0200] NSMMReplicationPlugin - changelog
program - agmt="cn=ipa15.bpo.cxn-to-ipa34.bph.cxn" (ipa34:389): CSN
5a0a27d9000000060000 not found, we aren't as up to date, or we purged
[12/Apr/2018:13:26:09.368795838 +0200] NSMMReplicationPlugin -
agmt="cn=ipa15.bpo.cxn-to-ipa34.bph.cxn" (ipa34:389): Data required to update
replica has been purged from the changelog. The replica must be reinitialized.
[12/Apr/2018:13:26:09.370046314 +0200] agmt="cn=ipa15.bpo.cxn-to-ipa35.bph.cxn"
(ipa35:389) - Can't locate CSN 5a0a27d9000000060000 in the changelog (DB
rc=-30988). If replication stops, the consumer may need to be reinitialized.
[12/Apr/2018:13:26:09.371076721 +0200] NSMMReplicationPlugin - changelog
program - agmt="cn=ipa15.bpo.cxn-to-ipa35.bph.cxn" (ipa35:389): CSN
5a0a27d9000000060000 not found, we aren't as up to date, or we purged
[12/Apr/2018:13:26:09.372024624 +0200] NSMMReplicationPlugin -
agmt="cn=ipa15.bpo.cxn-to-ipa35.bph.cxn" (ipa35:389): Data required to update
replica has been purged from the changelog. The replica must be reinitialized.
[root@ipa15 slapd-CXN]# ls -la /var/lib/dirsrv/slapd-CXN/cldb/
total 560
drwxr-xr-x 2 dirsrv dirsrv 7 Apr 12 10:59 .
drwxrwx--- 6 dirsrv dirsrv 6 Nov 15 15:27 ..
-rw------- 1 dirsrv dirsrv 188416 Apr 12 13:24
1265b714-ca1111e7-8b4be16c-d336c0e2_58987d9e000000040000.db
-rw-r--r-- 1 dirsrv dirsrv 0 Apr 12 10:59
1265b714-ca1111e7-8b4be16c-d336c0e2.sema
-rw------- 1 dirsrv dirsrv 3923968 Apr 12 13:13
5b1d7070-ca1111e7-8b4be16c-d336c0e2_58987e19000000060000.db
-rw-r--r-- 1 dirsrv dirsrv 0 Feb 23 08:01
5b1d7070-ca1111e7-8b4be16c-d336c0e2.sema
-rw------- 1 dirsrv dirsrv 30 Nov 15 15:27 DBVERSION
[root@ipa15 slapd-CXN]# dbscan -f
/var/lib/dirsrv/slapd-CXN/cldb/5b1d7070-ca1111e7-8b4be16c-d336c0e2_58987e19000000060000.db
| grep 5a0a27d9000000060000
[root@ipa15 slapd-CXN]# dbscan -f
/var/lib/dirsrv/slapd-CXN/cldb/1265b714-ca1111e7-8b4be16c-d336c0e2_58987d9e000000040000.db
| grep 5a0a27d9000000060000
[root@ipa15 slapd-CXN]#
[root@ipa35 cldb]# tail /var/log/dirsrv/slapd-CXN/errors
[10/Apr/2018:10:04:32.885553831 +0200] NSMMReplicationPlugin -
agmt="cn=ipa35.bph.cxn-to-ipa34.bph.cxn" (ipa34:389): Warning: Unable to parse
the response to the endReplication extended operation.
[10/Apr/2018:10:39:59.910735350 +0200] NSMMReplicationPlugin -
agmt="cn=ipa35.bph.cxn-to-ipa34.bph.cxn" (ipa34:389): Warning: Unable to parse
the response to the endReplication extended operation.
[11/Apr/2018:13:43:48.793517144 +0200] NSMMReplicationPlugin -
agmt="cn=ipa35.bph.cxn-to-ipa34.bph.cxn" (ipa34:389): Warning: Unable to parse
the response to the endReplication extended operation.
[11/Apr/2018:15:28:09.367467787 +0200] NSMMReplicationPlugin -
agmt="cn=ipa35.bph.cxn-to-ipa34.bph.cxn" (ipa34:389): Warning: Unable to parse
the response to the endReplication extended operation.
[11/Apr/2018:16:32:22.833697506 +0200] NSMMReplicationPlugin -
agmt="cn=ipa35.bph.cxn-to-ipa34.bph.cxn" (ipa34:389): Warning: Unable to parse
the response to the endReplication extended operation.
[12/Apr/2018:10:58:58.431148081 +0200] NSMMReplicationPlugin - Beginning total
update of replica "agmt="cn=ipa35.bph.cxn-to-ipa15.bpo.cxn" (ipa15:389)".
[12/Apr/2018:10:58:58.568349548 +0200] NSMMReplicationPlugin -
agmt="cn=ipa35.bph.cxn-to-ipa15.bpo.cxn" (ipa15:389): Total update flow control
gives time (2000 msec) to the consumer before sending more entries [ msgid
sent: 1227, rcv: 226])
If total update fails you can try to increase nsds5ReplicaFlowControlPause
and/or decrease nsds5ReplicaFlowControlWindow in the replica agreement
configuration
[12/Apr/2018:10:59:04.273524830 +0200] NSMMReplicationPlugin - Finished total
update of replica "agmt="cn=ipa35.bph.cxn-to-ipa15.bpo.cxn" (ipa15:389)". Sent
1677 entries.
[root@ipa35 cldb]# ls -la /var/lib/dirsrv/slapd-CXN/cldb/
total 5092
drwxr-xr-x 2 dirsrv dirsrv 7 Feb 6 06:39 .
drwxrwx--- 6 dirsrv dirsrv 6 Feb 6 2017 ..
-rw------- 1 dirsrv dirsrv 34635776 Apr 12 13:27
6fb22814-ec8911e6-add8aa7e-1c0f9c30_58987d9e000000040000.db
-rw-r--r-- 1 dirsrv dirsrv 0 Feb 6 06:39
6fb22814-ec8911e6-add8aa7e-1c0f9c30.sema
-rw------- 1 dirsrv dirsrv 24576 Feb 6 06:40
ac7e1f70-ec8911e6-add8aa7e-1c0f9c30_58987e19000000060000.db
-rw-r--r-- 1 dirsrv dirsrv 0 Feb 6 06:39
ac7e1f70-ec8911e6-add8aa7e-1c0f9c30.sema
-rw------- 1 dirsrv dirsrv 30 Feb 6 2017 DBVERSION
[root@ipa35 cldb]# dbscan -f
/var/lib/dirsrv/slapd-CXN/cldb/6fb22814-ec8911e6-add8aa7e-1c0f9c30_58987d9e000000040000.db
| grep 5a0a27d9000000060000
[root@ipa35 cldb]# dbscan -f
/var/lib/dirsrv/slapd-CXN/cldb/ac7e1f70-ec8911e6-add8aa7e-1c0f9c30_58987e19000000060000.db
| grep -A 256 5a0a27d9000000060000
dbid: 5a0a27d9000000060000
replgen: 1510756646 Wed Nov 15 15:37:26 2017
csn: 5a0a27d9000000060000
uniqueid: b568b957-ea1911e6-ab7bfbcb-4e44303b
dn: cn=MasterCRL,ou=crlIssuingPoints,ou=ca,o=ipaca
operation: modify
crlSize: 010
revokedCerts: �
unrevokedCerts: �
expiredCerts: �
firstUnsaved: -1
modifiersName: uid=pkidbuser,ou=people,o=ipaca
modifyTimestamp: 20171113231638Z
[root@ipa35 cldb]#_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
