Re: [Freeipa-users] Replication status

2012-05-21 Thread Natxo Asenjo
On Mon, May 21, 2012 at 3:21 PM, Rich Megginson wrote: > On 05/21/2012 07:13 AM, Dan Scott wrote: > >> >> > https://fedorahosted.org/**freeipa/ticket/2770 >> >> I've modified the nagios perl script that I got from: >> >> http://directory.**fedoraproj

Re: [Freeipa-users] Replication status

2012-05-21 Thread Rich Megginson
On 05/21/2012 07:13 AM, Dan Scott wrote: On Fri, May 18, 2012 at 10:29 AM, Rich Megginson wrote: On 05/18/2012 08:13 AM, Dan Scott wrote: Hi, On Wed, May 2, 2012 at 11:13 PM, Rob Crittenden wrote: Rich Megginson wrote: On 05/02/2012 07:36 PM, Ian Levesque wrote: On May 2, 2012, at 6:48 P

Re: [Freeipa-users] Replication status

2012-05-21 Thread Dan Scott
On Fri, May 18, 2012 at 10:29 AM, Rich Megginson wrote: > On 05/18/2012 08:13 AM, Dan Scott wrote: >> >> Hi, >> >> On Wed, May 2, 2012 at 11:13 PM, Rob Crittenden >>  wrote: >>> >>> Rich Megginson wrote: On 05/02/2012 07:36 PM, Ian Levesque wrote: > > On May 2, 2012, at 6:48 PM,

Re: [Freeipa-users] Replication status

2012-05-18 Thread Rich Megginson
On 05/18/2012 12:05 PM, Dan Scott wrote: On Fri, May 18, 2012 at 1:52 PM, Rich Megginson wrote: On 05/18/2012 11:46 AM, Dan Scott wrote: On Fri, May 18, 2012 at 12:38 PM, Rich Megginson wrote: On 05/18/2012 10:31 AM, Dan Scott wrote: On Fri, May 18, 2012 at 12:21 PM, Rich Megginson wrote

Re: [Freeipa-users] Replication status

2012-05-18 Thread Dan Scott
On Fri, May 18, 2012 at 1:52 PM, Rich Megginson wrote: > On 05/18/2012 11:46 AM, Dan Scott wrote: >> >> On Fri, May 18, 2012 at 12:38 PM, Rich Megginson >>  wrote: >>> >>> On 05/18/2012 10:31 AM, Dan Scott wrote: On Fri, May 18, 2012 at 12:21 PM, Rich Megginson  wrote: > > O

Re: [Freeipa-users] Replication status

2012-05-18 Thread Rich Megginson
On 05/18/2012 11:46 AM, Dan Scott wrote: On Fri, May 18, 2012 at 12:38 PM, Rich Megginson wrote: On 05/18/2012 10:31 AM, Dan Scott wrote: On Fri, May 18, 2012 at 12:21 PM, Rich Megginson wrote: On 05/18/2012 10:06 AM, Dan Scott wrote: On Fri, May 18, 2012 at 10:29 AM, Rich Megginson wrot

Re: [Freeipa-users] Replication status

2012-05-18 Thread Dan Scott
On Fri, May 18, 2012 at 12:38 PM, Rich Megginson wrote: > On 05/18/2012 10:31 AM, Dan Scott wrote: >> >> On Fri, May 18, 2012 at 12:21 PM, Rich Megginson >>  wrote: >>> >>> On 05/18/2012 10:06 AM, Dan Scott wrote: On Fri, May 18, 2012 at 10:29 AM, Rich Megginson  wrote: > >

Re: [Freeipa-users] Replication status

2012-05-18 Thread Rich Megginson
On 05/18/2012 10:31 AM, Dan Scott wrote: On Fri, May 18, 2012 at 12:21 PM, Rich Megginson wrote: On 05/18/2012 10:06 AM, Dan Scott wrote: On Fri, May 18, 2012 at 10:29 AM, Rich Megginson wrote: On 05/18/2012 08:13 AM, Dan Scott wrote: Hi, On Wed, May 2, 2012 at 11:13 PM, Rob Crittenden

Re: [Freeipa-users] Replication status

2012-05-18 Thread Dan Scott
On Fri, May 18, 2012 at 12:21 PM, Rich Megginson wrote: > On 05/18/2012 10:06 AM, Dan Scott wrote: >> >> On Fri, May 18, 2012 at 10:29 AM, Rich Megginson >>  wrote: >>> >>> On 05/18/2012 08:13 AM, Dan Scott wrote: Hi, On Wed, May 2, 2012 at 11:13 PM, Rob Crittenden  wrote:

Re: [Freeipa-users] Replication status

2012-05-18 Thread Rich Megginson
On 05/18/2012 10:06 AM, Dan Scott wrote: On Fri, May 18, 2012 at 10:29 AM, Rich Megginson wrote: On 05/18/2012 08:13 AM, Dan Scott wrote: Hi, On Wed, May 2, 2012 at 11:13 PM, Rob Crittenden wrote: Rich Megginson wrote: On 05/02/2012 07:36 PM, Ian Levesque wrote: On May 2, 2012, at 6:48 P

Re: [Freeipa-users] Replication status

2012-05-18 Thread Dan Scott
On Fri, May 18, 2012 at 10:29 AM, Rich Megginson wrote: > On 05/18/2012 08:13 AM, Dan Scott wrote: >> >> Hi, >> >> On Wed, May 2, 2012 at 11:13 PM, Rob Crittenden >>  wrote: >>> >>> Rich Megginson wrote: On 05/02/2012 07:36 PM, Ian Levesque wrote: > > On May 2, 2012, at 6:48 PM,

Re: [Freeipa-users] Replication status

2012-05-18 Thread Rich Megginson
On 05/18/2012 08:13 AM, Dan Scott wrote: Hi, On Wed, May 2, 2012 at 11:13 PM, Rob Crittenden wrote: Rich Megginson wrote: On 05/02/2012 07:36 PM, Ian Levesque wrote: On May 2, 2012, at 6:48 PM, Rich Megginson wrote: Is there any way to expose the nsDS5ReplicationAgreement objectClass to a

Re: [Freeipa-users] Replication status

2012-05-18 Thread Dan Scott
Hi, On Wed, May 2, 2012 at 11:13 PM, Rob Crittenden wrote: > Rich Megginson wrote: >> >> On 05/02/2012 07:36 PM, Ian Levesque wrote: >>> >>> On May 2, 2012, at 6:48 PM, Rich Megginson wrote: >>> > Is there any way to expose the nsDS5ReplicationAgreement objectClass > to a less privileged

Re: [Freeipa-users] Replication status

2012-05-03 Thread JR Aquino
Also See: http://directory.fedoraproject.org/wiki/Howto:CN%3DMonitor_LDAP_Monitoring ;) On May 3, 2012, at 9:26 AM, JR Aquino wrote: > I have been considering looking into using this: > http://cnmonitor.sourceforge.net/ > > ~ > Jr Aquino | Sr. Information S

Re: [Freeipa-users] Replication status

2012-05-03 Thread JR Aquino
I have been considering looking into using this: http://cnmonitor.sourceforge.net/ ~ Jr Aquino | Sr. Information Security Specialist GIAC Certified Incident Handler | GIAC WebApp Penetration Tester Citrix Online | 7408 Hollister Avenue | Goleta, CA 93117 T: +

Re: [Freeipa-users] Replication status

2012-05-02 Thread Rob Crittenden
Rich Megginson wrote: On 05/02/2012 07:36 PM, Ian Levesque wrote: On May 2, 2012, at 6:48 PM, Rich Megginson wrote: Is there any way to expose the nsDS5ReplicationAgreement objectClass to a less privileged account; i.e., an account solely designed to check replication status? You also need to

Re: [Freeipa-users] Replication status

2012-05-02 Thread Rich Megginson
On 05/02/2012 07:36 PM, Ian Levesque wrote: On May 2, 2012, at 6:48 PM, Rich Megginson wrote: Is there any way to expose the nsDS5ReplicationAgreement objectClass to a less privileged account; i.e., an account solely designed to check replication status? You also need to expose the RUV tombs

Re: [Freeipa-users] Replication status

2012-05-02 Thread Ian Levesque
On May 2, 2012, at 6:48 PM, Rich Megginson wrote: >> Is there any way to expose the nsDS5ReplicationAgreement objectClass to a >> less privileged account; i.e., an account solely designed to check >> replication status? > > You also need to expose the RUV tombstone entry at the base of each suf

Re: [Freeipa-users] Replication status

2012-05-02 Thread Rich Megginson
On 05/02/2012 04:11 PM, Ian Levesque wrote: On May 2, 2012, at 5:56 PM, Dmitri Pal wrote: I'm curious how members of this list are monitoring their IPA servers' replication status. `ipa-replica-manage list` doesn't actually tell you if your replica is working. I just realized that our replica

Re: [Freeipa-users] Replication status

2012-05-02 Thread Ian Levesque
On May 2, 2012, at 5:56 PM, Dmitri Pal wrote: >> I'm curious how members of this list are monitoring their IPA servers' >> replication status. `ipa-replica-manage list` doesn't actually tell you if >> your replica is working. I just realized that our replica's IPA processes >> were hung (likel

Re: [Freeipa-users] Replication status

2012-05-02 Thread Dmitri Pal
On 05/02/2012 05:46 PM, Ian Levesque wrote: > Hi, > > I'm curious how members of this list are monitoring their IPA servers' > replication status. `ipa-replica-manage list` doesn't actually tell you if > your replica is working. I just realized that our replica's IPA processes > were hung (likel

Re: [Freeipa-users] Replication status

2012-05-02 Thread Dan Scott
Hi, I'm definitely interested in this too. You can use ipa-replica-manage -v list $HOSTNAME to get detailed status information. I also found this: http://directory.fedoraproject.org/wiki/Howto:ReplicationMonitoring But I believe that it needs to have the Directory Manager password hardcoded.

[Freeipa-users] Replication status

2012-05-02 Thread Ian Levesque
Hi, I'm curious how members of this list are monitoring their IPA servers' replication status. `ipa-replica-manage list` doesn't actually tell you if your replica is working. I just realized that our replica's IPA processes were hung (likely as a result of suspending & resuming the VM it's runn