Re: [Freeipa-users] Replicas in a state of confusion

2012-02-16 Thread Rich Megginson
On 02/16/2012 12:38 PM, Ian Levesque wrote: On Feb 15, 2012, at 7:22 PM, Rich Megginson wrote: Sorry for not getting back to you sooner. I can't say for sure, but it does look like you are running into some of the tombstone issues we have fixed in 1.2.10.1-1 (now in updates-testing) OK,

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-15 Thread Rich Megginson
On 02/10/2012 01:00 PM, Ian Levesque wrote: On Feb 10, 2012, at 1:36 PM, Rich Megginson wrote: This may be related to https://fedorahosted.org/389/ticket/273 and https://fedorahosted.org/389/ticket/274 which have been fixed in 1.2.10 In this case Ian please open a bugzilla, it looks like we

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-10 Thread Simo Sorce
On Thu, 2012-02-09 at 17:01 -0700, Rich Megginson wrote: This may be related to https://fedorahosted.org/389/ticket/273 and https://fedorahosted.org/389/ticket/274 which have been fixed in 1.2.10 In this case Ian please open a bugzilla, it looks like we need to address this in RHEL6. Simo.

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-10 Thread Ian Levesque
On Feb 10, 2012, at 1:36 PM, Rich Megginson wrote: This may be related to https://fedorahosted.org/389/ticket/273 and https://fedorahosted.org/389/ticket/274 which have been fixed in 1.2.10 In this case Ian please open a bugzilla, it looks like we need to address this in RHEL6. I'll

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-09 Thread Simo Sorce
On Tue, 2012-02-07 at 23:19 -0500, Ian Levesque wrote: On the replica: [21/29]: setting up initial replication Starting replication, please wait until this has completed. [sbgrid-directory.in.hwlab] reports: Update failed! Status: [-2 - System error] creation of

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-09 Thread Ian Levesque
On Feb 9, 2012, at 1:57 PM, Simo Sorce wrote: On Tue, 2012-02-07 at 23:19 -0500, Ian Levesque wrote: On the replica: [21/29]: setting up initial replication Starting replication, please wait until this has completed. [sbgrid-directory.in.hwlab] reports: Update failed!

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-09 Thread Simo Sorce
On Thu, 2012-02-09 at 16:25 -0500, Ian Levesque wrote: On Feb 9, 2012, at 1:57 PM, Simo Sorce wrote: On Tue, 2012-02-07 at 23:19 -0500, Ian Levesque wrote: On the replica: [21/29]: setting up initial replication Starting replication, please wait until this has completed.

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-09 Thread Ian Levesque
On Feb 9, 2012, at 4:59 PM, Rich Megginson wrote: I think you failed to properly clean=up before reinstalling the replica. On the replica make sure you run: ipa-server-install --uninstall On the primary: ipa-replica-manage --force del sbgrid-directory-replica.in.hwlab You will have

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-09 Thread Simo Sorce
On Thu, 2012-02-09 at 17:21 -0500, Ian Levesque wrote: On Feb 9, 2012, at 4:59 PM, Rich Megginson wrote: I think you failed to properly clean=up before reinstalling the replica. On the replica make sure you run: ipa-server-install --uninstall On the primary: ipa-replica-manage

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-09 Thread Ian Levesque
OK, that's good to know. So, assuming the problem is that there was an invalid cached credential getting in the way, here's what I did to attempt a reconfiguration of the replica: replica: ipa-server-install --uninstall reboot primary: ipa-replica-manage --force del

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-09 Thread Simo Sorce
On Thu, 2012-02-09 at 17:53 -0500, Ian Levesque wrote: OK, that's good to know. So, assuming the problem is that there was an invalid cached credential getting in the way, here's what I did to attempt a reconfiguration of the replica: replica: ipa-server-install --uninstall reboot

[Freeipa-users] Replicas in a state of confusion

2012-02-07 Thread Ian Levesque
Hello, On our production IPA servers, we have been running in a multi-master state successfully for several weeks. Yesterday, while attempting to modify some permissions and roles using the web UI, we had an odd problem where the web UI became unresponsive. In an attempt to resolve the issue,

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-07 Thread Rob Crittenden
Ian Levesque wrote: Hello, On our production IPA servers, we have been running in a multi-master state successfully for several weeks. Yesterday, while attempting to modify some permissions and roles using the web UI, we had an odd problem where the web UI became unresponsive. In an attempt

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-07 Thread Ian Levesque
On Feb 7, 2012, at 3:39 PM, Rob Crittenden wrote: snip Strange. Is your 389-ds instance running? If so can you run this query: ldapsearch -x -b 'cn=services,cn=accounts,dc=sbgrid,dc=org' '(krbprincipalname=*sbgrid-directory*)' I have the feeling that the principals for your IPA server

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-07 Thread Rob Crittenden
Ian Levesque wrote: On Feb 7, 2012, at 3:39 PM, Rob Crittenden wrote: snip Strange. Is your 389-ds instance running? If so can you run this query: ldapsearch -x -b 'cn=services,cn=accounts,dc=sbgrid,dc=org' '(krbprincipalname=*sbgrid-directory*)' I have the feeling that the principals for

Re: [Freeipa-users] Replicas in a state of confusion

2012-02-07 Thread Ian Levesque
snip Strange. Is your 389-ds instance running? If so can you run this query: ldapsearch -x -b 'cn=services,cn=accounts,dc=sbgrid,dc=org' '(krbprincipalname=*sbgrid-directory*)' I have the feeling that the principals for your IPA server have gone away. Rather than post all the output,