Andrey Ptashnik via FreeIPA-users wrote: > Team, > > When I run LDAP search for conflicting records I see that one replica is > listed as a conflicting record. Do you know how that may have happened and > can I safely remove it? > > # ldapsearch -xLLL -D "cn=Directory Manager" -W -b "dc=aws,dc=cccis,dc=com" > "nsds5ReplConflict=*" dn | perl -p00e 's/\r?\n //g' | sed -e "s/dn: //g" > > /tmp/ldap-conflicts.list > > # cat ldap-conflicts_09.22.17.list > dnaHostname=ipa-idm-replica-1b.sub.domain.com+dnaPortNum=389+nsuniqueid=c31c804c-9fa311e7-862eb8db-a442907b,cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=sub,dc=domain,dc=com
It happens when two masters write to the entry in a way that the MMR plugin can't easily resolve. What you want to do is look at the current and conflict entry and merge whatever changes (if any) that weren't done automatically. Then you can remove the conflict entry. rob _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
