[Freeipa-users] Re: Time Skew on Amazon nodes?

2017-08-01 Thread pgb 205 via FreeIPA-users
also, any repercussions to leaving the CSN number skewed like this long-term(as 
 nsslapd -ignore-time-skew will only mask the problem). I take it that there 
aren't. We'll just get log messages but no ill effects otherwise.

thank you
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org


[Freeipa-users] Re: Time Skew on Amazon nodes?

2017-08-01 Thread Ludwig Krispenz via FreeIPA-users


On 08/01/2017 04:42 PM, pgb 205 via FreeIPA-users wrote:

ok thats great news! But I just want to make sure even if the server IS ALREADY 
DOWN due to this bug we can still manually edit the database (dse.ldif) for 
this value and then bring up the processes. Would that work?

yes, that should work

___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org


--
Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric 
Shander
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org


[Freeipa-users] Re: Time Skew on Amazon nodes?

2017-08-01 Thread pgb 205 via FreeIPA-users
ok thats great news! But I just want to make sure even if the server IS ALREADY 
DOWN due to this bug we can still manually edit the database (dse.ldif) for 
this value and then bring up the processes. Would that work?
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org


[Freeipa-users] Re: Time Skew on Amazon nodes?

2017-08-01 Thread Ludwig Krispenz via FreeIPA-users


On 07/31/2017 10:45 PM, pgb 205 via FreeIPA-users wrote:

Ludwig,

what about this 'fix'
https://bugzilla.redhat.com/show_bug.cgi?id=1009122

won't the setting of nsslapd -ignore-time-skew==on  effectively solve the issue?

IE on the down server edit the value in /etc/dirsrv/slapd-DOMAIN/dse.ldif  to 
nsslapd-ignore-time-skew=on
and then try to bring up the ipa server?

yes, that should work. Sorry I had missed that we had implemented this.

___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org


--
Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric 
Shander
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org


[Freeipa-users] Re: Time Skew on Amazon nodes?

2017-07-31 Thread pgb 205 via FreeIPA-users
Ludwig, 

what about this 'fix'
https://bugzilla.redhat.com/show_bug.cgi?id=1009122

won't the setting of nsslapd -ignore-time-skew==on  effectively solve the issue?

IE on the down server edit the value in /etc/dirsrv/slapd-DOMAIN/dse.ldif  to 
nsslapd-ignore-time-skew=on
and then try to bring up the ipa server?
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org