On 02.10.20 17:54, Florence Blanc-Renaud via FreeIPA-users wrote:
On 10/2/20 12:06 PM, Ronald Wimmer via FreeIPA-users wrote:
On 02.10.20 11:43, Florence Blanc-Renaud wrote:
On 10/2/20 9:56 AM, Ronald Wimmer via FreeIPA-users wrote:
By coincidence I found something in /var/log/messages that does not
look too good:
Oct 2 09:41:30 pipa02.linux.mydomain.at ns-slapd[1905]:
[02/Oct/2020:09:41:30.887447735 +0200] - ERR -
NSMMReplicationPlugin - send_updates -
agmt="cn=pipa02.linux.mydomain.at-to-pipa06.linux.mydomain.at"
(pipa06:389): Data required to update replica has been purged from
the changelog. If the error persists the replica must be
reinitialized.
The error seems to persist. What has do be done? Do i have to
uninstall ipa replica and do an ipa-replica-install agein?
Hi,
depending on your domain level, you can use either
- ipa-replica-manage re-initialize and ipa-csreplica-manage
reinitialize (domain-level 0) [1]
or
- ipa topologysegment-reinitialize (domain level 1). For more
information refer to "ipa help topologysegment-reinitialize".
The command "ipa domainlevel-get" will provide you with the current
domain level. The reinitialize command forces a full synchronization
of the content from the specified source to the replica.
My domain level is 1.
ipa topologysuffix-find
---------------------------
2 topology suffixes matched
---------------------------
Suffix name: ca
Managed LDAP suffix DN: o=ipaca
Suffix name: domain
Managed LDAP suffix DN: dc=linux,dc=mydomain,dc=at
----------------------------
Number of entries returned 2
----------------------------
ipa topologysegment-find
[...]
Segment name: pipa02.linux.mydomain.at-to-pipa06.linux.mydomain.at
Left node: pipa02.linux.mydomain.at
Right node: pipa06.linux.mydomain.at
Connectivity: both
[...]
ipa topologysuffix-find
---------------------------
2 topology suffixes matched
---------------------------
Suffix name: ca
Managed LDAP suffix DN: o=ipaca
Suffix name: domain
Managed LDAP suffix DN: dc=linux,dc=mydomain,dc=at
----------------------------
Number of entries returned 2
----------------------------
[root@pipa02 ~]# ipa topologysegment-reinitialize
Suffix name: domain
Segment name: pipa02.linux.mydomain.at-to-pipa06.linux.mydomain.at
ipa: ERROR: left or right node has to be specified
[root@pipa02 ~]# ipa topologysegment-reinitialize
Suffix name: domain
Segment name: pipa06.linux.mydomain.at
ipa: ERROR: no such entry
What am I doing wrong?
Hi,
you need to specify either --left or --right to tell which side needs
to be reinitialized:
# ipa help topologysegment-reinitialize
Usage: ipa [global-options] topologysegment-reinitialize
TOPOLOGYSUFFIX NAME [options]
Request a full re-initialization of the node retrieving data from the
other node.
Options:
-h, --help show this help message and exit
--left Initialize left node
--right Initialize right node
--stop Stop already started refresh of chosen node(s)
I would advise to make a backup first, just in case you pick the wrong
side...
That does not solve the problem. The error I get is "ipa: ERROR: no such
entry".
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org