On 10/14/2013 08:26 PM, janice.psyop wrote:
Hi,

I've been setting up an IPA server (centos 6.4) with AD trust (2008R2 domain) following the FC18 freeipa guide.

Everything has gone smoothly until I ran the ipa-replica-manage connect command to the AD DC and it seems to be running (no errors on std out and ps says it is still running), but it has been running for six hours! We do have ~2000 user entries, but I didn't think it would take this long to sync up.
It's definitely hung up.  2k users should be very quick to sync.

The command I ran was this (see below) and the screen now just displays repeating "Update in progress". I'm very tempted to kill it in case something is going horribly wrong (with the AD user accounts...)

/usr/sbin/ipa-replica-manage connect --winsync
--passsync=MySecretPass
--binddn=CN=myipasyncuser,CN=Users,DC=domain,DC=com
--bindpw=MySecretPass
--cacert=/etc/openldap/cacerts/DC-CA.cer
-v dc.domain.com <http://dc.domain.com>


Update in progress
Update in progress
Update in progress
Update in progress
Update in progress
Update in progress
Update in progress


Is there any way to check the progress of this in case it is in fact hung up? The last few entries in the ipa/default.log is from six hours ago:
Is there anything of interest in the 389 DS errors log? It's located at /var/log/dirsrv/slapd-<realm>/errors.

Thanks,
-NGK


2013-10-14T21:32:45Z 2706 MainThread ipa INFO Added new sync agreement, waiting for it to become ready . . . 2013-10-14T21:32:46Z 2706 MainThread ipa INFO Replication Update in progress: FALSE: status: 0 Replica acquired successfully: Incremental update started: start: 0: end: 0 2013-10-14T21:32:46Z 2706 MainThread ipa INFO Agreement is ready, starting replication . . .


thanks much,
-J.


_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to