On 8/3/21 7:26 PM, John Thurston wrote:
Using that method, I was able to promote my consumer. Thanks again.
Today, I tried (and failed) to disable replication on a consumer. Either I don't understand how to disable replication (which is entirely possible), or the replication-disabling-function of the scripts is also broken.
When done with cockpit, using the red "Disable" button on the Replication screen seems to kill the instance of directory without affecting its replication status. Replication is still enabled when I restart the instance.
Are you saying the server is crashing when trying to disable replication? If it is can you please get a stack trace of the core dump?
https://www.port389.org/docs/389ds/FAQ/faq.html#sts=Debugging%C2%A0Crashes
I was just disabling replication in the UI (which uses dsconf) on 389-ds-base-2.0.7 as it was fine. Something must be really off with 1.4.4 (and you are on the latest version of 1.4.4) :-(
Mark
When I tried to disable with dsconf, I got similar results. The directory stops, but replication is still enabled when I restart it.
I ran:
dsconf -v -D "cn=Directory Manager" ldap://localhost:1389 replication disable --suffix o=foo.bar.com
and the instance listening on port 1389 disappeared, and the error log contained:
[03/Aug/2021:15:15:24.090599240 -0800] - DEBUG - PBKDF2_SHA256 - Comparing password [03/Aug/2021:15:15:24.136930743 -0800] - DEBUG - replication - copy_operation_parameters - replica is null. [03/Aug/2021:15:15:24.139180666 -0800] - WARN - NSMMReplicationPlugin
- replica_config_delete - The changelog for replica o=foo.bar.com is
no longer valid since the replica config is being deleted. Removing the changelog.
and the output of dsconf was:
DEBUG: The 389 Directory Server Configuration Tool DEBUG: Inspired by works of: ITS, The University of Adelaide DEBUG: dsrc path: /root/.dsrc DEBUG: dsrc container path: /data/config/container.inf DEBUG: dsrc instances: [] DEBUG: dsrc no such section: slapd-ldap://localhost:1389 DEBUG: Called with: Namespace(basedn=None, binddn='cn=Directory Manager', bindpw=None, func=<function disable_replication at 0x7f1b96485a60>, instance='ldap://localhost:1389', json=False, prompt=False, pwdfile=None, starttls=False, suffix='o=foo.bar.com', verbose=True) DEBUG: Instance details: {'uri': 'ldap://localhost:1389', 'basedn': None, 'binddn': 'cn=Directory Manager', 'bindpw': None, 'saslmech': None, 'tls_cacertdir': None, 'tls_cert': None, 'tls_key': None, 'tls_reqcert': None, 'starttls': False, 'prompt': False, 'pwdfile': None, 'args': {'ldapurl': 'ldap://localhost:1389', 'root-dn': 'cn=Directory Manager'}} DEBUG: SER_SERVERID_PROP not provided, assuming non-local instance DEBUG: Allocate <class 'lib389.DirSrv'> with ldap://localhost:1389 DEBUG: Allocate <class 'lib389.DirSrv'> with server1.foo.bar.com:389 DEBUG: Allocate <class 'lib389.DirSrv'> with server1.foo.bar.com:389 Enter password for cn=Directory Manager on ldap://localhost:1389: DEBUG: SER_SERVERID_PROP not provided, assuming non-local instance DEBUG: Allocate <class 'lib389.DirSrv'> with ldap://localhost:1389 DEBUG: Allocate <class 'lib389.DirSrv'> with server1.foo.bar.com:389 DEBUG: Allocate <class 'lib389.DirSrv'> with server1.foo.bar.com:389 DEBUG: open(): Connecting to uri ldap://localhost:1389 DEBUG: Using dirsrv ca certificate /etc/dirsrv/slapd-{instance_name} DEBUG: Using external ca certificate /etc/dirsrv/slapd-{instance_name} DEBUG: Using external ca certificate /etc/dirsrv/slapd-{instance_name} DEBUG: Using /etc/openldap/ldap.conf certificate policy DEBUG: ldap.OPT_X_TLS_REQUIRE_CERT = 2 DEBUG: open(): bound as cn=Directory Manager DEBUG: Retrieving entry with [('',)] DEBUG: Retrieved entry [dn: vendorVersion: 389-Directory/1.4.4.16 B2021.175.1723
] DEBUG: _gen_selector filter = (&(&(objectclass=nsds5Replica))(|(nsDS5ReplicaRoot=o=foo.bar.com))) DEBUG: cn=replica,cn=o\3Dfoo.bar.com,cn=mapping tree,cn=config getVal('nsDS5ReplicaRoot') DEBUG: list filter = (&(objectclass=nsds5replicationagreement)) DEBUG: list filter = (&(objectclass=nsDSWindowsReplicationAgreement)) DEBUG: cn=replica,cn=o\3Dfoo.bar.com,cn=mapping tree,cn=config delete DEBUG: {'result': -1, 'desc': "Can't contact LDAP server", 'ctrls': []} Traceback (most recent call last): File "/sbin/dsconf", line 134, in <module> result = args.func(inst, None, log, args) File "/usr/lib/python3.6/site-packages/lib389/cli_conf/replication.py", line 236, in disable_replication replica.delete() File "/usr/lib/python3.6/site-packages/lib389/replica.py", line 1351, in delete return super(Replica, self).delete() File "/usr/lib/python3.6/site-packages/lib389/_mapped_object.py", line 825, in delete self._instance.delete_ext_s(self._dn, serverctrls=self._server_controls, clientctrls=self._client_controls, escapehatch='i am sure') File "/usr/lib/python3.6/site-packages/lib389/__init__.py", line 173, in inner return f(*args, **kwargs) File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 562, in delete_ext_s resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout) File "/usr/lib/python3.6/site-packages/lib389/__init__.py", line 173, in inner return f(*args, **kwargs) File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 767, in result3 resp_ctrl_classes=resp_ctrl_classes File "/usr/lib/python3.6/site-packages/lib389/__init__.py", line 173, in inner return f(*args, **kwargs) File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 774, in result4 ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop) File "/usr/lib/python3.6/site-packages/lib389/__init__.py", line 173, in inner return f(*args, **kwargs) File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 340, in _ldap_call reraise(exc_type, exc_value, exc_traceback) File "/usr/lib64/python3.6/site-packages/ldap/compat.py", line 46, in reraise raise exc_value File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 324, in _ldap_call result = func(*args,**kwargs) ldap.SERVER_DOWN: {'result': -1, 'desc': "Can't contact LDAP server", 'ctrls': []} ERROR: Error: -1 - Can't contact LDAP server - []
-- Do things because you should, not just because you can.
John Thurston 907-465-8591 John.Thurston@alaska.gov Department of Administration State of Alaska
On 8/2/2021 3:35 PM, Mark Reynolds wrote:
Looks like there might be some patch missing on the 1.4.4 branch because dsconf should not be trying to create the changelog.
389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure