I've seen multiple different types of changes in there flagged as this issue.I suppose this might be a problem if the schema were somehow different between the two servers, which could happen if you added the schema via a file and not via LDAP.
- Some was a custom "directory string" attribute, being change from value notActivated to activated
- Some password account lockout attributes, resettime, etc.See http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#Managing_Replication-Replicating-Password-Attributes
- Most are modifications to the "memberof" attribute, which is set by the member pluginmemberof should not be replicated - see http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#groups-cmd-memberof
- Some are password changesI suppose this could be possible if the password policy is different on the supplier and the consumer
In all cases that i've checked, the data seems to be correct and consistent across all 4 nodes.
Thanks for any insight.
--stephen
On Tue, Mar 8, 2011 at 3:21 PM, Rich Megginson <rmeggins@redhat.com> wrote:
On 03/08/2011 11:17 AM, Stephen Agar wrote:What are these changes? What operations, attributes, values, etc.I have a 4 server multi master replication setup going on. We get a lot of errors like this:
NSMMReplicationPlugin - agmt="cn="Replication to server"" (server:636): Consumer failed to replay change (uniqueid 2365a885-b85511df-ad54b6ca-51ecbecb, CSN 4d6ceae5000700010000): DSA is unwilling to perform. Will retry later.
I've used cl-dump on all four nodes to dump the logs and track these down. However, all of the "offending" changes that say they weren't made do indeed seem to be applied on all 4 nodes.
Is there a command I can use to remove specific entries from the changelog? In the past, i've just re-initialized nodes to get rid of these, but that's certainly not the preferred way to do this.-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
Thanks,
Stephen