On 03/09/2011 10:11 AM, Stephen Agar wrote:
I've seen multiple different types of changes in there flagged as
this
issue.
- Some was a custom "directory string" attribute, being change from
value notActivated to activated
I suppose this might be a problem if the schema
were somehow different
between the two servers, which could happen if you added the schema via
a file and not via LDAP.
- Some password account lockout attributes, resettime, etc.
See
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-singl...
- Most are modifications to the "memberof" attribute, which
is set by
the member plugin
memberof should not be replicated - see
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-singl...
there is an Important Note on that page about replicating memberof
- Some are password changes
I suppose this could be possible if
the password policy is different on
the supplier and the consumer
In all cases that i've checked, the data seems to be correct and
consistent across all 4 nodes.
Thanks for any insight.
--stephen
On Tue, Mar 8, 2011 at 3:21 PM, Rich Megginson <rmeggins(a)redhat.com
<mailto:rmeggins@redhat.com>> wrote:
On 03/08/2011 11:17 AM, Stephen Agar wrote:
> I have a 4 server multi master replication setup going on. We
> get a lot of errors like this:
>
> NSMMReplicationPlugin - agmt="cn="Replication to server""
> (server:636): Consumer failed to replay change (uniqueid
> 2365a885-b85511df-ad54b6ca-51ecbecb, CSN 4d6ceae5000700010000):
> DSA is unwilling to perform. Will retry later.
>
> I've used cl-dump on all four nodes to dump the logs and track
> these down. However, all of the "offending" changes that say
> they weren't made do indeed seem to be applied on all 4 nodes.
What are these changes? What operations, attributes, values, etc.
> Is there a command I can use to remove specific entries from the
> changelog? In the past, i've just re-initialized nodes to get
> rid of these, but that's certainly not the preferred way to do this.
>
> Thanks,
> Stephen
>
>
> --
> 389 users mailing list
> 389-users(a)lists.fedoraproject.org
<mailto:389-users@lists.fedoraproject.org>
>
https://admin.fedoraproject.org/mailman/listinfo/389-users