I have these errors in the syslog of the primary, the syslog on the secondary is clean.
Oct 30 09:41:59 ef-idm01 ns-slapd: [30/Oct/2018:09:41:59.104092627 -0700]
agmt="cn=masterAgreement1-ef-idm02.production.efilm.com-pki-tomcat"
(ef-idm02:389) - Can't locate CSN 5afd9651000200600000 in the changelog (DB
rc=-30988). If replication stops, the consumer may need to be reinitialized.
Oct 30 09:41:59 ef-idm01 ns-slapd: [30/Oct/2018:09:41:59.105088278 -0700]
NSMMReplicationPlugin - changelog program -
agmt="cn=masterAgreement1-ef-idm02.production.efilm.com-pki-tomcat"
(ef-idm02:389): CSN 5afd9651000200600000 not found, we aren't as up to date, or we
purged
Oct 30 09:41:59 ef-idm01 ns-slapd: [30/Oct/2018:09:41:59.105750108 -0700]
NSMMReplicationPlugin -
agmt="cn=masterAgreement1-ef-idm02.production.efilm.com-pki-tomcat"
(ef-idm02:389): Data required to update replica has been purged from the changelog. The
replica must be reinitialized.
I initiated a resync, but the errors continue to pile up on the primary.
grant@ef-idm02:~[20181030-9:36][#115]$ ipa-replica-manage force-sync --from
ef-idm01.production.efilm.com
Directory Manager password: ********
ipa: INFO: Setting agreement
cn=meToef-idm02.production.efilm.com,cn=replica,cn=dc\=production\,dc\=efilm\,dc\=com,cn=mapping
tree,cn=config schedule to 2358-2359 0 to force synch
ipa: INFO: Deleting schedule 2358-2359 0 from agreement
cn=meToef-idm02.production.efilm.com,cn=replica,cn=dc\=production\,dc\=efilm\,dc\=com,cn=mapping
tree,cn=config
grant@ef-idm02:~[20181030-9:37][#116]$
thanx
- grant
This e-mail and any attachments are intended only for use by the addressee(s) named herein
and may contain confidential information. If you are not the intended recipient of this
e-mail, you are hereby notified any dissemination, distribution or copying of this email
and any attachments is strictly prohibited. If you receive this email in error, please
immediately notify the sender by return email and permanently delete the original, any
copy and any printout thereof. The integrity and security of e-mail cannot be guaranteed.