Re: [389-users] Changelog Modification

Rich Megginson <rmeggins@xxxxxxxxxx> · Wed, 09 Mar 2011 10:18:57 -0700



    On 03/09/2011 10:11 AM, Stephen Agar wrote:
    I've seen multiple different types of changes in there
      flagged as this issue.  

      - Some was a custom "directory string" attribute, being change
      from value notActivated to activated

    
    I suppose this might be a problem if the schema were somehow
    different between the two servers, which could happen if you added
    the schema via a file and not via LDAP.

    - Some password account lockout attributes, resettime,
      etc.

    
    See
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#Managing_Replication-Replicating-Password-Attributes

    
      - Most are modifications to the "memberof" attribute, which is set
      by the member plugin

    
    memberof should not be replicated - see
    http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#groups-cmd-memberof
    

    there is an Important Note on that page about replicating memberof

    - Some are password changes

    
    I suppose this could be possible if the password policy is different
    on the supplier and the consumer

    
      In all cases that i've checked, the data seems to be correct and
      consistent across all 4 nodes.

      
      Thanks for any insight.

      
      --stephen

      
      On Tue, Mar 8, 2011 at 3:21 PM, Rich
        Megginson <rmeggins@xxxxxxxxxx>
        wrote:

        
             On 03/08/2011 11:17 AM, Stephen Agar wrote:
              I have a 4 server multi master
                replication setup going on.  We get a lot of errors like
                this:

                
                 NSMMReplicationPlugin - agmt="cn="Replication to
                server"" (server:636): Consumer failed to replay change
                (uniqueid 2365a885-b85511df-ad54b6ca-51ecbecb, CSN
                4d6ceae5000700010000): DSA is unwilling to perform. Will
                retry later.

                
                I've used cl-dump on all four nodes to dump the logs and
                track these down.  However, all of the "offending"
                changes that say they weren't made do indeed seem to be
                applied on all 4 nodes.
            
            What are these changes?  What operations, attributes,
            values, etc.

            
              Is there a command I can use to remove
                specific entries from the changelog?  In the past, i've
                just re-initialized nodes to get rid of these, but
                that's certainly not the preferred way to do this.

                
                Thanks,

                Stephen

              
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
            
            
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users