[prev in list] [next in list] [prev in thread] [next in thread]
List: fedora-directory-users
Subject: =?utf-8?q?=5B389-users=5D?= Re: [Freeipa-users] Re: Consumer failed to replay change Operations erro
From: Thierry Bordaz <tbordaz () redhat ! com>
Date: 2021-06-17 9:56:50
Message-ID: 2c19df07-a5f6-88c0-bc33-5fc94ef28cfc () redhat ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hello Alfred,
If it is IPA deployment I doubt that you hit [1] because it only applies
on read-only replica (hub/consumer). Also this bug is fixed in the
version you are running.
The consumer (redactedauth0003.redacted.com
<http://redactedauth0001.redacted.com-to-redactedauth0003.redacted.com>)
fails to apply a replicated MOD targeting the admin group. It is not
clear if the failure occurs at changelog update or RUV update. It is
looking it is a permanent failure so you may enable replication debug
log in case it gives more details why it is failing.
regards
thierry
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1574602
<https://bugzilla.redhat.com/show_bug.cgi?id=1574602>
On 6/17/21 11:12 AM, Florence Renaud via FreeIPA-users wrote:
> Forwarding to 389-users@lists.fedoraproject.org
> <https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.org>
> as they may have more inputs.
>
> On Wed, Jun 16, 2021 at 11:31 PM Alfred Victor via FreeIPA-users
> <freeipa-users@lists.fedorahosted.org
> <mailto:freeipa-users@lists.fedorahosted.org>> wrote:
>
> Hi FreeIPA,
>
> We have some replication messages in our slapd errors log which
> look very like the ones discussed here:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1574602
> <https://bugzilla.redhat.com/show_bug.cgi?id=1574602>
>
> I took a look and we do have the MemberOf plugin, but our version
> of 389-ds newer:
>
> *389-ds-base-1.3.10.2-10.el7_9.x86_64*
>
> *
> *
>
> *
> *
>
> Hoping someone might have a suggestion for what we might do to get
> rid of these log messages, or what the root cause may be/impact?
> They've been going since at least a couple of weeks ago:
> *
> *
>
> [15/Jun/2021:18:57:26.362094959 -0500] - WARN -
> NSMMReplicationPlugin - repl5_inc_update_from_op_result -
> agmt="cn=redactedauth0001.redacted.com-to-redactedauth0003.redacted.com
> <http://redactedauth0001.redacted.com-to-redactedauth0003.redacted.com>"
> (redactedauth0003:389): Consumer failed to replay change
> (uniqueid d5896001-39a111eb-8868efc8-91dc0b98, CSN
> 60c93bc2000400250000): Operations error (1). Will retry later.
>
>
>
>
> I looked for this same uniqueid (they are ALL the same uniqueID) and found this \
> which is interesting and references a specific cn and "optype":
>
> [03/Jun/2021:15:45:43.332068775 -0500] - ERR -
> NSMMReplicationPlugin - write_changelog_and_ruv - Can't add a
> change for cn=admin,cn=groups,cn=accounts,dc=redacted,dc=com
> (uniqid: d5896001-39a111eb-8868efc8-91dc0b98, optype: 8) to
> changelog csn 60b93f93005200230000
>
>
>
> Alfred
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> <mailto:freeipa-users@lists.fedorahosted.org>
> To unsubscribe send an email to
> freeipa-users-leave@lists.fedorahosted.org
> <mailto:freeipa-users-leave@lists.fedorahosted.org>
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> <https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
> List Guidelines:
> https://fedoraproject.org/wiki/Mailing_list_guidelines
> <https://fedoraproject.org/wiki/Mailing_list_guidelines>
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> <https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org>
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure
> <https://pagure.io/fedora-infrastructure>
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
> Fedora Code of Conduct: \
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: \
> https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: \
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org \
> Do not reply to spam on the list, report it: \
> https://pagure.io/fedora-infrastructure
[Attachment #5 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello Alfred,</p>
<p>If it is IPA deployment I doubt that you hit [1] because it only
applies on read-only replica (hub/consumer). Also this bug is
fixed in the version you are running.</p>
<p>The consumer (<a
href="http://redactedauth0001.redacted.com-to-redactedauth0003.redacted.com"
target="_blank">redactedauth0003.redacted.com</a>) fails to
apply a replicated MOD targeting the admin group. It is not clear
if the failure occurs at changelog update or RUV update. It is
looking it is a permanent failure so you may enable replication
debug log in case it gives more details why it is failing.</p>
<p>regards<br>
thierry<br>
</p>
<p><br>
</p>
<p><br>
</p>
<p>[1] <a
href="https://bugzilla.redhat.com/show_bug.cgi?id=1574602"
target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1574602</a></p>
<div class="moz-cite-prefix">On 6/17/21 11:12 AM, Florence Renaud
via FreeIPA-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAFDg7Jx0xKM3HmzdP2P6atybWSo2-GiGSVNj78jJf19dVM3b3A@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div class="gmail_default" style="font-family:arial,sans-serif">Forwarding
to <a
href="https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.org"
moz-do-not-send="true">389-users@lists.fedoraproject.org</a>
as they may have more inputs.<br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, Jun 16, 2021 at 11:31
PM Alfred Victor via FreeIPA-users <<a
href="mailto:freeipa-users@lists.fedorahosted.org"
moz-do-not-send="true">freeipa-users@lists.fedorahosted.org</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">Hi FreeIPA,<br>
<br>
We have some replication messages in our slapd errors log
which look very like the ones discussed here:<br>
<br>
<a
href="https://bugzilla.redhat.com/show_bug.cgi?id=1574602"
target="_blank" \
moz-do-not-send="true">https://bugzilla.redhat.com/show_bug.cgi?id=1574602</a><br> \
<br> I took a look and we do have the MemberOf plugin, but our
version of 389-ds newer:<br>
<br>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px
solid rgb(204,204,204);padding-left:1ex"
class="gmail_quote"><b><span
style="font-variant-ligatures:no-common-ligatures;color:rgb(202,51,35)">389</span><span
style="font-variant-ligatures:no-common-ligatures">-ds-base-1.3.10.2-10.el7_9.x86_64</span></b></blockquote>
<p
style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stre \
tch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><b><span
style="font-variant-ligatures:no-common-ligatures"><br>
</span></b></p>
<p
style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stre \
tch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><b><span
style="font-variant-ligatures:no-common-ligatures"><br>
</span></b></p>
<p
style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stre \
tch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)">Hoping
someone might have a suggestion for what we might do to
get rid of these log messages, or what the root cause may
be/impact? They've been going since at least a couple of
weeks ago:<br>
<b><span
style="font-variant-ligatures:no-common-ligatures"><br>
</span></b></p>
<pre style="box-sizing:inherit;margin-top:4px;margin-bottom:4px;padding:8p \
x;font-size:12px;line-height:1.50001;font-variant-ligatures:none;white-space:pre-wrap; \
word-break:normal;border-radius:4px;color:rgb(29,28,29);font-family:Monaco,Menlo,Consolas,"Courier \
New",monospace"><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid \
rgb(204,204,204);padding-left:1ex">[15/Jun/2021:18:57:26.362094959 -0500] - WARN - \
NSMMReplicationPlugin - repl5_inc_update_from_op_result - agmt="cn=<a \
href="http://redactedauth0001.redacted.com-to-redactedauth0003.redacted.com" \
target="_blank" moz-do-not-send="true">redactedauth0001.redacted.com-to-redactedauth0003.redacted.com</a>" \
(redactedauth0003:389): Consumer failed to replay change (uniqueid \
d5896001-39a111eb-8868efc8-91dc0b98, CSN 60c93bc2000400250000): Operations error (1). \
Will retry later.</blockquote>
I looked for this same uniqueid (they are ALL the same uniqueID) and found this which \
is interesting and references a specific cn and "optype":
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid \
rgb(204,204,204);padding-left:1ex" \
class="gmail_quote">[03/Jun/2021:15:45:43.332068775 -0500] - ERR - \
NSMMReplicationPlugin - write_changelog_and_ruv - Can't add a change for \
cn=admin,cn=groups,cn=accounts,dc=redacted,dc=com (uniqid: \
d5896001-39a111eb-8868efc8-91dc0b98, optype: 8) to changelog csn \
60b93f93005200230000</blockquote>
Alfred</pre>
</div>
_______________________________________________<br>
FreeIPA-users mailing list -- <a
href="mailto:freeipa-users@lists.fedorahosted.org"
target="_blank" \
moz-do-not-send="true">freeipa-users@lists.fedorahosted.org</a><br> To unsubscribe \
send an email to <a href="mailto:freeipa-users-leave@lists.fedorahosted.org"
target="_blank" \
moz-do-not-send="true">freeipa-users-leave@lists.fedorahosted.org</a><br> Fedora \
Code of Conduct: <a
href="https://docs.fedoraproject.org/en-US/project/code-of-conduct/"
rel="noreferrer" target="_blank" \
moz-do-not-send="true">https://docs.fedoraproject.org/en-US/project/code-of-conduct/</a><br>
List Guidelines: <a
href="https://fedoraproject.org/wiki/Mailing_list_guidelines"
rel="noreferrer" target="_blank" \
moz-do-not-send="true">https://fedoraproject.org/wiki/Mailing_list_guidelines</a><br> \
List Archives: <a href="https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org"
rel="noreferrer" target="_blank" \
moz-do-not-send="true">https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org</a><br>
Do not reply to spam on the list, report it: <a
href="https://pagure.io/fedora-infrastructure"
rel="noreferrer" target="_blank" \
moz-do-not-send="true">https://pagure.io/fedora-infrastructure</a><br> </blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" \
wrap="">_______________________________________________ FreeIPA-users mailing list -- \
<a class="moz-txt-link-abbreviated" \
href="mailto:freeipa-users@lists.fedorahosted.org">freeipa-users@lists.fedorahosted.org</a>
To unsubscribe send an email to <a class="moz-txt-link-abbreviated" \
href="mailto:freeipa-users-leave@lists.fedorahosted.org">freeipa-users-leave@lists.fedorahosted.org</a>
Fedora Code of Conduct: <a class="moz-txt-link-freetext" \
href="https://docs.fedoraproject.org/en-US/project/code-of-conduct/">https://docs.fedoraproject.org/en-US/project/code-of-conduct/</a>
List Guidelines: <a class="moz-txt-link-freetext" \
href="https://fedoraproject.org/wiki/Mailing_list_guidelines">https://fedoraproject.org/wiki/Mailing_list_guidelines</a>
List Archives: <a class="moz-txt-link-freetext" \
href="https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.or \
g">https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org</a>
Do not reply to spam on the list, report it: <a class="moz-txt-link-freetext" \
href="https://pagure.io/fedora-infrastructure">https://pagure.io/fedora-infrastructure</a>
</pre>
</blockquote>
</body>
</html>
[Attachment #6 (text/plain)]
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic