Re: [389-users] Changelog Modification

[Rich Megginson <rmeggins@xxxxxxxxxx>]

On 03/09/2011 10:11 AM, Stephen Agar wrote:

I've seen multiple different types of changes in there flagged as this issue. 
- Some was a custom "directory string" attribute, being change from value notActivated to activated

I suppose this might be a problem if the schema were somehow different between the two servers, which could happen if you added the schema via a file and not via LDAP.

- Some password account lockout attributes, resettime, etc.

See http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#Managing_Replication-Replicating-Password-Attributes

- Most are modifications to the "memberof" attribute, which is set by the member plugin

memberof should not be replicated - see http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#groups-cmd-memberof
there is an Important Note on that page about replicating memberof

- Some are password changes

I suppose this could be possible if the password policy is different on the supplier and the consumer

In all cases that i've checked, the data seems to be correct and consistent across all 4 nodes.

Thanks for any insight.

--stephen

On Tue, Mar 8, 2011 at 3:21 PM, Rich Megginson <rmeggins@xxxxxxxxxx> wrote:

On 03/08/2011 11:17 AM, Stephen Agar wrote:

I have a 4 server multi master replication setup going on.  We get a lot of errors like this:

 NSMMReplicationPlugin - agmt="cn="Replication to server"" (server:636): Consumer failed to replay change (uniqueid 2365a885-b85511df-ad54b6ca-51ecbecb, CSN 4d6ceae5000700010000): DSA is unwilling to perform. Will retry later.

I've used cl-dump on all four nodes to dump the logs and track these down.  However, all of the "offending" changes that say they weren't made do indeed seem to be applied on all 4 nodes.

What are these changes?  What operations, attributes, values, etc.

Is there a command I can use to remove specific entries from the changelog?  In the past, i've just re-initialized nodes to get rid of these, but that's certainly not the preferred way to do this.

Thanks,
Stephen

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users