Replica config from FDS 1.2.0 (Supplier):
dn: cn=mapping tree,cn=config
objectClass: top
objectClass: extensibleObject
cn: mapping tree
dn: cn="dc=foo,dc=gov,dc=br",cn=mapping tree, cn=config
objectClass: top
objectClass: extensibleObject
objectClass: nsMappingTree
nsslapd-state: Backend
cn: "dc=foo,dc=gov,dc=br"
nsslapd-parent-suffix: "dc=gov,dc=br"
nsslapd-backend: foo
dn: cn="dc=gov,dc=br",cn=mapping tree, cn=config
objectClass: top
objectClass: extensibleObject
objectClass: nsMappingTree
nsslapd-state: Backend
cn: "dc=gov,dc=br"
nsslapd-backend: raiz
dn: cn="o=netscaperoot", cn=mapping tree, cn=config
nsslapd-state: backend
objectClass: top
objectClass: extensibleObject
objectClass: nsMappingTree
cn: "o=netscaperoot"
nsslapd-backend: NetscapeRoot
dn: cn=replica,cn="dc=foo,dc=gov,dc=br",cn=mapping tree, cn=config
objectClass: nsDS5Replica
objectClass: top
nsDS5ReplicaRoot: dc=foo,dc=gov,dc=br
nsDS5ReplicaType: 3
nsDS5Flags: 1
nsDS5ReplicaId: 4
nsds5ReplicaPurgeDelay: 604800
nsDS5ReplicaBindDN: uid=replicador,cn=config
cn: replica
nsState:: BAAAAKB8ZVEAAAAAAAAAAAIAAAA=
nsDS5ReplicaName: b8856102-1dd111b2-a0e2d329-568c0000
nsds5ReplicaChangeCount: 0
nsds5replicareapactive: 0
dn: cn=replica,cn="dc=gov,dc=br",cn=mapping tree, cn=config
objectClass: nsDS5Replica
objectClass: top
nsDS5ReplicaRoot: dc=gov,dc=br
nsDS5ReplicaType: 3
nsDS5Flags: 1
nsDS5ReplicaId: 3
nsds5ReplicaPurgeDelay: 604800
nsDS5ReplicaBindDN: uid=replicador,cn=config
cn: replica
nsState:: AwAAAKB8ZVEAAAAAAAAAAAEAAAA=
nsDS5ReplicaName: 70fed503-1dd211b2-a0e1d329-568c0000
nsds5ReplicaChangeCount: 0
nsds5replicareapactive: 0
dn: cn=foo-389ds-lab, cn=replica, cn="dc=foo,dc=gov,dc=br", cn=mapping t
ree, cn=config
objectClass: top
objectClass: nsDS5ReplicationAgreement
description: lab-master -> 389ds-lab
cn: foo-389ds-lab
nsDS5ReplicaRoot: dc=foo,dc=gov,dc=br
nsDS5ReplicaHost: 389ds-lab.xxx.foo
nsDS5ReplicaPort: 636
nsDS5ReplicaBindDN: uid=replicador,cn=config
nsDS5ReplicaTransportInfo: SSL
nsDS5ReplicaBindMethod: SIMPLE
nsDS5ReplicaCredentials: {DES}l/OdqrRRrvxAR6wIJKgLDA==
nsds50ruv: {replicageneration} 5162dc1a000000080000
nsds50ruv: {replica 8 ldap://389ds-lab.xxx.foo:389}
nsds50ruv: {replica 4 ldap://lab-master:389}
nsruvReplicaLastModified: {replica 8 ldap://389ds-lab.xxx.foo:389} 00000000
nsruvReplicaLastModified: {replica 4 ldap://lab-master:389} 00000000
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 0
nsds5replicaLastUpdateEnd: 0
nsds5replicaChangesSentSinceStartup:
nsds5replicaLastUpdateStatus: 0 No replication sessions started since
server s
tartup
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 20130410212832Z
nsds5replicaLastInitEnd: 20130410212952Z
nsds5replicaLastInitStatus: -2 Total update abortedSystem error
dn: cn=foo-master-xxx-reg, cn=replica, cn="dc=foo,dc=gov,dc=br", cn=mapp
ing tree, cn=config
objectClass: top
objectClass: nsDS5ReplicationAgreement
description: lab-master -> master-xxx-reg
cn: foo-master-xxx-reg
nsDS5ReplicaRoot: dc=foo,dc=gov,dc=br
nsDS5ReplicaHost: master-xxx-reg.xxx.foo
nsDS5ReplicaPort: 636
nsDS5ReplicaBindDN: uid=replicador,cn=config
nsDS5ReplicaTransportInfo: SSL
nsDS5ReplicaBindMethod: SIMPLE
nsDS5ReplicaCredentials: {DES}l/OdqrRRrvxAR6wIJKgLDA==
nsds50ruv: {replicageneration} 51549725000000020000
nsds50ruv: {replica 2 ldap://master-xxx-reg.xxx.foo:389}
nsds50ruv: {replica 4 ldap://lab-master:389}
nsruvReplicaLastModified: {replica 2 ldap://master-xxx-reg.xxx.foo:389} 000
00000
nsruvReplicaLastModified: {replica 4 ldap://lab-master:389} 00000000
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 0
nsds5replicaLastUpdateEnd: 0
nsds5replicaChangesSentSinceStartup:
nsds5replicaLastUpdateStatus: 0 No replication sessions started since
server s
tartup
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 20130410202603Z
nsds5replicaLastInitEnd: 20130410202817Z
nsds5replicaLastInitStatus: -2 Total update abortedSystem error
dn: cn=raiz-389ds-lab, cn=replica, cn="dc=gov,dc=br", cn=mapping tree,
cn=conf
ig
objectClass: top
objectClass: nsDS5ReplicationAgreement
description: lab-master -> 389ds-lab
cn: raiz-389ds-lab
nsDS5ReplicaRoot: dc=gov,dc=br
nsDS5ReplicaHost: 389ds-lab.xxx.foo
nsDS5ReplicaPort: 636
nsDS5ReplicaBindDN: uid=replicador,cn=config
nsDS5ReplicaTransportInfo: SSL
nsDS5ReplicaBindMethod: SIMPLE
nsDS5ReplicaCredentials: {DES}l/OdqrRRasdfasdfasdf==
nsds50ruv: {replicageneration} 51535e48000000030000
nsds50ruv: {replica 5 ldap://389ds-lab.xxx.foo:389}
nsds50ruv: {replica 3 ldap://lab-master:389} 515b2f48000000030000
515b2f480000
00030000
nsruvReplicaLastModified: {replica 5 ldap://389ds-lab.xxx.foo:389} 00000000
nsruvReplicaLastModified: {replica 3 ldap://lab-master:389} 00000000
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 0
nsds5replicaLastUpdateEnd: 0
nsds5replicaChangesSentSinceStartup:
nsds5replicaLastUpdateStatus: 0 No replication sessions started since
server s
tartup
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 20130410205925Z
nsds5replicaLastInitEnd: 20130410205928Z
nsds5replicaLastInitStatus: 0 Total update succeeded
dn: cn=raiz-master-xxx-reg, cn=replica, cn="dc=gov,dc=br", cn=mapping tree,
cn
=config
objectClass: top
objectClass: nsDS5ReplicationAgreement
description: lab-master -> master-xxx-reg
cn: raiz-master-xxx-reg
nsDS5ReplicaRoot: dc=gov,dc=br
nsDS5ReplicaHost: master-xxx-reg.xxx.foo
nsDS5ReplicaPort: 636
nsDS5ReplicaBindDN: uid=replicador,cn=config
nsDS5ReplicaTransportInfo: SSL
nsDS5ReplicaBindMethod: SIMPLE
nsDS5ReplicaCredentials: {DES}l/OdqrRRrvxAR6wasdfasdfasdf==
nsds50ruv: {replicageneration} 515f2cca000000030000
nsds50ruv: {replica 1 ldap://master-xxx-reg.xxx.foo:389}
nsds50ruv: {replica 3 ldap://lab-master:389}
nsruvReplicaLastModified: {replica 1 ldap://master-xxx-reg.xxx.foo:389} 000
00000
nsruvReplicaLastModified: {replica 3 ldap://lab-master:389} 00000000
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 0
nsds5replicaLastUpdateEnd: 0
nsds5replicaChangesSentSinceStartup:
nsds5replicaLastUpdateStatus: 0 No replication sessions started since
server s
tartup
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 0
nsds5replicaLastInitEnd: 0
Replica config from 389ds 1.3.0.2 (Consumer in multi-master replication):
dn: cn=mapping tree,cn=config
objectClass: top
objectClass: extensibleObject
cn: mapping tree
dn: cn=dc\3Dgov\2Cdc\3Dbr,cn=mapping tree,cn=config
objectClass: top
objectClass: extensibleObject
objectClass: nsMappingTree
nsslapd-state: referral on update
cn: dc=gov,dc=br
nsslapd-backend: raiz
nsslapd-referral: ldap://lab-master:389/dc%3Dgov%2Cdc%3Dbr
dn: cn=dc\3Dfoo\2Cdc\3Dgov\2Cdc\3Dbr,cn=mapping tree,cn=config
objectClass: top
objectClass: extensibleObject
objectClass: nsMappingTree
nsslapd-state: referral on update
cn: dc=foo,dc=gov,dc=br
nsslapd-parent-suffix: dc=gov,dc=br
nsslapd-backend: foo
nsslapd-referral: ldap://lab-master:389/dc%3Dfoo%2Cdc%3Dgov%2Cdc%3Dbr
dn: cn=o\3Dnetscaperoot,cn=mapping tree,cn=config
nsslapd-state: backend
objectClass: top
objectClass: extensibleObject
objectClass: nsMappingTree
cn: "o=netscaperoot"
cn: o=netscaperoot
nsslapd-backend: NetscapeRoot
dn: cn=replica,cn=dc\3Dgov\2Cdc\3Dbr,cn=mapping tree,cn=config
objectClass: nsDS5Replica
objectClass: top
nsDS5ReplicaRoot: dc=gov,dc=br
nsDS5ReplicaType: 2
nsDS5Flags: 0
nsds5ReplicaPurgeDelay: 604800
nsDS5ReplicaBindDN: uid=replicador,cn=config
cn: replica
nsDS5ReplicaId: 65535
nsState:: //8AAAAAAACw0mVRAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAA==
nsDS5ReplicaName: 023279bc-a20311e2-821ec0df-d5dbae74
nsds5ReplicaChangeCount: 0
nsds5replicareapactive: 0
dn: cn=replica,cn=dc\3Dfoo\2Cdc\3Dgov\2Cdc\3Dbr,cn=mapping tree,cn=config
objectClass: nsDS5Replica
objectClass: top
nsDS5ReplicaRoot: dc=foo,dc=gov,dc=br
nsDS5ReplicaType: 2
nsDS5Flags: 0
nsds5ReplicaPurgeDelay: 604800
nsDS5ReplicaBindDN: uid=replicador,cn=config
cn: replica
nsDS5ReplicaId: 65535
nsState:: //8AAAAAAACB2WVRAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAA==
nsDS5ReplicaName: 25f5bf02-a20311e2-821ec0df-d5dbae74
nsds5ReplicaChangeCount: 0
nsds5replicareapactive: 0
And finally, the replica config from 389ds 1.2.11.15 (Consumer in a
multi-master replication. I updated the 389ds in this server yesterday):
dn: cn=mapping tree,cn=config
objectClass: top
objectClass: extensibleObject
cn: mapping tree
dn: cn=dc\3Dgov\2Cdc\3Dbr,cn=mapping tree,cn=config
objectClass: top
objectClass: extensibleObject
objectClass: nsMappingTree
nsslapd-state: backend
cn: dc=gov,dc=br
nsslapd-backend: raiz
nsslapd-referral: ldap://lab-master:389/dc%3Dgov%2Cdc%3Dbr
dn: cn=dc\3Dfoo\2Cdc\3Dgov\2Cdc\3Dbr,cn=mapping tree,cn=config
objectClass: top
objectClass: extensibleObject
objectClass: nsMappingTree
nsslapd-state: backend
cn: dc=serpro,dc=gov,dc=br
nsslapd-parent-suffix: dc=gov,dc=br
nsslapd-backend: foo
dn: cn=o\3Dnetscaperoot,cn=mapping tree,cn=config
nsslapd-state: backend
objectClass: top
objectClass: extensibleObject
objectClass: nsMappingTree
cn: "o=netscaperoot"
cn: o=netscaperoot
nsslapd-backend: NetscapeRoot
dn: cn=replica,cn=dc\3Dgov\2Cdc\3Dbr,cn=mapping tree,cn=config
objectClass: nsDS5Replica
objectClass: top
nsDS5ReplicaRoot: dc=gov,dc=br
nsDS5ReplicaType: 3
nsDS5Flags: 1
nsDS5ReplicaId: 1
nsds5ReplicaPurgeDelay: 604800
nsDS5ReplicaBindDN: uid=replicador,cn=config
cn: replica
nsState:: AQAAAAAAAABOu2ZRAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAA==
nsDS5ReplicaName: 588eba82-972111e2-9a86dff3-de3c5ff6
nsds5ReplicaChangeCount: 0
nsds5replicareapactive: 0
dn: cn=replica,cn=dc\3Dfoo\2Cdc\3Dgov\2Cdc\3Dbr,cn=mapping tree,cn=config
objectClass: nsDS5Replica
objectClass: top
nsDS5ReplicaRoot: dc=foo,dc=gov,dc=br
nsDS5ReplicaType: 3
nsDS5Flags: 1
nsDS5ReplicaId: 2
nsds5ReplicaPurgeDelay: 604800
nsDS5ReplicaBindDN: uid=replicador,cn=config
cn: replica
nsState:: AgAAAAAAAABOu2ZRAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAA==
nsDS5ReplicaName: 588eba84-972111e2-9a86dff3-de3c5ff6
nsds5ReplicaChangeCount: 0
nsds5replicareapactive: 0
Is that configuration that you wanted to see?
2013/4/10 Rich Megginson <rmeggins(a)redhat.com>
On 04/10/2013 03:38 PM, carne_de_passaro wrote:
Both consumer.
Can you provide your cn=replica config entry from both consumer and
supplier, and the replication agreement entry from your supplier? Please
first obscure any sensitive information.
2013/4/10 Rich Megginson <rmeggins(a)redhat.com>
> On 04/10/2013 03:33 PM, carne_de_passaro wrote:
>
>
> I guess that is not exactly the same problem because I test with a
> 1.2.11.15
>
> supplier or consumer?
>
> and a 1.3.0.2
>
> supplier or consumer?
>
> (compiled) both in CentOS 6.3 and the the error persist. These two
> machine is on the same network, there is no firewall between them. I can't
> figure what could the supplier be disconnected.
>
>
>
>
> 2013/4/10 Rich Megginson <rmeggins(a)redhat.com>
>
>> On 04/09/2013 08:33 AM, carne_de_passaro wrote:
>>
>> Hello folks,
>>
>> I have a test environment with a FDS version 1.2.0 on a Debian 5.0 x86
>> and a 389-ds 1.2.10.12-1.el6.x86_64 on a CentOS 6.3 x86_64.
>>
>>
>>
>> I have two suffix on the FDS, a root suffix and a subsuffix. I've
>> configured two replication agreements, one for suffix. When I'm try to
>> initialize the root suffix, which contains a few objects, it's works just
>> fine, but when I try to initialize the subsuffix, which contains about
>> 90.000 objects, it's fails and give me the error "Total update aborted.
>> System error. Error code -2" on the FDS console.
>>
>> Looking at the 389-ds error log file I gave this:
>>
>> [09/Apr/2013:11:01:45 -0300] NSMMReplicationPlugin -
>> multimaster_be_state_change: replica dc=foo,dc=gov,dc=br is going offline;
>> disabling replication
>> [09/Apr/2013:11:01:45 -0300] NSMMReplicationPlugin - conn=0 op=0
>> repl="dc=foo,dc=gov,dc=br": Replica in use locking_purl=conn=2 id=3
>> [09/Apr/2013:11:01:45 -0300] NSMMReplicationPlugin -
>> replica_disable_replication: replica dc=foo,dc=gov,dc=br is acquired
>> [09/Apr/2013:11:01:45 -0300] - WARNING: Import is running with
>> nsslapd-db-private-import-mem on; No other process is allowed to access the
>> database
>> [09/Apr/2013:11:01:45 -0300] NSMMReplicationPlugin - conn=2 op=3
>> repl="dc=foo,dc=gov,dc=br": StartNSDS50ReplicationRequest: response=0
rc=0
>> [09/Apr/2013:11:02:06 -0300] - import foo: Processed 17727 entries --
>> average rate 886.4/sec, recent rate 886.3/sec, hit ratio 0%
>> [09/Apr/2013:11:02:29 -0300] - import foo: Processed 32924 entries --
>> average rate 765.7/sec, recent rate 765.7/sec, hit ratio 98%
>> [09/Apr/2013:11:02:43 -0300] - slapi_start_bulk_import: bulk import is
>> not supported by this (default) backend
>> [09/Apr/2013:11:02:46 -0300] NSMMReplicationPlugin - Error -12: could
>> not import entry dn (null) for total update operation conn=2 op=43381
>> [09/Apr/2013:11:02:46 -0300] - ERROR bulk import abandoned
>> [09/Apr/2013:11:02:46 -0300] - import foo: Aborting all Import threads...
>> [09/Apr/2013:11:02:51 -0300] - import foo: Import threads aborted.
>> [09/Apr/2013:11:02:53 -0300] - import foo: Closing files...
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/nsuniqueid.db4: unable to
>> flush: No such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/objectclass.db4: unable to
>> flush: No such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/cn.db4: unable to flush: No
>> such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/mailAlternateAddress.db4:
>> unable to flush: No such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/uniquemember.db4: unable to
>> flush: No such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/telephoneNumber.db4: unable to
>> flush: No such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/parentid.db4: unable to flush:
>> No such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/mail.db4: unable to flush: No
>> such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/sn.db4: unable to flush: No
>> such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/givenName.db4: unable to
>> flush: No such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/entryrdn.db4: unable to flush:
>> No such file or directory
>> [09/Apr/2013:11:02:57 -0300] - libdb: foo/uid.db4: unable to flush: No
>> such file or directory
>> [09/Apr/2013:11:02:58 -0300] - libdb: foo/id2entry.db4: unable to flush:
>> No such file or directory
>> [09/Apr/2013:11:02:58 -0300] - import foo: Import failed.
>> [09/Apr/2013:11:02:58 -0300] NSMMReplicationPlugin - Aborting total
>> update in progress for replicated area dc=foo,dc=gov,dc=br connid=2
>> [09/Apr/2013:11:02:58 -0300] - process_bulk_import_op: NULL target sdn
>> [09/Apr/2013:11:02:58 -0300] NSMMReplicationPlugin - conn=2 op=-1
>> repl="dc=foo,dc=gov,dc=br": Released replica
>>
>>
>> This looks like
https://fedorahosted.org/389/ticket/374 which was
>> fixed in 1.2.11
>>
>>
>>
>> and at the end of the 389-ds access log I gave this:
>>
>> [09/Apr/2013:11:02:43 -0300] conn=2 op=43380 EXT
>> oid="2.16.840.1.113730.3.5.6" name="Netscape Replication Total
Update Entry"
>> [09/Apr/2013:11:02:43 -0300] conn=2 op=43380 RESULT err=0 tag=120
>> nentries=0 etime=0
>> [09/Apr/2013:11:02:43 -0300] conn=2 op=43381 EXT
>> oid="2.16.840.1.113730.3.5.6" name="Netscape Replication Total
Update Entry"
>> [09/Apr/2013:11:02:46 -0300] conn=2 op=-1 fd=65 closed - B4
>>
>> What does means that error B4 ?
>>
>>
>> B4 means the supplier disconnected while the consumer was attempting to
>> send back a reply.
>>
>>
>> Thanks in advance,
>>
>> Danilo
>>
>>
>> --
>> 389 users mailing
list389-users@lists.fedoraproject.orghttps://admin.fedoraproject.org/mailman/listinfo/389-users
>>
>>
>>
>
>