Look for: nsDS5ReplicatedAttributeList
nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof idnssoaserial
entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
In this case any update to any one of these attributes is NOT replicated. So if you update "memberOf", the agmt maxcsn will not advance while the database RUV did.
Got it.
https://pagure.io/389-ds-base/new_issueI think I found a small bug in the repl-monitor script, which however doesn’t affect its operation (miraculously). Is there a place to submit a patch for that?
Excellent!
Question 1, in the script, the list of RUVs is retrieved like so:
$ruv = $conn->search($replicaroot, "one","(&(nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff)(objectClass=nsTombstone))",0, qw(nsds50ruv nsruvReplicaLastModified nsds5AgmtMaxCSN));
Maybe that replica/consumer was never directly updated? That value comes from the database ruv maxcsn.For the life of me I don’t understand what nsTombstone records have to do with querying for RUVs. What am I missing? I might be not understanding the ldapsearch syntax there.
Question 2:The Last Modify Time column in the report has 1/1/1970 for a consumer. What could be the reason for that?
Thank you!
Sergei