8:50 a.m.
Hello,
I shot myself on the foot the other day by keeping one of the IPA
server down too long during redundancy testing. Now, it can't sync
with the peer. Luckily, its not the cert server so I am suspecting I
can get it working by reinitializing it. However, that isn't working,
and I am getting the error below.
[root@hydrogen ~]# ipa-replica-manage re-initialize --from
lithium.eng.example.com
[ldaps://lithium.eng.example.com:636] reports: Update failed! Status:
[2 Replication error acquiring replica: excessive clock skew]
Now, before I do further change, I am wondering if someone has faced
this problem before and what would the next step. According to google,
this seem to be my only solution, but looks a bit scarily.
http://directory.fedoraproject.org/docs/389ds/howto/howto-fix-and-reset-t...
Would there be any other better option from your experience?
[15/Jan/2018:07:27:58.296415297 -0500] - INFO - slapd_daemon -
Listening on All Interfaces port 636 for LDAPS requests
[15/Jan/2018:07:27:58.296988661 -0500] - INFO - slapd_daemon -
Listening on /var/run/slapd-ENG-EXAMPLE-COM.socket for LDAPI requests
[15/Jan/2018:07:28:02.794968170 -0500] - ERR - csngen_adjust_time -
Adjustment limit exceeded; value - 7568166, limit - 86400
[15/Jan/2018:07:28:02.796095907 -0500] - ERR - NSMMReplicationPlugin -
repl5_inc_run - agmt="cn=meTolithium.eng.example.com" (lithium:389):
Fatal error - too much time skew between replicas!
[15/Jan/2018:07:28:02.799804827 -0500] - ERR - NSMMReplicationPlugin -
repl5_inc_run - agmt="cn=meTolithium.eng.example.com" (lithium:389):
Incremental update failed and requires administrator action
[15/Jan/2018:07:28:03.400808361 -0500] - ERR - schema-compat-plugin -
warning: no entries set up under cn=computers,
cn=compat,dc=eng,dc=example,dc=com
[15/Jan/2018:07:28:03.401704265 -0500] - ERR - schema-compat-plugin -
Finished plugin initialization.
[15/Jan/2018:07:28:25.023819558 -0500] - ERR - csngen_adjust_time -
Adjustment limit exceeded; value - 7568268, limit - 86400
[15/Jan/2018:07:28:25.025929954 -0500] - ERR - NSMMReplicationPlugin -
multimaster_extop_StartNSDS50ReplicationRequest - conn=28 op=5
repl="dc=eng,dc=example,dc=com": Excessive clock skew from supplier
RUV
[15/Jan/2018:07:28:25.026528807 -0500] - ERR - NSMMReplicationPlugin -
multimaster_extop_StartNSDS50ReplicationRequest - conn=28 op=5
replica="dc=eng,dc=example,dc=com": Unable to acquire replica: error:
excessive clock skew
[15/Jan/2018:07:28:25.107953782 -0500] - ERR - csngen_adjust_time -
Adjustment limit exceeded; value - 7568269, limit - 86400
[15/Jan/2018:07:28:25.137884951 -0500] - ERR - NSMMReplicationPlugin -
multimaster_extop_StartNSDS50ReplicationRequest - conn=29 op=5
repl="dc=eng,dc=example,dc=com": Excessive clock skew from supplier
RUV
[15/Jan/2018:07:28:25.138620189 -0500] - ERR - NSMMReplicationPlugin -
multimaster_extop_StartNSDS50ReplicationRequest - conn=29 op=5
replica="dc=eng,dc=example,dc=com": Unable to acquire replica: error:
excessive clock skew
[15/Jan/2018:07:28:25.204301158 -0500] - ERR - csngen_adjust_time -
Adjustment limit exceeded; value - 7568270, limit - 86400
[15/Jan/2018:07:28:25.205578413 -0500] - ERR - NSMMReplicationPlugin -
multimaster_extop_StartNSDS50ReplicationRequest - conn=30 op=5
repl="dc=eng,dc=example,dc=com": Excessive clock skew from supplier
RUV
[15/Jan/2018:07:28:25.206115922 -0500] - ERR - NSMMReplicationPlugin -
multimaster_extop_StartNSDS50ReplicationRequest - conn=30 op=5
replica="dc=eng,dc=example,dc=com": Unable to acquire replica: error:
excessive clock skew
Regards,
William