[389-users] Changelog Modification

[Rich Megginson]

On 03/09/2011 10:11 AM, Stephen Agar wrote:
> I've seen multiple different types of changes in there flagged as this 
> issue.
> - Some was a custom "directory string" attribute, being change from 
> value notActivated to activated
I suppose this might be a problem if the schema were somehow different 
between the two servers, which could happen if you added the schema via 
a file and not via LDAP.
> - Some password account lockout attributes, resettime, etc.
See 
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#Managing_Replication-Replicating-Password-Attributes
> - Most are modifications to the "memberof" attribute, which is set by 
> the member plugin
memberof should not be replicated - see 
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#groups-cmd-memberof 

there is an Important Note on that page about replicating memberof
> - Some are password changes
I suppose this could be possible if the password policy is different on 
the supplier and the consumer
>
> In all cases that i've checked, the data seems to be correct and 
> consistent across all 4 nodes.
>
> Thanks for any insight.
>
> --stephen
>
>
> On Tue, Mar 8, 2011 at 3:21 PM, Rich Megginson <rmeggins at redhat.com 
> <mailto:rmeggins at redhat.com>> wrote:
>
>     On 03/08/2011 11:17 AM, Stephen Agar wrote:
>>     I have a 4 server multi master replication setup going on.  We
>>     get a lot of errors like this:
>>
>>      NSMMReplicationPlugin - agmt="cn="Replication to server""
>>     (server:636): Consumer failed to replay change (uniqueid
>>     2365a885-b85511df-ad54b6ca-51ecbecb, CSN 4d6ceae5000700010000):
>>     DSA is unwilling to perform. Will retry later.
>>
>>     I've used cl-dump on all four nodes to dump the logs and track
>>     these down.  However, all of the "offending" changes that say
>>     they weren't made do indeed seem to be applied on all 4 nodes.
>     What are these changes?  What operations, attributes, values, etc.
>>     Is there a command I can use to remove specific entries from the
>>     changelog?  In the past, i've just re-initialized nodes to get
>>     rid of these, but that's certainly not the preferred way to do this.
>>
>>     Thanks,
>>     Stephen
>>
>>
>>     --
>>     389 users mailing list
>>     389-users at lists.fedoraproject.org  <mailto:389-users at lists.fedoraproject.org>
>>     https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20110309/3d9695c5/attachment.html>