Replication error

[Luke Altkom]

Hello,

as a new member of this maillist, first of all I'd like to say hello to everybody :).

I have problem with replication on my three Fedora Directory Servers. All three have
replication agreements (multiple master model), but in admin console I have following
informations:

[on directory]
- with directory1: Incremental update has failed and requires administrator actionSystem
error. Error Code: -1
- with directory2: Incremental update has failed and requires administrator actionSystem
error. Error Code: -1

[on directory1]
- with directory: Incremental update succeeded
- with directory2: Incremental update succeeded

[on directory2]
- with directory: Incremental update succeeded
- with directory1: Incremental update succeeded

The problem is, that most of changes are made on server called "directory", but
they didn't propagate to others two servers. I have googled for "Incremental
update has failed and requires administrator actionSystem error", but results
didn't gave me literally nothing. And because I'm not an experienced FDS user, I
ask You for some clue(s) on what's going on and how to solve my problem. 

Of course I can post more detailed info, but I don't know (yet) which information can
have any value for You.

Best regards,
Luke.

[Rich Megginson]

Luke Altkom wrote:
>  Hello,
>
>  as a new member of this maillist, first of all I'd like to say hello to everybody
> :).
>
>  I have problem with replication on my three Fedora Directory Servers. All three have
> replication agreements (multiple master model), but in admin console I have following
> informations:
>
>  [on directory]
>  - with directory1: Incremental update has failed and requires administrator actionSystem
> error. Error Code: -1
>  - with directory2: Incremental update has failed and requires administrator actionSystem
> error. Error Code: -1
>     
Did you initialize d1 and d2 from directory?
>  [on directory1]
>  - with directory: Incremental update succeeded
>  - with directory2: Incremental update succeeded
>
>  [on directory2]
>  - with directory: Incremental update succeeded
>  - with directory1: Incremental update succeeded
>
>  The problem is, that most of changes are made on server called "directory", but
> they didn't propagate to others two servers. I have googled for "Incremental
> update has failed and requires administrator actionSystem error", but results
> didn't gave me literally nothing. And because I'm not an experienced FDS user, I
> ask You for some clue(s) on what's going on and how to solve my problem. 
>
>  Of course I can post more detailed info, but I don't know (yet) which information can
> have any value for You.
>
>  Best regards,
>  Luke.
>
>  --
>  389 users mailing list
>  389-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

[Luke Altkom]

>  Did you initialize d1 and d2 from directory? 
Nope. How can I do
it?

These servers few month ago were synchronizing properly with each other. But one day SSL
certificate on directory have lapsed, and directory went out of synchro with directory1
and directory2. Since then no one cared about that situation, until now, when I decided to
fix it. 

I don't think, that current error on directory is related with new certificate,
because before I have imported a new one, I had on directory "Error 81", and now
"Incremental update has failed and requires administrator actionSystem error" -
so I think I have made a step forward in good direction :). Am I right?

Thanks for help!

Best regards,
Luke.

[Rich Megginson]

Luke Altkom wrote:
> > Did you initialize d1 and d2 from directory?
> >     
>  Nope. How can I do it?
>
>  These servers few month ago were synchronizing properly with each other. But one day SSL
> certificate on directory have lapsed, and directory went out of synchro with directory1
> and directory2. Since then no one cared about that situation, until now, when I decided to
> fix it. 
>
>  I don't think, that current error on directory is related with new certificate,
> because before I have imported a new one, I had on directory "Error 81", and now
> "Incremental update has failed and requires administrator actionSystem error" -
> so I think I have made a step forward in good direction :). Am I right?
>     
Yes.  How long were the servers out of sync due to this problem?  If the 
servers get too far out of sync, you will have to do a re-init.
>  Thanks for help!
>
>  Best regards,
>  Luke.
>
>  --
>  389 users mailing list
>  389-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

[Luke Altkom]

>  Yes.  How long were the servers out of sync due to this problem?
>  If the servers get too far out of sync, you will have to do a 
>  re-init. 
I think, there's problem, 'couse servers were out of sync since January/February.
How should I perform a re-init? I have looked in the documentation, and I have found 
info (http://www.redhat.com/docs/manuals/dir-server/ag/7.1/replicat.htm#1030555), 
that creating a replication agreement is sufficient to start replication process. 
I haven't modified previous replication agreement (only imported new certificate).
Is this mean, that I should delete current, and set up new replication agreements 
between directory and directory1 & directory2?

Best regards,
Luke.

[Rich Megginson]

Luke Altkom wrote:
> > Yes.  How long were the servers out of sync due to this problem?
> > If the servers get too far out of sync, you will have to do a 
> > re-init.
> >     
>
>  I think, there's problem, 'couse servers were out of sync since
> January/February.
>  How should I perform a re-init? I have looked in the documentation, and I have found 
>  info (http://www.redhat.com/docs/manuals/dir-server/ag/7.1/replicat.htm#1030555), 
>  that creating a replication agreement is sufficient to start replication process. 
>     
No, not exactly.  See part 3 there:
>     3. Expand the Replication folder, then expand the replicated
>        database. Right-click the replication agreement, and choose
>        Initialize Consumer from the pop-up menu.
>
>        A message is displayed to warn you that any information already
>        stored in the replica on the consumer will be removed.
>  
>  I haven't modified previous replication agreement (only imported
> new certificate).
>  Is this mean, that I should delete current, and set up new replication agreements 
>  between directory and directory1 & directory2?
>
>  Best regards,
>  Luke.
>
>  --
>  389 users mailing list
>  389-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>