[Fedora-directory-users] Replicate o=NetscapeRoot database

[Hugo Etievant]

hello,

- I have installed 2 Directory servers, the second (DS2) is registered 
on the first (DS1).
- I have installed multi master replication between the both (DS1 and 
DS2) for user data on userRoot database.
Here, that is working.

- Finally, I try to configure multi master replication for 
o=NetscapeRoot database between 2 DS with the same way of conventional 
replication, after copying o=NetscapeRoot database from DS1 to DS2. 
Replication work, but Administration Server of DS2 refuse to start on 
the replica of NetscapeRoot.

The Admin Guide is not clear about NetscapeRoot replication 
(8.14. Replicating o=NetscapeRoot for Administration Server Failover 
http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Replication-Re... 
)

It exists a way with GUI Console to configure replication for 
o=NetscapeRoot on existing architecture ?

Who have experimented this point ?

regards

[John Dickinson]

On 19 Nov 2008, at 09:09, Hugo Etievant wrote:
> hello,
> I have installed 2 Directory servers, the second (DS2) is
>
> registered on the first (DS1).
> I have installed multi master replication between the both (DS1
>
> and DS2) for user data on userRoot database.
> Here, that is working.
> Finally, I try to configure multi master replication for
>
> o=NetscapeRoot database between 2 DS with the same way of  
> conventional replication, after copying o=NetscapeRoot database from  
> DS1 to DS2. Replication work, but Administration Server of DS2  
> refuse to start on the replica of NetscapeRoot.
>
> The Admin Guide is not clear about NetscapeRoot replication (8.14.  
> Replicating o=NetscapeRoot for Administration Server Failover http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Replication-Re... 
>  )
>
> It exists a way with GUI Console to configure replication for  
> o=NetscapeRoot on existing architecture ?
>
> Who have experimented this point ?

I have put together some notes here:

http://jadickinson.co.uk/test/howto/replicating-netscaperoot-on-fedora-ds/

they could do with testing - please let me know if you find any  
problems.

Thanks
John

[Hugo Etievant]

John Dickinson a écrit :
> I have put together some notes here:
>
> http://jadickinson.co.uk/test/howto/replicating-netscaperoot-on-fedora-ds/
>
> they could do with testing - please let me know if you find any problems.

thanks, but that does not work too

the script /usr/sbin/register-ds-admin.pl does not accept my password :

"Please input the password for the Administrator User uid=admin, 
ou=Administrators, ou=TopologyManagement, o=NetscapeRoot:
Error: failed to clean up the configuration info from the old 
Configuration Directory Server ."

if i use the script /usr/sbin/setup-ds-admin.pl -u
my Administration Server become not accessible via Fedora IDM Console

Do you have any idea?

regards

[Hugo Etievant]

hello,
> I have put together some notes here:
>
> http://jadickinson.co.uk/test/howto/replicating-netscaperoot-on-fedora-ds/
>
> they could do with testing - please let me know if you find any problems.

With your procedure, initialization of consumer fails.

I apply your LDAP script but on server1, i have the following errors :

[19/Nov/2008:15:20:45 +0100] NSMMReplicationPlugin - agmt="cn=RA12" 
(server2:389): Incremental update failed and requires administrator action
[19/Nov/2008:15:20:46 +0100] NSMMReplicationPlugin - agmt="cn=RA12" 
(server2:389): Unable to acquire replica: Excessive clock skew between 
the supplier and the consumer. Replication is aborting.

what "administrator action" is needed ?

regards

[Rich Megginson]

Hugo Etievant wrote:
> hello,
> > I have put together some notes here:
> >
> > http://jadickinson.co.uk/test/howto/replicating-netscaperoot-on-fedora-ds/
> >
> > they could do with testing - please let me know if you find any 
> > problems.
>
> With your procedure, initialization of consumer fails.
>
> I apply your LDAP script but on server1, i have the following errors :
>
> [19/Nov/2008:15:20:45 +0100] NSMMReplicationPlugin - agmt="cn=RA12" 
> (server2:389): Incremental update failed and requires administrator 
> action
> [19/Nov/2008:15:20:46 +0100] NSMMReplicationPlugin - agmt="cn=RA12" 
> (server2:389): Unable to acquire replica: Excessive clock skew between 
> the supplier and the consumer. Replication is aborting.

This either means you need to make sure your clocks on all your systems 
are in sync, or you are encountering 
https://bugzilla.redhat.com/show_bug.cgi?id=233642

What platform?  What version of fedora ds?  rpm -qi fedora-ds-base
Are you running in a VM?
> what "administrator action" is needed ?
>
> regards

[John Dickinson]

On 19 Nov 2008, at 15:14, Hugo Etievant wrote:
> hello,
> > I have put together some notes here:
> >
> > http://jadickinson.co.uk/test/howto/replicating-netscaperoot-on-fedora-ds/
> >
> > they could do with testing - please let me know if you find any  
> > problems.
>
> With your procedure, initialization of consumer fails.
>
> I apply your LDAP script but on server1, i have the following errors :
>
> [19/Nov/2008:15:20:45 +0100] NSMMReplicationPlugin -  
> agmt="cn=RA12" (server2:389): Incremental update failed and requires  
> administrator action
> [19/Nov/2008:15:20:46 +0100] NSMMReplicationPlugin -  
> agmt="cn=RA12" (server2:389): Unable to acquire replica: Excessive  
> clock skew between the supplier and the consumer. Replication is  
> aborting.
>
> what "administrator action" is needed ?

It looks like the clocks are not synced on your two servers. Are you  
using ntp?

John

[Hugo Etievant]

John Dickinson a écrit :
> On 19 Nov 2008, at 15:14, Hugo Etievant wrote:
> > hello,
> > > I have put together some notes here:
> > >
> > > http://jadickinson.co.uk/test/howto/replicating-netscaperoot-on-fedora-ds/
> > >
> > > they could do with testing - please let me know if you find any 
> > > problems.
> >
> > With your procedure, initialization of consumer fails.
> >
> > I apply your LDAP script but on server1, i have the following errors :
> >
> > [19/Nov/2008:15:20:45 +0100] NSMMReplicationPlugin - agmt="cn=RA12" 
> > (server2:389): Incremental update failed and requires administrator 
> > action
> > [19/Nov/2008:15:20:46 +0100] NSMMReplicationPlugin - agmt="cn=RA12" 
> > (server2:389): Unable to acquire replica: Excessive clock skew 
> > between the supplier and the consumer. Replication is aborting.
> >
> > what "administrator action" is needed ?
>
> It looks like the clocks are not synced on your two servers. Are you 
> using ntp?

Thanks John, my server time config was not the required.
I change this, and the replication is working :-)

Your tutorial permits me to make up replication for NetscapeRoot config 
suffix.
My Administration Server Console is working too, it is very good !

It is pity that there is not GUI way to configure replication for 
NetscapeRoot !

best regards