[Freeipa-users] Re: FreeIPA Multi-master dse.ldif updates

[Yuri Krysko]

Thanks, Flo. Very helpful.

On 3/2/21, 3:02 AM, "Florence Blanc-Renaud" <flo(a)redhat.com&gt; wrote:

    On 3/1/21 9:47 PM, Yuri Krysko via FreeIPA-users wrote:
>  Hello,
>  
>  We run two IPA servers in a multi-master replication topology. Could 
>  anyone please advise if it is normal to have dse.ldif files on both IPA 
>  servers be updated every minute roughly with nsState attribute being 
>  modified by cn=Multimaster Replication Plugin,cn=plugins,cn=config ?
>  
>  Thanks much!
>  
>  
>  
    Hi,

    this attribute is maintained by the server to make sure the CSNs are 
    properly generated (see the doc in [1]), and is evolving over time. If 
    you are curious about the information it contains, you can use 
    readnsstate utility to interpret its content.

    HTH,
    flo

    [1] 
   
https://access.redhat.com/documentation/en-us/red_hat_directory_server/11...
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
>  
>