Evening,
I am attempting to setup a new replica this afternoon and it failed with an error message that I haven't been able to decipher. Really haven't been able to get past it as I can't figure out what really tripped the setup?
Have someone seen this in their logs and how did you go about fixing it?
The complete logs are on https://pastebin.pl/view/85208dbb
2020-09-28T20:12:34Z DEBUG Successfully updated nsDS5ReplicaId. 2020-09-28T20:12:34Z DEBUG Add or update replica config cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config 2020-09-28T20:12:34Z DEBUG Added replica config cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config 2020-09-28T20:12:34Z DEBUG Add or update replica config cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config 2020-09-28T20:12:34Z DEBUG No update to cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config necessary 2020-09-28T20:12:34Z DEBUG Waiting up to 300 seconds for replication (ldapi://%2Fvar%2Frun%2Fslapd-EXTERNAL-EXAMPLE-COM.socket) cn= meToneptune.external.example.com,cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config (objectclass=*) 2020-09-28T20:12:34Z DEBUG Entry found [LDAPEntry(ipapython.dn.DN('cn= meToneptune.external.example.com,cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config'), {'objectClass': [b'nsds5replicationagreement', b'top'], 'cn': [b'meToneptune.external.example.com'], 'nsDS5ReplicaHost': [b' neptune.external.example.com'], 'nsDS5ReplicaPort': [b'389'], 'nsds5replicaTimeout': [b'120'], 'nsDS5ReplicaRoot': [b'dc=external,dc=example,dc=com'], 'description': [b'me to neptune.external.example.com'], 'nsDS5ReplicatedAttributeList': [b'(objectclass=*) $ EXCLUDE memberof idnssoaserial entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount'], 'nsDS5ReplicaTransportInfo': [b'LDAP'], 'nsDS5ReplicaBindMethod': [b'SASL/GSSAPI'], 'nsds5ReplicaStripAttrs': [b'modifiersName modifyTimestamp internalModifiersName internalModifyTimestamp'], 'nsDS5ReplicatedAttributeListTotal': [b'(objectclass=*) $ EXCLUDE entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount'], 'nsds5replicareapactive': [b'0'], 'nsds5replicaLastUpdateStart': [b'19700101000000Z'], 'nsds5replicaLastUpdateEnd': [b'19700101000000Z'], 'nsds5replicaChangesSentSinceStartup': [b''], 'nsds5replicaLastUpdateStatus': [b'Error (0) No replication sessions started since server startup'], 'nsds5replicaLastUpdateStatusJSON': [b'{"state": "green", "ldap_rc": "0", "ldap_rc_text": "success", "repl_rc": "0", "repl_rc_text": "replica acquired", "date": "2020-09-28T20:12:34Z", "message": "Error (0) No replication sessions started since server startup"}'], 'nsds5replicaUpdateInProgress': [b'FALSE'], 'nsds5replicaLastInitStart': [b'19700101000000Z'], 'nsds5replicaLastInitEnd': [b'19700101000000Z']})] 2020-09-28T20:12:50Z DEBUG Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 603, in start_creation run_step(full_msg, method) File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 589, in run_step method() File "/usr/lib/python3.6/site-packages/ipaserver/install/dsinstance.py", line 427, in __setup_replica cacert=self.ca_file File "/usr/lib/python3.6/site-packages/ipaserver/install/replication.py", line 1861, in setup_promote_replication raise RuntimeError("Failed to start replication") RuntimeError: Failed to start replication
Regards, William
Hello,
Thought I add this little fact. It's not a network issue. If I type this to the replica, the ldadsearch connects without a problem.
ldapsearch -x -b cn=ftp,cn=groups,cn=compat,dc=external,dc=example,dc=com
Regards, William
On Tue., Sep. 29, 2020, 4:21 p.m. William Muriithi, < william.muriithi@gmail.com> wrote:
Evening,
I am attempting to setup a new replica this afternoon and it failed with an error message that I haven't been able to decipher. Really haven't been able to get past it as I can't figure out what really tripped the setup?
Have someone seen this in their logs and how did you go about fixing it?
The complete logs are on https://pastebin.pl/view/85208dbb
2020-09-28T20:12:34Z DEBUG Successfully updated nsDS5ReplicaId. 2020-09-28T20:12:34Z DEBUG Add or update replica config cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config 2020-09-28T20:12:34Z DEBUG Added replica config cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config 2020-09-28T20:12:34Z DEBUG Add or update replica config cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config 2020-09-28T20:12:34Z DEBUG No update to cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config necessary 2020-09-28T20:12:34Z DEBUG Waiting up to 300 seconds for replication (ldapi://%2Fvar%2Frun%2Fslapd-EXTERNAL-EXAMPLE-COM.socket) cn= meToneptune.external.example.com,cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config (objectclass=*) 2020-09-28T20:12:34Z DEBUG Entry found [LDAPEntry(ipapython.dn.DN('cn= meToneptune.external.example.com,cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config'), {'objectClass': [b'nsds5replicationagreement', b'top'], 'cn': [b'meToneptune.external.example.com'], 'nsDS5ReplicaHost': [b' neptune.external.example.com'], 'nsDS5ReplicaPort': [b'389'], 'nsds5replicaTimeout': [b'120'], 'nsDS5ReplicaRoot': [b'dc=external,dc=example,dc=com'], 'description': [b'me to neptune.external.example.com'], 'nsDS5ReplicatedAttributeList': [b'(objectclass=*) $ EXCLUDE memberof idnssoaserial entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount'], 'nsDS5ReplicaTransportInfo': [b'LDAP'], 'nsDS5ReplicaBindMethod': [b'SASL/GSSAPI'], 'nsds5ReplicaStripAttrs': [b'modifiersName modifyTimestamp internalModifiersName internalModifyTimestamp'], 'nsDS5ReplicatedAttributeListTotal': [b'(objectclass=*) $ EXCLUDE entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount'], 'nsds5replicareapactive': [b'0'], 'nsds5replicaLastUpdateStart': [b'19700101000000Z'], 'nsds5replicaLastUpdateEnd': [b'19700101000000Z'], 'nsds5replicaChangesSentSinceStartup': [b''], 'nsds5replicaLastUpdateStatus': [b'Error (0) No replication sessions started since server startup'], 'nsds5replicaLastUpdateStatusJSON': [b'{"state": "green", "ldap_rc": "0", "ldap_rc_text": "success", "repl_rc": "0", "repl_rc_text": "replica acquired", "date": "2020-09-28T20:12:34Z", "message": "Error (0) No replication sessions started since server startup"}'], 'nsds5replicaUpdateInProgress': [b'FALSE'], 'nsds5replicaLastInitStart': [b'19700101000000Z'], 'nsds5replicaLastInitEnd': [b'19700101000000Z']})] 2020-09-28T20:12:50Z DEBUG Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 603, in start_creation run_step(full_msg, method) File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 589, in run_step method() File "/usr/lib/python3.6/site-packages/ipaserver/install/dsinstance.py", line 427, in __setup_replica cacert=self.ca_file File "/usr/lib/python3.6/site-packages/ipaserver/install/replication.py", line 1861, in setup_promote_replication raise RuntimeError("Failed to start replication") RuntimeError: Failed to start replication
Regards, William
William Muriithi via FreeIPA-users wrote:
Evening,
I am attempting to setup a new replica this afternoon and it failed with an error message that I haven't been able to decipher. Really haven't been able to get past it as I can't figure out what really tripped the setup?
Have someone seen this in their logs and how did you go about fixing it?
The complete logs are on https://pastebin.pl/view/85208dbb
2020-09-28T20:12:34Z DEBUG Successfully updated nsDS5ReplicaId. 2020-09-28T20:12:34Z DEBUG Add or update replica config cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config 2020-09-28T20:12:34Z DEBUG Added replica config cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config 2020-09-28T20:12:34Z DEBUG Add or update replica config cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config 2020-09-28T20:12:34Z DEBUG No update to cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config necessary 2020-09-28T20:12:34Z DEBUG Waiting up to 300 seconds for replication (ldapi://%2Fvar%2Frun%2Fslapd-EXTERNAL-EXAMPLE-COM.socket) cn=meToneptune.external.example.com http://meToneptune.external.example.com,cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config (objectclass=*) 2020-09-28T20:12:34Z DEBUG Entry found [LDAPEntry(ipapython.dn.DN('cn=meToneptune.external.example.com http://meToneptune.external.example.com,cn=replica,cn=dc=external,dc=example,dc=com,cn=mapping tree,cn=config'), {'objectClass': [b'nsds5replicationagreement', b'top'], 'cn': [b'meToneptune.external.example.com http://meToneptune.external.example.com'], 'nsDS5ReplicaHost': [b'neptune.external.example.com http://neptune.external.example.com'], 'nsDS5ReplicaPort': [b'389'], 'nsds5replicaTimeout': [b'120'], 'nsDS5ReplicaRoot': [b'dc=external,dc=example,dc=com'], 'description': [b'me to neptune.external.example.com http://neptune.external.example.com'], 'nsDS5ReplicatedAttributeList': [b'(objectclass=*) $ EXCLUDE memberof idnssoaserial entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount'], 'nsDS5ReplicaTransportInfo': [b'LDAP'], 'nsDS5ReplicaBindMethod': [b'SASL/GSSAPI'], 'nsds5ReplicaStripAttrs': [b'modifiersName modifyTimestamp internalModifiersName internalModifyTimestamp'], 'nsDS5ReplicatedAttributeListTotal': [b'(objectclass=*) $ EXCLUDE entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount'], 'nsds5replicareapactive': [b'0'], 'nsds5replicaLastUpdateStart': [b'19700101000000Z'], 'nsds5replicaLastUpdateEnd': [b'19700101000000Z'], 'nsds5replicaChangesSentSinceStartup': [b''], 'nsds5replicaLastUpdateStatus': [b'Error (0) No replication sessions started since server startup'], 'nsds5replicaLastUpdateStatusJSON': [b'{"state": "green", "ldap_rc": "0", "ldap_rc_text": "success", "repl_rc": "0", "repl_rc_text": "replica acquired", "date": "2020-09-28T20:12:34Z", "message": "Error (0) No replication sessions started since server startup"}'], 'nsds5replicaUpdateInProgress': [b'FALSE'], 'nsds5replicaLastInitStart': [b'19700101000000Z'], 'nsds5replicaLastInitEnd': [b'19700101000000Z']})] 2020-09-28T20:12:50Z DEBUG Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 603, in start_creation run_step(full_msg, method) File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 589, in run_step method() File "/usr/lib/python3.6/site-packages/ipaserver/install/dsinstance.py", line 427, in __setup_replica cacert=self.ca_file File "/usr/lib/python3.6/site-packages/ipaserver/install/replication.py", line 1861, in setup_promote_replication raise RuntimeError("Failed to start replication") RuntimeError: Failed to start replication
I'd suggest looking at both servers 389-ds access and errors log to see if anything is logged there. Based on the timestamps it looks like it is failing immediately.
rob
freeipa-users@lists.fedorahosted.org
-
Rob Crittenden -
William Muriithi