Sequence rollover

[Sarah PETER]

Dear all,

since a few days we get the following message about 1-2 times a day in the error logs of
several of our replicas:

INFO - csngen_new_csn - Sequence rollover; local offset updated.

Is this something we should be worried about?

We ran the readNsState.py script from
https://directory.fedoraproject.org/docs/389ds/howto/howto-fix-and-reset-...
and for one of the replicas it shows a big offset for the ipaca domain:

nsState is DwAAAAAAAABM4/ldAAAAAAoAAAAAAAAAngUAAAAAAABF0gAAAAAAAA==
Little Endian
For replica cn=replica,cn=dc\3Duni\2Cdc\3Dlu,cn=mapping tree,cn=config
  fmtstr=[H6x3QH6x]
  size=40
  len of nsstate is 40
  CSN generator state:
    Replica ID    : 15
    Sampled Time  : 1576657740
    Gen as csn    : 5df9e34c5382900150000
    Time as str   : Wed Dec 18 09:29:00 2019
    Local Offset  : 10
    Remote Offset : 1438
    Seq. num      : 53829
    System time   : Wed Dec 18 09:30:07 2019
    Diff in sec.  : 67
    Day:sec diff  : 0:67

nsState is RwQAAAAAAAD+DtVdAAAAAAsAAAAAAAAADgAAAAAAAAAFAAAAAAAAAA==
Little Endian
For replica cn=replica,cn=o\3Dipaca,cn=mapping tree,cn=config
  fmtstr=[H6x3QH6x]
  size=40
  len of nsstate is 40
  CSN generator state:
    Replica ID    : 1095
    Sampled Time  : 1574244094
    Gen as csn    : 5dd50efe000510950000
    Time as str   : Wed Nov 20 11:01:34 2019
    Local Offset  : 11
    Remote Offset : 14
    Seq. num      : 5
    System time   : Wed Dec 18 09:30:07 2019
    Diff in sec.  : 2413713
    Day:sec diff  : 27:80913


However, there has not been a message about time/clock skew or any other error messages
for that matter. We are running CentOS 7.7 with ipa-server 4.6.5-11.

Best regards,
Sarah

----
Sarah Peter
LCSB Bioinformatics Core & UL HPC Team

UNIVERSITÉ DU LUXEMBOURG

LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE
Campus Belval | Biotech II
6, avenue du Swing
L-4371 Belvaux
T [phone]
[e-mail]<mailto:[e-mail]>    
http://lcsb.uni.lu<http://lcsb.uni.lu/>
-----
This message is confidential and may contain privileged information. It is intended for
the named recipient only. If you receive it in error please notify me and permanently
delete the original message and any copies.
-----

[Christophe TREFOIS]

Dear all,

Does anybody have any insights to give us ?

Thanks a lot,
Christophe


From: Sarah PETER via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org&gt;
Sent: mercredi 18 décembre 2019 10:19
To: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org&gt;
Cc: Sarah PETER <sarah.peter(a)uni.lu&gt;
Subject: [Freeipa-users] Sequence rollover

Dear all,

since a few days we get the following message about 1-2 times a day in the error logs of
several of our replicas:

INFO - csngen_new_csn - Sequence rollover; local offset updated.

Is this something we should be worried about?

We ran the readNsState.py script from
https://directory.fedoraproject.org/docs/389ds/howto/howto-fix-and-reset-...
and for one of the replicas it shows a big offset for the ipaca domain:

nsState is DwAAAAAAAABM4/ldAAAAAAoAAAAAAAAAngUAAAAAAABF0gAAAAAAAA==
Little Endian
For replica cn=replica,cn=dc\3Duni\2Cdc\3Dlu,cn=mapping tree,cn=config
  fmtstr=[H6x3QH6x]
  size=40
  len of nsstate is 40
  CSN generator state:
    Replica ID    : 15
    Sampled Time  : 1576657740
    Gen as csn    : 5df9e34c5382900150000
    Time as str   : Wed Dec 18 09:29:00 2019
    Local Offset  : 10
    Remote Offset : 1438
    Seq. num      : 53829
    System time   : Wed Dec 18 09:30:07 2019
    Diff in sec.  : 67
    Day:sec diff  : 0:67

nsState is RwQAAAAAAAD+DtVdAAAAAAsAAAAAAAAADgAAAAAAAAAFAAAAAAAAAA==
Little Endian
For replica cn=replica,cn=o\3Dipaca,cn=mapping tree,cn=config
  fmtstr=[H6x3QH6x]
  size=40
  len of nsstate is 40
  CSN generator state:
    Replica ID    : 1095
    Sampled Time  : 1574244094
    Gen as csn    : 5dd50efe000510950000
    Time as str   : Wed Nov 20 11:01:34 2019
    Local Offset  : 11
    Remote Offset : 14
    Seq. num      : 5
    System time   : Wed Dec 18 09:30:07 2019
    Diff in sec.  : 2413713
    Day:sec diff  : 27:80913


However, there has not been a message about time/clock skew or any other error messages
for that matter. We are running CentOS 7.7 with ipa-server 4.6.5-11.

Best regards,
Sarah

----
Sarah Peter
LCSB Bioinformatics Core & UL HPC Team

UNIVERSITÉ DU LUXEMBOURG

LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE
Campus Belval | Biotech II
6, avenue du Swing
L-4371 Belvaux
T [phone]
[e-mail]<mailto:[e-mail]>    
http://lcsb.uni.lu<http://lcsb.uni.lu/>
-----
This message is confidential and may contain privileged information. It is intended for
the named recipient only. If you receive it in error please notify me and permanently
delete the original message and any copies.
-----

[Florence Blanc-Renaud]

Hi,

I am adding Directory Server's users list in CC as they have more knowledge.
flo

On 12/21/19 10:39 AM, Christophe TREFOIS via FreeIPA-users wrote:
>  Dear all,
>  
>  Does anybody have any insights to give us ?
>  
>  Thanks a lot,
>  
>  Christophe
>  
>  __
>  
>  *From:*Sarah PETER via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org&gt;
>  *Sent:* mercredi 18 décembre 2019 10:19
>  *To:* FreeIPA users list <freeipa-users(a)lists.fedorahosted.org&gt;
>  *Cc:* Sarah PETER <sarah.peter(a)uni.lu&gt;
>  *Subject:* [Freeipa-users] Sequence rollover
>  
>  Dear all,
>  
>  since a few days we get the following message about 1-2 times a day in 
>  the error logs of several of our replicas:
>  
>  INFO - csngen_new_csn - Sequence rollover; local offset updated.
>  
>  Is this something we should be worried about?
>  
>  We ran the readNsState.py script from 
>  https://directory.fedoraproject.org/docs/389ds/howto/howto-fix-and-reset-... 
>  and for one of the replicas it shows a big offset for the ipaca domain:
>  
>  nsState is DwAAAAAAAABM4/ldAAAAAAoAAAAAAAAAngUAAAAAAABF0gAAAAAAAA==
>  
>  Little Endian
>  
>  For replica cn=replica,cn=dc\3Duni\2Cdc\3Dlu,cn=mapping tree,cn=config
>  
>     fmtstr=[H6x3QH6x]
>  
>     size=40
>  
>     len of nsstate is 40
>  
>     CSN generator state:
>  
>       Replica ID    : 15
>  
>       Sampled Time  : 1576657740
>  
>       Gen as csn    : 5df9e34c5382900150000
>  
>       Time as str   : Wed Dec 18 09:29:00 2019
>  
>       Local Offset  : 10
>  
>       Remote Offset : 1438
>  
>       Seq. num      : 53829
>  
>       System time   : Wed Dec 18 09:30:07 2019
>  
>       Diff in sec.  : 67
>  
>       Day:sec diff  : 0:67
>  
>  nsState is RwQAAAAAAAD+DtVdAAAAAAsAAAAAAAAADgAAAAAAAAAFAAAAAAAAAA==
>  
>  Little Endian
>  
>  For replica cn=replica,cn=o\3Dipaca,cn=mapping tree,cn=config
>  
>     fmtstr=[H6x3QH6x]
>  
>     size=40
>  
>     len of nsstate is 40
>  
>     CSN generator state:
>  
>       Replica ID    : 1095
>  
>       Sampled Time  : 1574244094
>  
>       Gen as csn    : 5dd50efe000510950000
>  
>       Time as str   : Wed Nov 20 11:01:34 2019
>  
>       Local Offset  : 11
>  
>       Remote Offset : 14
>  
>       Seq. num      : 5
>  
>       System time   : Wed Dec 18 09:30:07 2019
>  
>       Diff in sec.  : 2413713
>  
>       Day:sec diff  : 27:80913
>  
>  However, there has not been a message about time/clock skew or any other 
>  error messages for that matter. We are running CentOS 7.7 with 
>  ipa-server 4.6.5-11.
>  
>  Best regards,
>  
>  Sarah
>  
>  ----
>  
>  Sarah Peter
>  
>  LCSB Bioinformatics Core & UL HPC Team
>  
>  UNIVERSITÉ DU LUXEMBOURG
>  
>  LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE
>  
>  Campus Belval | Biotech II
>  
>  6, avenue du Swing
>  
>  L-4371 Belvaux
>  
>  T [phone]
>  
>  sarah.peter(a)uni.lu <mailto:[e-mail]>http://lcsb.uni.lu 
>  <http://lcsb.uni.lu/>
>  
>  -----
>  
>  This message is confidential and may contain privileged information. It 
>  is intended for the named recipient only. If you receive it in error 
>  please notify me and permanently delete the original message and any copies.
>  
>  -----
>  
>  
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>