Hello Laurent,
I opened an upstream ticket [1]. Please feel free to update it with
technical details.
That is a good news that there is valid workaround.
My understanding is that the topology was quite stable and you started
to see deadlocks after an upgrade (specifically 389-ds-base).
Do you know which version was stable and the one you started to see the
deadlock ?
Regarding replication conflicts, in themselves they are handled by the
server and should not impact replication or the server. The conflict
entries are triggered by the ADD of entries with the same DN on
different servers. A ADD succeeds on a given server if replication has
not enough time to replicate the entry added on another server. In short
if ADD are done in parallel. It can happen for example if a script runs
several ipa-server-install in parallel.
[1] https://github.com/389ds/389-ds-base/issues/6652
regards
thierry
On 3/4/25 7:31 PM, ARNAL Laurent via FreeIPA-users wrote:
Hello Thierry,
Thanks for pointing out this issue about retroCL.
I've disable it yesterday by settings changelog maxage to -1.
And since, the server is now stable for more then one day without any deadlock.
So the deadlock seems to come from this thread.
I also notice this morning that I've got a lot of replication conflicts in my
setup (more then 6000).
This replication conflicts come from updating my reverse Dns zone from dhcp
servers.
I've got a particular setup with two dhcp servers, one on each ipa master, and
an openvpn ethernet bridge between the two servers.
There was a mismatch in my firewall setup, so each servers respond at the same
time for dhcp request, and so make dns conflictings updates.
Not sure, but perhaps this can explain anormal changelog activity on my freeipa
servers, that could have cause
Thanks for your help.
Laurent.
--
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
