freeipa

FreeIPA is an integrated Identity and Authentication solution for Linux/UNIX networked environments.  |  http://www.freeipa.org/

#4390 [RFE] New page to show replication status

Created 4 years ago by drunkahol
Modified a year ago

New page for FreeIPA admins to show basic information about the state of replication agreements.

Basic information can be provided by following:

http://www.port389.org/docs/389ds/howto/howto-replicationmonitoring.html - Example 3.

I extended this to loop through our list of IPA servers and show the state of each of their replication agreements.

It's a simple page that actually provides essential information when things are going wrong.

Showing this information through the FreeIPA WebUI would be a benefit to users who have built their own hooks to do the same.

Attachments

Example of replication states rendered in simple table
freeipa-replication-status.png

Good idea, we plan to do something like this in scope of #4286 and utilize the developed topology plugin (#4302) to visualize the entire replication topology and (ideally) the status.

Moving to FreeIPA 4.2, we will try to address it together with #4302 and #4286.

Related discussion with Ludwig on this ticket:

(03:58:18 PM) mkosek: lkrispen: hi :) I am thinking, will current topology plugin help in any way with https://fedorahosted.org/freeipa/ticket/4390? I.e. to allow framework pull replication status information from the shared tree?
(04:02:00 PM) lkrispen: mkosek: no, I wouldn't do it, the info in the agreement is frequently updated, if you want to put it inthe shared tree and replicate it you would ever increase rplication traffic. I could get busy wiithout any further mod 
(04:03:35 PM) mkosek: lkrispen: hmm, I see. Could we only add some information that is not updated frequently? Like "This agreement is OK", "This agreement is broken"?
(04:08:13 PM) lkrispen: mkosek: well, possibly if it goes into "failed" state and when it comes out of it, but I think the changes are made to the in memory object, the topo plugin and the repl plugin would have to learn quite a lot
(04:10:18 PM) mkosek: lkrispen: I see. In any case  this does not look as 4.2 material

It seems we may need to do bigger updates to replication/topology plugin in order to be able to publish the "OK/failed" status of a replication agreement.

Given comment:8, moving to next release.

Updating link to actual design page with a WIP monitoring extension to FreeIPA Topology feature.

Would be great to see this come off the backlog for 4.5.

Perhaps a toggle for the Topology view? Toggle Normal = Normal view. Toggle to Status shows new Status view.

Status view is same as Normal view, but colours nodes Green, Amber or Red depending on status. Replication links between nodes also colored Green, Amber or Red depending on the link status.

A failed link does not necessarily mean a failed status for any of the nodes due to alternative routing paths sometimes being available.

SVG of non-simple FreeIPA design
FreeIPA.svg

[[Image(FreeIPA.svg)]]

In the attached design, several replication links can fail, but the overall status of the servers is not affected. Being able to demonstrate this in the topology page would be great.

The topology page might be improved in 4.5 but,it won't probably contain this RFE - status of each individual replication agreement.

It needs support in Directory server topology plugin first, as written in the design page.

a year ago

Metadata Update from @drunkahol:
- Issue assigned to pvoborni
- Issue set to the milestone: FreeIPA 4.5 backlog

Login to comment on this ticket.

enhancement

Web UI

0

https://bugzilla.redhat.com/show_bug.cgi?id=1206591

http://www.freeipa.org/page/V4/Monitor_Replication_Topology

cancel