German wrote on https://bugzilla.redhat.com/show_bug.cgi?id=1565633
in ipa environments, we need the least delay in replication, particularly when we install a replica. We have seen that in environments of only 4 replicas, the monopolization of consumers is already taking place and sometimes preventing the replica to be installed. Particularly we can see failures in custodia component that adds keys in one node and checks the keys have been updated in the other node. This is failing by timeout. We can workaround this issue by setting "nsds5ReplicaReleaseTimeout: 60" at replica level in all the replicas.
in ipa environments, we need the least delay in replication, particularly when we install a replica. We have seen that in environments of only 4 replicas, the monopolization of consumers is already taking place and sometimes preventing the replica to be installed.
Particularly we can see failures in custodia component that adds keys in one node and checks the keys have been updated in the other node. This is failing by timeout.
We can workaround this issue by setting "nsds5ReplicaReleaseTimeout: 60" at replica level in all the replicas.
The setting is explained at http://directory.fedoraproject.org/docs/389ds/design/repl-conv-design.html . 389-DS recommends 60 seconds as a good and sane default value.
The settings must be applied on each 389-DS instance for each database:
cn=replica,cn=o\3Dipaca,cn=mapping tree,cn=config
cn=replica,cn=dc\3Dipa...,cn=mapping tree,cn=config
The settings must be added/updated as part of a regular installation or update:
ipa-server-install
ipa-server-upgrade
ipa-replica-install
ipa-ca-install
ipa-kra-install
Metadata Update from @cheimes: - Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1565633
Metadata Update from @pvoborni: - Issue set to the milestone: FreeIPA 4.5.5 (was: FreeIPA 4.5)
Metadata Update from @cheimes: - Issue assigned to cheimes
Metadata Update from @cheimes: - Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/1800
master:
ipa-4-5:
ipa-4-6:
Metadata Update from @cheimes: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.