#7935 IdM creates pairs of left-right replicas rather than bidirectional for "domain" suffix
Opened 2 years ago by fcami. Modified a year ago

Ticket was cloned from Red Hat Bugzilla: Bug 1700097

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:
When attempting to install multiple IdM servers in a replica set, it seems to
be inconsistent about how it creates the replication topology (compared to IPA)

Steps to Reproduce:
1. Install IdM server
2. Install two IdM replica at the same time (easiest with freeipa-ansible)
3. ipa topologysegment-find --all domain

Actual results:
The segments are pairs of left-right segments, rather than bidirectional

Expected results:
All the replication agreements would be bidirectional

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1700097

2 years ago

That sounds kinda bad. IMHO the installer should detect the problem and either repair it automatically or fail very loudly.

Metadata Update from @pcech:
- Issue tagged with: Falcon

2 years ago

The RC is likely identified (see BZ).
In short when directory starts, topology plugin internal structures (managed hosts, segments...) are initialized (from shared config area) with a delay (20s by default). If an incoming operation like ADD a segment comes in during that period, topology plugin does not merge it.

A tentative fix improved the situation but it is incomplete as it still occurs from time to time.
Need a reproducer.

Login to comment on this ticket.