freeipa server副本同步中断,两主节点数据不一致

/var/log/messages/var/log/dirsrv/slapd-testhadoop-COM 日志都出现以下日志: If replication stops, the consumer may need to be reinitialized.

[27/Jun/2023:05:15:09.469361922 +0800] - ERR - NSMMReplicationPlugin - changelog program - repl_plugin_name_cl - agmt="cn=meTohadoop-180-98.testhadoop.com" (hadoop-180-98:389): CSN 63735e9f000700030000 not found, we aren't as up to date, or we purged
[27/Jun/2023:05:15:09.469837541 +0800] - ERR - NSMMReplicationPlugin - send_updates - agmt="cn=meTohadoop-180-98.testhadoop.com" (hadoop-180-98:389): Data required to update replica has been purged from the changelog. If the error persists the replica must be reinitialized.
[27/Jun/2023:05:15:12.479511669 +0800] - ERR - agmt="cn=meTohadoop-180-98.testhadoop.com" (hadoop-180-98:389) - clcache_load_buffer - Can't locate CSN 63735e9f000700030000 in the changelog (DB rc=-30988). If replication stops, the consumer may need to be reinitialized.

也就是说hadoop-180-98.testhadoop.com节点数据更新所需要的数据在changelog内被删除了(具体为什么被删除了,现在已经没有日志可以查出来),如果错误一直存在,需要重新初始化这个副本。
另外直观的现象就是,从A freeipa 节点ui上创建的账号同步不到B上,B创建的账号可以同步到A。
解决办法
重新初始化这个副本
先对另外一个副本进行数据备份ipa-backup
freeipa server副本同步中断,两主节点数据不一致_第1张图片

然后re-initialize , ipa-replica-manage re-initialize --from=hadoop-180-91.testhadoop.com 需要输入ldap的密码。

在这里插入图片描述

你可能感兴趣的:(大数据安全,Hadoop,大数据,hadoop,运维)