[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Replication delay
- To: openldap-technical@openldap.org
- Subject: Re: Replication delay
- From: Michael Ströder <michael@stroeder.com>
- Date: Fri, 22 Mar 2019 17:19:06 +0100
- Autocrypt: addr=michael@stroeder.com; prefer-encrypt=mutual; keydata= mQENBFbdnRoBCADj0vYA4aRwKJ6AE4mf8oElLgMT/1eLNKpJ2FYBWcwj9d8dTk5/p9b8DRxy S/qQIUUZqt9xRFZwUCm0vFeQMRDeN9xzAKoRzrJifoDOacOjG1lhZTKYvVZGgUT89Ao3QeHh Q7gPzcAKNoueoR2y3FXStOYuRrbk5PlSjVAITjsotgc7PWE9mmVYpeu8a+byK/DBHKUyolOA 1UXYvDa7MbPhMtdNm8qnwtKs1Vsyk1VkErM+5cIe+zTT6WYQcmZMRjCtWGiFTzk9W6Mdlskk WRTKhKNgokTsgcy1ecaCBUZWxv/SyXgD81+rwRi9b8Px+1reg43ayxi8sV7jrI1feybbABEB AAG0J01pY2hhZWwgU3Ryw7ZkZXIgPG1pY2hhZWxAc3Ryb2VkZXIuY29tPokBNwQTAQgAIQUC Vt2dGgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRAH3HrjaovJOFpTCACjO773gcmJ KvzjiNpUFl/gANyaJgIq4VbMQ7VthRb1F9X6YbdJ6Z99ntyESjGFCpjofcSomr2vJDpv6ht+ lY33yo20YwsMpqe2OeId0jPybG+FtabKjgBNoAk7iqnBGUvE4t0dz0n1LQVCQR2jxyTKmcNq OYpsRZ3H+6kWwJMuVgsNZglINVZ8JgV5QuLYN5jhYz+pOuFnU11bV6nWREvzZXzebe7g7Zus 6AsWjtJ0lDvgBNzLlF3/eFrVch6Bejs0SvuFseIdZQk+4YU6Rb8xul/jDFXIfo7eTmijO3dV T5AmC1cUi8czncwpgAJnEH8vYv23RoN/aw2gSMCS2huIuQENBFbdnRoBCAC7L1cTVBVZZuM/ yxSUM5CsgGBlTD1Cr7C2ngZFsHSYXVLq6NUB8GZA2iLK96CrwnFw4/Jjz4llOjc50iVRMQKL RyFWOJAMrpPq2ew5T+Uoo524D//dwVbqkFVVuvM8NPiKIDyPGCjP+acM1D8hXwhOXgQ8Iz8Q 3/GRSYjitn9JrkF0ia2nhariznBKVu0LDffxF/hOCx45+QRR2/rYYlshfZMB7nEJX9P+hVfM CSzltz9Z8CldeUbiJvnyrISReR2XBw9oh8JkIUP0BtpIaify9A7EfzOk+W9BUnWe+YwdSUsB fJxOhSv+umyW5GMqZGFu+4oYnkzbe+1LUs1JarCtABEBAAGJAR8EGAEIAAkFAlbdnRoCGwwA CgkQB9x642qLyTjEUgf+JX6Atatl/QKe37yCj1OZYNPd3B0rPLJRF5mEmrADRXLZC9+uFeDS Wxxln040gnR6rjBHrRcvVmlTDiZY26iuL16+V+0/aZ9uyXNQSzk2cwDSiI/8gvr72Y+FN5fh cGXpeNHxHilYc9onzDhxyE76cwzqTKm4q2ULIH2u9IHQ5O86Fv6nHPYhe2fy1bhQapNwi/Xl 3G3i2WNH/w7m+1zWU1IddZOjmXzoxLT1BATwXGa0Tt5RjVb2mM1Wg3Zj6kqFkF2vvKcvrwj0 q0Ap5uyfN5m0uWzQMCMoaV9HQf7f5MkS1lnwBqDgnojjVAieX5uk7olUiRuPKHMfhvXulYP8 AA==
- In-reply-to: <a92329c2-0a2a-55c2-10ab-0f4d485bc9bd@um.es>
- Openpgp: id=43C8730E84A20E560722806C07DC7AE36A8BC938
- References: <3b8a1ac0-43ac-f7a4-ad4b-5b87554a2d5c@um.es> <8C2D61BDD4E0278596565183@[192.168.1.39]> <c3c12973-44fd-cbe4-9c51-4ea296086e26@um.es> <1fe56f06-dfff-6ee3-c577-c8b6456a301f@stroeder.com> <a92329c2-0a2a-55c2-10ab-0f4d485bc9bd@um.es>
- User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.5.2
On 3/22/19 7:54 AM, Angel L. Mateo wrote:
> El 21/3/19 a las 20:26, Michael Ströder escribió:
>> On 3/21/19 8:22 AM, Ángel L. Mateo wrote:
>>> Now the server with problems works without problems for days, but
>>> then it start delaying syncs.
>> How do you detect this?
>>
> Checking contextCSN attribute of all ldap servers. I get something
> like this:
>
> contextCSN: 20190322064915.077600Z#000000#01f#000000
> contextCSN: 20190322065006.637604Z#000000#020#000000
> contextCSN: 20190322065002.859879Z#000000#021#000000
> contextCSN: 20190322065000.303715Z#000000#022#000000
> contextCSN: 20190301102558.398349Z#000000#027#000000
> contextCSN: 20190314080533.305657Z#000000#029#000000
>
> There is one value for every server. When everything is ok, these
> values are the same in all servers. But sometimes in the new server are
> different, with values older than the in the others.
This is most times caused by an OpenLDAP bug. I see this quite often
with MMR providers even though the entries have been correctly
replicated to the other providers. Hence I asked for your detection method.
I've double-checked the code of my monitoring script very often!
And I'm not the only one seeing this false alarm in the monitoring.
E.g. two guys approached me after my OpenLDAP lightning monitoring talk
at FOSDEM reporting the same issue. And they use another monitoring tool.
So please check whether changes were correctly replicated instead.
Yes, that's nearly impossible if you have many changes on many entries.
I've considered to search the highest entryCSN value per provider ID
(server-side sorting on entryCSN, search limit 1) to compare it against
its accompanying contextCSN value. But during first superficial tests I
only got strange results. I have to investigate further before I can
come up with detailed results.
Ciao, Michael.
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature