Back to bug 1009679

Who When What Removed Added
Nathan Kinder 2013-09-18 21:43:32 UTC CC nkinder
Nathan Kinder 2013-09-22 23:15:56 UTC Status NEW POST
Rich Megginson 2013-10-01 23:00:36 UTC Status POST MODIFIED
Fixed In Version 389-ds-base-1.3.1.6-5.el7
errata-xmlrpc 2013-10-01 23:40:47 UTC Status MODIFIED ON_QA
Rich Megginson 2013-10-30 22:37:09 UTC Doc Text Cause: The directory server replication protocol takes into account clock differences between servers. The clock skew accumulator can grow quite high, especially due to problems with ntp or clocks in virtual machines. Once the clock skew is greater than 1 day, replication will stop working.

Consequence: Updates made to one server are not replicated to other servers. Re-initialization does not help.

Fix: Add a new configuration parameter to cn=config
nsslapd-ignore-time-skew: on|off - default off
If nsslapd-ignore-time-skew: on, the replication consumer will log errors about excessive time skew, but will allow replication to proceed, and will not return a time skew error to the replication supplier.

Result: With nsslapd-ignore-time-skew: on, replication will continue despite excessive clock skew.
Rich Megginson 2014-01-20 20:29:34 UTC Status ON_QA POST
Noriko Hosoi 2014-01-21 23:00:40 UTC Status POST MODIFIED
CC nhosoi
Noriko Hosoi 2014-01-21 23:04:02 UTC Fixed In Version 389-ds-base-1.3.1.6-5.el7 389-ds-base-1.3.1.6-15.el7
Noriko Hosoi 2014-01-21 23:10:46 UTC Status MODIFIED ON_QA
Sankar Ramalingam 2014-02-14 13:51:34 UTC Status ON_QA VERIFIED
Ludek Smid 2014-06-13 10:57:14 UTC Status VERIFIED CLOSED
Resolution --- CURRENTRELEASE
Last Closed 2014-06-13 06:57:14 UTC

Back to bug 1009679