Back to bug 1404338

Who When What Removed Added
Petr Vobornik 2016-12-13 15:59:00 UTC Status NEW POST
Jan Cholasta 2016-12-13 16:33:31 UTC Status POST MODIFIED
CC jcholast
Fixed In Version ipa-4.4.0-14.el7_3.3
errata-xmlrpc 2016-12-13 16:34:26 UTC Status MODIFIED ON_QA
Jan Cholasta 2016-12-19 09:49:17 UTC Flags needinfo?(lkrispen)
Ludwig 2016-12-19 12:45:13 UTC Doc Text Cause: If an IPA upgrade was performed simultaneously on several servers repliction conflict entries in the cn=topology subtree could be generated

Consequence: If the domain level was raised in such a situation the generated topology segment could be distributed betweeen the "real" and "conflict" entries and one-directional segments could be left over. IPA command and clients do not work properly

Fix: The raising of the domain level is rejected if repliction conflicts exists

Result: only in a databes without conflict entries in the cn=topology subtree segments will be created, no irregular segments will exist
Doc Type If docs needed, set a value Bug Fix
Flags needinfo?(lkrispen)
Nikhil Dehadrai 2017-01-05 16:06:53 UTC Status ON_QA ASSIGNED
CC ndehadra
Nikhil Dehadrai 2017-01-05 16:11:33 UTC Depends On 1410514
Nikhil Dehadrai 2017-01-09 06:17:10 UTC Status ASSIGNED VERIFIED
Depends On 1410514
Marc Muehlfeld 2017-01-09 13:09:54 UTC Docs Contact mmuehlfe
Doc Text Cause: If an IPA upgrade was performed simultaneously on several servers repliction conflict entries in the cn=topology subtree could be generated

Consequence: If the domain level was raised in such a situation the generated topology segment could be distributed betweeen the "real" and "conflict" entries and one-directional segments could be left over. IPA command and clients do not work properly

Fix: The raising of the domain level is rejected if repliction conflicts exists

Result: only in a databes without conflict entries in the cn=topology subtree segments will be created, no irregular segments will exist
Previously, if an Identity Management (IdM) upgrade ran simultaneously on multiple servers, replication conflict entries were sometimes generated in the "cn=topology" subtree. If the domain level was raised while the conflict entries existed, the generated topology segment was sometimes distributed between correct and conflict entries. Also, one-directional segments fail to receive the data. As a consequence, IdM clients and commands fail. A patch has been applied to reject raising the domain level if replication conflicts exists. As a result, topology segments are created now only in a database without conflict entries.
errata-xmlrpc 2017-01-17 12:05:25 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2017-01-17 18:23:40 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2017-01-17 13:23:40 UTC

Back to bug 1404338