Bug 1353629
| Summary: | DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Punit Kundal <pkundal> |
| Component: | 389-ds-base | Assignee: | wibrown <wibrown> |
| Status: | CLOSED ERRATA | QA Contact: | Viktor Ashirov <vashirov> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 7.3 | CC: | nhosoi, nkinder, rmeggins, wibrown |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | 389-ds-base-1.3.5.10-4.el7 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-11-03 20:43:51 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Punit Kundal
2016-07-07 15:31:46 UTC
Upstream ticket: https://fedorahosted.org/389/ticket/48916 RHEL:
RHEL 7.3 x86_64 Server
DS builds:
[root@org47 ~]# rpm -qa | grep 389-ds-base
389-ds-base-1.3.5.10-4.el7.x86_64
389-ds-base-snmp-1.3.5.10-4.el7.x86_64
389-ds-base-libs-1.3.5.10-4.el7.x86_64
Steps Performed:
1. Created two standalone instances as master1 and master2
2. Configured DNA plugin on both instances,
Below is the DNA plugin configuration entry on master1
dn: cn=Account UIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
objectClass: top
objectClass: dnaPluginConfig
cn: Account UIDs
dnatype: uidNumber
dnatype: gidNumber
dnafilter: (objectclass=posixAccount)
dnascope: ou=People,dc=example,dc=com
dnaNextValue: 1
dnaMaxValue: 20
dnasharedcfgdn: cn=Account UIDs,ou=Ranges,dc=example,dc=com
dnaThreshold: 0
dnaRangeRequestTimeout: 60
dnaMagicRegen: magic
dnaRemoteBindDN: uid=dnaAdmin,ou=People,dc=example,dc=com
dnaRemoteBindCred: secret123
dnaNextRange: 41-50
dnaThreshold is set to 0 on master1
Below is the DNA plugin configuration entry on master2
dn: cn=Account UIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
objectClass: top
objectClass: dnaPluginConfig
cn: Account UIDs
dnatype: uidNumber
dnatype: gidNumber
dnafilter: (objectclass=posixAccount)
dnascope: ou=People,dc=example,dc=com
dnanextvalue: 21
dnaMaxValue: 30
dnasharedcfgdn: cn=Account UIDs,ou=Ranges,dc=example,dc=com
dnaThreshold: 2
dnaRangeRequestTimeout: 60
dnaMagicRegen: magic
dnaRemoteBindDN: uid=dnaAdmin,ou=People,dc=example,dc=com
dnaRemoteBindCred: secret123
master2 only has 10 numbers available for allocation
3. Configured a 2x MMR setup by added required replication configuration entries on both masters
4. Added 10 users on master2 to exhaust its available range
[root@org47 dna_setup]# ldapmodify -x -D 'cn=Directory Manager' -w secret123 -h localhost -p 1389 -a -f users.ldif
adding new entry "uid=testuser21,ou=People,dc=example,dc=com"
adding new entry "uid=testuser22,ou=People,dc=example,dc=com"
adding new entry "uid=testuser23,ou=People,dc=example,dc=com"
adding new entry "uid=testuser24,ou=People,dc=example,dc=com"
adding new entry "uid=testuser25,ou=People,dc=example,dc=com"
adding new entry "uid=testuser26,ou=People,dc=example,dc=com"
adding new entry "uid=testuser27,ou=People,dc=example,dc=com"
adding new entry "uid=testuser28,ou=People,dc=example,dc=com"
adding new entry "uid=testuser29,ou=People,dc=example,dc=com"
adding new entry "uid=testuser30,ou=People,dc=example,dc=com"
5. Checked the status of master1
[root@org47 ~]# status-dirsrv master1
● dirsrv - 389 Directory Server master1.
Loaded: loaded (/usr/lib/systemd/system/dirsrv@.service; enabled; vendor preset: disabled)
Active: active (running) since Sun 2016-09-18 17:31:58 IST; 9min ago
Main PID: 19494 (ns-slapd)
Status: "slapd started: Ready to process requests"
master1 is still running, no crash here
6. Tried adding another entry on master2 as below
[root@org47 dna_setup]# ldapmodify -x -D 'cn=Directory Manager' -w secret123 -h localhost -p 1389 -a -f user.ldif
adding new entry "uid=testuser32,ou=People,dc=example,dc=com"
ldap_add: Operations error (1)
additional info: Allocation of a new value for range cn=account uids,cn=distributed numeric assignment plugin,cn=plugins,cn=config failed! Unable to proceed.
7. Modified the value of dnaThreshold on master1
[root@org47 dna_setup]# ldapmodify -x -D 'cn=Directory Manager' -w secret123 -h localhost -p 389
dn: cn=Account UIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
changetype: modify
replace: dnaThreshold
dnaThreshold: 5
modifying entry "cn=Account UIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config"
9. Once again tried to add an entry on master2
[root@org47 dna_setup]# ldapmodify -x -D 'cn=Directory Manager' -w secret123 -h localhost -p 1389 -a -f user.ldif
adding new entry "uid=testuser31,ou=People,dc=example,dc=com"
entry was added successfully
10. Verified that range was transferred properly
[root@org47 dna_setup]# ldapsearch -xLLL -b 'uid=testuser31,ou=People,dc=example,dc=com' -h localhost -p 1389
dn: uid=testuser31,ou=People,dc=example,dc=com
cn: test user
homeDirectory: /home/testuser
objectClass: top
objectClass: person
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: organizationalPerson
sn: user
uid: testuser
uid: testuser31
uidNumber: 46
gidNumber: 46
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2016-2594.html |