Passwordserver replication issues

[Commander Keen]

Something strange is happening in my OD-environment.

First:
in /var/db/authserver I get a lot of these files. About 1000 of them. From march till now (november):
-rw-r–r– 1 root wheel 191629 Mar 16 2006 syncfile1142471304.929868.gz
-rw-r–r– 1 root wheel 191630 Mar 16 2006 syncfile1142469095.79386.gz
-rw-r–r– 1 root wheel 191618 Mar 16 2006 syncfile1142465373.149028.gz
-rw-r–r– 1 root wheel 191618 Mar 16 2006 syncfile1142464145.891051.gz
-rw-r–r– 1 root wheel 191628 Mar 15 2006 syncfile1142451561.279362.gz
-rw-r–r– 1 root wheel 191628 Mar 15 2006 syncfile1142450797.525509.gz
-rw-r–r– 1 root wheel 191625 Mar 15 2006 syncfile1142450058.651254.gz
-rw-r–r– 1 root wheel 191620 Mar 15 2006 syncfile1142449650.755695.gz
-rw-r–r– 1 root wheel 191624 Mar 15 2006 syncfile1142449534.752114.gz
-rw-r–r– 1 root wheel 191630 Mar 15 2006 syncfile1142442892.533186.gz
-rw-r–r– 1 root wheel 191595 Mar 15 2006 syncfile1142442195.73611.gz
-rw-r–r– 1 root wheel 191630 Mar 15 2006 syncfile1142441544.617594.gz
-rw-r–r– 1 root wheel 191629 Mar 15 2006 syncfile1142440935.975127.gz
-rw-r–r– 1 root wheel 191628 Mar 15 2006 syncfile1142438662.743677.gz
-rw-r–r– 1 root wheel 191633 Mar 15 2006 syncfile1142437018.552045.gz
-rw-r–r– 1 root wheel 191672 Mar 15 2006 syncfile1142436414.219935.gz
-rw-r–r– 1 root wheel 191636 Mar 15 2006 syncfile1142435506.848423.gz

I think these files are created after synchronisation and have to dissapear automatically after a while.

Secondly:
I see this in /Library/Logs/PasswordServer/ApplePasswordServer.Replication.log:

Nov 17 2006 13:08:01 Updated 1 records, rejected 1 from Replica2
Nov 17 2006 13:08:01 No Kerberos records to update
Nov 17 2006 13:08:01 Updated 1 records, rejected 1 from Replica6
Nov 17 2006 13:08:01 No Kerberos records to update
Nov 17 2006 13:08:01 Updated 0 records, rejected 5 from Replica5
Nov 17 2006 13:08:01 No Kerberos records to update
Nov 17 2006 13:08:01 Updated 0 records, rejected 4 from Replica8

Why are some records being rejected?

/var/db/openldap/openldap-slurp/replication.log is empty as can be. So replication seems to be working.

I’m also seeing this:
Nov 17 2006 13:40:40 Connecting to 10.4.0.254, synchronizing all records since 11/17/2006 01:40:27 PM
Nov 17 2006 13:40:40 The remote replica list has 1 parent and 8 replicas.
Nov 17 2006 13:40:40 Updating the list of replicas. There is 1 parent and 8 replicas in the list.
Nov 17 2006 13:40:40 syncfile: /var/db/authserver/apsSyncFi1163767240.742964

Seems like he’s creating those syncfiles here…

Errorlog shows this:
dap:/Library/Logs/PasswordService root# cat ApplePasswordServer.Error.log
— Start: Server rolled log on: Jul 24 2006 11:51:37 —
Jul 24 2006 11:51:37 Listener exception error: -1.
Jul 24 2006 11:51:37 Listener exception error: -1.
Jul 24 2006 12:14:47 Listener exception error: -1.
Jul 24 2006 12:14:47 Listener exception error: -1.
Jul 24 2006 12:14:47 Listener exception error: -1.

I’m getting worried about this.

Can someone tell me what’s going on?

Thanks a lot

greetzzzz

[Commander Keen]

One more thing

If I check the used slots on the passwordserver on the master and on the replica-side, I get the same amount. So that seems to be ok.

I’m checking the lines with: mkpassdb – dump | wc -l

So I guess the password are being synchonised…

[Commander Keen]

Well, sounds like things are mostly working.

That’s true

What version of OSXS are you on?

It’s 10.4.8 all the way (server, replica’s and clients)

However, have you added/removed replicas since March?
Only added, none removed

It certainly seems like you may have networking or other configuration issues that would be causing this log spew.
Any ideas on how to solve these issues?

Thanks a lot

[Commander Keen]

Hello,

Yes, I’ve already checked this.
I also did a linecount
(mkpasswd -dump | wc -l)
on the server and replicas and the amount is the same on all machines.

So, whats the next step?

Thanks a lot for your help

Best regards

[dthompson]

Next step??

Dumb question here. Do all your master and replica severs have proper A and PTR records associated with them? I have found that without proper DNS working 1 forward and reverse lookup for each server in place, replication sync logs will pile up in your /var/db/authserver folder….

[Author]

Posts