Hello,
I shot myself on the foot the other day by keeping one of the IPA server down too long during redundancy testing. Now, it can't sync with the peer. Luckily, its not the cert server so I am suspecting I can get it working by reinitializing it. However, that isn't working, and I am getting the error below.
[root@hydrogen ~]# ipa-replica-manage re-initialize --from lithium.eng.example.com
[ldaps://lithium.eng.example.com:636] reports: Update failed! Status: [2 Replication error acquiring replica: excessive clock skew]
Now, before I do further change, I am wondering if someone has faced this problem before and what would the next step. According to google, this seem to be my only solution, but looks a bit scarily.
http://directory.fedoraproject.org/docs/389ds/howto/howto-fix-and-reset-time...
Would there be any other better option from your experience?
[15/Jan/2018:07:27:58.296415297 -0500] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests
[15/Jan/2018:07:27:58.296988661 -0500] - INFO - slapd_daemon - Listening on /var/run/slapd-ENG-EXAMPLE-COM.socket for LDAPI requests
[15/Jan/2018:07:28:02.794968170 -0500] - ERR - csngen_adjust_time - Adjustment limit exceeded; value - 7568166, limit - 86400
[15/Jan/2018:07:28:02.796095907 -0500] - ERR - NSMMReplicationPlugin - repl5_inc_run - agmt="cn=meTolithium.eng.example.com" (lithium:389): Fatal error - too much time skew between replicas!
[15/Jan/2018:07:28:02.799804827 -0500] - ERR - NSMMReplicationPlugin - repl5_inc_run - agmt="cn=meTolithium.eng.example.com" (lithium:389): Incremental update failed and requires administrator action
[15/Jan/2018:07:28:03.400808361 -0500] - ERR - schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=eng,dc=example,dc=com
[15/Jan/2018:07:28:03.401704265 -0500] - ERR - schema-compat-plugin - Finished plugin initialization.
[15/Jan/2018:07:28:25.023819558 -0500] - ERR - csngen_adjust_time - Adjustment limit exceeded; value - 7568268, limit - 86400
[15/Jan/2018:07:28:25.025929954 -0500] - ERR - NSMMReplicationPlugin - multimaster_extop_StartNSDS50ReplicationRequest - conn=28 op=5 repl="dc=eng,dc=example,dc=com": Excessive clock skew from supplier RUV
[15/Jan/2018:07:28:25.026528807 -0500] - ERR - NSMMReplicationPlugin - multimaster_extop_StartNSDS50ReplicationRequest - conn=28 op=5 replica="dc=eng,dc=example,dc=com": Unable to acquire replica: error: excessive clock skew
[15/Jan/2018:07:28:25.107953782 -0500] - ERR - csngen_adjust_time - Adjustment limit exceeded; value - 7568269, limit - 86400
[15/Jan/2018:07:28:25.137884951 -0500] - ERR - NSMMReplicationPlugin - multimaster_extop_StartNSDS50ReplicationRequest - conn=29 op=5 repl="dc=eng,dc=example,dc=com": Excessive clock skew from supplier RUV
[15/Jan/2018:07:28:25.138620189 -0500] - ERR - NSMMReplicationPlugin - multimaster_extop_StartNSDS50ReplicationRequest - conn=29 op=5 replica="dc=eng,dc=example,dc=com": Unable to acquire replica: error: excessive clock skew
[15/Jan/2018:07:28:25.204301158 -0500] - ERR - csngen_adjust_time - Adjustment limit exceeded; value - 7568270, limit - 86400
[15/Jan/2018:07:28:25.205578413 -0500] - ERR - NSMMReplicationPlugin - multimaster_extop_StartNSDS50ReplicationRequest - conn=30 op=5 repl="dc=eng,dc=example,dc=com": Excessive clock skew from supplier RUV
[15/Jan/2018:07:28:25.206115922 -0500] - ERR - NSMMReplicationPlugin - multimaster_extop_StartNSDS50ReplicationRequest - conn=30 op=5 replica="dc=eng,dc=example,dc=com": Unable to acquire replica: error: excessive clock skew
Regards, William
freeipa-users@lists.fedorahosted.org