To Collect Required Debug Data For Directory Server Replication Problems

This procedure describes what data to collect when experiencing inconsistencies and other issues involving Directory Server replication.

Directory Server commands used here are described in the product documentation.

1. Collect the hostname, IP address, and serverID for each server instance in the replication topology.

2. Collect a copy of the schema folder, server-root/slapd-serverID/config/schema, and all the files in the folder.

3. Collect access logs configured to show replication information.

   Before you collect access logs as described in To Collect Required Debug Data For Any Directory Server Problem, adjust the log level to keep replication information.

   You can use the Console to adjust the access log level.

   Alternatively, you can use the ldapmodify command as follows.

   $ ldapmodify -h host -p port -D "cn=Directory Manager" -w password dn: cn=config changetype: modify replace: nsslapd-infolog-area # nsslapd-errorlog-level in 5.1 nsslapd-infolog-area: 8192

   To return to the default log level, use the following command.

   $ ldapmodify -h host -p port -D "cn=Directory Manager" -w password dn: cn=config changetype: modify replace: nsslapd-infolog-area # nsslapd-errorlog-level in 5.1 nsslapd-infolog-area: 0

   You must restart Directory Server for the change to take effect.

4. Provide a listing of the changelog directory.

   UNIX and Linux

   ls -la changelog-dir

   Windows

   dir changelog-dir

   If you cannot find the change log, examine the Directory Server configuration file, server-root/slapd-serverID/config/dse.ldif, to find the path. The path is specified as the values of attribute nsslapd-changelogdir.

5. Collect output from the insync command.

   The insync command indicates the state of synchronization between a master replica and one or more consumer replicas. The following command shows the state over a period of 30 seconds.

   server-root/shared/bin/insync -s "cn=Directory Manager:password@hostname1:ldap-port" -c "cn=Directory Manager:password@hostname2:ldap-port" 30

6. Collect output from the repldisc command.

   The repldisc command displays the replication topology, building a graph of all known replica, then showing the result as a matrix.

   server-root/shared/bin/repldisc -D "cn=Directory Manager" -w password -b base-dn -s host:ldap-port

   Here, base-dn is the DN of the replicated suffix.