Este conteúdo não está disponível no idioma selecionado.
Chapter 3. Checking IdM replication by using Healthcheck
Run Healthcheck tests on your IdM replication topology to identify configuration issues early, preventing data inconsistencies and service disruptions that could affect user authentication and access to domain resources.
You can test Identity Management (IdM) replication by using the Healthcheck tool. For general information about the tool, see Healthcheck in IdM.
3.1. The IdM replication and topology Healthcheck tests Copiar o linkLink copiado para a área de transferência!
Use built-in Healthcheck tests to verify your IdM replication topology meets connectivity and agreement requirements, preventing isolated servers and replication conflicts that could compromise data integrity.
The Identity Management (IdM) Healthcheck tool includes tests of the IdM topology configuration. The tests search for replication conflict issues.
You can find the IPATopologyDomainCheck and ReplicationConflictCheck tests under the ipahealthcheck.ipa.topology and ipahealthcheck.ds.replication sources of the output of the ipa-healthcheck --list-sources command.
- IPATopologyDomainCheck
Tests the following configuration:
- No IdM server is disconnected from the topology.
- The IdM servers do not have more than the recommended number of replication agreements.
If the test succeeds, the test returns the configured domains. Otherwise, specific connection errors are reported.
NoteThe test runs the
ipa topologysuffix-verifycommand for thedomainsuffix. It also runs the command for thecasuffix if the IdM Certificate Authority server role is configured on this server.- ReplicationConflictCheck
-
Searches for entries in LDAP matching
(&(!(objectclass=nstombstone))(nsds5ReplConflict=*)).
3.2. Screening replication by using Healthcheck Copiar o linkLink copiado para a área de transferência!
Execute focused assessments to identify replication problems before they cause production outages.
You can run a standalone manual test to check the replication and topology configuration of your Identity Management (IdM) server by using the Healthcheck tool.
Prerequisites
-
You have
rootprivileges.
Procedure
To run the replication test, enter:
ipa-healthcheck --source=ipahealthcheck.ds.replication --source=ipahealthcheck.ipa.topology
# ipa-healthcheck --source=ipahealthcheck.ds.replication --source=ipahealthcheck.ipa.topologyCopy to Clipboard Copied! Toggle word wrap Toggle overflow The
--source=ipahealthcheck.ds.replicationand--source=ipahealthcheck.ipa.topologyoptions ensure that IdM Healthcheck only performs the replication conflict and topology tests.Four different results are possible:
SUCCESS— the test passed successfully.Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
WARNING— the test passed but there might be a problem. ERROR— the test failed.Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
CRITICAL— the test failed and it affects the IdM server functionality.
NoteRun these tests on all IdM servers when trying to check for issues.