ALM-25004 Abnormal LdapServer Data Synchronization

Updated on 2024-11-29 GMT+08:00

View PDF

Alarm Description

The system checks the LdapServer data every 30 seconds. This alarm is generated when the data on the active and standby LdapServers of Manager is inconsistent for 12 consecutive times. This alarm is cleared when the data on the active and standby LdapServers is consistent.

The system checks the LdapServer data every 30 seconds. This alarm is generated when the LdapServer data in the cluster is inconsistent with that on Manager for 12 consecutive times. This alarm is cleared when the data is consistent.

Alarm Attributes

Alarm ID	Alarm Severity	Alarm Type	Service Type	Auto Cleared
25004	Critical	Quality of service	FusionInsight Manager	Yes

Alarm Parameters

Type	Parameter	Description
Location Information	Source	Specifies the cluster for which the alarm is generated.
	ServiceName	Specifies the service for which the alarm is generated.
	RoleName	Specifies the role for which the alarm is generated.
	HostName	Specifies the host for which the alarm is generated.
Additional Information	Detail	Specifies the details for which the alarm is generated.

Impact on the System

LdapServer data inconsistency occurs because the LdapServer data in Manager is damaged or the LdapServer data in the cluster is damaged. The LdapServer process with damaged data cannot provide services externally, and the authentication functions of Manager and the cluster are affected.

Possible Causes

The network of the node where the LdapServer process locates is faulty.
The LdapServer process is abnormal.
The OS restart damages data on LdapServer.

Handling Procedure

Check whether the network where the LdapServer nodes reside is faulty.

On the FusionInsight Manager portal, choose O&M > Alarm > Alarms. Record the IP address of HostName in the alarm locating information as IP1 (if multiple alarms exist, record the IP addresses as IP1, IP2, and IP3 respectively).
Contact O&M engineers and log in to the nodes corresponding to IP 1. Run the ping command to check whether the IP address of the management plane of the active OMS node can be pinged.
- If yes, go to 4.
- If no, go to 3.
Contact the network administrator to recover the network and check whether Abnormal LdapServer Data Synchronization is cleared.
- If yes, no further action is required.
- If no, go to 4.

Check whether the LdapServer processes are normal.

On the Alarm page of FusionInsight Manager, check whether the OLdap Resource Abnormal exists.
- If yes, go to 5.
- If no, go to 7.
Clear the alarm by following the steps provided in "ALM-12004 OLdap Resource Abnormal".
Check whether Abnormal LdapServer Data Synchronization is cleared in the alarm list.
- If yes, no further action is required.
- If no, go to 7.
On the Alarm page of FusionInsight Manager, check whether Process Fault is generated for the LdapServer service.
- If yes, go to 8.
- If no, go to 10.
Handle the alarm according to "ALM-12007 Process Fault".
Check whether Abnormal LdapServer Data Synchronization is cleared.
- If yes, no further action is required.
- If no, go to 10.

Check whether the LdapServer processes are normal.

On FusionInsight Manager, choose O&M > Alarm > Alarms. Record the IP address of HostName in the alarm locating information as "IP1" (if multiple alarms exist, record the IP addresses as "IP1", "IP2", and "IP3" respectively). Choose Cluster > Name of the desired cluster > Services > LdapServer > Configurations. Record the port number of LdapServer as "PORT". (If the IP address in the alarm locating information is the IP address of the standby management node, choose System > OMS > oldap > Modify Configuration and record the listening port number of LdapServer.)
Log in to the nodes corresponding to IP1 as user omm.
Run the following command to check whether errors are displayed in the queried information.

ldapsearch -H ldaps://IP1:PORT -LLL -x -D cn=root,dc=hadoop,dc=com -W -b ou=Peoples,dc=hadoop,dc=com

After running the command, enter the LDAP administrator password. Contact the system administrator to obtain the password.
- If yes, go to 13.
- If no, go to 15.
Recover the LdapServer and OMS nodes using data backed up before the alarm is generated.

NOTE:

Use the OMS data and LdapServer data backed up at the same point in time to recover the data. Otherwise, the service and operation may fail. To recover data when services run properly, you are advised to manually back up the latest management data and then recover the data. Otherwise, Manager data produced between the backup point in time and the recovery point in time will be lost.
Check whether alarm Abnormal LdapServer Data Synchronization is cleared.
- If yes, no further action is required.
- If no, go to 15.

Collect fault information.

On the FusionInsight Manager portal, choose O&M > Log > Download.
Select LdapServer in the required cluster and OmsLdapServer from the Service.
Click in the upper right corner, and set Start Date and End Date for log collection to 1 hour ahead of and after the alarm generation time, respectively. Then, click Download.
Contact the O&M engineers and send the collected logs.