[Check_mk (english)] email address change getting lost on distributed sites

Archive checkmk-en
1

Recently I've been changing a few email addresses in LDAP and it's causing some errors in check-mk, 1.4.0p23.

When I try to activate changes I see this error on three distributed sites but the other sites seem okay with the change.

----------cut here----------
State: Failed. Started at: 06:53:00. Finished at: 06:53:00.
Failed: Garbled automation response:

Internal automation error: There are 1 pending changes that would get lost. The most recent are: LDAP [default]: Modified user berg (Changed email from old-email@domain.com to new-email@domain.com)
Traceback (most recent call last):
File "/omd/sites/sitename/share/check_mk/web/htdocs/wato.py", line 10175, in page_automation
html.write(repr(automation_commands[command]()))
File "/omd/sites/sitename/share/check_mk/web/htdocs/watolib.py", line 3860, in automation_push_snapshot
verify_slave_site_config(site_id)
File "/omd/sites/sitename/share/check_mk/web/htdocs/watolib.py", line 3930, in verify_slave_site_config
raise MKGeneralException(message)
MKGeneralException: There are 1 pending changes that would get lost. The most recent are: LDAP [default]: Modified user berg (Changed email from old-email@domain.com to new-email@domain.com)

----------cut here----------

···

--
Stephen Berg, IT Specialist, Oceanography Division, Code 7320
Naval Research Laboratory
W: (228) 688-5738
DSN: (312) 823-5738
C: (228) 365-0162

2

Hi Stephen,

can you have a look at the “Sync with LDAP connection” setting on your site configuration inside your master site.

I set this to “Disable automatic user synchronization (use master site users)”. It looks like your slave sites pull the changed attributes by itself and with this they create a pending change on the slave site.

The change by itself is no problem but Check_MK thinks you changed something on the slave site manually inside WATO.

To resolve the issue you can only login directly to the slave (before you need to activate WATO access) and commit this pending change.

Then you can commit the changes from your master site.

Check the LDAP sync settings and modify them if needed.

Best regards

Andreas

···

Stephen Berg (Code 7320) stephen.berg@nrlssc.navy.mil schrieb am Mi., 21. Feb. 2018 um 14:01 Uhr:

Recently I’ve been changing a few email addresses in LDAP and it’s

causing some errors in check-mk, 1.4.0p23.

When I try to activate changes I see this error on three distributed

sites but the other sites seem okay with the change.

----------cut here----------

State: Failed. Started at: 06:53:00. Finished at: 06:53:00.

Failed: Garbled automation response:

Internal automation error: There are 1 pending changes that would get

lost. The most recent are: LDAP [default]: Modified user berg (Changed

email from old-email@domain.com to new-email@domain.com)

Traceback (most recent call last):

File

"/omd/sites/sitename/share/check_mk/web/htdocs/wato.py", line

10175, in page_automation

 html.write(repr(automation_commands[command]()))

File

"/omd/sites/sitename/share/check_mk/web/htdocs/watolib.py",

line 3860, in automation_push_snapshot

 verify_slave_site_config(site_id)

File

"/omd/sites/sitename/share/check_mk/web/htdocs/watolib.py",

line 3930, in verify_slave_site_config

 raise MKGeneralException(message)

MKGeneralException: There are 1 pending changes that would get lost. The

most recent are: LDAP [default]: Modified user berg (Changed email from

old-email@domain.com to new-email@domain.com)

----------cut here----------

–

Stephen Berg, IT Specialist, Oceanography Division, Code 7320

Naval Research Laboratory

W: (228) 688-5738

DSN: (312) 823-5738

C: (228) 365-0162

checkmk-en mailing list

checkmk-en@lists.mathias-kettner.de

http://lists.mathias-kettner.de/mailman/listinfo/checkmk-en

3

That did the trick. Now the slave sites pull from the master and updates roll through with no errors. Thanks.

···

On 02/21/2018 07:32 AM, Andreas Döhler wrote:

To resolve the issue you can only login directly to the slave (before you
need to activate WATO access) and commit this pending change.
Then you can commit the changes from your master site.

--
Stephen Berg, IT Specialist, Oceanography Division, Code 7320
Naval Research Laboratory
W: (228) 688-5738
DSN: (312) 823-5738
C: (228) 365-0162