[Freeipa-users] Repair a corrupted database

[Chris Mohler]

Hi List,

I've got two boxes running FreeIPA 4.1.4. The Database on the first
master is corrupted.

Log looks like this:

[17/Apr/2017:10:22:51 -0400] - libdb: BDB0689 changelog/id2entry.db page
27523 is on free list with type 5
[17/Apr/2017:10:22:51 -0400] - libdb: BDB0061 PANIC: Invalid argument
[17/Apr/2017:10:22:51 -0400] - libdb: BDB0060 PANIC: fatal region error
detected; run recovery
[17/Apr/2017:10:22:51 -0400] - Serious Error---Failed in
dblayer_txn_abort, err=-30973 (BDB0087 DB_RUNRECOVERY: Fatal error, run
database recovery)
[17/Apr/2017:10:22:51 -0400] DSRetroclPlugin - replog: an error occured
while adding change number 8485210, dn =
changenumber=8485210,cn=changelog: Operations error.
[17/Apr/2017:10:22:51 -0400] retrocl-plugin - retrocl_postob: operation
failure [1]
[17/Apr/2017:10:22:51 -0400] - libdb: BDB0060 PANIC: fatal region error
detected; run recovery
[17/Apr/2017:10:22:51 -0400] - libdb: BDB0060 PANIC: fatal region error
detected; run recovery
[17/Apr/2017:10:22:51 -0400] - Serious Error---Failed in
dblayer_txn_begin, err=-30973 (BDB0087 DB_RUNRECOVERY: Fatal error, run
database recovery)
[17/Apr/2017:10:22:51 -0400] - libdb: BDB0060 PANIC: fatal region error
detected; run recovery
[17/Apr/2017:10:22:51 -0400] - FATAL ERROR at idl_new.c (1); server
stopping as database recovery needed.

Looks like it's broken. Good news is I have a replica that's working
quite well.

What I'd like to do is to recover the database or create a new database
on the first master and then just fill it with the current data from the
replica. Is this possible? As a lazy admin I'm hoping to avoid making
the replica the CA and building a new replica.

Can someone point me to a guide, docs or walk me through the procedure?

Thanks