Under Construction
Enable Warnings when manually changing replicated Data
Changes to replicated data should only ever be made on one master. Data is only updated from the master towards the slave(s). If data on a slave is changed manually, the data on the master and slave(s) are no longer synchronous. This is reflected in the following status on the master:
$ hmc lsdatarep hmc01
DATA_TYPE LEVEL UPDATED_SINCE_START UPDATED_TIME SOURCE_HMC_NAME NOT_IN_SYNC_SLAVES
pwdpolicy 0 0 - - -
user 8 1 05/22/2023 11:58:21 hmc01 hmc03
kerberos 0 0 - - -
customer 0 0 - - -
outbound 0 0 - - -
ldap 0 0 - - -
mfa 0 0 - - -
$
For the user data type, the HMC with the name hmc03 is specified in the NOT_IN_SYNC_SLAVES column. This can also be seen on the slave using the status output:
$ hmc lsdatarep hmc03
DATA_TYPE LEVEL UPDATED_SINCE_START UPDATED_TIME SOURCE_HMC_NAME NOT_IN_SYNC_SLAVES
pwdpolicy 0 0 - - -
user 10 1 05/22/2023 14:06:54 hmc03 -
kerberos 0 0 - - -
customer 0 0 - - -
outbound 0 0 - - -
ldap 0 0 - - -
mfa 0 0 - - -
$
The SOURCE_HMC_NAME column should display the name of the master (hmc01). However, the name of the slave HMC (hmc03) itself is displayed. This means the data was last modified on the HMC hmc03 and is no longer synchronous with the master HMC (hmc01).
To ensure that modifications to replicated data on a slave do not go unnoticed, it is possible to configure warnings. For this purpose, the command “hmc chdatarep” can be used on the slave (hmc03):
$ hmc chdatarep hmc03 warning_data_types=user
$
Note: The warning_data_types attribute can also be set when enabling data replication with “hmc enabledatarep“.
If a user account on the HMC hmc03 (slave regarding user) is changed via the HMC GUI, the user is warned:
The administrator then has 3 options to continue:
- Undo the change (default)
- Unconfigure all sources (masters) for the data type
- Ignoring the warning
Note: Unfortunately, this only applies to the GUI and not to the command line!
The data types for which warnings are displayed on the HMC GUI can be viewed with “hmc lsdatarep -l”:
$ hmc lsdatarep -l hmc03
IS_ENABLED CURR_WARNING_DATA_TYPES AVAIL_WARNING_DATA_TYPES
1 user pwdpolicy,user,kerberos,customer,outbound,ldap,mfa
$
You must be logged in to post a comment.