NSMMReplicationPlugin - repl_set_mtn_referrals

Question

Just went through an "emergency" promotion of a DS 5.1 SP2 replica to master after about a month's worth of "dn2entry 0 2" errors. Was able to delete all replication agreements and remove the referrals from the replicas before taking down the original master and bringing up the replica on the same port, same box. The replica was reconfigured as a single master (removed the referral to the original master and set it to use the db for updates). Then recreated all replication agreements.
Everything works. This eliminated some corrupted entries that had cropped up on the replicas. Referrals work (after I manually added reference in each replica).
Every 2 minutes am getting the following errors in my error log on each replica:
[29/Oct/2004:10:07:38 -0400] - add value to attribute type nsslapd-referral in entry cn=\22dc=arrow,dc=com\22,cn=mapping tree,cn=config failed: duplicate value
[29/Oct/2004:10:07:38 -0400] NSMMReplicationPlugin - repl_set_mtn_referrals: could not set referrals for replica dc=arrow,dc=com: 20
Any one have any ideas?

Answer 1

There are 2 articles that led me to the solution of this one: 4877761 and 4863943. Because there are only availble under contract, I'll set out the major points here for anyone who has this problem in future.
This happens when a consumer is converted into a supplier. The problem is that consumer's store the ID of their supplier in a hidden entry on the db. When a consumer is made into a supplier, the ID of the consumer's former supplier is not removed automatically, but remains to confuse the new supplier and any downlevel consumers in a replication agreement with the new supplier.
Since 5.1 there is a quick fix to this that involves placing a special attribute and value in cn=config to remove the old supplier's ID from the new supplier db.
To find the old supplier iD, use ldapsearch to get this entry:
dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,dc=your,dc=com
(Try ldapsearch -h servername -D "cn=directory \
manager" -w password -b \
"nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,dc=arrow,dc=com" \
-s base "objectclass=nstombstone"
Your result will be something like:
dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,dc=your,dc=com
objectclass: top
objectclass: nstombstone
objectclass: extensibleobject
nsunqiueid: ffffffff-ffffffff-ffffffff-ffffffff
nsds5ruv: {replica 123  \
ldap://usmlsu32.arrow.com:1389} \
4181b3c7000001420000 41
To remove the reference to 123, you need to go to:
"cn=replica,cn="dc=your,dc=com",cn=mapping \
tree, cn=config"
and add a new attribute "nsds5task" with a value of:
CLEANRUV 123
The number is the old supplier's ID.
Restart the new supplier instance. If the error persists, perform this same operation on each of the replicas.