[Freeipa-devel] Database error on replicas

[Martin Kosek]

On 06/03/2015 10:33 AM, Oleg Fayans wrote:
> Hi,
> 
> With the latest freeipa code containing Topology plugin patches, I am unable to
> make any changes in replicas.
> 
> I have the following topology:
> replica1 <=> master <=> replica3
> Here is the output of the ipa topologysegment-find command:
> 
> Suffix name: realm
> ------------------
> 2 segments matched
> ------------------
>   Segment name: replica1.zaeba.li-to-testmaster.zaeba.li
>   Left node: replica1.zaeba.li
>   Right node: testmaster.zaeba.li
>   Connectivity: both
> 
>   Segment name: replica3.zaeba.li-to-testmaster.zaeba.li
>   Left node: replica3.zaeba.li
>   Right node: testmaster.zaeba.li
>   Connectivity: both
> ----------------------------
> Number of entries returned 2
> ----------------------------
> 
> 
> Any changes on master get replicated to replicas successfully. However, any
> attempts to change anything on replicas, for example, create a user, result in
> the error message about DatabaseError (attached).
> 
> The corresponding part of the dirsrv log looks like this:
> 
> 03/Jun/2015:04:11:55 -0400] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't
> contact LDAP server)
> [03/Jun/2015:04:15:02 -0400] slapi_ldap_bind - Error: could not send startTLS
> request: error -1 (Can't contact LDAP server) errno 0 (Success)
> [03/Jun/2015:04:16:55 -0400] slapd_ldap_sasl_interactive_bind - Error: could
> not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't
> contact LDAP server) ((null)) errno 2 (No such file or directory)
> [03/Jun/2015:04:16:55 -0400] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't
> contact LDAP server)
> 
> The full log is attached

Ludwig, could this be caused by the Topology plugin?