[Freeipa-devel] topology-related issues
Oleg Fayans
ofayans at redhat.com
Tue Jun 23 09:44:47 UTC 2015
It looks like the second issue was caused by not running ipa service on
vm-244.idm.lab.eng.brq.redhat.com.
However, after manual start of the ipa service on thios node, I was
still unable to setup the segment:
[11:38:39]ofayans at vm-069:~]$ ipa topologysegment-add realm
Left node: vm-244.idm.lab.eng.brq.redhat.com
Right node: vm-069.idm.lab.eng.brq.redhat.com
Connectivity [both]:
Segment name
[vm-244.idm.lab.eng.brq.redhat.com-vm-069.idm.lab.eng.brq.redhat.com]:
ipa: ERROR: Kerberos error: ('Unspecified GSS failure. Minor code may
provide more information', 851968)/('Ticket not yet valid', -1765328351)
The dirsrv error log of this node is attached.
On 06/23/2015 11:27 AM, Oleg Fayans wrote:
> Hi Ludwig, team,
>
> I have a couple of issues with the topology plugin.
>
> 1. I was able to remove the middle node in a line topology, which
> resulted in disconnecting a segment. I had
> master - replica1 - replica2 - replica3 - replica4
> I removed replica2 with a standard `ipa-replica-manage del`
> And it resulted in the following topology:
>
> [13:13:08]ofayans at vm-086:~]$ ipa topologysegment-find realm
> ------------------
> 2 segments matched
> ------------------
> Segment name: 086-to-069
> Left node: vm-086.idm.lab.eng.brq.redhat.com
> Right node: vm-069.idm.lab.eng.brq.redhat.com
> Connectivity: both
>
> Segment name: 127-to-244
> Left node: vm-127.idm.lab.eng.brq.redhat.com
> Right node: vm-244.idm.lab.eng.brq.redhat.com
> Connectivity: both
> ----------------------------
> Number of entries returned 2
> ----------------------------
>
> We should probably prohibit such scenarios.
>
> 2. When I subsequently tried to create a link between the two segments
> manually, I bumped into the following error:
>
> [[13:17:02]ofayans at vm-069:~]$ ipa topologysegment-add realm
> Left node: vm-069.idm.lab.eng.brq.redhat.com
> Right node: vm-244.idm.lab.eng.brq.redhat.com
> Connectivity [both]:
> Segment name
> [vm-069.idm.lab.eng.brq.redhat.com-vm-244.idm.lab.eng.brq.redhat.com]:
> 069-to-244
> ipa: ERROR: invalid 'rightnode': right node is not a topology node:
> vm-244.idm.lab.eng.brq.redhat.com
>
--
Oleg Fayans
Quality Engineer
FreeIPA team
RedHat.
-------------- next part --------------
389-Directory/1.3.4.a1 B2015.132.1526
vm-244.idm.lab.eng.brq.redhat.com:389 (/etc/dirsrv/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM)
[22/Jun/2015:13:19:14 +0200] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[22/Jun/2015:13:19:14 +0200] - check_and_set_import_cache: pagesize: 4096, pages: 373666, procpages: 54753
[22/Jun/2015:13:19:14 +0200] - WARNING: After allocating import cache 597864KB, the available memory is 896800KB, which is less than the soft limit 1048576KB. You may want to decrease the import cache size and rerun import.
[22/Jun/2015:13:19:14 +0200] - Import allocates 597864KB import cache.
[22/Jun/2015:13:19:14 +0200] - import userRoot: Beginning import job...
[22/Jun/2015:13:19:14 +0200] - import userRoot: Index buffering enabled with bucket size 100
[22/Jun/2015:13:19:14 +0200] - import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"
[22/Jun/2015:13:19:14 +0200] - import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)
[22/Jun/2015:13:19:15 +0200] - import userRoot: Workers finished; cleaning up...
[22/Jun/2015:13:19:15 +0200] - import userRoot: Workers cleaned up.
[22/Jun/2015:13:19:15 +0200] - import userRoot: Cleaning up producer thread...
[22/Jun/2015:13:19:15 +0200] - import userRoot: Indexing complete. Post-processing...
[22/Jun/2015:13:19:15 +0200] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[22/Jun/2015:13:19:15 +0200] - import userRoot: Generating numSubordinates complete.
[22/Jun/2015:13:19:15 +0200] - import userRoot: Gathering ancestorid non-leaf IDs...
[22/Jun/2015:13:19:15 +0200] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[22/Jun/2015:13:19:15 +0200] - Nothing to do to build ancestorid index
[22/Jun/2015:13:19:15 +0200] - import userRoot: Created ancestorid index (new idl).
[22/Jun/2015:13:19:15 +0200] - import userRoot: Flushing caches...
[22/Jun/2015:13:19:15 +0200] - import userRoot: Closing files...
[22/Jun/2015:13:19:15 +0200] - All database threads now stopped
[22/Jun/2015:13:19:16 +0200] - import userRoot: Import complete. Processed 1 entries in 2 seconds. (0.50 entries/sec)
[22/Jun/2015:13:19:16 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:19:16 +0200] - Db home directory is not set. Possibly nsslapd-directory (optionally nsslapd-db-home-directory) is missing in the config file.
[22/Jun/2015:13:19:16 +0200] - resizing db cache size: 612212736 -> 6400000
[22/Jun/2015:13:19:17 +0200] - convert_pbe_des_to_aes: Converting DES passwords to AES...
[22/Jun/2015:13:19:17 +0200] - convert_pbe_des_to_aes: Successfully disabled DES plugin (cn=DES,cn=Password Storage Schemes,cn=plugins,cn=config)
[22/Jun/2015:13:19:17 +0200] - convert_pbe_des_to_aes: Finished - no DES passwords to convert.
[22/Jun/2015:13:19:17 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[22/Jun/2015:13:19:18 +0200] - slapd shutting down - signaling operation threads - op stack size 0 max work q size 0 max work q stack size 0
[22/Jun/2015:13:19:18 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:13:19:18 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:13:19:19 +0200] - All database threads now stopped
[22/Jun/2015:13:19:19 +0200] - slapd shutting down - freed 0 work q stack objects - freed 0 op stack objects
[22/Jun/2015:13:19:19 +0200] - slapd stopped.
[22/Jun/2015:13:19:20 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:19:20 +0200] - resizing db cache size: 6400000 -> 5120000
[22/Jun/2015:13:19:20 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[22/Jun/2015:13:19:20 +0200] - The change of nsslapd-ldapilisten will not take effect until the server is restarted
[22/Jun/2015:13:19:21 +0200] - Warning: Adding configuration attribute "nsslapd-security"
[22/Jun/2015:13:19:22 +0200] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[22/Jun/2015:13:19:22 +0200] - slapd shutting down - waiting for 29 threads to terminate
[22/Jun/2015:13:19:22 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:13:19:22 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:13:19:22 +0200] - All database threads now stopped
[22/Jun/2015:13:19:22 +0200] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[22/Jun/2015:13:19:22 +0200] - slapd stopped.
[22/Jun/2015:13:19:24 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[22/Jun/2015:13:19:24 +0200] - SSL alert: Configured NSS Ciphers
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:24 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:25 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:19:25 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:25 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:19:25 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:19:25 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[22/Jun/2015:13:19:25 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:19:25 +0200] - resizing db cache size: 5120000 -> 4096000
[22/Jun/2015:13:19:25 +0200] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...
[22/Jun/2015:13:19:25 +0200] attrcrypt - Key for cipher AES successfully generated and stored
[22/Jun/2015:13:19:25 +0200] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...
[22/Jun/2015:13:19:25 +0200] attrcrypt - Key for cipher 3DES successfully generated and stored
[22/Jun/2015:13:19:25 +0200] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[22/Jun/2015:13:19:25 +0200] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[22/Jun/2015:13:19:25 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[22/Jun/2015:13:19:25 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[22/Jun/2015:13:19:25 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[22/Jun/2015:13:19:25 +0200] - slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
[22/Jun/2015:13:19:25 +0200] - slapd shutting down - waiting for 6 threads to terminate
[22/Jun/2015:13:19:25 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:13:19:25 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:13:19:26 +0200] - All database threads now stopped
[22/Jun/2015:13:19:26 +0200] - slapd shutting down - freed 1 work q stack objects - freed 1 op stack objects
[22/Jun/2015:13:19:26 +0200] - slapd stopped.
[22/Jun/2015:13:19:28 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[22/Jun/2015:13:19:28 +0200] - SSL alert: Configured NSS Ciphers
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:19:28 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[22/Jun/2015:13:19:29 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:19:29 +0200] - resizing db cache size: 4096000 -> 3276800
[22/Jun/2015:13:19:29 +0200] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[22/Jun/2015:13:19:30 +0200] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[22/Jun/2015:13:19:30 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[22/Jun/2015:13:19:30 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[22/Jun/2015:13:19:30 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[22/Jun/2015:13:19:32 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[22/Jun/2015:13:19:33 +0200] ipa-topology-plugin - ipa_topo_be_state_changebackend userRoot is going offline; inactivate plugin
[22/Jun/2015:13:19:33 +0200] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com is going offline; disabling replication
[22/Jun/2015:13:19:33 +0200] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[22/Jun/2015:13:19:36 +0200] - import userRoot: Workers finished; cleaning up...
[22/Jun/2015:13:19:36 +0200] - import userRoot: Workers cleaned up.
[22/Jun/2015:13:19:36 +0200] - import userRoot: Indexing complete. Post-processing...
[22/Jun/2015:13:19:37 +0200] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[22/Jun/2015:13:19:37 +0200] - import userRoot: Generating numSubordinates complete.
[22/Jun/2015:13:19:37 +0200] - import userRoot: Gathering ancestorid non-leaf IDs...
[22/Jun/2015:13:19:37 +0200] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[22/Jun/2015:13:19:37 +0200] - import userRoot: Creating ancestorid index (new idl)...
[22/Jun/2015:13:19:37 +0200] - import userRoot: Created ancestorid index (new idl).
[22/Jun/2015:13:19:37 +0200] - import userRoot: Flushing caches...
[22/Jun/2015:13:19:37 +0200] - import userRoot: Closing files...
[22/Jun/2015:13:19:38 +0200] - import userRoot: Import complete. Processed 427 entries in 5 seconds. (85.40 entries/sec)
[22/Jun/2015:13:19:38 +0200] ipa-topology-plugin - ipa_topo_be_state_change - backend userRoot is coming online; checking domain level and init shared topology
[22/Jun/2015:13:19:38 +0200] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com is coming online; enabling replication
[22/Jun/2015:13:19:38 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:19:38 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:38 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:38 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:38 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:38 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:38 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:38 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:38 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:44 +0200] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 2 max work q stack size 2
[22/Jun/2015:13:19:44 +0200] - slapd shutting down - waiting for 26 threads to terminate
[22/Jun/2015:13:19:44 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:13:19:44 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:13:19:44 +0200] - All database threads now stopped
[22/Jun/2015:13:19:45 +0200] - slapd shutting down - freed 2 work q stack objects - freed 2 op stack objects
[22/Jun/2015:13:19:45 +0200] - slapd stopped.
[22/Jun/2015:13:19:46 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[22/Jun/2015:13:19:46 +0200] - SSL alert: Configured NSS Ciphers
[22/Jun/2015:13:19:46 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:46 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:46 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:46 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:46 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:46 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:46 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:46 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:46 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[22/Jun/2015:13:19:47 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:19:48 +0200] - resizing db cache size: 8192000 -> 2621440
[22/Jun/2015:13:19:48 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:19:48 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:19:48 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:19:48 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:48 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:48 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:48 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:48 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:48 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:48 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:48 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:19:48 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:19:48 +0200] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[22/Jun/2015:13:19:48 +0200] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[22/Jun/2015:13:19:48 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[22/Jun/2015:13:19:48 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[22/Jun/2015:13:19:48 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[22/Jun/2015:13:19:48 +0200] - The change of nsslapd-maxdescriptors will not take effect until the server is restarted
[22/Jun/2015:13:20:08 +0200] attrcrypt - No symmetric key found for cipher AES in backend ipaca, attempting to create one...
[22/Jun/2015:13:20:08 +0200] attrcrypt - Key for cipher AES successfully generated and stored
[22/Jun/2015:13:20:08 +0200] attrcrypt - No symmetric key found for cipher 3DES in backend ipaca, attempting to create one...
[22/Jun/2015:13:20:08 +0200] attrcrypt - Key for cipher 3DES successfully generated and stored
[22/Jun/2015:13:20:09 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:21:18 +0200] NSMMReplicationPlugin - multimaster_be_state_change: replica o=ipaca is going offline; disabling replication
[22/Jun/2015:13:21:19 +0200] NSMMReplicationPlugin - agmt="cn=cloneAgreement1-vm-244.idm.lab.eng.brq.redhat.com-pki-tomcat" (vm-069:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[22/Jun/2015:13:21:19 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:21:19 +0200] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[22/Jun/2015:13:21:23 +0200] - import ipaca: Workers finished; cleaning up...
[22/Jun/2015:13:21:23 +0200] - import ipaca: Workers cleaned up.
[22/Jun/2015:13:21:23 +0200] - import ipaca: Indexing complete. Post-processing...
[22/Jun/2015:13:21:23 +0200] - import ipaca: Generating numsubordinates (this may take several minutes to complete)...
[22/Jun/2015:13:21:23 +0200] - import ipaca: Generating numSubordinates complete.
[22/Jun/2015:13:21:23 +0200] - import ipaca: Gathering ancestorid non-leaf IDs...
[22/Jun/2015:13:21:23 +0200] - import ipaca: Finished gathering ancestorid non-leaf IDs.
[22/Jun/2015:13:21:23 +0200] - import ipaca: Creating ancestorid index (new idl)...
[22/Jun/2015:13:21:23 +0200] - import ipaca: Created ancestorid index (new idl).
[22/Jun/2015:13:21:23 +0200] - import ipaca: Flushing caches...
[22/Jun/2015:13:21:23 +0200] - import ipaca: Closing files...
[22/Jun/2015:13:21:24 +0200] - import ipaca: Import complete. Processed 143 entries in 5 seconds. (28.60 entries/sec)
[22/Jun/2015:13:21:24 +0200] NSMMReplicationPlugin - multimaster_be_state_change: replica o=ipaca is coming online; enabling replication
[22/Jun/2015:13:21:24 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allExpiredCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allInvalidCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allInValidCertsNotBefore-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allNonRevokedCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allRevokedCaCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allRevokedCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allRevokedCertsNotAfter-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allRevokedExpiredCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCaCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allValidCerts-pki-tomcatIndex
[22/Jun/2015:13:21:26 +0200] - ipaca: Indexing VLV: allValidCertsNotAfter-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: allValidOrRevokedCerts-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caAll-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caCanceled-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caCanceledEnrollment-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caCanceledRenewal-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caCanceledRevocation-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caComplete-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caCompleteEnrollment-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caCompleteRenewal-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caCompleteRevocation-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caEnrollment-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caPending-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caPendingEnrollment-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caPendingRenewal-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caPendingRevocation-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caRejected-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caRejectedEnrollment-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caRejectedRenewal-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caRejectedRevocation-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caRenewal-pki-tomcatIndex
[22/Jun/2015:13:21:27 +0200] - ipaca: Indexing VLV: caRevocation-pki-tomcatIndex
[22/Jun/2015:13:21:29 +0200] - ipaca: Finished indexing.
[22/Jun/2015:13:22:28 +0200] - slapd shutting down - signaling operation threads - op stack size 11 max work q size 10 max work q stack size 10
[22/Jun/2015:13:22:28 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:13:22:29 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:13:22:30 +0200] - All database threads now stopped
[22/Jun/2015:13:22:30 +0200] - slapd shutting down - freed 10 work q stack objects - freed 11 op stack objects
[22/Jun/2015:13:22:31 +0200] - slapd stopped.
[22/Jun/2015:13:22:32 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[22/Jun/2015:13:22:32 +0200] - SSL alert: Configured NSS Ciphers
[22/Jun/2015:13:22:32 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:22:32 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:22:32 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:22:32 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:22:33 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:22:34 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:22:34 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:22:34 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:22:34 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:22:34 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:22:34 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:22:34 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[22/Jun/2015:13:22:34 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:22:34 +0200] - resizing db cache size: 6553600 -> 2097152
[22/Jun/2015:13:22:34 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:22:34 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:22:34 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:22:34 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:22:34 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:22:34 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:22:34 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:22:34 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:22:34 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:22:35 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:22:35 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:22:35 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:22:35 +0200] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[22/Jun/2015:13:22:35 +0200] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[22/Jun/2015:13:22:35 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[22/Jun/2015:13:22:35 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[22/Jun/2015:13:22:35 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[22/Jun/2015:13:23:08 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/krb5.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[22/Jun/2015:13:23:08 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[22/Jun/2015:13:23:09 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[22/Jun/2015:13:23:09 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[22/Jun/2015:13:23:13 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/krb5.keytab]: 13 (Permission denied)
[22/Jun/2015:13:23:13 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[22/Jun/2015:13:23:13 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[22/Jun/2015:13:23:19 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/krb5.keytab]: 13 (Permission denied)
[22/Jun/2015:13:23:19 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[22/Jun/2015:13:23:19 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[22/Jun/2015:13:23:22 +0200] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 4 max work q stack size 4
[22/Jun/2015:13:23:22 +0200] - slapd shutting down - waiting for 29 threads to terminate
[22/Jun/2015:13:23:22 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:13:23:23 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:13:23:24 +0200] - All database threads now stopped
[22/Jun/2015:13:23:24 +0200] - slapd shutting down - freed 4 work q stack objects - freed 4 op stack objects
[22/Jun/2015:13:23:24 +0200] - slapd stopped.
[22/Jun/2015:13:23:26 +0200] - Information: Non-Secure Port Disabled
[22/Jun/2015:13:23:26 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:23:27 +0200] - resizing db cache size: 2097152 -> 1677721
[22/Jun/2015:13:23:27 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:23:27 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:23:27 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:23:27 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:23:27 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:23:27 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:23:27 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:23:27 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:23:27 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:23:27 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:23:27 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:23:28 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:23:28 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
[22/Jun/2015:13:23:28 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[22/Jun/2015:13:23:28 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[22/Jun/2015:13:23:28 +0200] - slapd started. Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[22/Jun/2015:13:23:28 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[22/Jun/2015:13:23:32 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:23:32 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:23:32 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:23:32 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:23:38 +0200] - userRoot: Indexing attribute: memberuid
[22/Jun/2015:13:23:38 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth resumed
[22/Jun/2015:13:23:38 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:23:44 +0200] - userRoot: Indexing attribute: member
[22/Jun/2015:13:23:51 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:23:56 +0200] - userRoot: Indexing attribute: uniquemember
[22/Jun/2015:13:23:56 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:24:02 +0200] - userRoot: Indexing attribute: owner
[22/Jun/2015:13:24:03 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:24:08 +0200] - userRoot: Indexing attribute: seeAlso
[22/Jun/2015:13:24:09 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:24:14 +0200] - userRoot: Indexing attribute: ipatokenradiusconfiglink
[22/Jun/2015:13:24:15 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:24:20 +0200] - userRoot: Indexing attribute: ipaassignedidview
[22/Jun/2015:13:24:21 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:24:26 +0200] - userRoot: Indexing attribute: ipaallowedtarget
[22/Jun/2015:13:24:27 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:24:33 +0200] - userRoot: Indexing attribute: ntUniqueId
[22/Jun/2015:13:24:33 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:24:39 +0200] - userRoot: Indexing attribute: ntUserDomainId
[22/Jun/2015:13:24:39 +0200] - userRoot: Finished indexing.
[22/Jun/2015:13:24:42 +0200] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[22/Jun/2015:13:24:42 +0200] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[22/Jun/2015:13:24:44 +0200] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[22/Jun/2015:13:24:44 +0200] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[22/Jun/2015:13:24:45 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Warning: Attempting to release replica, but unable to receive endReplication extended operation response from the replica. Error -5 (Timed out)
[22/Jun/2015:13:24:46 +0200] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 1 max work q stack size 1
[22/Jun/2015:13:24:46 +0200] - slapd shutting down - waiting for 1 thread to terminate
[22/Jun/2015:13:24:46 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:13:24:48 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:13:24:49 +0200] - All database threads now stopped
[22/Jun/2015:13:24:49 +0200] - slapd shutting down - freed 1 work q stack objects - freed 3 op stack objects
[22/Jun/2015:13:24:49 +0200] - slapd stopped.
[22/Jun/2015:13:24:50 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[22/Jun/2015:13:24:50 +0200] - SSL alert: Configured NSS Ciphers
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[22/Jun/2015:13:24:51 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:24:52 +0200] - resizing db cache size: 1677721 -> 1342176
[22/Jun/2015:13:24:52 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:24:52 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:24:52 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:24:52 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:52 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:52 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:52 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:52 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:52 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:52 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:52 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:52 +0200] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[22/Jun/2015:13:24:52 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:24:53 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
[22/Jun/2015:13:24:53 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[22/Jun/2015:13:24:53 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[22/Jun/2015:13:24:53 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[22/Jun/2015:13:24:53 +0200] attrcrypt - No symmetric key found for cipher AES in backend changelog, attempting to create one...
[22/Jun/2015:13:24:53 +0200] attrcrypt - Key for cipher AES successfully generated and stored
[22/Jun/2015:13:24:53 +0200] attrcrypt - No symmetric key found for cipher 3DES in backend changelog, attempting to create one...
[22/Jun/2015:13:24:53 +0200] attrcrypt - Key for cipher 3DES successfully generated and stored
[22/Jun/2015:13:24:54 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:24:54 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[22/Jun/2015:13:24:54 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[22/Jun/2015:13:24:54 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[22/Jun/2015:13:24:54 +0200] - slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
[22/Jun/2015:13:24:54 +0200] - slapd shutting down - waiting for 19 threads to terminate
[22/Jun/2015:13:24:54 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:13:24:55 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:13:24:55 +0200] - All database threads now stopped
[22/Jun/2015:13:24:55 +0200] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[22/Jun/2015:13:24:56 +0200] - slapd stopped.
[22/Jun/2015:13:24:57 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[22/Jun/2015:13:24:57 +0200] - SSL alert: Configured NSS Ciphers
[22/Jun/2015:13:24:57 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:24:57 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:24:57 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[22/Jun/2015:13:24:58 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:24:58 +0200] - resizing db cache size: 1342176 -> 1073740
[22/Jun/2015:13:24:59 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:24:59 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:24:59 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:24:59 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:59 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:59 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:59 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:59 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:59 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:59 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:59 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:24:59 +0200] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[22/Jun/2015:13:24:59 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:24:59 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
[22/Jun/2015:13:24:59 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[22/Jun/2015:13:24:59 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[22/Jun/2015:13:24:59 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[22/Jun/2015:13:24:59 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[22/Jun/2015:13:24:59 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[22/Jun/2015:13:24:59 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[22/Jun/2015:13:25:03 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth resumed
[22/Jun/2015:13:25:48 +0200] - slapd shutting down - signaling operation threads - op stack size 4 max work q size 2 max work q stack size 2
[22/Jun/2015:13:25:48 +0200] - slapd shutting down - waiting for 8 threads to terminate
[22/Jun/2015:13:25:48 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:13:25:49 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:13:25:50 +0200] - All database threads now stopped
[22/Jun/2015:13:25:50 +0200] - slapd shutting down - freed 2 work q stack objects - freed 4 op stack objects
[22/Jun/2015:13:25:50 +0200] - slapd stopped.
[22/Jun/2015:13:25:53 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[22/Jun/2015:13:25:54 +0200] - SSL alert: Configured NSS Ciphers
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:25:54 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jun/2015:13:25:55 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jun/2015:13:25:55 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jun/2015:13:25:55 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jun/2015:13:25:55 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jun/2015:13:25:55 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jun/2015:13:25:55 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jun/2015:13:25:55 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[22/Jun/2015:13:25:55 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[22/Jun/2015:13:25:55 +0200] - resizing db cache size: 1073740 -> 858992
[22/Jun/2015:13:25:55 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:25:55 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:25:55 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[22/Jun/2015:13:25:55 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:25:55 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:25:55 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:25:55 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:25:55 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:25:56 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:25:56 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:25:56 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[22/Jun/2015:13:25:56 +0200] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[22/Jun/2015:13:25:56 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[22/Jun/2015:13:25:56 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[22/Jun/2015:13:25:56 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[22/Jun/2015:13:25:56 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[22/Jun/2015:13:25:56 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[22/Jun/2015:13:25:56 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[22/Jun/2015:13:25:56 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[22/Jun/2015:13:25:56 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[22/Jun/2015:13:25:59 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth resumed
[22/Jun/2015:14:37:46 +0200] ipa-topology-plugin - ipa_topo_agmt_del: cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-086.idm.lab.eng.brq.redhat.com
[22/Jun/2015:14:37:46 +0200] NSMMReplicationPlugin - agmt_delete: begin
[22/Jun/2015:15:02:12 +0200] ipa-topology-plugin - ipa_topo_post_mod - segment to be modified does not exist
[22/Jun/2015:15:46:40 +0200] ipa-topology-plugin - ipa_topo_util_modify: failed to modify entry (cn=replica,cn=dc\3Didm\2Cdc\3Dlab\2Cdc\3Deng\2Cdc\3Dbrq\2Cdc\3Dredhat\2Cdc\3Dcom,cn=mapping tree,cn=config): error 16
[22/Jun/2015:15:46:50 +0200] NSMMReplicationPlugin - CleanAllRUV Task: launching cleanAllRUV thread...
[22/Jun/2015:15:46:50 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Cleaning rid (6)...
[22/Jun/2015:15:46:51 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Waiting to process all the updates from the deleted replica...
[22/Jun/2015:15:46:51 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Waiting for all the replicas to be online...
[22/Jun/2015:15:46:51 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Waiting for all the replicas to receive all the deleted replica updates...
[22/Jun/2015:15:46:51 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Sending cleanAllRUV task to all the replicas...
[22/Jun/2015:15:46:52 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Cleaning local ruv's...
[22/Jun/2015:15:46:52 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Waiting for all the replicas to be cleaned...
[22/Jun/2015:15:46:52 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Replica is not cleaned yet (agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389))
[22/Jun/2015:15:46:52 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Replicas have not been cleaned yet, retrying in 10 seconds
[22/Jun/2015:15:47:05 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Waiting for all the replicas to finish cleaning...
[22/Jun/2015:15:47:05 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid 6): Successfully cleaned rid(6).
[22/Jun/2015:15:53:50 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:15:53:50 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:15:53:50 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: )
[22/Jun/2015:15:53:53 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:15:53:53 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:15:53:59 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:15:53:59 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:15:54:13 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:15:54:13 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:15:54:35 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:15:54:35 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:15:55:24 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:15:55:24 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:15:56:59 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:15:56:59 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:00:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:00:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:05:12 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:05:12 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:10:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:10:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:15:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:15:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:20:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:20:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:25:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:25:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:30:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:30:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:35:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:35:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:40:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:40:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:45:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:45:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:50:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:50:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:16:52:20 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot contact any KDC for realm 'IDM.LAB.ENG.BRQ.REDHAT.COM')) errno 115 (Operation now in progress)
[22/Jun/2015:16:52:20 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[22/Jun/2015:16:52:21 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot contact any KDC for realm 'IDM.LAB.ENG.BRQ.REDHAT.COM'))
[22/Jun/2015:16:52:24 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth resumed
[22/Jun/2015:16:55:12 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:16:55:12 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:00:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:00:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:05:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:05:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:10:12 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:10:12 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:15:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:15:12 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:20:12 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:20:12 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:25:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:25:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:30:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:30:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:35:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:35:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:40:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:40:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:45:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:45:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:50:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:50:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:17:55:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:17:55:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:18:00:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[22/Jun/2015:18:00:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[22/Jun/2015:18:00:36 +0200] - slapd shutting down - signaling operation threads - op stack size 7 max work q size 3 max work q stack size 3
[22/Jun/2015:18:00:36 +0200] - slapd shutting down - closing down internal subsystems and plugins
[22/Jun/2015:18:00:37 +0200] - Waiting for 4 database threads to stop
[22/Jun/2015:18:00:40 +0200] - All database threads now stopped
[22/Jun/2015:18:00:42 +0200] - slapd shutting down - freed 3 work q stack objects - freed 7 op stack objects
[22/Jun/2015:18:00:42 +0200] - slapd stopped.
[23/Jun/2015:11:52:50 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[23/Jun/2015:11:52:51 +0200] - SSL alert: Configured NSS Ciphers
[23/Jun/2015:11:52:51 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:11:52:51 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:11:52:51 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:11:52:51 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:11:52:52 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:11:52:53 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[23/Jun/2015:11:52:53 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:11:52:53 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:11:52:53 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:11:52:53 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:11:52:53 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:11:52:53 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:11:52:53 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:11:52:53 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:11:52:54 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:11:52:54 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:11:52:54 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:11:52:54 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[23/Jun/2015:11:52:54 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:11:52:54 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[23/Jun/2015:11:52:54 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[23/Jun/2015:11:52:54 +0200] - WARNING: userRoot: entry cache size 900717B is less than db size 1212416B; We recommend to increase the entry cache size nsslapd-cachememsize.
[23/Jun/2015:11:52:55 +0200] - WARNING: changelog: entry cache size 858992B is less than db size 1384448B; We recommend to increase the entry cache size nsslapd-cachememsize.
[23/Jun/2015:11:52:55 +0200] - resizing db cache size: 858992 -> 687193
[23/Jun/2015:11:52:56 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:11:52:56 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:11:52:56 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:11:52:56 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:11:52:56 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:11:52:56 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:11:52:57 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:11:52:57 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:11:52:57 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:11:52:57 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:11:52:57 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:11:52:58 +0200] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[23/Jun/2015:11:52:58 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[23/Jun/2015:11:52:58 +0200] NSMMReplicationPlugin - ruv_compare_ruv: the max CSN [5588304c000000050000] from RUV [changelog max RUV] is larger than the max CSN [5588304b000000050000] from RUV [database RUV] for element [{replica 5} 5587ef4e000000050000 5588304c000000050000]
[23/Jun/2015:11:52:59 +0200] NSMMReplicationPlugin - replica_check_for_data_reload: Warning: data for replica dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not match the data in the changelog. Recreating the changelog file. This could affect replication with replica's consumers in which case the consumers should be reinitialized.
[23/Jun/2015:11:52:59 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[23/Jun/2015:11:52:59 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[23/Jun/2015:11:53:00 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 2 (No such file or directory)
[23/Jun/2015:11:53:00 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:11:53:00 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[23/Jun/2015:11:53:00 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[23/Jun/2015:11:53:01 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:11:53:01 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[23/Jun/2015:11:53:02 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[23/Jun/2015:11:53:02 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[23/Jun/2015:11:53:02 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[23/Jun/2015:11:53:04 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth resumed
[23/Jun/2015:11:53:06 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:11:53:06 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:11:53:06 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: )
[23/Jun/2015:11:53:07 +0200] agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389) - Can't locate CSN 558811c6000700050000 in the changelog (DB rc=-30988). If replication stops, the consumer may need to be reinitialized.
[23/Jun/2015:11:53:14 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:11:53:14 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:11:53:24 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:11:53:24 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:11:53:48 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:11:53:48 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:11:54:35 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:11:54:35 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:11:56:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:11:56:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:11:59:23 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:11:59:23 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:12:04:24 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:12:04:24 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:10:53:23 +0200] csngen_new_csn - Warning: too much time skew (-4485 secs). Current seqnum=1
[23/Jun/2015:10:53:24 +0200] csngen_new_csn - Warning: too much time skew (-4485 secs). Current seqnum=2
[23/Jun/2015:10:53:24 +0200] csngen_new_csn - Warning: too much time skew (-4486 secs). Current seqnum=1
[23/Jun/2015:10:53:24 +0200] csngen_new_csn - Warning: too much time skew (-4487 secs). Current seqnum=1
[23/Jun/2015:10:53:24 +0200] csngen_new_csn - Warning: too much time skew (-4488 secs). Current seqnum=1
[23/Jun/2015:10:53:24 +0200] csngen_new_csn - Warning: too much time skew (-4489 secs). Current seqnum=1
[23/Jun/2015:10:53:24 +0200] csngen_new_csn - Warning: too much time skew (-4490 secs). Current seqnum=1
[23/Jun/2015:10:53:24 +0200] csngen_new_csn - Warning: too much time skew (-4491 secs). Current seqnum=1
[23/Jun/2015:10:53:25 +0200] csngen_new_csn - Warning: too much time skew (-4491 secs). Current seqnum=1
[23/Jun/2015:10:53:25 +0200] csngen_new_csn - Warning: too much time skew (-4492 secs). Current seqnum=1
[23/Jun/2015:10:53:25 +0200] csngen_new_csn - Warning: too much time skew (-4493 secs). Current seqnum=1
[23/Jun/2015:10:53:25 +0200] csngen_new_csn - Warning: too much time skew (-4494 secs). Current seqnum=1
[23/Jun/2015:10:53:25 +0200] csngen_new_csn - Warning: too much time skew (-4495 secs). Current seqnum=1
[23/Jun/2015:10:53:25 +0200] csngen_new_csn - Warning: too much time skew (-4496 secs). Current seqnum=1
[23/Jun/2015:10:58:25 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket not yet valid)) errno 2 (No such file or directory)
[23/Jun/2015:10:58:25 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:10:58:25 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket not yet valid))
[23/Jun/2015:10:58:29 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket not yet valid)) errno 2 (No such file or directory)
[23/Jun/2015:10:58:29 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:10:58:35 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket not yet valid)) errno 2 (No such file or directory)
[23/Jun/2015:10:58:35 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:10:58:47 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket not yet valid)) errno 2 (No such file or directory)
[23/Jun/2015:10:58:47 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:10:59:11 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket not yet valid)) errno 2 (No such file or directory)
[23/Jun/2015:10:59:11 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:10:59:39 +0200] csngen_new_csn - Warning: too much time skew (-4123 secs). Current seqnum=1
[23/Jun/2015:10:59:47 +0200] csngen_new_csn - Warning: too much time skew (-4116 secs). Current seqnum=1
[23/Jun/2015:10:59:47 +0200] csngen_new_csn - Warning: too much time skew (-4117 secs). Current seqnum=1
[23/Jun/2015:10:59:59 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket not yet valid)) errno 2 (No such file or directory)
[23/Jun/2015:10:59:59 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:11:01:35 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket not yet valid)) errno 2 (No such file or directory)
[23/Jun/2015:11:01:35 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:11:04:47 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket not yet valid)) errno 2 (No such file or directory)
[23/Jun/2015:11:04:47 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:11:05:47 +0200] csngen_new_csn - Warning: too much time skew (-3146 secs). Current seqnum=1
[23/Jun/2015:11:05:50 +0200] csngen_new_csn - Warning: too much time skew (-3144 secs). Current seqnum=1
[23/Jun/2015:11:09:26 +0200] csngen_new_csn - Warning: too much time skew (-3539 secs). Current seqnum=1
[23/Jun/2015:11:09:27 +0200] csngen_new_csn - Warning: too much time skew (-3539 secs). Current seqnum=1
[23/Jun/2015:11:09:31 +0200] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 2 max work q stack size 2
[23/Jun/2015:11:09:32 +0200] - slapd shutting down - closing down internal subsystems and plugins
[23/Jun/2015:11:09:34 +0200] - Waiting for 4 database threads to stop
[23/Jun/2015:11:09:37 +0200] - All database threads now stopped
[23/Jun/2015:11:09:38 +0200] - slapd shutting down - freed 2 work q stack objects - freed 4 op stack objects
[23/Jun/2015:11:09:38 +0200] - slapd stopped.
[23/Jun/2015:13:10:12 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[23/Jun/2015:13:10:12 +0200] - SSL alert: Configured NSS Ciphers
[23/Jun/2015:13:10:12 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:10:12 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:10:12 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:10:12 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:10:13 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:10:13 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:10:13 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:10:13 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:10:13 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:10:13 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:10:14 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:10:14 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:10:14 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:13:10:14 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:13:10:14 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:10:14 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:10:14 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[23/Jun/2015:13:10:14 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:13:10:15 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:13:10:15 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:10:15 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:10:15 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:10:15 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:10:15 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:10:15 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:10:16 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:10:16 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:13:10:16 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:10:16 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[23/Jun/2015:13:10:16 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:13:10:16 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[23/Jun/2015:13:10:17 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[23/Jun/2015:13:10:17 +0200] - WARNING: userRoot: entry cache size 720573B is less than db size 1220608B; We recommend to increase the entry cache size nsslapd-cachememsize.
[23/Jun/2015:13:10:17 +0200] - WARNING: changelog: entry cache size 687193B is less than db size 1458176B; We recommend to increase the entry cache size nsslapd-cachememsize.
[23/Jun/2015:13:10:17 +0200] - resizing db cache size: 687193 -> 549754
[23/Jun/2015:13:10:18 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:13:10:18 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:13:10:18 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:13:10:19 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:10:19 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:10:19 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:10:19 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:10:19 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:10:19 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:10:20 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:10:20 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:10:20 +0200] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[23/Jun/2015:13:10:20 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[23/Jun/2015:13:10:21 +0200] NSMMReplicationPlugin - ruv_compare_ruv: RUV [changelog max RUV] does not contain element [{replica 3 ldap://vm-086.idm.lab.eng.brq.redhat.com:389} 5587ed32000000030000 558811c7000200030000] which is present in RUV [database RUV]
[23/Jun/2015:13:10:21 +0200] NSMMReplicationPlugin - replica_check_for_data_reload: Warning: for replica dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com there were some differences between the changelog max RUV and the database RUV. If there are obsolete elements in the database RUV, you should remove them using the CLEANALLRUV task. If they are not obsolete, you should check their status to see why there are no changes from those servers in the changelog.
[23/Jun/2015:13:10:21 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[23/Jun/2015:13:10:21 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[23/Jun/2015:13:10:21 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 2 (No such file or directory)
[23/Jun/2015:13:10:21 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:13:10:21 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[23/Jun/2015:13:10:21 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:13:10:22 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[23/Jun/2015:13:10:22 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[23/Jun/2015:13:10:22 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[23/Jun/2015:13:10:22 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[23/Jun/2015:13:10:22 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[23/Jun/2015:13:10:27 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:10:27 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:10:27 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context)
[23/Jun/2015:13:10:27 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:13:10:27 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:10:27 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: )
[23/Jun/2015:13:10:33 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:10:33 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:10:34 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:13:10:34 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:10:44 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:10:44 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:10:45 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:13:10:45 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:11:08 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:11:08 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:16:54 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[23/Jun/2015:13:16:54 +0200] - SSL alert: Configured NSS Ciphers
[23/Jun/2015:13:16:54 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:16:54 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:16:54 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:16:54 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:16:54 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:16:55 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:16:55 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:16:55 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:16:55 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:16:55 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:16:55 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:16:56 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:16:57 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:16:57 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:16:57 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:16:57 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:16:57 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:16:57 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:13:16:57 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:16:57 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[23/Jun/2015:13:16:58 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:13:16:58 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[23/Jun/2015:13:16:58 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[23/Jun/2015:13:16:58 +0200] - WARNING: userRoot: entry cache size 576458B is less than db size 1220608B; We recommend to increase the entry cache size nsslapd-cachememsize.
[23/Jun/2015:13:16:58 +0200] - WARNING: changelog: entry cache size 549754B is less than db size 1482752B; We recommend to increase the entry cache size nsslapd-cachememsize.
[23/Jun/2015:13:16:58 +0200] - Detected Disorderly Shutdown last time Directory Server was running, recovering database.
[23/Jun/2015:13:17:01 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:13:17:01 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:13:17:02 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:13:17:02 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:17:02 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:17:02 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:17:02 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:17:02 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:17:02 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:17:02 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:17:03 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:17:03 +0200] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[23/Jun/2015:13:17:03 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[23/Jun/2015:13:17:03 +0200] NSMMReplicationPlugin - replica_check_for_data_reload: Warning: disordely shutdown for replica dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com. Check if DB RUV needs to be updated
[23/Jun/2015:13:17:03 +0200] NSMMReplicationPlugin - ruv_covers_csn: replica for id 3 not found.
[23/Jun/2015:13:17:03 +0200] NSMMReplicationPlugin - replica_check_for_data_reload: Warning: disordely shutdown for replica o=ipaca. Check if DB RUV needs to be updated
[23/Jun/2015:13:17:03 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[23/Jun/2015:13:17:03 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[23/Jun/2015:13:17:04 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 2 (No such file or directory)
[23/Jun/2015:13:17:04 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:13:17:04 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[23/Jun/2015:13:17:04 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[23/Jun/2015:13:17:05 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:13:17:05 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[23/Jun/2015:13:17:05 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[23/Jun/2015:13:17:05 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[23/Jun/2015:13:17:05 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[23/Jun/2015:13:17:08 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:17:08 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:17:08 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context)
[23/Jun/2015:13:18:02 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot contact any KDC for realm 'IDM.LAB.ENG.BRQ.REDHAT.COM')) errno 115 (Operation now in progress)
[23/Jun/2015:13:18:02 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:13:18:03 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot contact any KDC for realm 'IDM.LAB.ENG.BRQ.REDHAT.COM')) errno 115 (Operation now in progress)
[23/Jun/2015:13:18:03 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:13:18:03 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot contact any KDC for realm 'IDM.LAB.ENG.BRQ.REDHAT.COM'))
[23/Jun/2015:13:18:30 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot contact any KDC for realm 'IDM.LAB.ENG.BRQ.REDHAT.COM')) errno 115 (Operation now in progress)
[23/Jun/2015:13:18:31 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:13:18:31 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: ) errno 0 (Success)
[23/Jun/2015:13:18:31 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:18:31 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-14): authorization failure: )
[23/Jun/2015:13:37:03 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[23/Jun/2015:13:37:03 +0200] - SSL alert: Configured NSS Ciphers
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:13:37:04 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[23/Jun/2015:13:37:05 +0200] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[23/Jun/2015:13:37:06 +0200] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[23/Jun/2015:13:37:06 +0200] - 389-Directory/1.3.4.a1 B2015.132.1526 starting up
[23/Jun/2015:13:37:06 +0200] - WARNING -- Minimum cache size is 512000 -- rounding up
[23/Jun/2015:13:37:06 +0200] - WARNING -- Minimum cache size is 512000 -- rounding up
[23/Jun/2015:13:37:06 +0200] - WARNING -- Minimum cache size is 512000 -- rounding up
[23/Jun/2015:13:37:06 +0200] - WARNING: userRoot: entry cache size 512000B is less than db size 1228800B; We recommend to increase the entry cache size nsslapd-cachememsize.
[23/Jun/2015:13:37:06 +0200] - WARNING: ipaca: entry cache size 1125897B is less than db size 1327104B; We recommend to increase the entry cache size nsslapd-cachememsize.
[23/Jun/2015:13:37:07 +0200] - WARNING: changelog: entry cache size 512000B is less than db size 1515520B; We recommend to increase the entry cache size nsslapd-cachememsize.
[23/Jun/2015:13:37:07 +0200] - Detected Disorderly Shutdown last time Directory Server was running, recovering database.
[23/Jun/2015:13:37:10 +0200] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:13:37:11 +0200] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:13:37:11 +0200] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
[23/Jun/2015:13:37:11 +0200] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:37:11 +0200] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:37:11 +0200] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:37:12 +0200] NSACLPlugin - The ACL target ou=sudoers,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:37:12 +0200] NSACLPlugin - The ACL target cn=users,cn=compat,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:37:12 +0200] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:37:12 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:37:12 +0200] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com does not exist
[23/Jun/2015:13:37:13 +0200] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[23/Jun/2015:13:37:13 +0200] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com--no CoS Templates found, which should be added before the CoS Definition.
[23/Jun/2015:13:37:13 +0200] NSMMReplicationPlugin - changelog program - _cl5NewDBFile: PR_DeleteSemaphore: /var/lib/dirsrv/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM/cldb/bb57681e-18d011e5-9edab207-8d01a1a1.sema; NSPR error - -5943
[23/Jun/2015:13:37:13 +0200] NSMMReplicationPlugin - changelog program - _cl5NewDBFile: PR_DeleteSemaphore: /var/lib/dirsrv/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM/cldb/8cd98d0b-18d011e5-9edab207-8d01a1a1.sema; NSPR error - -5943
[23/Jun/2015:13:37:13 +0200] NSMMReplicationPlugin - replica_check_for_data_reload: Warning: disordely shutdown for replica dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com. Check if DB RUV needs to be updated
[23/Jun/2015:13:37:13 +0200] NSMMReplicationPlugin - ruv_covers_csn: replica for id 3 not found.
[23/Jun/2015:13:37:13 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[23/Jun/2015:13:37:13 +0200] NSMMReplicationPlugin - replica_check_for_data_reload: Warning: disordely shutdown for replica o=ipaca. Check if DB RUV needs to be updated
[23/Jun/2015:13:37:13 +0200] NSMMReplicationPlugin - agmt="cn=cloneAgreement1-vm-244.idm.lab.eng.brq.redhat.com-pki-tomcat" (vm-069:389): Unable to acquire replica: the replica instructed us to go into backoff mode. Will retry later.
[23/Jun/2015:13:37:13 +0200] set_krb5_creds - Could not get initial credentials for principal [ldap/vm-244.idm.lab.eng.brq.redhat.com at IDM.LAB.ENG.BRQ.REDHAT.COM] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[23/Jun/2015:13:37:13 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 2 (No such file or directory)
[23/Jun/2015:13:37:14 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[23/Jun/2015:13:37:14 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:13:37:14 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[23/Jun/2015:13:37:14 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[23/Jun/2015:13:37:14 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[23/Jun/2015:13:37:14 +0200] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[23/Jun/2015:13:37:14 +0200] - Listening on All Interfaces port 636 for LDAPS requests
[23/Jun/2015:13:37:14 +0200] - Listening on /var/run/slapd-IDM-LAB-ENG-BRQ-REDHAT-COM.socket for LDAPI requests
[23/Jun/2015:13:37:18 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:37:18 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:37:18 +0200] NSMMReplicationPlugin - agmt="cn=meTovm-069.idm.lab.eng.brq.redhat.com" (vm-069:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context)
[23/Jun/2015:13:37:18 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:37:18 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:37:18 +0200] NSMMReplicationPlugin - agmt="cn=vm-244.idm.lab.eng.brq.redhat.com-to-vm-127.idm.lab.eng.brq.redhat.com" (vm-127:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context)
[23/Jun/2015:13:37:25 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:37:25 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:37:26 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:37:26 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:37:36 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:37:36 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:37:36 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:37:36 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:37:59 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:37:59 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:37:59 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:37:59 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:38:47 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:38:47 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:38:47 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:38:48 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[23/Jun/2015:13:40:24 +0200] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) errno 0 (Success)
[23/Jun/2015:13:40:24 +0200] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
More information about the Freeipa-devel
mailing list