<div dir="ltr"><div style>Thanks Rich, appreciate the help.</div><div style><br></div><div style>I've answered inline some of your questions but I think I can answer most of your questions by showing the entire process I followed (passwords have been replaced by '...'):</div>
<div><br></div><div><div><br></div><div><div>[root@ipa1 ~]# ipa-server-install --setup-dns -p '...' -a '...' -r MIOVISION.LINUX -n miovision.linux --hostname ipa1.miovision.linux</div><div><br></div><div>The log file for this installation can be found in /var/log/ipaserver-install.log</div>
<div>==============================================================================</div><div>This program will set up the IPA Server.</div><div><br></div><div>This includes:</div><div>  * Configure a stand-alone CA (dogtag) for certificate management</div>
<div>  * Configure the Network Time Daemon (ntpd)</div><div>  * Create and configure an instance of Directory Server</div><div>  * Create and configure a Kerberos Key Distribution Center (KDC)</div><div>  * Configure Apache (httpd)</div>
<div>  * Configure DNS (bind)</div><div><br></div><div>To accept the default shown in brackets, press the Enter key.</div><div><br></div><div>Existing BIND configuration detected, overwrite? [no]: yes</div><div>Enter the fully qualified domain name of the computer</div>
<div>on which you're setting up server software. Using the form</div><div><hostname>.<domainname></div><div>Example: <a href="http://master.example.com">master.example.com</a>.</div><div><br></div><div><br>
</div><div>Server host name [ipa1.miovision.linux]: </div><div><br></div><div>Warning: skipping DNS resolution of host ipa1.miovision.linux</div><div>Unable to resolve IP address for host name</div><div>Please provide the IP address to be used for this host name: 10.0.6.3</div>
<div>Adding [10.0.6.3 ipa1.miovision.linux] to your /etc/hosts file</div><div>Do you want to configure DNS forwarders? [yes]: </div><div>Enter the IP address of DNS forwarder to use, or press Enter to finish.</div><div>Enter IP address for a DNS forwarder: 10.0.0.2</div>
<div>DNS forwarder 10.0.0.2 added</div><div>Enter IP address for a DNS forwarder: 10.0.0.5</div><div>DNS forwarder 10.0.0.5 added</div><div>Enter IP address for a DNS forwarder: </div><div>Do you want to configure the reverse zone? [yes]: </div>
<div>Please specify the reverse zone name [6.0.10.in-addr.arpa.]: </div><div>Using reverse zone 6.0.10.in-addr.arpa.</div><div><br></div><div>The IPA Master Server will be configured with:</div><div>Hostname:      ipa1.miovision.linux</div>
<div>IP address:    10.0.6.3</div><div>Domain name:   miovision.linux</div><div>Realm name:    MIOVISION.LINUX</div><div><br></div><div>BIND DNS server will be configured to serve IPA domain with:</div><div>Forwarders:    10.0.0.2, 10.0.0.5</div>
<div>Reverse zone:  6.0.10.in-addr.arpa.</div><div><br></div><div>Continue to configure the system with these values? [no]: yes</div><div><br></div><div>The following operations may take some minutes to complete.</div><div>
Please wait until the prompt is returned.</div><div><br></div><div>Configuring NTP daemon (ntpd)</div><div>  [1/4]: stopping ntpd</div><div>  [2/4]: writing configuration</div><div>  [3/4]: configuring ntpd to start on boot</div>
<div>  [4/4]: starting ntpd</div><div>Done configuring NTP daemon (ntpd).</div><div>Configuring directory server for the CA (pkids): Estimated time 30 seconds</div><div>  [1/3]: creating directory server user</div><div>  [2/3]: creating directory server instance</div>
<div>  [3/3]: restarting directory server</div><div>Done configuring directory server for the CA (pkids).</div><div>Configuring certificate server (pki-cad): Estimated time 3 minutes 30 seconds</div><div>  [1/21]: creating certificate server user</div>
<div>  [2/21]: creating pki-ca instance</div><div>  [3/21]: configuring certificate server instance</div><div>  [4/21]: disabling nonces</div><div>  [5/21]: creating CA agent PKCS#12 file in /root</div><div>  [6/21]: creating RA agent certificate database</div>
<div>  [7/21]: importing CA chain to RA certificate database</div><div>  [8/21]: fixing RA database permissions</div><div>  [9/21]: setting up signing cert profile</div><div>  [10/21]: set up CRL publishing</div><div>  [11/21]: set certificate subject base</div>
<div>  [12/21]: enabling Subject Key Identifier</div><div>  [13/21]: setting audit signing renewal to 2 years</div><div>  [14/21]: configuring certificate server to start on boot</div><div>  [15/21]: restarting certificate server</div>
<div>  [16/21]: requesting RA certificate from CA</div><div>  [17/21]: issuing RA agent certificate</div><div>  [18/21]: adding RA agent as a trusted user</div><div>  [19/21]: configure certificate renewals</div><div>  [20/21]: configure Server-Cert certificate renewal</div>
<div>  [21/21]: Configure HTTP to proxy connections</div><div>Done configuring certificate server (pki-cad).</div><div>Configuring directory server (dirsrv): Estimated time 1 minute</div><div>  [1/38]: creating directory server user</div>
<div>  [2/38]: creating directory server instance</div><div>  [3/38]: adding default schema</div><div>  [4/38]: enabling memberof plugin</div><div>  [5/38]: enabling winsync plugin</div><div>  [6/38]: configuring replication version plugin</div>
<div>  [7/38]: enabling IPA enrollment plugin</div><div>  [8/38]: enabling ldapi</div><div>  [9/38]: disabling betxn plugins</div><div>  [10/38]: configuring uniqueness plugin</div><div>  [11/38]: configuring uuid plugin</div>
<div>  [12/38]: configuring modrdn plugin</div><div>  [13/38]: enabling entryUSN plugin</div><div>  [14/38]: configuring lockout plugin</div><div>  [15/38]: creating indices</div><div>  [16/38]: enabling referential integrity plugin</div>
<div>  [17/38]: configuring ssl for ds instance</div><div>  [18/38]: configuring certmap.conf</div><div>  [19/38]: configure autobind for root</div><div>  [20/38]: configure new location for managed entries</div><div>  [21/38]: restarting directory server</div>
<div>  [22/38]: adding default layout</div><div>  [23/38]: adding delegation layout</div><div>  [24/38]: adding replication acis</div><div>  [25/38]: creating container for managed entries</div><div>  [26/38]: configuring user private groups</div>
<div>  [27/38]: configuring netgroups from hostgroups</div><div>  [28/38]: creating default Sudo bind user</div><div>  [29/38]: creating default Auto Member layout</div><div>  [30/38]: adding range check plugin</div><div>
  [31/38]: creating default HBAC rule allow_all</div><div>  [32/38]: Upload CA cert to the directory</div><div>  [33/38]: initializing group membership</div><div>  [34/38]: adding master entry</div><div>  [35/38]: configuring Posix uid/gid generation</div>
<div>  [36/38]: enabling compatibility plugin</div><div>  [37/38]: tuning directory server</div><div>  [38/38]: configuring directory to start on boot</div><div>Done configuring directory server (dirsrv).</div><div>Configuring Kerberos KDC (krb5kdc): Estimated time 30 seconds</div>
<div>  [1/10]: adding sasl mappings to the directory</div><div>  [2/10]: adding kerberos container to the directory</div><div>  [3/10]: configuring KDC</div><div>  [4/10]: initialize kerberos container</div><div>  [5/10]: adding default ACIs</div>
<div>  [6/10]: creating a keytab for the directory</div><div>  [7/10]: creating a keytab for the machine</div><div>  [8/10]: adding the password extension to the directory</div><div>  [9/10]: starting the KDC</div><div>  [10/10]: configuring KDC to start on boot</div>
<div>Done configuring Kerberos KDC (krb5kdc).</div><div>Configuring kadmin</div><div>  [1/2]: starting kadmin </div><div>  [2/2]: configuring kadmin to start on boot</div><div>Done configuring kadmin.</div><div>Configuring ipa_memcached</div>
<div>  [1/2]: starting ipa_memcached </div><div>  [2/2]: configuring ipa_memcached to start on boot</div><div>Done configuring ipa_memcached.</div><div>Configuring the web interface (httpd): Estimated time 1 minute</div><div>
  [1/13]: setting mod_nss port to 443</div><div>  [2/13]: setting mod_nss password file</div><div>  [3/13]: enabling mod_nss renegotiate</div><div>  [4/13]: adding URL rewriting rules</div><div>  [5/13]: configuring httpd</div>
<div>  [6/13]: setting up ssl</div><div>  [7/13]: setting up browser autoconfig</div><div>  [8/13]: publish CA cert</div><div>  [9/13]: creating a keytab for httpd</div><div>  [10/13]: clean up any existing httpd ccache</div>
<div>  [11/13]: configuring SELinux for httpd</div><div>  [12/13]: restarting httpd</div><div>  [13/13]: configuring httpd to start on boot</div><div>Done configuring the web interface (httpd).</div><div>Applying LDAP updates</div>
<div>Restarting the directory server</div><div>Restarting the KDC</div><div>Configuring DNS (named)</div><div>  [1/9]: adding DNS container</div><div>  [2/9]: setting up our zone</div><div>  [3/9]: setting up reverse zone</div>
<div>  [4/9]: setting up our own record</div><div>  [5/9]: setting up kerberos principal</div><div>  [6/9]: setting up named.conf</div><div>  [7/9]: restarting named</div><div>  [8/9]: configuring named to start on boot</div>
<div>  [9/9]: changing resolv.conf to point to ourselves</div><div>Done configuring DNS (named).</div><div><br></div><div>Global DNS configuration in LDAP server is empty</div><div>You can use 'dnsconfig-mod' command to set global DNS options that</div>
<div>would override settings in local named.conf files</div><div><br></div><div>Restarting the web server</div><div>==============================================================================</div><div>Setup complete</div>
<div><br></div><div>...</div><div><br></div><div><br></div><div>[root@ipa1 openldap]# ipa-replica-manage connect --winsync --binddn cn=administrator,cn=users,dc=miovision,dc=corp --bindpw '...' --passsync '...' --cacert /etc/openldap/cacerts/miovision.ca.cer dc1.miovision.corp -v</div>
<div>Directory Manager password: </div><div><br></div><div>Added CA certificate /etc/openldap/cacerts/miovision.ca.cer to certificate database for ipa1.miovision.linux</div><div>ipa: INFO: AD Suffix is: DC=miovision,DC=corp</div>
<div>The user for the Windows PassSync service is uid=passsync,cn=sysaccounts,cn=etc,dc=miovision,dc=linux</div><div>ipa: INFO: Added new sync agreement, waiting for it to become ready . . .</div><div>ipa: INFO: Replication Update in progress: FALSE: status: 0 Replica acquired successfully: Incremental update started: start: 0: end: 0</div>
<div>ipa: INFO: Agreement is ready, starting replication . . .</div><div>Starting replication, please wait until this has completed.</div><div>Update in progress</div><div>Update in progress</div><div>Update succeeded</div>
<div>Connected 'ipa1.miovision.linux' to 'dc1.miovision.corp'</div><div><br></div><div>[root@ipa1 openldap]# ldapsearch -xLLL -D "cn=directory manager" -W -p 389 -h ipa1.miovision.corp -b cn=config objectclass=nsdswindowsreplicationagreement dn nsds7WindowsReplicaSubtree</div>
<div>Enter LDAP Password: </div><div>ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)</div><div><br></div><div><br></div><div>[root@ipa1 openldap]# /etc/init.d/dirsrv status</div><div>dirsrv MIOVISION-LINUX dead but pid file exists</div>
<div>dirsrv PKI-IPA dead but pid file exists</div><div>[root@ipa1 openldap]# /etc/init.d/dirsrv start</div><div>Starting dirsrv: </div><div>    MIOVISION-LINUX.../etc/init.d/dirsrv: line 181: kill: (4785) - No such process</div>
<div> not running, but pid file exists</div><div>    MIOVISION-LINUX... attempting to start anyway          [  OK  ]</div><div>    PKI-IPA.../etc/init.d/dirsrv: line 181: kill: (4853) - No such process</div><div> not running, but pid file exists</div>
<div>    PKI-IPA... attempting to start anyway                  [  OK  ]</div><div>[root@ipa1 openldap]# /etc/init.d/dirsrv status</div><div>dirsrv MIOVISION-LINUX (pid 5252) is running...</div><div>dirsrv PKI-IPA (pid 5329) is running...</div>
<div><br></div><div><br></div><div>[root@ipa1 openldap]# ldapsearch -xLLL -D "cn=directory manager" -W -p 389 -h ipa1.miovision.corp -b cn=config objectclass=nsdswindowsreplicationagreement dn nsds7WindowsReplicaSubtree</div>
<div>Enter LDAP Password: </div><div>dn: cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=map</div><div> ping tree,cn=config</div><div>nsds7WindowsReplicaSubtree: cn=Users,DC=miovision,DC=corp</div><div>
<br></div><div>[root@ipa1 openldap]# ldapmodify -x -D "cn=directory manager" -W -p 389 -h ipa1.miovision.linux <<EOF </div><div>> dn: cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=mapping tree,cn=config</div>
<div>> changetype: modify</div><div>> replace: nsds7WindowsReplicaSubtree</div><div>> nsds7WindowsReplicaSubtree: CN=Shared Login,CN=users,DC=miovision,DC=corp</div><div>> EOF</div><div>Enter LDAP Password: </div>
<div>modifying entry "cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=mapping tree,cn=config"</div><div><br></div><div>[root@ipa1 openldap]# ldapsearch -xLLL -D "cn=directory manager" -W -p 389 -h ipa1.miovision.corp -b cn=config objectclass=nsdswindowsreplicationagreement dn nsds7WindowsReplicaSubtree</div>
<div>Enter LDAP Password: </div><div>dn: cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=map</div><div> ping tree,cn=config</div><div>nsds7WindowsReplicaSubtree: CN=Shared Login,CD=users,DC=miovision,DC=corp</div>
<div><br></div><div><br></div><div>[root@ipa1 openldap]# screen ipa-replica-manage re-initialize --from dc1.miovision.corp</div><div>Update in progress</div><div>Update in progress</div><div>Update in progress</div><div>Update in progress</div>
<div>Update in progress</div><div>.....</div><div><br></div></div><div>*****************************************************************</div><div><br></div><div><div>[root@ipa1 slapd-MIOVISION-LINUX]# pstack 5252</div><div>
<br></div><div>Thread 43 (Thread 0x7fd38dcc7700 (LWP 5255)):</div><div>#0  0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div><div>#1  0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div><div>
#2  0x00007fd3921d8d27 in ?? () from /usr/lib64/dirsrv/plugins/libback-ldbm.so</div><div>#3  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#4  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#5  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 42 (Thread 0x7fd38d2c6700 (LWP 5256)):</div><div>#0  0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div><div>#1  0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div>
<div>#2  0x00007fd3921d9177 in ?? () from /usr/lib64/dirsrv/plugins/libback-ldbm.so</div><div>#3  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#4  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#5  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 41 (Thread 0x7fd38c8c5700 (LWP 5257)):</div><div>#0  0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div><div>#1  0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div>
<div>#2  0x00007fd3921d8f87 in ?? () from /usr/lib64/dirsrv/plugins/libback-ldbm.so</div><div>#3  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#4  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#5  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 40 (Thread 0x7fd38bec4700 (LWP 5258)):</div><div>#0  0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div><div>#1  0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div>
<div>#2  0x00007fd3921d9617 in ?? () from /usr/lib64/dirsrv/plugins/libback-ldbm.so</div><div>#3  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#4  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#5  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 39 (Thread 0x7fd38b4c3700 (LWP 5259)):</div><div>#0  0x00007fd39a9bc43c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00fe7e in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#2  0x00007fd39cbf94eb in slapi_wait_condvar () from /usr/lib64/dirsrv/libslapd.so.0</div><div>#3  0x00007fd393ca0f2e in ?? () from /usr/lib64/dirsrv/plugins/libcos-plugin.so</div>
<div>#4  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#5  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#6  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 38 (Thread 0x7fd39cfbf700 (LWP 5260)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x00007fd391f47c57 in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div><div>#4  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#5  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#6  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 37 (Thread 0x7fd38aac2700 (LWP 5261)):</div><div>#0  0x00007fd39cb99e5c in slapi_sdn_done () from /usr/lib64/dirsrv/libslapd.so.0</div><div>#1  0x00007fd391f841b2 in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div>
<div>#2  0x00007fd391f843ac in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div><div>#3  0x00007fd391f88395 in windows_dirsync_inc_run () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div><div>
#4  0x00007fd391f8d63d in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div><div>#5  0x00007fd391f61c2a in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div><div>#6  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div>
<div>#7  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#8  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 36 (Thread 0x7fd38a0c1700 (LWP 5262)):</div><div>#0  0x00007fd39a9bc43c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00fe7e in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#2  0x00007fd39cbf94eb in slapi_wait_condvar () from /usr/lib64/dirsrv/libslapd.so.0</div><div>#3  0x00007fd3908ad1df in ?? () from /usr/lib64/dirsrv/plugins/libroles-plugin.so</div>
<div>#4  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#5  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#6  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 35 (Thread 0x7fd3896c0700 (LWP 5263)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x000000000041b2b3 in ?? ()</div><div>#4  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#5  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#6  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div>
<div>Thread 34 (Thread 0x7fd388cbf700 (LWP 5264)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div>
<div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x00007fd39cbaab87 in ?? () from /usr/lib64/dirsrv/libslapd.so.0</div><div>#4  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div>
<div>#5  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#6  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 33 (Thread 0x7fd37bd8e700 (LWP 5265)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 32 (Thread 0x7fd37b38d700 (LWP 5266)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 31 (Thread 0x7fd37a98c700 (LWP 5267)):</div><div>#0  0x00007fd39a6fd253 in poll () from /lib64/libc.so.6</div><div>#1  0x00007fd39b01189f in ?? () from /lib64/libnspr4.so</div>
<div>#2  0x0000000000412cf1 in ?? ()</div><div>#3  0x00000000004137c0 in ?? ()</div><div>#4  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#5  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#6  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 30 (Thread 0x7fd379f8b700 (LWP 5268)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 29 (Thread 0x7fd37958a700 (LWP 5269)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 28 (Thread 0x7fd378b89700 (LWP 5270)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 27 (Thread 0x7fd373fff700 (LWP 5271)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 26 (Thread 0x7fd3735fe700 (LWP 5272)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 25 (Thread 0x7fd372bfd700 (LWP 5273)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 24 (Thread 0x7fd3721fc700 (LWP 5274)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 23 (Thread 0x7fd3717fb700 (LWP 5275)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 22 (Thread 0x7fd370dfa700 (LWP 5276)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 21 (Thread 0x7fd3703f9700 (LWP 5277)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 20 (Thread 0x7fd36f9f8700 (LWP 5278)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 19 (Thread 0x7fd36eff7700 (LWP 5279)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 18 (Thread 0x7fd36e5f6700 (LWP 5280)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 17 (Thread 0x7fd36dbf5700 (LWP 5281)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 16 (Thread 0x7fd36d1f4700 (LWP 5282)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 15 (Thread 0x7fd36c7f3700 (LWP 5283)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 14 (Thread 0x7fd36bdf2700 (LWP 5284)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 13 (Thread 0x7fd36b3f1700 (LWP 5285)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 12 (Thread 0x7fd36a9f0700 (LWP 5286)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 11 (Thread 0x7fd369fef700 (LWP 5287)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 10 (Thread 0x7fd3695ee700 (LWP 5288)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 9 (Thread 0x7fd368bed700 (LWP 5289)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 8 (Thread 0x7fd3681ec700 (LWP 5290)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 7 (Thread 0x7fd3677eb700 (LWP 5291)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 6 (Thread 0x7fd366dea700 (LWP 5292)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 5 (Thread 0x7fd3663e9700 (LWP 5293)):</div>
<div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div><div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div>
<div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div><div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 4 (Thread 0x7fd3659e8700 (LWP 5294)):</div><div>#0  0x00007fd39a9bc7bb in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div><div>#2  0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#3  0x0000000000413316 in ?? ()</div><div>#4  0x0000000000413dae in ?? ()</div>
<div>#5  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#6  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#7  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 3 (Thread 0x7fd364fe7700 (LWP 5295)):</div>
<div>#0  0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div><div>#1  0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div><div>#2  0x0000000000416b05 in ?? ()</div><div>#3  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div>
<div>#4  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div><div>#5  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 2 (Thread 0x7fd357fff700 (LWP 5296)):</div><div>#0  0x00007fd39a9bc43c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0</div>
<div>#1  0x00007fd39b00fe7e in PR_WaitCondVar () from /lib64/libnspr4.so</div><div>#2  0x0000000000421cb5 in ?? ()</div><div>#3  0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div><div>#4  0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div>
<div>#5  0x00007fd39a70690d in clone () from /lib64/libc.so.6</div><div>Thread 1 (Thread 0x7fd39d05d7c0 (LWP 5252)):</div><div>#0  0x00007fd39a6fd253 in poll () from /lib64/libc.so.6</div><div>#1  0x00007fd39b01189f in ?? () from /lib64/libnspr4.so</div>
<div>#2  0x0000000000417ea7 in ?? ()</div><div>#3  0x000000000041f16f in ?? ()</div><div>#4  0x00007fd39a63ccdd in __libc_start_main () from /lib64/libc.so.6</div><div>#5  0x000000000040d159 in ?? ()</div><div>#6  0x00007fff63e04c98 in ?? ()</div>
<div>#7  0x000000000000001c in ?? ()</div><div>#8  0x0000000000000007 in ?? ()</div><div>#9  0x00007fff63e06629 in ?? ()</div><div>#10 0x00007fff63e0663c in ?? ()</div><div>#11 0x00007fff63e0663f in ?? ()</div><div>#12 0x00007fff63e06661 in ?? ()</div>
<div>#13 0x00007fff63e06664 in ?? ()</div><div>#14 0x00007fff63e0668e in ?? ()</div><div>#15 0x00007fff63e06691 in ?? ()</div><div>#16 0x0000000000000000 in ?? ()</div></div><div><br></div></div><div class="gmail_extra"><br clear="all">
<div><div dir="ltr"><br><br><br>Steve Dainard<br>Infrastructure Manager<div>Miovision Technologies Inc.<br><br></div></div></div>
<br><br><div class="gmail_quote">On Tue, May 21, 2013 at 3:22 PM, Rich Megginson <span dir="ltr"><<a href="mailto:rmeggins@redhat.com" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=rmeggins@redhat.com&cc=&bcc=&su=&body=','_blank');return false;">rmeggins@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000"><div class="im">
    <div>On 05/21/2013 11:58 AM, Steve Dainard
      wrote:<br>
    </div>
    <blockquote type="cite">
      <div dir="ltr">So over the weekend, with some serious tinkering I
        managed to brick that install beyond recovery.
        <div><br>
        </div>
        <div>I've reinstalled, setup freeipa as a standalone CA
          with dns, and did the initial winsync agreement.</div>
        <div><br>
        </div>
        <div>After the initial agreement was synced I modified
          the <span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">nsds7WindowsReplicaSubtree
            entry</span></div>
      </div>
    </blockquote>
    <br></div>
    How?  ldapmodify?</div></blockquote><div> </div><div><br></div><div style>Yes, see above process for syntax used.</div><div style><br></div><div style> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div class="im"><br>
    <br>
    <blockquote type="cite">
      <div dir="ltr">
        <div><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">to
            reflect the AD group I want users sync'd from: CN=Shared
            Login, CN=Users,DC=miovision,DC=corp.</span></div>
      </div>
    </blockquote>
    <br></div>
    Why didn't you just specify "CN=Shared Login,
    CN=Users,DC=miovision,DC=corp" initially with ipa-replica-manage
    --win-subtree?<div class="im"><br>
    <br>
    <blockquote type="cite">
      <div dir="ltr">
        <div><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">Note
            when attempting to do an initial ldapsearch I got a 'can't
            connect to LDAP server' message,</span></div>
      </div>
    </blockquote>
    <br></div>
    Can you provide the exact ldapsearch command line you tried?</div></blockquote><div><br></div><div><br></div><div>Yes, see above process for syntax used.</div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div class="im"><br>
    <br>
    <blockquote type="cite">
      <div dir="ltr">
        <div><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">and
            had to manually start dirsrv... this is probably already a
            bad sign.</span></div>
      </div>
    </blockquote>
    <br></div>
    Was dirsrv running after you modified the nsds7WindowsReplicaSubtree
    entry?<br>
    Did dirsrv crash?  Do see any "Detected Disorderly Shutdown"
    messages in your errors logs?<div class="im"><br>
    <br></div></div></blockquote><div><br></div><div style>Dirsrv seems to have stopped right after winsync agreement was formed. In logs I don't see anything resembling a crash, but I do see shutdown notifications. Full log:</div>
<div style><br></div><div style><div>[21/May/2013:12:19:12 -0400] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database</div><div>[21/May/2013:12:19:12 -0400] - check_and_set_import_cache: pagesize: 4096, pages: 255146, procpages: 51280</div>
<div>[21/May/2013:12:19:12 -0400] - WARNING: After allocating import cache 408232KB, the available memory is 612352KB, which is less than the soft limit 1048576KB. You may want to decrease the import cache size and rerun import.</div>
<div>[21/May/2013:12:19:12 -0400] - Import allocates 408232KB import cache.</div><div>[21/May/2013:12:19:12 -0400] - import userRoot: Beginning import job...</div><div>[21/May/2013:12:19:12 -0400] - import userRoot: Index buffering enabled with bucket size 100</div>
<div>[21/May/2013:12:19:12 -0400] - import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"</div><div>[21/May/2013:12:19:12 -0400] - import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)</div>
<div>[21/May/2013:12:19:13 -0400] - import userRoot: Workers finished; cleaning up...</div><div>[21/May/2013:12:19:13 -0400] - import userRoot: Workers cleaned up.</div><div>[21/May/2013:12:19:13 -0400] - import userRoot: Cleaning up producer thread...</div>
<div>[21/May/2013:12:19:13 -0400] - import userRoot: Indexing complete.  Post-processing...</div><div>[21/May/2013:12:19:13 -0400] - import userRoot: Generating numSubordinates complete.</div><div>[21/May/2013:12:19:13 -0400] - Nothing to do to build ancestorid index</div>
<div>[21/May/2013:12:19:13 -0400] - import userRoot: Flushing caches...</div><div>[21/May/2013:12:19:13 -0400] - import userRoot: Closing files...</div><div>[21/May/2013:12:19:13 -0400] - All database threads now stopped</div>
<div>[21/May/2013:12:19:13 -0400] - import userRoot: Import complete.  Processed 1 entries in 1 seconds. (1.00 entries/sec)</div><div>[21/May/2013:12:19:15 -0400] - 389-Directory/<a href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div>
<div>[21/May/2013:12:19:15 -0400] - Db home directory is not set. Possibly nsslapd-directory (optinally nsslapd-db-home-directory) is missing in the config file.</div><div>[21/May/2013:12:19:15 -0400] - I'm resizing my cache now...cache was 418029568 and is now 8000000</div>
<div>[21/May/2013:12:19:16 -0400] - slapd started.  Listening on All Interfaces port 389 for LDAP requests</div><div>[21/May/2013:12:19:16 -0400] - slapd shutting down - signaling operation threads</div><div>[21/May/2013:12:19:16 -0400] - slapd shutting down - closing down internal subsystems and plugins</div>
<div>[21/May/2013:12:19:16 -0400] - Waiting for 4 database threads to stop</div><div>[21/May/2013:12:19:17 -0400] - All database threads now stopped</div><div>[21/May/2013:12:19:17 -0400] - slapd stopped.</div><div>[21/May/2013:12:19:19 -0400] - 389-Directory/<a href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div>
<div>[21/May/2013:12:19:19 -0400] - slapd started.  Listening on All Interfaces port 389 for LDAP requests</div><div>[21/May/2013:12:19:20 -0400] - The change of nsslapd-ldapilisten will not take effect until the server is restarted</div>
<div>[21/May/2013:12:19:40 -0400] - Warning: Adding configuration attribute "nsslapd-security"</div><div>[21/May/2013:12:19:40 -0400] - slapd shutting down - signaling operation threads</div><div>[21/May/2013:12:19:40 -0400] - slapd shutting down - closing down internal subsystems and plugins</div>
<div>[21/May/2013:12:19:40 -0400] - Waiting for 4 database threads to stop</div><div>[21/May/2013:12:19:40 -0400] - All database threads now stopped</div><div>[21/May/2013:12:19:40 -0400] - slapd stopped.</div><div>[21/May/2013:12:19:41 -0400] - 389-Directory/<a href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div>
<div>[21/May/2013:12:19:41 -0400] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...</div><div>[21/May/2013:12:19:41 -0400] attrcrypt - Key for cipher AES successfully generated and stored</div>
<div>[21/May/2013:12:19:41 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...</div><div>[21/May/2013:12:19:41 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored</div>
<div>[21/May/2013:12:19:41 -0400] - slapd started.  Listening on All Interfaces port 389 for LDAP requests</div><div>[21/May/2013:12:19:41 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div><div>[21/May/2013:12:19:41 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div>
<div>[21/May/2013:12:19:42 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div><div>[21/May/2013:12:19:51 -0400] - slapd shutting down - signaling operation threads</div>
<div>[21/May/2013:12:19:51 -0400] - slapd shutting down - closing down internal subsystems and plugins</div><div>[21/May/2013:12:19:51 -0400] - Waiting for 4 database threads to stop</div><div>[21/May/2013:12:19:51 -0400] - All database threads now stopped</div>
<div>[21/May/2013:12:19:51 -0400] - slapd stopped.</div><div>[21/May/2013:12:19:53 -0400] - 389-Directory/<a href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div><div>[21/May/2013:12:19:53 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</div>
<div>[21/May/2013:12:19:53 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div><div>[21/May/2013:12:19:53 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div>
<div>[21/May/2013:12:19:53 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div><div>[21/May/2013:12:19:53 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div>
<div>[21/May/2013:12:19:53 -0400] - slapd started.  Listening on All Interfaces port 389 for LDAP requests</div><div>[21/May/2013:12:19:53 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div><div>[21/May/2013:12:19:53 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div>
<div>[21/May/2013:12:19:53 -0400] - The change of nsslapd-maxdescriptors will not take effect until the server is restarted</div><div>[21/May/2013:12:23:37 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div>
<div>[21/May/2013:12:23:37 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div><div>[21/May/2013:12:23:43 -0400] - userRoot: Indexing attribute: memberuid</div><div>[21/May/2013:12:23:43 -0400] - userRoot: Finished indexing.</div>
<div>[21/May/2013:12:23:49 -0400] - userRoot: Indexing attribute: ntUserDomainId</div><div>[21/May/2013:12:23:49 -0400] - userRoot: Finished indexing.</div><div>[21/May/2013:12:23:55 -0400] - userRoot: Indexing attribute: ntUniqueId</div>
<div>[21/May/2013:12:23:55 -0400] - userRoot: Finished indexing.</div><div>[21/May/2013:12:23:57 -0400] - slapd shutting down - signaling operation threads</div><div>[21/May/2013:12:23:57 -0400] - slapd shutting down - closing down internal subsystems and plugins</div>
<div>[21/May/2013:12:23:57 -0400] - Waiting for 4 database threads to stop</div><div>[21/May/2013:12:23:57 -0400] - All database threads now stopped</div><div>[21/May/2013:12:23:57 -0400] - slapd stopped.</div><div>[21/May/2013:12:24:01 -0400] - 389-Directory/<a href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div>
<div>[21/May/2013:12:24:01 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</div><div>[21/May/2013:12:24:01 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div>
<div>[21/May/2013:12:24:01 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div><div>[21/May/2013:12:24:01 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div>
<div>[21/May/2013:12:24:01 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div><div>[21/May/2013:12:24:01 -0400] - slapd started.  Listening on All Interfaces port 389 for LDAP requests</div>
<div>[21/May/2013:12:24:01 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div><div>[21/May/2013:12:24:01 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div><div>[21/May/2013:12:50:13 -0400] - slapd shutting down - signaling operation threads</div>
<div>[21/May/2013:12:50:13 -0400] - slapd shutting down - closing down internal subsystems and plugins</div><div>[21/May/2013:12:50:13 -0400] - Waiting for 4 database threads to stop</div><div>[21/May/2013:12:50:13 -0400] - All database threads now stopped</div>
<div>[21/May/2013:12:50:13 -0400] - slapd stopped.</div><div>[21/May/2013:12:50:16 -0400] - 389-Directory/<a href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div><div>[21/May/2013:12:50:16 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</div>
<div>[21/May/2013:12:50:16 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div><div>[21/May/2013:12:50:16 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div>
<div>[21/May/2013:12:50:16 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div><div>[21/May/2013:12:50:16 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div>
<div>[21/May/2013:12:50:16 -0400] - slapd started.  Listening on All Interfaces port 389 for LDAP requests</div><div>[21/May/2013:12:50:16 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div><div>[21/May/2013:12:50:16 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div>
<div>[21/May/2013:12:50:18 -0400] - Entry "cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=mapping tree,cn=config" -- attribute "nsDS5ReplicatedAttributeListTotal" not allowed</div>
<div>[21/May/2013:12:50:18 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has no update vector. It has never been initialized.</div><div>[21/May/2013:12:50:18 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has no update vector. It has never been initialized.</div>
<div>[21/May/2013:12:50:18 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has no update vector. It has never been initialized.</div><div>[21/May/2013:12:50:20 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</div>
<div>[21/May/2013:12:50:21 -0400] - Entry "uid=krbtgt,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div><div>[21/May/2013:12:50:21 -0400] - Entry "uid=krbtgt_18424,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div>
<div>[21/May/2013:12:50:21 -0400] - Entry "uid=IUSR_MIOFILES,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div><div>[21/May/2013:12:50:21 -0400] - Entry "uid=IWAM_MIOFILES,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div>
<div>[21/May/2013:12:50:21 -0400] - Entry "uid=backup,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div><div>[21/May/2013:12:50:21 -0400] - Entry "uid=Guest,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div>
<div>[21/May/2013:12:50:22 -0400] - Entry "uid=ldap-auth,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div><div>[21/May/2013:12:50:22 -0400] - Entry "uid=Administrator,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div>
<div>[21/May/2013:12:50:22 -0400] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)". Sent 2 entries.</div><div>[21/May/2013:12:50:23 -0400] - slapd shutting down - signaling operation threads</div>
<div>[21/May/2013:12:50:23 -0400] - slapd shutting down - closing down internal subsystems and plugins</div><div>[21/May/2013:12:50:23 -0400] - Waiting for 4 database threads to stop</div><div>[21/May/2013:12:50:23 -0400] - All database threads now stopped</div>
<div>[21/May/2013:12:50:23 -0400] - slapd stopped.</div><div>[21/May/2013:12:54:14 -0400] - 389-Directory/<a href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div><div>[21/May/2013:12:54:14 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</div>
<div>[21/May/2013:12:54:14 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div><div>[21/May/2013:12:54:14 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div>
<div>[21/May/2013:12:54:14 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div><div>[21/May/2013:12:54:14 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div>
<div>[21/May/2013:12:54:14 -0400] - slapd started.  Listening on All Interfaces port 389 for LDAP requests</div><div>[21/May/2013:12:54:14 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div><div>[21/May/2013:12:54:14 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div>
<div>[21/May/2013:12:58:56 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</div><div>[21/May/2013:13:54:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:13:59:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:14:04:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:14:06:21 -0400] - _csngen_adjust_local_time: gen state before 519bae7c0001:1369157244:0:0</div>
<div>[21/May/2013:14:06:21 -0400] - _csngen_adjust_local_time: gen state after 519bb79d0000:1369159581:0:0</div><div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bb79d000000030000 into pending list</div>
<div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - Purged state information from entry fqdn=ipa1.miovision.linux,cn=computers,cn=accounts,dc=miovision,dc=linux up to CSN 519273fc000000030000</div><div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bb79d000000030000</div><div>[21/May/2013:14:06:46 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:14:06:46 -0400] NSMMReplicationPlugin - changelog program - cl5GetOperationCount: found DB object 26158b0</div><div>[21/May/2013:14:09:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:14:14:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:14:19:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:14:24:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:14:29:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:14:31:18 -0400] - _csngen_adjust_local_time: gen state before 519bb79d0001:1369159581:0:0</div><div>[21/May/2013:14:31:18 -0400] - _csngen_adjust_local_time: gen state after 519bbd760000:1369161078:0:0</div>
<div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bbd76000000030000 into pending list</div><div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - Purged state information from entry uid=admin,cn=users,cn=accounts,dc=miovision,dc=linux up to CSN 51927d1d000000030000</div>
<div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bbd76000000030000</div><div>[21/May/2013:14:31:26 -0400] - _csngen_adjust_local_time: gen state before 519bbd760001:1369161078:0:0</div>
<div>[21/May/2013:14:31:26 -0400] - _csngen_adjust_local_time: gen state after 519bbd7e0000:1369161086:0:0</div><div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bbd7e000000030000 into pending list</div>
<div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - Purged state information from entry uid=admin,cn=users,cn=accounts,dc=miovision,dc=linux up to CSN 519282f6000000030000</div><div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bbd7e000000030000</div><div>[21/May/2013:14:31:46 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:14:31:46 -0400] NSMMReplicationPlugin - changelog program - cl5GetOperationCount: found DB object 26158b0</div><div>[21/May/2013:14:34:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:14:39:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:14:44:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:14:49:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:14:54:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:14:59:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:15:04:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:15:09:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:15:14:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:15:19:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:15:24:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:15:29:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:15:34:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:15:39:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:15:44:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:15:46:24 -0400] - _csngen_adjust_local_time: gen state before 519bbd7e0001:1369161086:0:0</div><div>[21/May/2013:15:46:24 -0400] - _csngen_adjust_local_time: gen state after 519bcf100000:1369165584:0:0</div>
<div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bcf10000000030000 into pending list</div><div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - Purged state information from entry fqdn=ipa1.miovision.linux,cn=computers,cn=accounts,dc=miovision,dc=linux up to CSN 519282fe000000030000</div>
<div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bcf10000000030000</div><div>[21/May/2013:15:46:46 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:15:46:46 -0400] NSMMReplicationPlugin - changelog program - cl5GetOperationCount: found DB object 26158b0</div><div>[21/May/2013:15:49:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:15:54:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:15:59:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:16:04:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:16:09:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:16:14:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:16:19:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:16:24:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:16:29:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:16:34:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:16:39:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:16:44:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:16:49:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:16:54:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:16:59:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:17:04:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:17:09:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:17:14:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:17:19:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:17:24:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:17:26:31 -0400] - _csngen_adjust_local_time: gen state before 519bcf100001:1369165584:0:0</div><div>[21/May/2013:17:26:31 -0400] - _csngen_adjust_local_time: gen state after 519be6870000:1369171591:0:0</div>
<div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519be687000000030000 into pending list</div><div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - Purged state information from entry fqdn=ipa1.miovision.linux,cn=computers,cn=accounts,dc=miovision,dc=linux up to CSN 51929490000000030000</div>
<div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519be687000000030000</div><div>[21/May/2013:17:26:46 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:17:26:46 -0400] NSMMReplicationPlugin - changelog program - cl5GetOperationCount: found DB object 26158b0</div><div>[21/May/2013:17:29:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:17:34:14 -0400] NSMMReplicationPlugin - Running Dirsync </div>
<div>[21/May/2013:17:39:14 -0400] NSMMReplicationPlugin - Running Dirsync </div><div>[21/May/2013:17:41:32 -0400] - _csngen_adjust_local_time: gen state before 519be6870001:1369171591:0:0</div><div>[21/May/2013:17:41:32 -0400] - _csngen_adjust_local_time: gen state after 519bea0c0000:1369172492:0:0</div>
<div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bea0c000000030000 into pending list</div><div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - Purged state information from entry fqdn=ipa1.miovision.linux,cn=computers,cn=accounts,dc=miovision,dc=linux up to CSN 5192ac07000000030000</div>
<div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div>
<div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bea0c000000030000</div></div><div style><br></div><div style><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div class="im">
    <blockquote type="cite">
      <div dir="ltr">
        <div><br>
        </div>
        <div><font color="#333333"><span style="line-height:17.328125px">Although the documentation
              mentions changes will be applied on next sync when '</span></font><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">nsds7WindowsReplicaSubtree'
            is changed, </span><span style="line-height:17.328125px;color:rgb(51,51,51)">they do
            not.</span></div>
      </div>
    </blockquote>
    <br></div>
    Did you use ldapmodify to change it?<div class="im"><br>
    <br></div></div></blockquote><div><br></div><div><div>Yes, see above process for syntax used.</div></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div class="im">
    <blockquote type="cite">
      <div dir="ltr">
        <div><span style="line-height:17.328125px;color:rgb(51,51,51)">Also if
            I try to include the </span><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">--win-subtree=CN=Shared
            Login,CN=Users,DC=miovision,DC=corp argument I get an
            invalid password message this might be because I didn't
            quote the DN though.</span></div>
      </div>
    </blockquote>
    <br></div>
    Yes, that's likely.<div><div class="h5"><br>
    <br>
    <blockquote type="cite">
      <div dir="ltr">
        <div><span style="color:rgb(51,51,51);line-height:17.328125px">So I
            then ran ipa-replica-manage re-initialize --from
            dc1.miovision.corp.</span></div>
        <div><font color="#333333"><span style="line-height:17.328125px"><br>
            </span></font></div>
        <div><font color="#333333"><span style="line-height:17.328125px">I now have a screen
              session with an incredible amount of </span></font><span style="line-height:17.328125px;color:rgb(51,51,51)">"Update
            in progress" lines which has been running for about 30
            minutes now (triggered at 12:58:56). I tried this on the
            weekend as well, and the process ran overnight so I killed
            it and had to start from scratch again.</span></div>
        <div><span style="line-height:17.328125px;color:rgb(51,51,51)"><br>
          </span></div>
        <div><span style="line-height:17.328125px;color:rgb(51,51,51)">The
            dirsrv error log is:</span></div>
        <div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:24:01
                -0400] - slapd started.  Listening on All Interfaces
                port 389 for LDAP requests</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:24:01
                -0400] - Listening on All Interfaces port 636 for LDAPS
                requests</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:24:01
                -0400] - Listening on
                /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13
                -0400] - slapd shutting down - signaling operation
                threads</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13
                -0400] - slapd shutting down - closing down internal
                subsystems and plugins</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13
                -0400] - Waiting for 4 database threads to stop</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13
                -0400] - All database threads now stopped</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13
                -0400] - slapd stopped.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16
                -0400] - 389-Directory/<a href="http://1.2.11.15" target="_blank">1.2.11.15</a> B2013.105.2259
                starting up</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16
                -0400] schema-compat-plugin - warning: no entries set up
                under cn=computers, cn=compat,dc=miovision,dc=linux</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16
                -0400] schema-compat-plugin - warning: no entries set up
                under cn=ng, cn=compat,dc=miovision,dc=linux</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16
                -0400] schema-compat-plugin - warning: no entries set up
                under ou=sudoers,dc=miovision,dc=linux</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16
                -0400] - Skipping CoS Definition cn=Password
                Policy,cn=accounts,dc=miovision,dc=linux--no CoS
                Templates found, which should be added before the CoS
                Definition.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16
                -0400] - Skipping CoS Definition cn=Password
                Policy,cn=accounts,dc=miovision,dc=linux--no CoS
                Templates found, which should be added before the CoS
                Definition.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16
                -0400] - slapd started.  Listening on All Interfaces
                port 389 for LDAP requests</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16
                -0400] - Listening on All Interfaces port 636 for LDAPS
                requests</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16
                -0400] - Listening on
                /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:18
                -0400] - Entry
                "cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=mapping
                tree,cn=config" -- attribute
                "nsDS5ReplicatedAttributeListTotal" not allowed</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:18
                -0400] NSMMReplicationPlugin -
                agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has
                no update vector. It has never been initialized.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:18
                -0400] NSMMReplicationPlugin -
                agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has
                no update vector. It has never been initialized.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:18
                -0400] NSMMReplicationPlugin -
                agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has
                no update vector. It has never been initialized.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:20
                -0400] NSMMReplicationPlugin - Beginning total update of
                replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21
                -0400] - Entry
                "uid=krbtgt,cn=users,cn=accounts,dc=miovision,dc=linux"
                missing attribute "sn" required by object class "person"</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21
                -0400] - Entry
                "uid=krbtgt_18424,cn=users,cn=accounts,dc=miovision,dc=linux"
                missing attribute "sn" required by object class "person"</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21
                -0400] - Entry
                "uid=IUSR_MIOFILES,cn=users,cn=accounts,dc=miovision,dc=linux"
                missing attribute "sn" required by object class "person"</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21
                -0400] - Entry
                "uid=IWAM_MIOFILES,cn=users,cn=accounts,dc=miovision,dc=linux"
                missing attribute "sn" required by object class "person"</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21
                -0400] - Entry
                "uid=backup,cn=users,cn=accounts,dc=miovision,dc=linux"
                missing attribute "sn" required by object class "person"</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21
                -0400] - Entry
                "uid=Guest,cn=users,cn=accounts,dc=miovision,dc=linux"
                missing attribute "sn" required by object class "person"</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:22
                -0400] - Entry
                "uid=ldap-auth,cn=users,cn=accounts,dc=miovision,dc=linux"
                missing attribute "sn" required by object class "person"</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:22
                -0400] - Entry
                "uid=Administrator,cn=users,cn=accounts,dc=miovision,dc=linux"
                missing attribute "sn" required by object class "person"</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:22
                -0400] NSMMReplicationPlugin - Finished total update of
                replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".
                Sent 2 entries.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23
                -0400] - slapd shutting down - signaling operation
                threads</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23
                -0400] - slapd shutting down - closing down internal
                subsystems and plugins</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23
                -0400] - Waiting for 4 database threads to stop</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23
                -0400] - All database threads now stopped</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23
                -0400] - slapd stopped.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14
                -0400] - 389-Directory/<a href="http://1.2.11.15" target="_blank">1.2.11.15</a> B2013.105.2259
                starting up</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14
                -0400] schema-compat-plugin - warning: no entries set up
                under cn=computers, cn=compat,dc=miovision,dc=linux</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14
                -0400] schema-compat-plugin - warning: no entries set up
                under cn=ng, cn=compat,dc=miovision,dc=linux</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14
                -0400] schema-compat-plugin - warning: no entries set up
                under ou=sudoers,dc=miovision,dc=linux</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14
                -0400] - Skipping CoS Definition cn=Password
                Policy,cn=accounts,dc=miovision,dc=linux--no CoS
                Templates found, which should be added before the CoS
                Definition.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14
                -0400] - Skipping CoS Definition cn=Password
                Policy,cn=accounts,dc=miovision,dc=linux--no CoS
                Templates found, which should be added before the CoS
                Definition.</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14
                -0400] - slapd started.  Listening on All Interfaces
                port 389 for LDAP requests</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14
                -0400] - Listening on All Interfaces port 636 for LDAPS
                requests</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14
                -0400] - Listening on
                /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</span></font></div>
          <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:58:56
                -0400] NSMMReplicationPlugin - Beginning total update of
                replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</span></font></div>
          <div style="color:rgb(51,51,51);line-height:17.328125px"><br>
          </div>
        </div>
        <div>Am I encountering this issue because of the
          win-subtree setting?</div>
      </div>
    </blockquote>
    <br></div></div>
    What issue?<div class="im"><br>
    <br></div></div></blockquote><div><br></div><div style>Re-initialize process continues indefinitely displaying new lines "Update in progress", only users who are in CN=users,DC=miovision,DC=corp are shown in IPA web admin (from initial winsync agreement before re-initialize)</div>
<div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div bgcolor="#FFFFFF" text="#000000"><div class="im">

    <blockquote type="cite">
      <div dir="ltr">
        <div>Is it considered bad practice to set a group like
          this?</div>
      </div>
    </blockquote>
    <br></div>
    It should be fine.<div class="im"><br>
    <br>
    <blockquote type="cite">
      <div dir="ltr">
        <div>I'm not sure what else I would do, as this is the
          only group which contains all of my users, and they reside in
          their respective OU's instead of Users CN.</div>
      </div>
    </blockquote>
    <br></div>
    It should be fine.<div class="im"><br>
    <br>
    <blockquote type="cite">
      <div dir="ltr">
        <div><br>
        </div>
        <div>I've since enabled replication logging, but
          addtional information is minimal:</div>
        <div>
          <div>
            <div>[21/May/2013:12:58:56 -0400] NSMMReplicationPlugin -
              Beginning total update of replica
              "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</div>
            <div>[21/May/2013:13:54:14 -0400] NSMMReplicationPlugin -
              Running Dirsync <br>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <br></div>
    So it's hung here?<div class="im"><br>
    <br></div></div></blockquote><div><br></div><div><br></div><div style>Correct, see logs above </div><div style><br></div><div style><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div class="im">
    <blockquote type="cite">
      <div dir="ltr">
        <div>
          <div><br>
          </div>
          <div><font color="#333333"><span style="line-height:17.328125px">#top shows ns-slapd
                maxing out the CPU.</span></font></div>
          <div><font color="#333333">
              <div>
                <div>  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM
                     TIME+  COMMAND                                    
                                                                       
                                </div>
                <div> 5252 dirsrv    20   0 1177m  33m 8464 S 99.8  3.3
                   57:17.08 ns-slapd    <br>
                </div>
              </div>
            </font></div>
        </div>
      </div>
    </blockquote>
    <br>
    </div><font color="#333333">Can you do a pstack of the process?<br>
      <br>
      pstack </font><font color="#333333">5252</font><div><div class="h5">
    <blockquote type="cite">
      <div class="gmail_extra"><br clear="all"></div></blockquote></div></div></div></blockquote><div><br></div><div style>Yes, see output above. </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div class="h5"><blockquote type="cite"><div class="gmail_extra">
        <div>
          <div dir="ltr"><br>
            <br>
            <br>
            Steve Dainard<br>
            Infrastructure Manager
            <div>
              Miovision Technologies Inc.<br><br></div>
          </div>
        </div>
        <br>
        <br>
        <div class="gmail_quote">On Fri, May 17, 2013 at 2:09 PM, Rich
          Megginson <span dir="ltr"><<a href="mailto:rmeggins@redhat.com" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=rmeggins@redhat.com&cc=&bcc=&su=&body=','_blank');return false;">rmeggins@redhat.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
            <div bgcolor="#FFFFFF" text="#000000">
              <div>
                <div>
                  <div>On 05/17/2013 12:03 PM, Steve Dainard wrote:<br>
                  </div>
                  <blockquote type="cite">
                    <div dir="ltr">
                      <div>Thanks for getting me on the right track.</div>
                      <div><br>
                      </div>
                      Yes to the Windows sync agreement.
                      <div><br>
                      </div>
                      <div>I'm not sure if this is related to password
                        sync'ing, but it looks like a sync operation is
                        triggering (and failing) every 4 seconds on one
                        of my users:</div>
                      <div><br>
                      </div>
                      <div>[17/May/2013:13:28:42 -0400]
                        NSMMReplicationPlugin -
                        agmt="cn=meTodc1.miovision.corp" (dc1:389):
                        State: start_backoff -> backoff<br>
                      </div>
                      <div>
                        <div>[17/May/2013:13:28:42 -0400] -
                          acquire_replica, supplier RUV:</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin - supplier:
                          {replicageneration} 50802036000000030000</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin - supplier: {replica 3 <a>ldap://ipa1.miovision.linux:389</a>}
                          50802036000100030000 51966776000100030000
                          51966776</div>
                        <div>[17/May/2013:13:28:42 -0400] -
                          acquire_replica, consumer RUV:</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin - consumer:
                          {replicageneration} 50802036000000030000</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin - consumer: {replica 3 <a>ldap://ipa1.miovision.linux:389</a>}
                          50802036000100030000 515ad91f000000030000
                          00000000</div>
                        <div>[17/May/2013:13:28:42 -0400] -
                          acquire_replica, supplier RUV is newer</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          Cancelling linger on the connection</div>
                        <div>[17/May/2013:13:28:42 -0400] -
                          _csngen_adjust_local_time: gen state before
                          519668c60001:1368811718:0:0</div>
                        <div>[17/May/2013:13:28:42 -0400] -
                          _csngen_adjust_local_time: gen state after
                          519668ca0000:1368811722:0:0</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          State: backoff -> sending_updates</div>
                        <div>[17/May/2013:13:28:42 -0400] -
                          csngen_adjust_time: gen state before
                          519668ca0001:1368811722:0:0</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin - changelog program -
                          _cl5GetDBFile: found DB object f6d910 for
                          database
/var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div>
                        <div>[17/May/2013:13:28:42 -0400] -
                          _cl5PositionCursorForReplay
                          (agmt="cn=meTodc1.miovision.corp" (dc1:389)):
                          Consumer RUV:</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          {replicageneration} 50802036000000030000</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          {replica 3 <a>ldap://ipa1.miovision.linux:389</a>}
                          50802036000100030000 515ad91f000000030000
                          00000000</div>
                        <div>[17/May/2013:13:28:42 -0400] -
                          _cl5PositionCursorForReplay
                          (agmt="cn=meTodc1.miovision.corp" (dc1:389)):
                          Supplier RUV:</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          {replicageneration} 50802036000000030000</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          {replica 3 <a>ldap://ipa1.miovision.linux:389</a>}
                          50802036000100030000 51966776000100030000
                          51966776</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          agmt="cn=meTodc1.miovision.corp" (dc1:389) -
                          clcache_get_buffer: found thread private
                          buffer cache 7f30bc061d00</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          agmt="cn=meTodc1.miovision.corp" (dc1:389) -
                          clcache_get_buffer: _pool is 2e7cc10
                          _pool->pl_busy_lists is 7f30bc050790
                          _pool->pl_busy_lists->bl_buffers is
                          7f30bc061d00</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          agmt="cn=meTodc1.miovision.corp" (dc1:389) -
                          session start: anchorcsn=515ad91f000000030000</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin - changelog program -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          CSN 515ad91f000000030000 found, position set
                          for replay</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          agmt="cn=meTodc1.miovision.corp" (dc1:389) -
                          load=1 rec=1 csn=515ae3f4000000030000</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          windows_replay_update: Looking at modify
                          operation local
                          dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux"
                          (ours,user,not group)</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          map_entry_dn_outbound: looking for AD entry
                          for DS
                          dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux"
                          guid="ba17f9770e0c814cb9eea9df2d4df61a"</div>
                        <div>[17/May/2013:13:28:42 -0400] - Calling
                          windows entry search request plugin</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin - Could not retrieve
                          entry from Windows using search base
                          [<GUID=ba17f9770e0c814cb9eea9df2d4df61a>]
                          scope [0] filter [(objectclass=*)]: error
                          1:Operations error</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          map_entry_dn_outbound: return code -1 from
                          search for AD entry
                          dn="<GUID=ba17f9770e0c814cb9eea9df2d4df61a>"
                          or dn="(null)"</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          map_entry_dn_outbound: entry not found - rc -1</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          windows_replay_update: Processing modify
                          operation local
                          dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux"
                          remote
                          dn="<GUID=ba17f9770e0c814cb9eea9df2d4df61a>"</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          map_entry_dn_outbound: looking for AD entry
                          for DS
                          dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux"
                          guid="ba17f9770e0c814cb9eea9df2d4df61a"</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          map_entry_dn_outbound: looking for AD entry
                          for DS
                          dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux"
                          username="jkeller"</div>
                        <div>[17/May/2013:13:28:42 -0400] - Calling
                          windows entry search request plugin</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin - Could not retrieve
                          entry from Windows using search base
                          [dc=miovision,dc=corp] scope [2] filter
                          [(samAccountName=jkeller)]: error 1:Operations
                          error</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          map_entry_dn_outbound: entry not found - rc -1</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          map_entry_dn_outbound: failed to fetch entry
                          from AD:
                          dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux",
                          err=-1</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          windows_replay_update: update password
                          returned 1</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          Consumer failed to replay change (uniqueid
                          cd3be819-21c711e2-96aaaa0d-17c9983f, CSN
                          515ae3f4000000030000): Operations error. Will
                          retry later.</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          agmt="cn=meTodc1.miovision.corp" (dc1:389) -
                          session end: state=0 load=1 sent=1 skipped=0</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          Beginning linger on the connection</div>
                        <div>[17/May/2013:13:28:42 -0400]
                          NSMMReplicationPlugin -
                          agmt="cn=meTodc1.miovision.corp" (dc1:389):
                          State: sending_updates -> start_backoff</div>
                        <div><br>
                        </div>
                        <div>
                          <div><br>
                          </div>
                          <div><br>
                          </div>
                          <div>Here's the output of an ldapsearch for
                            the user jkeller:</div>
                          <div><br>
                          </div>
                          <div>
                            <div>#/usr/bin/ldapsearch -h
                              dc1.miovision.corp -D <a href="mailto:ldap-auth@miovision.corp" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=ldap-auth@miovision.corp&cc=&bcc=&su=&body=','_blank');return false;">"ldap-auth@miovision.corp"</a>
                              -W -b "dc=miovision,dc=corp"
                              '(samAccountName=jkeller)' cn
                              samAccountName</div>
                            <div><br>
                            </div>
                          </div>
                          <div>
                            <div># Joel Keller, 01Engineering,
                              miovision.corp</div>
                            <div>dn: CN=Joel
                              Keller,OU=01Engineering,DC=miovision,DC=corp</div>
                            <div>cn: Joel Keller</div>
                            <div>sAMAccountName: jkeller</div>
                          </div>
                        </div>
                        <div><br>
                        </div>
                        <div><br>
                        </div>
                        <div><br>
                        </div>
                        <div>When I change my password on the IPA
                          server, it looks like the change is queued:</div>
                        <div><br>
                        </div>
                        <div>
                          <div>[17/May/2013:13:53:48 -0400] -
                            _csngen_adjust_local_time: gen state before
                            51966eab0001:1368813227:0:0</div>
                          <div>[17/May/2013:13:53:48 -0400] -
                            _csngen_adjust_local_time: gen state after
                            51966eac0000:1368813228:0:0</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin -
                            ruv_add_csn_inprogress: successfully
                            inserted csn 51966eac000000030000 into
                            pending list</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - Purged state
                            information from entry
                            uid=sdainard,cn=users,cn=accounts,dc=miovision,dc=linux
                            up to CSN 518d33f90007000300</div>
                          <div>00</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - changelog program -
                            _cl5GetDBFileByReplicaName: found DB object
                            f6d910 for database
                            /var/lib/dirsrv/slapd-MIOVISION-LINU</div>
                          <div>X/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - changelog program -
                            _cl5GetDBFileByReplicaName: found DB object
                            f6d910 for database
                            /var/lib/dirsrv/slapd-MIOVISION-LINU</div>
                          <div>X/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - ruv_update_ruv:
                            successfully committed csn
                            51966eac000000030000</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin -
                            ruv_add_csn_inprogress: successfully
                            inserted csn 51966eac000100030000 into
                            pending list</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - Purged state
                            information from entry
                            uid=sdainard,cn=users,cn=accounts,dc=miovision,dc=linux
                            up to CSN 518d342c0000000300</div>
                          <div>00</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - changelog program -
                            _cl5GetDBFileByReplicaName: found DB object
                            f6d910 for database
/var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - changelog program -
                            _cl5GetDBFileByReplicaName: found DB object
                            f6d910 for database
/var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - ruv_update_ruv:
                            successfully committed csn
                            51966eac000100030000</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin -
                            agmt="cn=meTodc1.miovision.corp" (dc1:389):
                            State: start_backoff -> backoff</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin -
                            ruv_add_csn_inprogress: successfully
                            inserted csn 51966eac000200030000 into
                            pending list</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - Purged state
                            information from entry
                            uid=sdainard,cn=users,cn=accounts,dc=miovision,dc=linux
                            up to CSN 518d342c000100030000</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - changelog program -
                            _cl5GetDBFileByReplicaName: found DB object
                            f6d910 for database
/var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - changelog program -
                            _cl5GetDBFileByReplicaName: found DB object
                            f6d910 for database
/var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin - ruv_update_ruv:
                            successfully committed csn
                            51966eac000200030000</div>
                          <div>[17/May/2013:13:53:48 -0400]
                            NSMMReplicationPlugin -
                            agmt="cn=meTodc1.miovision.corp" (dc1:389):
                            State: backoff -> backoff</div>
                          <div><br>
                          </div>
                        </div>
                        <div><br>
                        </div>
                        <div><br>
                        </div>
                        <div>Perhaps whatever is causing the sync error
                          with user jkeller is holding up the queued
                          transactions?</div>
                      </div>
                    </div>
                  </blockquote>
                  <br>
                </div>
              </div>
              Yes.  It is attempting to replay the password change
              operation.  It first tries to find the entry in AD, but
              that is failing with operations error.<br>
              <br>
              Try doing the ldapsearch with the same bind DN and
              password you specified when you set up the winsync
              agreement.  Or did you use <a href="mailto:ldap-auth@miovision.corp" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=ldap-auth@miovision.corp&cc=&bcc=&su=&body=','_blank');return false;">"ldap-auth@miovision.corp"</a>?<br>

              <br>
              Another difference is that winsync uses LDAPS - so try
              this:<br>
              <br>
              LDAPTLS_CACERTDIR=/etc/dirsrv/slapd-YOUR-DOMAIN ldapsearch
              -H <a>ldaps://dc1.miovision.corp</a>
              -D <a href="mailto:ldap-auth@miovision.corp" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=ldap-auth@miovision.corp&cc=&bcc=&su=&body=','_blank');return false;">"ldap-auth@miovision.corp"</a>
              -W -b "dc=miovision,dc=corp" '(samAccountName=jkeller)' cn
              samAccountName
              <div>
                <div><br>
                  <br>
                  <blockquote type="cite">
                    <div dir="ltr">
                      <div class="gmail_extra"><br clear="all">
                        <div>
                          <div dir="ltr"> <br>
                            <br>
                            <br>
                            Steve Dainard<br>
                            Infrastructure Manager
                            <div>Miovision Technologies Inc.<br>
                              <br>
                            </div>
                          </div>
                        </div>
                        <br>
                        <div class="gmail_quote">On Fri, May 17, 2013 at
                          11:39 AM, Rich Megginson <span dir="ltr"><<a href="mailto:rmeggins@redhat.com" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=rmeggins@redhat.com&cc=&bcc=&su=&body=','_blank');return false;">rmeggins@redhat.com</a>></span>
                          wrote:<br>
                          <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
                            <div bgcolor="#FFFFFF" text="#000000">
                              <div>
                                <div>On 05/17/2013 09:26 AM, Steve
                                  Dainard wrote:<br>
                                </div>
                                <blockquote type="cite">
                                  <div dir="ltr">Hello,
                                    <div><br>
                                    </div>
                                    <div>We're running a single IPA
                                      server (CentOS 6) on our network
                                      as a side project for some testing
                                      before we implement.</div>
                                    <div><br>
                                    </div>
                                    <div>It had been a significant
                                      period of time since I had last
                                      logged into the web interface, so
                                      I had to kinit from a client
                                      machine (of which I had logged
                                      into successfully with my domain
                                      password), at which point I was
                                      requested to change my password.
                                      After the password change I RDP'd
                                      into a Windows machine on our
                                      domain and realized the password
                                      had not been updated on the domain
                                      controller.</div>
                                    <div><br>
                                    </div>
                                    <div>Is the password sync feature
                                      with an external source such as
                                      Active Directory supposed to be
                                      two-way? If so where can I start
                                      troubleshooting this issue?</div>
                                  </div>
                                </blockquote>
                                <br>
                              </div>
                              Are you talking about a windows sync
                              agreement you set up with
                              ipa-replica-manage?<br>
                              If so, yes, the password sync is supposed
                              to be two-way.<br>
                              Try this:<br>
                              turn on the replication log level <a href="http://port389.org/wiki/FAQ#Troubleshooting" target="_blank">http://port389.org/wiki/FAQ#Troubleshooting</a><br>
                              change your IPA password<br>
                              turn off the replication log level <a href="http://port389.org/wiki/FAQ#Troubleshooting" target="_blank">http://port389.org/wiki/FAQ#Troubleshooting</a><br>
                              see if you can use your new password in AD<br>
                              <br>
                              The 389 errors log in
                              /var/log/dirsrv/slapd-YOUR-DOMAIN/errors
                              may contain a clue.<br>
                              <br>
                              <blockquote type="cite">
                                <div>
                                  <div dir="ltr">
                                    <div><br>
                                    </div>
                                    <div>Thanks,<br clear="all">
                                      <div>
                                        <div dir="ltr"><br>
                                          <br>
                                          <br>
                                          Steve Dainard<br>
                                          Infrastructure Manager
                                          <div>Miovision Technologies
                                            Inc.<br>
                                          </div>
                                        </div>
                                      </div>
                                    </div>
                                  </div>
                                  <br>
                                  <fieldset></fieldset>
                                  <br>
                                </div>
                                <pre>_______________________________________________
Freeipa-users mailing list
<a href="mailto:Freeipa-users@redhat.com" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=Freeipa-users@redhat.com&cc=&bcc=&su=&body=','_blank');return false;">Freeipa-users@redhat.com</a>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
                              </blockquote>
                              <br>
                            </div>
                          </blockquote>
                        </div>
                        <br>
                      </div>
                    </div>
                  </blockquote>
                  <br>
                </div>
              </div>
            </div>
          </blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <br>
  </div></div>

</blockquote></div></div><div class="gmail_extra"><br></div></div>