<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 05/21/2013 03:48 PM, Steve Dainard wrote:<br> </div> <blockquote cite="mid:CAHnsdUsWep2mPRdh7wU3-uTtZfLQu-3Snr76Ey6RCTA6g0O9MA@mail.gmail.com" type="cite"> <div dir="ltr"> <div style="">Thanks Rich, appreciate the help.</div> <div style=""><br> </div> <div style="">I've answered inline some of your questions but I think I can answer most of your questions by showing the entire process I followed (passwords have been replaced by '...'):</div> <div><br> </div> <div> <div><br> </div> <div> <div>[root@ipa1 ~]# ipa-server-install --setup-dns -p '...' -a '...' -r MIOVISION.LINUX -n miovision.linux --hostname ipa1.miovision.linux</div> <div><br> </div> <div>The log file for this installation can be found in /var/log/ipaserver-install.log</div> <div>==============================================================================</div> <div>This program will set up the IPA Server.</div> <div><br> </div> <div>This includes:</div> <div> * Configure a stand-alone CA (dogtag) for certificate management</div> <div> * Configure the Network Time Daemon (ntpd)</div> <div> * Create and configure an instance of Directory Server</div> <div> * Create and configure a Kerberos Key Distribution Center (KDC)</div> <div> * Configure Apache (httpd)</div> <div> * Configure DNS (bind)</div> <div><br> </div> <div>To accept the default shown in brackets, press the Enter key.</div> <div><br> </div> <div>Existing BIND configuration detected, overwrite? [no]: yes</div> <div>Enter the fully qualified domain name of the computer</div> <div>on which you're setting up server software. Using the form</div> <div><hostname>.<domainname></div> <div>Example: <a moz-do-not-send="true" href="http://master.example.com">master.example.com</a>.</div> <div><br> </div> <div><br> </div> <div>Server host name [ipa1.miovision.linux]: </div> <div><br> </div> <div>Warning: skipping DNS resolution of host ipa1.miovision.linux</div> <div>Unable to resolve IP address for host name</div> <div>Please provide the IP address to be used for this host name: 10.0.6.3</div> <div>Adding [10.0.6.3 ipa1.miovision.linux] to your /etc/hosts file</div> <div>Do you want to configure DNS forwarders? [yes]: </div> <div>Enter the IP address of DNS forwarder to use, or press Enter to finish.</div> <div>Enter IP address for a DNS forwarder: 10.0.0.2</div> <div>DNS forwarder 10.0.0.2 added</div> <div>Enter IP address for a DNS forwarder: 10.0.0.5</div> <div>DNS forwarder 10.0.0.5 added</div> <div>Enter IP address for a DNS forwarder: </div> <div>Do you want to configure the reverse zone? [yes]: </div> <div>Please specify the reverse zone name [6.0.10.in-addr.arpa.]: </div> <div>Using reverse zone 6.0.10.in-addr.arpa.</div> <div><br> </div> <div>The IPA Master Server will be configured with:</div> <div>Hostname: ipa1.miovision.linux</div> <div>IP address: 10.0.6.3</div> <div>Domain name: miovision.linux</div> <div>Realm name: MIOVISION.LINUX</div> <div><br> </div> <div>BIND DNS server will be configured to serve IPA domain with:</div> <div>Forwarders: 10.0.0.2, 10.0.0.5</div> <div>Reverse zone: 6.0.10.in-addr.arpa.</div> <div><br> </div> <div>Continue to configure the system with these values? [no]: yes</div> <div><br> </div> <div>The following operations may take some minutes to complete.</div> <div> Please wait until the prompt is returned.</div> <div><br> </div> <div>Configuring NTP daemon (ntpd)</div> <div> [1/4]: stopping ntpd</div> <div> [2/4]: writing configuration</div> <div> [3/4]: configuring ntpd to start on boot</div> <div> [4/4]: starting ntpd</div> <div>Done configuring NTP daemon (ntpd).</div> <div>Configuring directory server for the CA (pkids): Estimated time 30 seconds</div> <div> [1/3]: creating directory server user</div> <div> [2/3]: creating directory server instance</div> <div> [3/3]: restarting directory server</div> <div>Done configuring directory server for the CA (pkids).</div> <div>Configuring certificate server (pki-cad): Estimated time 3 minutes 30 seconds</div> <div> [1/21]: creating certificate server user</div> <div> [2/21]: creating pki-ca instance</div> <div> [3/21]: configuring certificate server instance</div> <div> [4/21]: disabling nonces</div> <div> [5/21]: creating CA agent PKCS#12 file in /root</div> <div> [6/21]: creating RA agent certificate database</div> <div> [7/21]: importing CA chain to RA certificate database</div> <div> [8/21]: fixing RA database permissions</div> <div> [9/21]: setting up signing cert profile</div> <div> [10/21]: set up CRL publishing</div> <div> [11/21]: set certificate subject base</div> <div> [12/21]: enabling Subject Key Identifier</div> <div> [13/21]: setting audit signing renewal to 2 years</div> <div> [14/21]: configuring certificate server to start on boot</div> <div> [15/21]: restarting certificate server</div> <div> [16/21]: requesting RA certificate from CA</div> <div> [17/21]: issuing RA agent certificate</div> <div> [18/21]: adding RA agent as a trusted user</div> <div> [19/21]: configure certificate renewals</div> <div> [20/21]: configure Server-Cert certificate renewal</div> <div> [21/21]: Configure HTTP to proxy connections</div> <div>Done configuring certificate server (pki-cad).</div> <div>Configuring directory server (dirsrv): Estimated time 1 minute</div> <div> [1/38]: creating directory server user</div> <div> [2/38]: creating directory server instance</div> <div> [3/38]: adding default schema</div> <div> [4/38]: enabling memberof plugin</div> <div> [5/38]: enabling winsync plugin</div> <div> [6/38]: configuring replication version plugin</div> <div> [7/38]: enabling IPA enrollment plugin</div> <div> [8/38]: enabling ldapi</div> <div> [9/38]: disabling betxn plugins</div> <div> [10/38]: configuring uniqueness plugin</div> <div> [11/38]: configuring uuid plugin</div> <div> [12/38]: configuring modrdn plugin</div> <div> [13/38]: enabling entryUSN plugin</div> <div> [14/38]: configuring lockout plugin</div> <div> [15/38]: creating indices</div> <div> [16/38]: enabling referential integrity plugin</div> <div> [17/38]: configuring ssl for ds instance</div> <div> [18/38]: configuring certmap.conf</div> <div> [19/38]: configure autobind for root</div> <div> [20/38]: configure new location for managed entries</div> <div> [21/38]: restarting directory server</div> <div> [22/38]: adding default layout</div> <div> [23/38]: adding delegation layout</div> <div> [24/38]: adding replication acis</div> <div> [25/38]: creating container for managed entries</div> <div> [26/38]: configuring user private groups</div> <div> [27/38]: configuring netgroups from hostgroups</div> <div> [28/38]: creating default Sudo bind user</div> <div> [29/38]: creating default Auto Member layout</div> <div> [30/38]: adding range check plugin</div> <div> [31/38]: creating default HBAC rule allow_all</div> <div> [32/38]: Upload CA cert to the directory</div> <div> [33/38]: initializing group membership</div> <div> [34/38]: adding master entry</div> <div> [35/38]: configuring Posix uid/gid generation</div> <div> [36/38]: enabling compatibility plugin</div> <div> [37/38]: tuning directory server</div> <div> [38/38]: configuring directory to start on boot</div> <div>Done configuring directory server (dirsrv).</div> <div>Configuring Kerberos KDC (krb5kdc): Estimated time 30 seconds</div> <div> [1/10]: adding sasl mappings to the directory</div> <div> [2/10]: adding kerberos container to the directory</div> <div> [3/10]: configuring KDC</div> <div> [4/10]: initialize kerberos container</div> <div> [5/10]: adding default ACIs</div> <div> [6/10]: creating a keytab for the directory</div> <div> [7/10]: creating a keytab for the machine</div> <div> [8/10]: adding the password extension to the directory</div> <div> [9/10]: starting the KDC</div> <div> [10/10]: configuring KDC to start on boot</div> <div>Done configuring Kerberos KDC (krb5kdc).</div> <div>Configuring kadmin</div> <div> [1/2]: starting kadmin </div> <div> [2/2]: configuring kadmin to start on boot</div> <div>Done configuring kadmin.</div> <div>Configuring ipa_memcached</div> <div> [1/2]: starting ipa_memcached </div> <div> [2/2]: configuring ipa_memcached to start on boot</div> <div>Done configuring ipa_memcached.</div> <div>Configuring the web interface (httpd): Estimated time 1 minute</div> <div> [1/13]: setting mod_nss port to 443</div> <div> [2/13]: setting mod_nss password file</div> <div> [3/13]: enabling mod_nss renegotiate</div> <div> [4/13]: adding URL rewriting rules</div> <div> [5/13]: configuring httpd</div> <div> [6/13]: setting up ssl</div> <div> [7/13]: setting up browser autoconfig</div> <div> [8/13]: publish CA cert</div> <div> [9/13]: creating a keytab for httpd</div> <div> [10/13]: clean up any existing httpd ccache</div> <div> [11/13]: configuring SELinux for httpd</div> <div> [12/13]: restarting httpd</div> <div> [13/13]: configuring httpd to start on boot</div> <div>Done configuring the web interface (httpd).</div> <div>Applying LDAP updates</div> <div>Restarting the directory server</div> <div>Restarting the KDC</div> <div>Configuring DNS (named)</div> <div> [1/9]: adding DNS container</div> <div> [2/9]: setting up our zone</div> <div> [3/9]: setting up reverse zone</div> <div> [4/9]: setting up our own record</div> <div> [5/9]: setting up kerberos principal</div> <div> [6/9]: setting up named.conf</div> <div> [7/9]: restarting named</div> <div> [8/9]: configuring named to start on boot</div> <div> [9/9]: changing resolv.conf to point to ourselves</div> <div>Done configuring DNS (named).</div> <div><br> </div> <div>Global DNS configuration in LDAP server is empty</div> <div>You can use 'dnsconfig-mod' command to set global DNS options that</div> <div>would override settings in local named.conf files</div> <div><br> </div> <div>Restarting the web server</div> <div>==============================================================================</div> <div>Setup complete</div> <div><br> </div> <div>...</div> <div><br> </div> <div><br> </div> <div>[root@ipa1 openldap]# ipa-replica-manage connect --winsync --binddn cn=administrator,cn=users,dc=miovision,dc=corp --bindpw '...' --passsync '...' --cacert /etc/openldap/cacerts/miovision.ca.cer dc1.miovision.corp -v</div> <div>Directory Manager password: <br> </div> </div> </div> </div> </blockquote> <br> Why not just specify --win-subtree="CN=Shared Login,CN=users,DC=miovision,DC=corp" here?<br> <br> <blockquote cite="mid:CAHnsdUsWep2mPRdh7wU3-uTtZfLQu-3Snr76Ey6RCTA6g0O9MA@mail.gmail.com" type="cite"> <div dir="ltr"> <div> <div> <div><br> </div> <div>Added CA certificate /etc/openldap/cacerts/miovision.ca.cer to certificate database for ipa1.miovision.linux</div> <div>ipa: INFO: AD Suffix is: DC=miovision,DC=corp</div> <div>The user for the Windows PassSync service is uid=passsync,cn=sysaccounts,cn=etc,dc=miovision,dc=linux</div> <div>ipa: INFO: Added new sync agreement, waiting for it to become ready . . .</div> <div>ipa: INFO: Replication Update in progress: FALSE: status: 0 Replica acquired successfully: Incremental update started: start: 0: end: 0</div> <div>ipa: INFO: Agreement is ready, starting replication . . .</div> <div>Starting replication, please wait until this has completed.</div> <div>Update in progress</div> <div>Update in progress</div> <div>Update succeeded</div> <div>Connected 'ipa1.miovision.linux' to 'dc1.miovision.corp'</div> <div><br> </div> <div>[root@ipa1 openldap]# ldapsearch -xLLL -D "cn=directory manager" -W -p 389 -h ipa1.miovision.corp -b cn=config objectclass=nsdswindowsreplicationagreement dn nsds7WindowsReplicaSubtree</div> <div>Enter LDAP Password: </div> <div>ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)</div> </div> </div> </div> </blockquote> <br> This is very strange. Do you have any core files in /var/log/dirsrv/slapd-*? Do you have any abrt crash reports? Do you see "Disorderly Shutdown" in /var/log/dirsrv/slapd-*/errors.*?<br> <br> <blockquote cite="mid:CAHnsdUsWep2mPRdh7wU3-uTtZfLQu-3Snr76Ey6RCTA6g0O9MA@mail.gmail.com" type="cite"> <div dir="ltr"> <div> <div> <div><br> </div> <div><br> </div> <div>[root@ipa1 openldap]# /etc/init.d/dirsrv status</div> <div>dirsrv MIOVISION-LINUX dead but pid file exists</div> <div>dirsrv PKI-IPA dead but pid file exists</div> <div>[root@ipa1 openldap]# /etc/init.d/dirsrv start</div> <div>Starting dirsrv: </div> <div> MIOVISION-LINUX.../etc/init.d/dirsrv: line 181: kill: (4785) - No such process</div> <div> not running, but pid file exists</div> <div> MIOVISION-LINUX... attempting to start anyway [ OK ]</div> <div> PKI-IPA.../etc/init.d/dirsrv: line 181: kill: (4853) - No such process</div> <div> not running, but pid file exists</div> <div> PKI-IPA... attempting to start anyway [ OK ]</div> <div>[root@ipa1 openldap]# /etc/init.d/dirsrv status</div> <div>dirsrv MIOVISION-LINUX (pid 5252) is running...</div> <div>dirsrv PKI-IPA (pid 5329) is running...</div> <div><br> </div> <div><br> </div> <div>[root@ipa1 openldap]# ldapsearch -xLLL -D "cn=directory manager" -W -p 389 -h ipa1.miovision.corp -b cn=config objectclass=nsdswindowsreplicationagreement dn nsds7WindowsReplicaSubtree</div> <div>Enter LDAP Password: </div> <div>dn: cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=map</div> <div> ping tree,cn=config</div> <div>nsds7WindowsReplicaSubtree: cn=Users,DC=miovision,DC=corp</div> <div> <br> </div> <div>[root@ipa1 openldap]# ldapmodify -x -D "cn=directory manager" -W -p 389 -h ipa1.miovision.linux <<EOF </div> <div>> dn: cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=mapping tree,cn=config</div> <div>> changetype: modify</div> <div>> replace: nsds7WindowsReplicaSubtree</div> <div>> nsds7WindowsReplicaSubtree: CN=Shared Login,CN=users,DC=miovision,DC=corp</div> <div>> EOF</div> <div>Enter LDAP Password: </div> <div>modifying entry "cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=mapping tree,cn=config"</div> <div><br> </div> <div>[root@ipa1 openldap]# ldapsearch -xLLL -D "cn=directory manager" -W -p 389 -h ipa1.miovision.corp -b cn=config objectclass=nsdswindowsreplicationagreement dn nsds7WindowsReplicaSubtree</div> <div>Enter LDAP Password: </div> <div>dn: cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=map</div> <div> ping tree,cn=config</div> <div>nsds7WindowsReplicaSubtree: CN=Shared Login,CD=users,DC=miovision,DC=corp</div> <div><br> </div> <div><br> </div> <div>[root@ipa1 openldap]# screen ipa-replica-manage re-initialize --from dc1.miovision.corp</div> <div>Update in progress</div> <div>Update in progress</div> <div>Update in progress</div> <div>Update in progress</div> <div>Update in progress</div> <div>.....</div> </div> </div> </div> </blockquote> <br> Ok. This appears to be hanging somewhere. Will need to get more information.<br> <br> First, install the debuginfo packages<br> <br> debuginfo-install 389-ds-base ipa-server<br> <br> install gdb<br> <br> yum install gdb<br> <br> Then run gdb like this:<br> <br> <pre>gdb -ex 'set confirm off' -ex 'set pagination off' -ex 'thread apply all bt full' -ex 'quit' /usr/sbin/ns-slapd `pidof ns-slapd` > stacktrace.`date +%s`.txt 2>&1</pre> <br> <br> <blockquote cite="mid:CAHnsdUsWep2mPRdh7wU3-uTtZfLQu-3Snr76Ey6RCTA6g0O9MA@mail.gmail.com" type="cite"> <div dir="ltr"> <div> <div> <div><br> </div> </div> <div>*****************************************************************</div> <div><br> </div> <div> <div>[root@ipa1 slapd-MIOVISION-LINUX]# pstack 5252</div> <div> <br> </div> <div>Thread 43 (Thread 0x7fd38dcc7700 (LWP 5255)):</div> <div>#0 0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div> <div>#1 0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div> <div> #2 0x00007fd3921d8d27 in ?? () from /usr/lib64/dirsrv/plugins/libback-ldbm.so</div> <div>#3 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#4 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#5 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 42 (Thread 0x7fd38d2c6700 (LWP 5256)):</div> <div>#0 0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div> <div>#1 0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div> <div>#2 0x00007fd3921d9177 in ?? () from /usr/lib64/dirsrv/plugins/libback-ldbm.so</div> <div>#3 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#4 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#5 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 41 (Thread 0x7fd38c8c5700 (LWP 5257)):</div> <div>#0 0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div> <div>#1 0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div> <div>#2 0x00007fd3921d8f87 in ?? () from /usr/lib64/dirsrv/plugins/libback-ldbm.so</div> <div>#3 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#4 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#5 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 40 (Thread 0x7fd38bec4700 (LWP 5258)):</div> <div>#0 0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div> <div>#1 0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div> <div>#2 0x00007fd3921d9617 in ?? () from /usr/lib64/dirsrv/plugins/libback-ldbm.so</div> <div>#3 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#4 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#5 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 39 (Thread 0x7fd38b4c3700 (LWP 5259)):</div> <div>#0 0x00007fd39a9bc43c in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_wait@@GLIBC_2.3.2">pthread_cond_wait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00fe7e in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39cbf94eb in slapi_wait_condvar () from /usr/lib64/dirsrv/libslapd.so.0</div> <div>#3 0x00007fd393ca0f2e in ?? () from /usr/lib64/dirsrv/plugins/libcos-plugin.so</div> <div>#4 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#5 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#6 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 38 (Thread 0x7fd39cfbf700 (LWP 5260)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x00007fd391f47c57 in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div> <div>#4 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#5 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#6 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 37 (Thread 0x7fd38aac2700 (LWP 5261)):</div> <div>#0 0x00007fd39cb99e5c in slapi_sdn_done () from /usr/lib64/dirsrv/libslapd.so.0</div> <div>#1 0x00007fd391f841b2 in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div> <div>#2 0x00007fd391f843ac in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div> <div>#3 0x00007fd391f88395 in windows_dirsync_inc_run () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div> <div> #4 0x00007fd391f8d63d in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div> <div>#5 0x00007fd391f61c2a in ?? () from /usr/lib64/dirsrv/plugins/libreplication-plugin.so</div> <div>#6 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#7 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#8 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 36 (Thread 0x7fd38a0c1700 (LWP 5262)):</div> <div>#0 0x00007fd39a9bc43c in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_wait@@GLIBC_2.3.2">pthread_cond_wait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00fe7e in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39cbf94eb in slapi_wait_condvar () from /usr/lib64/dirsrv/libslapd.so.0</div> <div>#3 0x00007fd3908ad1df in ?? () from /usr/lib64/dirsrv/plugins/libroles-plugin.so</div> <div>#4 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#5 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#6 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 35 (Thread 0x7fd3896c0700 (LWP 5263)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x000000000041b2b3 in ?? ()</div> <div>#4 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#5 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#6 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 34 (Thread 0x7fd388cbf700 (LWP 5264)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x00007fd39cbaab87 in ?? () from /usr/lib64/dirsrv/libslapd.so.0</div> <div>#4 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#5 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#6 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 33 (Thread 0x7fd37bd8e700 (LWP 5265)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 32 (Thread 0x7fd37b38d700 (LWP 5266)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 31 (Thread 0x7fd37a98c700 (LWP 5267)):</div> <div>#0 0x00007fd39a6fd253 in poll () from /lib64/libc.so.6</div> <div>#1 0x00007fd39b01189f in ?? () from /lib64/libnspr4.so</div> <div>#2 0x0000000000412cf1 in ?? ()</div> <div>#3 0x00000000004137c0 in ?? ()</div> <div>#4 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#5 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#6 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 30 (Thread 0x7fd379f8b700 (LWP 5268)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 29 (Thread 0x7fd37958a700 (LWP 5269)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 28 (Thread 0x7fd378b89700 (LWP 5270)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 27 (Thread 0x7fd373fff700 (LWP 5271)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 26 (Thread 0x7fd3735fe700 (LWP 5272)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 25 (Thread 0x7fd372bfd700 (LWP 5273)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 24 (Thread 0x7fd3721fc700 (LWP 5274)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 23 (Thread 0x7fd3717fb700 (LWP 5275)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 22 (Thread 0x7fd370dfa700 (LWP 5276)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 21 (Thread 0x7fd3703f9700 (LWP 5277)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 20 (Thread 0x7fd36f9f8700 (LWP 5278)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 19 (Thread 0x7fd36eff7700 (LWP 5279)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 18 (Thread 0x7fd36e5f6700 (LWP 5280)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 17 (Thread 0x7fd36dbf5700 (LWP 5281)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 16 (Thread 0x7fd36d1f4700 (LWP 5282)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 15 (Thread 0x7fd36c7f3700 (LWP 5283)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 14 (Thread 0x7fd36bdf2700 (LWP 5284)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 13 (Thread 0x7fd36b3f1700 (LWP 5285)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 12 (Thread 0x7fd36a9f0700 (LWP 5286)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 11 (Thread 0x7fd369fef700 (LWP 5287)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 10 (Thread 0x7fd3695ee700 (LWP 5288)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 9 (Thread 0x7fd368bed700 (LWP 5289)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 8 (Thread 0x7fd3681ec700 (LWP 5290)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 7 (Thread 0x7fd3677eb700 (LWP 5291)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 6 (Thread 0x7fd366dea700 (LWP 5292)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 5 (Thread 0x7fd3663e9700 (LWP 5293)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 4 (Thread 0x7fd3659e8700 (LWP 5294)):</div> <div>#0 0x00007fd39a9bc7bb in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2">pthread_cond_timedwait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00f1d9 in ?? () from /lib64/libnspr4.so</div> <div>#2 0x00007fd39b00fddc in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#3 0x0000000000413316 in ?? ()</div> <div>#4 0x0000000000413dae in ?? ()</div> <div>#5 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#6 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#7 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 3 (Thread 0x7fd364fe7700 (LWP 5295)):</div> <div>#0 0x00007fd39a6ff4f3 in select () from /lib64/libc.so.6</div> <div>#1 0x00007fd39cc05679 in DS_Sleep () from /usr/lib64/dirsrv/libslapd.so.0</div> <div>#2 0x0000000000416b05 in ?? ()</div> <div>#3 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#4 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#5 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 2 (Thread 0x7fd357fff700 (LWP 5296)):</div> <div>#0 0x00007fd39a9bc43c in <a class="moz-txt-link-abbreviated" href="mailto:pthread_cond_wait@@GLIBC_2.3.2">pthread_cond_wait@@GLIBC_2.3.2</a> () from /lib64/libpthread.so.0</div> <div>#1 0x00007fd39b00fe7e in PR_WaitCondVar () from /lib64/libnspr4.so</div> <div>#2 0x0000000000421cb5 in ?? ()</div> <div>#3 0x00007fd39b015a73 in ?? () from /lib64/libnspr4.so</div> <div>#4 0x00007fd39a9b8851 in start_thread () from /lib64/libpthread.so.0</div> <div>#5 0x00007fd39a70690d in clone () from /lib64/libc.so.6</div> <div>Thread 1 (Thread 0x7fd39d05d7c0 (LWP 5252)):</div> <div>#0 0x00007fd39a6fd253 in poll () from /lib64/libc.so.6</div> <div>#1 0x00007fd39b01189f in ?? () from /lib64/libnspr4.so</div> <div>#2 0x0000000000417ea7 in ?? ()</div> <div>#3 0x000000000041f16f in ?? ()</div> <div>#4 0x00007fd39a63ccdd in __libc_start_main () from /lib64/libc.so.6</div> <div>#5 0x000000000040d159 in ?? ()</div> <div>#6 0x00007fff63e04c98 in ?? ()</div> <div>#7 0x000000000000001c in ?? ()</div> <div>#8 0x0000000000000007 in ?? ()</div> <div>#9 0x00007fff63e06629 in ?? ()</div> <div>#10 0x00007fff63e0663c in ?? ()</div> <div>#11 0x00007fff63e0663f in ?? ()</div> <div>#12 0x00007fff63e06661 in ?? ()</div> <div>#13 0x00007fff63e06664 in ?? ()</div> <div>#14 0x00007fff63e0668e in ?? ()</div> <div>#15 0x00007fff63e06691 in ?? ()</div> <div>#16 0x0000000000000000 in ?? ()</div> </div> <div><br> </div> </div> <div class="gmail_extra"><br clear="all"> <div> <div dir="ltr"><br> <br> <br> Steve Dainard<br> Infrastructure Manager <div>Miovision Technologies Inc.<br> <br> </div> </div> </div> <br> <br> <div class="gmail_quote">On Tue, May 21, 2013 at 3:22 PM, Rich Megginson <span dir="ltr"><<a moz-do-not-send="true" href="mailto:rmeggins@redhat.com" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=rmeggins@redhat.com&cc=&bcc=&su=&body=','_blank');return false;">rmeggins@redhat.com</a>></span> wrote:<br> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div class="im"> <div>On 05/21/2013 11:58 AM, Steve Dainard wrote:<br> </div> <blockquote type="cite"> <div dir="ltr">So over the weekend, with some serious tinkering I managed to brick that install beyond recovery. <div><br> </div> <div>I've reinstalled, setup freeipa as a standalone CA with dns, and did the initial winsync agreement.</div> <div><br> </div> <div>After the initial agreement was synced I modified the <span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">nsds7WindowsReplicaSubtree entry</span></div> </div> </blockquote> <br> </div> How? ldapmodify?</div> </blockquote> <div> </div> <div><br> </div> <div style="">Yes, see above process for syntax used.</div> <div style=""><br> </div> <div style=""> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div class="im"><br> <br> <blockquote type="cite"> <div dir="ltr"> <div><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">to reflect the AD group I want users sync'd from: CN=Shared Login, CN=Users,DC=miovision,DC=corp.</span></div> </div> </blockquote> <br> </div> Why didn't you just specify "CN=Shared Login, CN=Users,DC=miovision,DC=corp" initially with ipa-replica-manage --win-subtree? <div class="im"><br> <br> <blockquote type="cite"> <div dir="ltr"> <div><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">Note when attempting to do an initial ldapsearch I got a 'can't connect to LDAP server' message,</span></div> </div> </blockquote> <br> </div> Can you provide the exact ldapsearch command line you tried?</div> </blockquote> <div><br> </div> <div><br> </div> <div>Yes, see above process for syntax used.</div> <div><br> </div> <div><br> </div> <div> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div class="im"><br> <br> <blockquote type="cite"> <div dir="ltr"> <div><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">and had to manually start dirsrv... this is probably already a bad sign.</span></div> </div> </blockquote> <br> </div> Was dirsrv running after you modified the nsds7WindowsReplicaSubtree entry?<br> Did dirsrv crash? Do see any "Detected Disorderly Shutdown" messages in your errors logs? <div class="im"><br> <br> </div> </div> </blockquote> <div><br> </div> <div style="">Dirsrv seems to have stopped right after winsync agreement was formed. In logs I don't see anything resembling a crash, but I do see shutdown notifications. Full log:</div> <div style=""><br> </div> <div style=""> <div>[21/May/2013:12:19:12 -0400] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database</div> <div>[21/May/2013:12:19:12 -0400] - check_and_set_import_cache: pagesize: 4096, pages: 255146, procpages: 51280</div> <div>[21/May/2013:12:19:12 -0400] - WARNING: After allocating import cache 408232KB, the available memory is 612352KB, which is less than the soft limit 1048576KB. You may want to decrease the import cache size and rerun import.</div> <div>[21/May/2013:12:19:12 -0400] - Import allocates 408232KB import cache.</div> <div>[21/May/2013:12:19:12 -0400] - import userRoot: Beginning import job...</div> <div>[21/May/2013:12:19:12 -0400] - import userRoot: Index buffering enabled with bucket size 100</div> <div>[21/May/2013:12:19:12 -0400] - import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"</div> <div>[21/May/2013:12:19:12 -0400] - import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)</div> <div>[21/May/2013:12:19:13 -0400] - import userRoot: Workers finished; cleaning up...</div> <div>[21/May/2013:12:19:13 -0400] - import userRoot: Workers cleaned up.</div> <div>[21/May/2013:12:19:13 -0400] - import userRoot: Cleaning up producer thread...</div> <div>[21/May/2013:12:19:13 -0400] - import userRoot: Indexing complete. Post-processing...</div> <div>[21/May/2013:12:19:13 -0400] - import userRoot: Generating numSubordinates complete.</div> <div>[21/May/2013:12:19:13 -0400] - Nothing to do to build ancestorid index</div> <div>[21/May/2013:12:19:13 -0400] - import userRoot: Flushing caches...</div> <div>[21/May/2013:12:19:13 -0400] - import userRoot: Closing files...</div> <div>[21/May/2013:12:19:13 -0400] - All database threads now stopped</div> <div>[21/May/2013:12:19:13 -0400] - import userRoot: Import complete. Processed 1 entries in 1 seconds. (1.00 entries/sec)</div> <div>[21/May/2013:12:19:15 -0400] - 389-Directory/<a moz-do-not-send="true" href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div> <div>[21/May/2013:12:19:15 -0400] - Db home directory is not set. Possibly nsslapd-directory (optinally nsslapd-db-home-directory) is missing in the config file.</div> <div>[21/May/2013:12:19:15 -0400] - I'm resizing my cache now...cache was 418029568 and is now 8000000</div> <div>[21/May/2013:12:19:16 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</div> <div>[21/May/2013:12:19:16 -0400] - slapd shutting down - signaling operation threads</div> <div>[21/May/2013:12:19:16 -0400] - slapd shutting down - closing down internal subsystems and plugins</div> <div>[21/May/2013:12:19:16 -0400] - Waiting for 4 database threads to stop</div> <div>[21/May/2013:12:19:17 -0400] - All database threads now stopped</div> <div>[21/May/2013:12:19:17 -0400] - slapd stopped.</div> <div>[21/May/2013:12:19:19 -0400] - 389-Directory/<a moz-do-not-send="true" href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div> <div>[21/May/2013:12:19:19 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</div> <div>[21/May/2013:12:19:20 -0400] - The change of nsslapd-ldapilisten will not take effect until the server is restarted</div> <div>[21/May/2013:12:19:40 -0400] - Warning: Adding configuration attribute "nsslapd-security"</div> <div>[21/May/2013:12:19:40 -0400] - slapd shutting down - signaling operation threads</div> <div>[21/May/2013:12:19:40 -0400] - slapd shutting down - closing down internal subsystems and plugins</div> <div>[21/May/2013:12:19:40 -0400] - Waiting for 4 database threads to stop</div> <div>[21/May/2013:12:19:40 -0400] - All database threads now stopped</div> <div>[21/May/2013:12:19:40 -0400] - slapd stopped.</div> <div>[21/May/2013:12:19:41 -0400] - 389-Directory/<a moz-do-not-send="true" href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div> <div>[21/May/2013:12:19:41 -0400] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...</div> <div>[21/May/2013:12:19:41 -0400] attrcrypt - Key for cipher AES successfully generated and stored</div> <div>[21/May/2013:12:19:41 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...</div> <div>[21/May/2013:12:19:41 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored</div> <div>[21/May/2013:12:19:41 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</div> <div>[21/May/2013:12:19:41 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div> <div>[21/May/2013:12:19:41 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div> <div>[21/May/2013:12:19:42 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div> <div>[21/May/2013:12:19:51 -0400] - slapd shutting down - signaling operation threads</div> <div>[21/May/2013:12:19:51 -0400] - slapd shutting down - closing down internal subsystems and plugins</div> <div>[21/May/2013:12:19:51 -0400] - Waiting for 4 database threads to stop</div> <div>[21/May/2013:12:19:51 -0400] - All database threads now stopped</div> <div>[21/May/2013:12:19:51 -0400] - slapd stopped.</div> <div>[21/May/2013:12:19:53 -0400] - 389-Directory/<a moz-do-not-send="true" href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div> <div>[21/May/2013:12:19:53 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</div> <div>[21/May/2013:12:19:53 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div> <div>[21/May/2013:12:19:53 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div> <div>[21/May/2013:12:19:53 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div> <div>[21/May/2013:12:19:53 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div> <div>[21/May/2013:12:19:53 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</div> <div>[21/May/2013:12:19:53 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div> <div>[21/May/2013:12:19:53 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div> <div>[21/May/2013:12:19:53 -0400] - The change of nsslapd-maxdescriptors will not take effect until the server is restarted</div> <div>[21/May/2013:12:23:37 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div> <div>[21/May/2013:12:23:37 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div> <div>[21/May/2013:12:23:43 -0400] - userRoot: Indexing attribute: memberuid</div> <div>[21/May/2013:12:23:43 -0400] - userRoot: Finished indexing.</div> <div>[21/May/2013:12:23:49 -0400] - userRoot: Indexing attribute: ntUserDomainId</div> <div>[21/May/2013:12:23:49 -0400] - userRoot: Finished indexing.</div> <div>[21/May/2013:12:23:55 -0400] - userRoot: Indexing attribute: ntUniqueId</div> <div>[21/May/2013:12:23:55 -0400] - userRoot: Finished indexing.</div> <div>[21/May/2013:12:23:57 -0400] - slapd shutting down - signaling operation threads</div> <div>[21/May/2013:12:23:57 -0400] - slapd shutting down - closing down internal subsystems and plugins</div> <div>[21/May/2013:12:23:57 -0400] - Waiting for 4 database threads to stop</div> <div>[21/May/2013:12:23:57 -0400] - All database threads now stopped</div> <div>[21/May/2013:12:23:57 -0400] - slapd stopped.</div> <div>[21/May/2013:12:24:01 -0400] - 389-Directory/<a moz-do-not-send="true" href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div> <div>[21/May/2013:12:24:01 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</div> <div>[21/May/2013:12:24:01 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div> <div>[21/May/2013:12:24:01 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div> <div>[21/May/2013:12:24:01 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div> <div>[21/May/2013:12:24:01 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div> <div>[21/May/2013:12:24:01 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</div> <div>[21/May/2013:12:24:01 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div> <div>[21/May/2013:12:24:01 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div> <div>[21/May/2013:12:50:13 -0400] - slapd shutting down - signaling operation threads</div> <div>[21/May/2013:12:50:13 -0400] - slapd shutting down - closing down internal subsystems and plugins</div> <div>[21/May/2013:12:50:13 -0400] - Waiting for 4 database threads to stop</div> <div>[21/May/2013:12:50:13 -0400] - All database threads now stopped</div> <div>[21/May/2013:12:50:13 -0400] - slapd stopped.</div> <div>[21/May/2013:12:50:16 -0400] - 389-Directory/<a moz-do-not-send="true" href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div> <div>[21/May/2013:12:50:16 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</div> <div>[21/May/2013:12:50:16 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div> <div>[21/May/2013:12:50:16 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div> <div>[21/May/2013:12:50:16 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div> <div>[21/May/2013:12:50:16 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div> <div>[21/May/2013:12:50:16 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</div> <div>[21/May/2013:12:50:16 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div> <div>[21/May/2013:12:50:16 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div> <div>[21/May/2013:12:50:18 -0400] - Entry "cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=mapping tree,cn=config" -- attribute "nsDS5ReplicatedAttributeListTotal" not allowed</div> <div>[21/May/2013:12:50:18 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has no update vector. It has never been initialized.</div> <div>[21/May/2013:12:50:18 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has no update vector. It has never been initialized.</div> <div>[21/May/2013:12:50:18 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has no update vector. It has never been initialized.</div> <div>[21/May/2013:12:50:20 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</div> <div>[21/May/2013:12:50:21 -0400] - Entry "uid=krbtgt,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div> <div>[21/May/2013:12:50:21 -0400] - Entry "uid=krbtgt_18424,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div> <div>[21/May/2013:12:50:21 -0400] - Entry "uid=IUSR_MIOFILES,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div> <div>[21/May/2013:12:50:21 -0400] - Entry "uid=IWAM_MIOFILES,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div> <div>[21/May/2013:12:50:21 -0400] - Entry "uid=backup,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div> <div>[21/May/2013:12:50:21 -0400] - Entry "uid=Guest,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div> <div>[21/May/2013:12:50:22 -0400] - Entry "uid=ldap-auth,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div> <div>[21/May/2013:12:50:22 -0400] - Entry "uid=Administrator,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</div> <div>[21/May/2013:12:50:22 -0400] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)". Sent 2 entries.</div> <div>[21/May/2013:12:50:23 -0400] - slapd shutting down - signaling operation threads</div> <div>[21/May/2013:12:50:23 -0400] - slapd shutting down - closing down internal subsystems and plugins</div> <div>[21/May/2013:12:50:23 -0400] - Waiting for 4 database threads to stop</div> <div>[21/May/2013:12:50:23 -0400] - All database threads now stopped</div> <div>[21/May/2013:12:50:23 -0400] - slapd stopped.</div> <div>[21/May/2013:12:54:14 -0400] - 389-Directory/<a moz-do-not-send="true" href="http://1.2.11.15">1.2.11.15</a> B2013.105.2259 starting up</div> <div>[21/May/2013:12:54:14 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</div> <div>[21/May/2013:12:54:14 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</div> <div>[21/May/2013:12:54:14 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</div> <div>[21/May/2013:12:54:14 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div> <div>[21/May/2013:12:54:14 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</div> <div>[21/May/2013:12:54:14 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</div> <div>[21/May/2013:12:54:14 -0400] - Listening on All Interfaces port 636 for LDAPS requests</div> <div>[21/May/2013:12:54:14 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</div> <div>[21/May/2013:12:58:56 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</div> <div>[21/May/2013:13:54:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:13:59:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:04:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:06:21 -0400] - _csngen_adjust_local_time: gen state before 519bae7c0001:1369157244:0:0</div> <div>[21/May/2013:14:06:21 -0400] - _csngen_adjust_local_time: gen state after 519bb79d0000:1369159581:0:0</div> <div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bb79d000000030000 into pending list</div> <div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - Purged state information from entry fqdn=ipa1.miovision.linux,cn=computers,cn=accounts,dc=miovision,dc=linux up to CSN 519273fc000000030000</div> <div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:14:06:21 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bb79d000000030000</div> <div>[21/May/2013:14:06:46 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:14:06:46 -0400] NSMMReplicationPlugin - changelog program - cl5GetOperationCount: found DB object 26158b0</div> <div>[21/May/2013:14:09:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:14:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:19:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:24:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:29:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:31:18 -0400] - _csngen_adjust_local_time: gen state before 519bb79d0001:1369159581:0:0</div> <div>[21/May/2013:14:31:18 -0400] - _csngen_adjust_local_time: gen state after 519bbd760000:1369161078:0:0</div> <div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bbd76000000030000 into pending list</div> <div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - Purged state information from entry uid=admin,cn=users,cn=accounts,dc=miovision,dc=linux up to CSN 51927d1d000000030000</div> <div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:14:31:18 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bbd76000000030000</div> <div>[21/May/2013:14:31:26 -0400] - _csngen_adjust_local_time: gen state before 519bbd760001:1369161078:0:0</div> <div>[21/May/2013:14:31:26 -0400] - _csngen_adjust_local_time: gen state after 519bbd7e0000:1369161086:0:0</div> <div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bbd7e000000030000 into pending list</div> <div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - Purged state information from entry uid=admin,cn=users,cn=accounts,dc=miovision,dc=linux up to CSN 519282f6000000030000</div> <div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:14:31:26 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bbd7e000000030000</div> <div>[21/May/2013:14:31:46 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:14:31:46 -0400] NSMMReplicationPlugin - changelog program - cl5GetOperationCount: found DB object 26158b0</div> <div>[21/May/2013:14:34:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:39:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:44:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:49:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:54:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:14:59:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:04:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:09:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:14:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:19:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:24:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:29:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:34:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:39:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:44:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:46:24 -0400] - _csngen_adjust_local_time: gen state before 519bbd7e0001:1369161086:0:0</div> <div>[21/May/2013:15:46:24 -0400] - _csngen_adjust_local_time: gen state after 519bcf100000:1369165584:0:0</div> <div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bcf10000000030000 into pending list</div> <div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - Purged state information from entry fqdn=ipa1.miovision.linux,cn=computers,cn=accounts,dc=miovision,dc=linux up to CSN 519282fe000000030000</div> <div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:15:46:24 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bcf10000000030000</div> <div>[21/May/2013:15:46:46 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:15:46:46 -0400] NSMMReplicationPlugin - changelog program - cl5GetOperationCount: found DB object 26158b0</div> <div>[21/May/2013:15:49:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:54:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:15:59:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:04:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:09:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:14:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:19:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:24:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:29:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:34:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:39:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:44:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:49:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:54:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:16:59:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:17:04:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:17:09:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:17:14:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:17:19:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:17:24:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:17:26:31 -0400] - _csngen_adjust_local_time: gen state before 519bcf100001:1369165584:0:0</div> <div>[21/May/2013:17:26:31 -0400] - _csngen_adjust_local_time: gen state after 519be6870000:1369171591:0:0</div> <div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519be687000000030000 into pending list</div> <div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - Purged state information from entry fqdn=ipa1.miovision.linux,cn=computers,cn=accounts,dc=miovision,dc=linux up to CSN 51929490000000030000</div> <div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:17:26:31 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519be687000000030000</div> <div>[21/May/2013:17:26:46 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:17:26:46 -0400] NSMMReplicationPlugin - changelog program - cl5GetOperationCount: found DB object 26158b0</div> <div>[21/May/2013:17:29:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:17:34:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:17:39:14 -0400] NSMMReplicationPlugin - Running Dirsync </div> <div>[21/May/2013:17:41:32 -0400] - _csngen_adjust_local_time: gen state before 519be6870001:1369171591:0:0</div> <div>[21/May/2013:17:41:32 -0400] - _csngen_adjust_local_time: gen state after 519bea0c0000:1369172492:0:0</div> <div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 519bea0c000000030000 into pending list</div> <div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - Purged state information from entry fqdn=ipa1.miovision.linux,cn=computers,cn=accounts,dc=miovision,dc=linux up to CSN 5192ac07000000030000</div> <div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object 26158b0 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/8337548b-c23611e2-80ceb237-a58fe021_519ba5ca000000030000.db4</div> <div>[21/May/2013:17:41:32 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 519bea0c000000030000</div> </div> <div style=""><br> </div> <div style=""><br> </div> <div> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div class="im"> <blockquote type="cite"> <div dir="ltr"> <div><br> </div> <div><font color="#333333"><span style="line-height:17.328125px">Although the documentation mentions changes will be applied on next sync when '</span></font><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">nsds7WindowsReplicaSubtree' is changed, </span><span style="line-height:17.328125px;color:rgb(51,51,51)">they do not.</span></div> </div> </blockquote> <br> </div> Did you use ldapmodify to change it? <div class="im"><br> <br> </div> </div> </blockquote> <div><br> </div> <div> <div>Yes, see above process for syntax used.</div> </div> <div><br> </div> <div> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div class="im"> <blockquote type="cite"> <div dir="ltr"> <div><span style="line-height:17.328125px;color:rgb(51,51,51)">Also if I try to include the </span><span style="color:rgb(51,51,51);font-size:13px;line-height:17.328125px">--win-subtree=CN=Shared Login,CN=Users,DC=miovision,DC=corp argument I get an invalid password message this might be because I didn't quote the DN though.</span></div> </div> </blockquote> <br> </div> Yes, that's likely. <div> <div class="h5"><br> <br> <blockquote type="cite"> <div dir="ltr"> <div><span style="color:rgb(51,51,51);line-height:17.328125px">So I then ran ipa-replica-manage re-initialize --from dc1.miovision.corp.</span></div> <div><font color="#333333"><span style="line-height:17.328125px"><br> </span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">I now have a screen session with an incredible amount of </span></font><span style="line-height:17.328125px;color:rgb(51,51,51)">"Update in progress" lines which has been running for about 30 minutes now (triggered at 12:58:56). I tried this on the weekend as well, and the process ran overnight so I killed it and had to start from scratch again.</span></div> <div><span style="line-height:17.328125px;color:rgb(51,51,51)"><br> </span></div> <div><span style="line-height:17.328125px;color:rgb(51,51,51)">The dirsrv error log is:</span></div> <div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:24:01 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:24:01 -0400] - Listening on All Interfaces port 636 for LDAPS requests</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:24:01 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13 -0400] - slapd shutting down - signaling operation threads</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13 -0400] - slapd shutting down - closing down internal subsystems and plugins</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13 -0400] - Waiting for 4 database threads to stop</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13 -0400] - All database threads now stopped</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:13 -0400] - slapd stopped.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16 -0400] - 389-Directory/<a moz-do-not-send="true" href="http://1.2.11.15" target="_blank">1.2.11.15</a> B2013.105.2259 starting up</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16 -0400] - Listening on All Interfaces port 636 for LDAPS requests</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:16 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:18 -0400] - Entry "cn=meTodc1.miovision.corp,cn=replica,cn=dc\3Dmiovision\2Cdc\3Dlinux,cn=mapping tree,cn=config" -- attribute "nsDS5ReplicatedAttributeListTotal" not allowed</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:18 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has no update vector. It has never been initialized.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:18 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has no update vector. It has never been initialized.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:18 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Replica has no update vector. It has never been initialized.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:20 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21 -0400] - Entry "uid=krbtgt,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21 -0400] - Entry "uid=krbtgt_18424,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21 -0400] - Entry "uid=IUSR_MIOFILES,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21 -0400] - Entry "uid=IWAM_MIOFILES,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21 -0400] - Entry "uid=backup,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:21 -0400] - Entry "uid=Guest,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:22 -0400] - Entry "uid=ldap-auth,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:22 -0400] - Entry "uid=Administrator,cn=users,cn=accounts,dc=miovision,dc=linux" missing attribute "sn" required by object class "person"</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:22 -0400] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)". Sent 2 entries.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23 -0400] - slapd shutting down - signaling operation threads</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23 -0400] - slapd shutting down - closing down internal subsystems and plugins</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23 -0400] - Waiting for 4 database threads to stop</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23 -0400] - All database threads now stopped</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:50:23 -0400] - slapd stopped.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14 -0400] - 389-Directory/<a moz-do-not-send="true" href="http://1.2.11.15" target="_blank">1.2.11.15</a> B2013.105.2259 starting up</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=miovision,dc=linux</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=miovision,dc=linux</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=miovision,dc=linux</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=miovision,dc=linux--no CoS Templates found, which should be added before the CoS Definition.</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14 -0400] - Listening on All Interfaces port 636 for LDAPS requests</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:54:14 -0400] - Listening on /var/run/slapd-MIOVISION-LINUX.socket for LDAPI requests</span></font></div> <div><font color="#333333"><span style="line-height:17.328125px">[21/May/2013:12:58:56 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</span></font></div> <div style="color:rgb(51,51,51);line-height:17.328125px"><br> </div> </div> <div>Am I encountering this issue because of the win-subtree setting?</div> </div> </blockquote> <br> </div> </div> What issue? <div class="im"><br> <br> </div> </div> </blockquote> <div><br> </div> <div style="">Re-initialize process continues indefinitely displaying new lines "Update in progress", only users who are in CN=users,DC=miovision,DC=corp are shown in IPA web admin (from initial winsync agreement before re-initialize)</div> <div> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div class="im"> <blockquote type="cite"> <div dir="ltr"> <div>Is it considered bad practice to set a group like this?</div> </div> </blockquote> <br> </div> It should be fine. <div class="im"><br> <br> <blockquote type="cite"> <div dir="ltr"> <div>I'm not sure what else I would do, as this is the only group which contains all of my users, and they reside in their respective OU's instead of Users CN.</div> </div> </blockquote> <br> </div> It should be fine. <div class="im"><br> <br> <blockquote type="cite"> <div dir="ltr"> <div><br> </div> <div>I've since enabled replication logging, but addtional information is minimal:</div> <div> <div> <div>[21/May/2013:12:58:56 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meTodc1.miovision.corp" (dc1:389)".</div> <div>[21/May/2013:13:54:14 -0400] NSMMReplicationPlugin - Running Dirsync <br> </div> </div> </div> </div> </blockquote> <br> </div> So it's hung here? <div class="im"><br> <br> </div> </div> </blockquote> <div><br> </div> <div><br> </div> <div style="">Correct, see logs above </div> <div style=""><br> </div> <div style=""><br> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div class="im"> <blockquote type="cite"> <div dir="ltr"> <div> <div><br> </div> <div><font color="#333333"><span style="line-height:17.328125px">#top shows ns-slapd maxing out the CPU.</span></font></div> <div><font color="#333333"> <div> <div> PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND </div> <div> 5252 dirsrv 20 0 1177m 33m 8464 S 99.8 3.3 57:17.08 ns-slapd <br> </div> </div> </font></div> </div> </div> </blockquote> <br> </div> <font color="#333333">Can you do a pstack of the process?<br> <br> pstack </font><font color="#333333">5252</font> <div> <div class="h5"> <blockquote type="cite"> <div class="gmail_extra"><br clear="all"> </div> </blockquote> </div> </div> </div> </blockquote> <div><br> </div> <div style="">Yes, see output above. </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div class="h5"> <blockquote type="cite"> <div class="gmail_extra"> <div> <div dir="ltr"><br> <br> <br> Steve Dainard<br> Infrastructure Manager <div> Miovision Technologies Inc.<br> <br> </div> </div> </div> <br> <br> <div class="gmail_quote">On Fri, May 17, 2013 at 2:09 PM, Rich Megginson <span dir="ltr"><<a moz-do-not-send="true" href="mailto:rmeggins@redhat.com" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=rmeggins@redhat.com&cc=&bcc=&su=&body=','_blank');return false;">rmeggins@redhat.com</a>></span> wrote:<br> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div> <div> <div>On 05/17/2013 12:03 PM, Steve Dainard wrote:<br> </div> <blockquote type="cite"> <div dir="ltr"> <div>Thanks for getting me on the right track.</div> <div><br> </div> Yes to the Windows sync agreement. <div><br> </div> <div>I'm not sure if this is related to password sync'ing, but it looks like a sync operation is triggering (and failing) every 4 seconds on one of my users:</div> <div><br> </div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): State: start_backoff -> backoff<br> </div> <div> <div>[17/May/2013:13:28:42 -0400] - acquire_replica, supplier RUV:</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - supplier: {replicageneration} 50802036000000030000</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - supplier: {replica 3 <a moz-do-not-send="true">ldap://ipa1.miovision.linux:389</a>} 50802036000100030000 51966776000100030000 51966776</div> <div>[17/May/2013:13:28:42 -0400] - acquire_replica, consumer RUV:</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - consumer: {replicageneration} 50802036000000030000</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - consumer: {replica 3 <a moz-do-not-send="true">ldap://ipa1.miovision.linux:389</a>} 50802036000100030000 515ad91f000000030000 00000000</div> <div>[17/May/2013:13:28:42 -0400] - acquire_replica, supplier RUV is newer</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Cancelling linger on the connection</div> <div>[17/May/2013:13:28:42 -0400] - _csngen_adjust_local_time: gen state before 519668c60001:1368811718:0:0</div> <div>[17/May/2013:13:28:42 -0400] - _csngen_adjust_local_time: gen state after 519668ca0000:1368811722:0:0</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): State: backoff -> sending_updates</div> <div>[17/May/2013:13:28:42 -0400] - csngen_adjust_time: gen state before 519668ca0001:1368811722:0:0</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object f6d910 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div> <div>[17/May/2013:13:28:42 -0400] - _cl5PositionCursorForReplay (agmt="cn=meTodc1.miovision.corp" (dc1:389)): Consumer RUV:</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): {replicageneration} 50802036000000030000</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): {replica 3 <a moz-do-not-send="true">ldap://ipa1.miovision.linux:389</a>} 50802036000100030000 515ad91f000000030000 00000000</div> <div>[17/May/2013:13:28:42 -0400] - _cl5PositionCursorForReplay (agmt="cn=meTodc1.miovision.corp" (dc1:389)): Supplier RUV:</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): {replicageneration} 50802036000000030000</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): {replica 3 <a moz-do-not-send="true">ldap://ipa1.miovision.linux:389</a>} 50802036000100030000 51966776000100030000 51966776</div> <div>[17/May/2013:13:28:42 -0400] agmt="cn=meTodc1.miovision.corp" (dc1:389) - clcache_get_buffer: found thread private buffer cache 7f30bc061d00</div> <div>[17/May/2013:13:28:42 -0400] agmt="cn=meTodc1.miovision.corp" (dc1:389) - clcache_get_buffer: _pool is 2e7cc10 _pool->pl_busy_lists is 7f30bc050790 _pool->pl_busy_lists->bl_buffers is 7f30bc061d00</div> <div>[17/May/2013:13:28:42 -0400] agmt="cn=meTodc1.miovision.corp" (dc1:389) - session start: anchorcsn=515ad91f000000030000</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - changelog program - agmt="cn=meTodc1.miovision.corp" (dc1:389): CSN 515ad91f000000030000 found, position set for replay</div> <div>[17/May/2013:13:28:42 -0400] agmt="cn=meTodc1.miovision.corp" (dc1:389) - load=1 rec=1 csn=515ae3f4000000030000</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): windows_replay_update: Looking at modify operation local dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux" (ours,user,not group)</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): map_entry_dn_outbound: looking for AD entry for DS dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux" guid="ba17f9770e0c814cb9eea9df2d4df61a"</div> <div>[17/May/2013:13:28:42 -0400] - Calling windows entry search request plugin</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - Could not retrieve entry from Windows using search base [<GUID=ba17f9770e0c814cb9eea9df2d4df61a>] scope [0] filter [(objectclass=*)]: error 1:Operations error</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): map_entry_dn_outbound: return code -1 from search for AD entry dn="<GUID=ba17f9770e0c814cb9eea9df2d4df61a>" or dn="(null)"</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): map_entry_dn_outbound: entry not found - rc -1</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): windows_replay_update: Processing modify operation local dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux" remote dn="<GUID=ba17f9770e0c814cb9eea9df2d4df61a>"</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): map_entry_dn_outbound: looking for AD entry for DS dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux" guid="ba17f9770e0c814cb9eea9df2d4df61a"</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): map_entry_dn_outbound: looking for AD entry for DS dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux" username="jkeller"</div> <div>[17/May/2013:13:28:42 -0400] - Calling windows entry search request plugin</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - Could not retrieve entry from Windows using search base [dc=miovision,dc=corp] scope [2] filter [(samAccountName=jkeller)]: error 1:Operations error</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): map_entry_dn_outbound: entry not found - rc -1</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): map_entry_dn_outbound: failed to fetch entry from AD: dn="uid=jkeller,cn=users,cn=accounts,dc=miovision,dc=linux", err=-1</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): windows_replay_update: update password returned 1</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Consumer failed to replay change (uniqueid cd3be819-21c711e2-96aaaa0d-17c9983f, CSN 515ae3f4000000030000): Operations error. Will retry later.</div> <div>[17/May/2013:13:28:42 -0400] agmt="cn=meTodc1.miovision.corp" (dc1:389) - session end: state=0 load=1 sent=1 skipped=0</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): Beginning linger on the connection</div> <div>[17/May/2013:13:28:42 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): State: sending_updates -> start_backoff</div> <div><br> </div> <div> <div><br> </div> <div><br> </div> <div>Here's the output of an ldapsearch for the user jkeller:</div> <div><br> </div> <div> <div>#/usr/bin/ldapsearch -h dc1.miovision.corp -D <a moz-do-not-send="true" href="mailto:ldap-auth@miovision.corp" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=ldap-auth@miovision.corp&cc=&bcc=&su=&body=','_blank');return false;">"ldap-auth@miovision.corp"</a> -W -b "dc=miovision,dc=corp" '(samAccountName=jkeller)' cn samAccountName</div> <div><br> </div> </div> <div> <div># Joel Keller, 01Engineering, miovision.corp</div> <div>dn: CN=Joel Keller,OU=01Engineering,DC=miovision,DC=corp</div> <div>cn: Joel Keller</div> <div>sAMAccountName: jkeller</div> </div> </div> <div><br> </div> <div><br> </div> <div><br> </div> <div>When I change my password on the IPA server, it looks like the change is queued:</div> <div><br> </div> <div> <div>[17/May/2013:13:53:48 -0400] - _csngen_adjust_local_time: gen state before 51966eab0001:1368813227:0:0</div> <div>[17/May/2013:13:53:48 -0400] - _csngen_adjust_local_time: gen state after 51966eac0000:1368813228:0:0</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 51966eac000000030000 into pending list</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - Purged state information from entry uid=sdainard,cn=users,cn=accounts,dc=miovision,dc=linux up to CSN 518d33f90007000300</div> <div>00</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object f6d910 for database /var/lib/dirsrv/slapd-MIOVISION-LINU</div> <div>X/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object f6d910 for database /var/lib/dirsrv/slapd-MIOVISION-LINU</div> <div>X/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 51966eac000000030000</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 51966eac000100030000 into pending list</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - Purged state information from entry uid=sdainard,cn=users,cn=accounts,dc=miovision,dc=linux up to CSN 518d342c0000000300</div> <div>00</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object f6d910 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object f6d910 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 51966eac000100030000</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): State: start_backoff -> backoff</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - ruv_add_csn_inprogress: successfully inserted csn 51966eac000200030000 into pending list</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - Purged state information from entry uid=sdainard,cn=users,cn=accounts,dc=miovision,dc=linux up to CSN 518d342c000100030000</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object f6d910 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - changelog program - _cl5GetDBFileByReplicaName: found DB object f6d910 for database /var/lib/dirsrv/slapd-MIOVISION-LINUX/cldb/854fd282-193811e2-9177aa0d-17c9983f_50802036000000030000.db4</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - ruv_update_ruv: successfully committed csn 51966eac000200030000</div> <div>[17/May/2013:13:53:48 -0400] NSMMReplicationPlugin - agmt="cn=meTodc1.miovision.corp" (dc1:389): State: backoff -> backoff</div> <div><br> </div> </div> <div><br> </div> <div><br> </div> <div>Perhaps whatever is causing the sync error with user jkeller is holding up the queued transactions?</div> </div> </div> </blockquote> <br> </div> </div> Yes. It is attempting to replay the password change operation. It first tries to find the entry in AD, but that is failing with operations error.<br> <br> Try doing the ldapsearch with the same bind DN and password you specified when you set up the winsync agreement. Or did you use <a moz-do-not-send="true" href="mailto:ldap-auth@miovision.corp" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=ldap-auth@miovision.corp&cc=&bcc=&su=&body=','_blank');return false;">"ldap-auth@miovision.corp"</a>?<br> <br> Another difference is that winsync uses LDAPS - so try this:<br> <br> LDAPTLS_CACERTDIR=/etc/dirsrv/slapd-YOUR-DOMAIN ldapsearch -H <a moz-do-not-send="true">ldaps://dc1.miovision.corp</a> -D <a moz-do-not-send="true" href="mailto:ldap-auth@miovision.corp" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=ldap-auth@miovision.corp&cc=&bcc=&su=&body=','_blank');return false;">"ldap-auth@miovision.corp"</a> -W -b "dc=miovision,dc=corp" '(samAccountName=jkeller)' cn samAccountName <div> <div><br> <br> <blockquote type="cite"> <div dir="ltr"> <div class="gmail_extra"><br clear="all"> <div> <div dir="ltr"> <br> <br> <br> Steve Dainard<br> Infrastructure Manager <div>Miovision Technologies Inc.<br> <br> </div> </div> </div> <br> <div class="gmail_quote">On Fri, May 17, 2013 at 11:39 AM, Rich Megginson <span dir="ltr"><<a moz-do-not-send="true" href="mailto:rmeggins@redhat.com" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=rmeggins@redhat.com&cc=&bcc=&su=&body=','_blank');return false;">rmeggins@redhat.com</a>></span> wrote:<br> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div> <div>On 05/17/2013 09:26 AM, Steve Dainard wrote:<br> </div> <blockquote type="cite"> <div dir="ltr">Hello, <div><br> </div> <div>We're running a single IPA server (CentOS 6) on our network as a side project for some testing before we implement.</div> <div><br> </div> <div>It had been a significant period of time since I had last logged into the web interface, so I had to kinit from a client machine (of which I had logged into successfully with my domain password), at which point I was requested to change my password. After the password change I RDP'd into a Windows machine on our domain and realized the password had not been updated on the domain controller.</div> <div><br> </div> <div>Is the password sync feature with an external source such as Active Directory supposed to be two-way? If so where can I start troubleshooting this issue?</div> </div> </blockquote> <br> </div> Are you talking about a windows sync agreement you set up with ipa-replica-manage?<br> If so, yes, the password sync is supposed to be two-way.<br> Try this:<br> turn on the replication log level <a moz-do-not-send="true" href="http://port389.org/wiki/FAQ#Troubleshooting" target="_blank">http://port389.org/wiki/FAQ#Troubleshooting</a><br> change your IPA password<br> turn off the replication log level <a moz-do-not-send="true" href="http://port389.org/wiki/FAQ#Troubleshooting" target="_blank">http://port389.org/wiki/FAQ#Troubleshooting</a><br> see if you can use your new password in AD<br> <br> The 389 errors log in /var/log/dirsrv/slapd-YOUR-DOMAIN/errors may contain a clue.<br> <br> <blockquote type="cite"> <div> <div dir="ltr"> <div><br> </div> <div>Thanks,<br clear="all"> <div> <div dir="ltr"><br> <br> <br> Steve Dainard<br> Infrastructure Manager <div>Miovision Technologies Inc.<br> </div> </div> </div> </div> </div> <br> <fieldset></fieldset> <br> </div> <pre>_______________________________________________ Freeipa-users mailing list <a moz-do-not-send="true" href="mailto:Freeipa-users@redhat.com" target="_blank" onclick="window.open('https://mail.google.com/mail/?view=cm&tf=1&to=Freeipa-users@redhat.com&cc=&bcc=&su=&body=','_blank');return false;">Freeipa-users@redhat.com</a> <a moz-do-not-send="true" href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre> </blockquote> <br> </div> </blockquote> </div> <br> </div> </div> </blockquote> <br> </div> </div> </div> </blockquote> </div> <br> </div> </blockquote> <br> </div> </div> </blockquote> </div> </div> <div class="gmail_extra"><br> </div> </div> </blockquote> <br> </body> </html>