<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 02/13/2014 12:55 PM, Bruno Henrique Barbosa wrote:
<blockquote
cite="mid:87eeeb84-5804-4e63-9a62-9bdd5a27dce5@prod190.prodesan.com.br"
type="cite">
<style type="text/css">p { margin: 0; }</style>
<div style="font-family: tahoma,new york,times,serif; font-size:
12pt; color: rgb(0, 0, 0);">
<div>
<div>
<div><font face="tahoma, new york, times, serif">Hi
everyone,</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">I've
installed my IPA environment as it follows:</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">ipa01.example.com
- master install</font></div>
<div><font face="tahoma, new york, times, serif">ipa02.example.com
- replica install, as the guide says, with
ipa-replica-prepare on ipa01 and ipa-replica-install
using gpg key generated.</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">All good,
environment is fine, can access both UI, but the
underlying problem is: I can edit and remove users from
IPA using instance ipa02 (replica), but I CANNOT add
users from that instance. In the UI, error returned is:</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">IPA Error
4203</font></div>
<div><font face="tahoma, new york, times, serif">Operations
error: Allocation of a new value for range cn=posix
ids,cn=distributed numeric assignment
plugin,cn=plugins,cn=config failed! Unable to proceed.</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">Via
command-line, debug-enabled:</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">root@ipa02's
password: </font></div>
<div><font face="tahoma, new york, times, serif">Last login:
Thu Feb 13 15:36:34 2014</font></div>
<div><font face="tahoma, new york, times, serif">[root@ipa02
~]# kinit admin</font></div>
<div><font face="tahoma, new york, times, serif">Password
for <a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM:">admin@EXAMPLE.COM:</a> </font></div>
<div><font face="tahoma, new york, times, serif">[root@ipa02
~]# ipa-replica-manage list</font></div>
<div><font face="tahoma, new york, times, serif">ipa01.example.com:
master</font></div>
<div><font face="tahoma, new york, times, serif">ipa02.example.com:
master</font></div>
<div><font face="tahoma, new york, times, serif">[root@ipa02
~]# klist </font></div>
<div><font face="tahoma, new york, times, serif">Ticket
cache: <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a></font></div>
<div><font face="tahoma, new york, times, serif">Default
principal: <a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM">admin@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">Valid
starting Expires Service principal</font></div>
<div><font face="tahoma, new york, times, serif">02/13/14
15:37:48 02/14/14 15:37:29
<a class="moz-txt-link-abbreviated" href="mailto:krbtgt/EXAMPLE.COM@EXAMPLE.COM">krbtgt/EXAMPLE.COM@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif">02/13/14
15:38:03 02/14/14 15:37:29
<a class="moz-txt-link-abbreviated" href="mailto:ldap/ipa02.example.com@EXAMPLE.COM">ldap/ipa02.example.com@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif">[root@ipa02
~]# ipa -d user-add usertest</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing all plugin modules in
'/usr/lib/python2.6/site-packages/ipalib/plugins'...</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/automember.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/automount.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/batch.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/config.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/delegation.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/dns.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/group.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hbacrule.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvc.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvcgroup.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hbactest.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/host.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hostgroup.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/idrange.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/internal.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/kerberos.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/krbtpolicy.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/migration.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/misc.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/netgroup.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/passwd.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/permission.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/ping.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/privilege.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
args=klist -V</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stdout=Kerberos 5 version 1.10.3</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stderr=</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/role.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/selinuxusermap.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/service.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/trust.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/user.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
args=keyctl search @s user
<a class="moz-txt-link-abbreviated" href="mailto:ipa_session_cookie:admin@EXAMPLE.COM">ipa_session_cookie:admin@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stdout=</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stderr=keyctl_search: Required key not available</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
failed to find session_cookie in persistent storage for
principal '<a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM">admin@EXAMPLE.COM</a>'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: INFO:
trying <a class="moz-txt-link-freetext" href="https://ipa02.example.com/ipa/xml">https://ipa02.example.com/ipa/xml</a></font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
NSSConnection init ipa02.example.com</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
Connecting: 192.168.0.2:0</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
auth_certificate_callback: check_sig=True
is_server=False</font></div>
<div><font face="tahoma, new york, times, serif">Data:</font></div>
<div><font face="tahoma, new york, times, serif">
Version: 3 (0x2)</font></div>
<div><font face="tahoma, new york, times, serif">
Serial Number: 14 (0xe)</font></div>
<div><font face="tahoma, new york, times, serif">
Signature Algorithm:</font></div>
<div><font face="tahoma, new york, times, serif">
Algorithm: PKCS #1 SHA-256 With RSA Encryption</font></div>
<div><font face="tahoma, new york, times, serif">
Issuer: CN=Certificate Authority,O=EXAMPLE.COM</font></div>
<div><font face="tahoma, new york, times, serif">
Validity:</font></div>
<div><font face="tahoma, new york, times, serif">
Not Before: Qua Fev 12 19:42:11 2014 UTC</font></div>
<div><font face="tahoma, new york, times, serif">
Not After: Sáb Fev 13 19:42:11 2016 UTC</font></div>
<div><font face="tahoma, new york, times, serif">
Subject: CN=ipa02.example.com,O=EXAMPLE.COM</font></div>
<div><font face="tahoma, new york, times, serif">
Subject Public Key Info:</font></div>
<div><font face="tahoma, new york, times, serif">
Public Key Algorithm:</font></div>
<div><font face="tahoma, new york, times, serif">
Algorithm: PKCS #1 RSA Encryption</font></div>
<div><font face="tahoma, new york, times, serif">
RSA Public Key:</font></div>
<div><font face="tahoma, new york, times, serif">
Modulus:</font></div>
<div><font face="tahoma, new york, times, serif">
93:ce:2f:b4:3c:61:bd:ec:42:a2:cd:b2:44:1a:ad:14:</font></div>
<div><font face="tahoma, new york, times, serif">
f0:50:89:d7:cc:5d:cf:96:db:0e:f5:39:4c:8d:26:b5:</font></div>
<div><font face="tahoma, new york, times, serif">
47:9c:e6:77:86:1b:7a:ec:22:64:a2:f8:dd:67:fa:0f:</font></div>
<div><font face="tahoma, new york, times, serif">
49:16:e9:9a:ca:d8:0e:d9:37:d6:0c:92:9c:a4:1f:b5:</font></div>
<div><font face="tahoma, new york, times, serif">
43:e4:80:0f:80:de:a8:f4:4b:8f:97:db:24:08:9b:24:</font></div>
<div><font face="tahoma, new york, times, serif">
e7:e8:7a:a7:f8:61:0d:c1:d0:6e:89:94:4b:9d:f3:65:</font></div>
<div><font face="tahoma, new york, times, serif">
6a:a8:81:21:fc:7e:e8:72:5d:bb:0f:3e:bb:0c:ce:da:</font></div>
<div><font face="tahoma, new york, times, serif">
58:34:b4:64:ed:ac:ab:17:2b:c6:75:87:6d:8d:8e:3f:</font></div>
<div><font face="tahoma, new york, times, serif">
3f:56:82:f8:0c:f7:d7:a3:dc:73:b7:60:88:6f:f4:76:</font></div>
<div><font face="tahoma, new york, times, serif">
db:d6:81:44:c7:04:7c:22:90:c6:f7:bc:0a:34:2a:28:</font></div>
<div><font face="tahoma, new york, times, serif">
2a:15:46:9e:06:da:bd:42:10:c0:d3:c4:5e:81:88:6d:</font></div>
<div><font face="tahoma, new york, times, serif">
6d:75:ad:3e:f0:a2:88:2e:3d:23:ce:19:a7:71:3c:0a:</font></div>
<div><font face="tahoma, new york, times, serif">
c0:fa:bd:54:c5:c2:d5:f1:46:b1:74:80:65:31:dc:bb:</font></div>
<div><font face="tahoma, new york, times, serif">
d5:01:86:de:f5:38:c6:cd:ad:2d:3a:32:17:4f:c7:d4:</font></div>
<div><font face="tahoma, new york, times, serif">
2a:44:82:69:4a:ad:d2:1a:59:cb:bb:25:3b:86:50:fa:</font></div>
<div><font face="tahoma, new york, times, serif">
c7:8c:ab:0f:bf:1f:82:39:c0:ba:7b:45:6e:b6:1f:fd</font></div>
<div><font face="tahoma, new york, times, serif">
Exponent:</font></div>
<div><font face="tahoma, new york, times, serif">
65537 (0x10001)</font></div>
<div><font face="tahoma, new york, times, serif"> Signed
Extensions: (5)</font></div>
<div><font face="tahoma, new york, times, serif">
Name: Certificate Authority Key Identifier</font></div>
<div><font face="tahoma, new york, times, serif">
Critical: False</font></div>
<div><font face="tahoma, new york, times, serif"> Key
ID:</font></div>
<div><font face="tahoma, new york, times, serif">
7f:77:f3:aa:bc:9a:8a:97:0f:29:2c:b6:a4:ff:81:ea:</font></div>
<div><font face="tahoma, new york, times, serif">
c3:9c:48:63</font></div>
<div><font face="tahoma, new york, times, serif">
Serial Number: None</font></div>
<div><font face="tahoma, new york, times, serif">
General Names: [0 total]</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">
Name: Authority Information Access</font></div>
<div><font face="tahoma, new york, times, serif">
Critical: False</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">
Name: Certificate Key Usage</font></div>
<div><font face="tahoma, new york, times, serif">
Critical: True</font></div>
<div><font face="tahoma, new york, times, serif">
Usages:</font></div>
<div><font face="tahoma, new york, times, serif">
Digital Signature</font></div>
<div><font face="tahoma, new york, times, serif">
Non-Repudiation</font></div>
<div><font face="tahoma, new york, times, serif">
Key Encipherment</font></div>
<div><font face="tahoma, new york, times, serif">
Data Encipherment</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">
Name: Extended Key Usage</font></div>
<div><font face="tahoma, new york, times, serif">
Critical: False</font></div>
<div><font face="tahoma, new york, times, serif">
Usages:</font></div>
<div><font face="tahoma, new york, times, serif">
TLS Web Server Authentication Certificate</font></div>
<div><font face="tahoma, new york, times, serif">
TLS Web Client Authentication Certificate</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">
Name: Certificate Subject Key ID</font></div>
<div><font face="tahoma, new york, times, serif">
Critical: False</font></div>
<div><font face="tahoma, new york, times, serif">
Data:</font></div>
<div><font face="tahoma, new york, times, serif">
ba:bd:55:29:33:53:0c:6b:fb:54:2f:ce:ce:40:ce:4c:</font></div>
<div><font face="tahoma, new york, times, serif">
55:7c:07:ec</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">
Signature:</font></div>
<div><font face="tahoma, new york, times, serif">
Signature Algorithm:</font></div>
<div><font face="tahoma, new york, times, serif">
Algorithm: PKCS #1 SHA-256 With RSA Encryption</font></div>
<div><font face="tahoma, new york, times, serif">
Signature:</font></div>
<div><font face="tahoma, new york, times, serif">
b5:b0:34:b0:4c:e0:97:42:55:2e:44:34:d0:b9:12:c1:</font></div>
<div><font face="tahoma, new york, times, serif">
1d:60:57:a4:ae:e7:2e:22:74:a9:fd:64:99:2c:54:7d:</font></div>
<div><font face="tahoma, new york, times, serif">
f0:b9:32:8e:bd:d5:71:c5:23:14:a1:82:3f:63:c1:bf:</font></div>
<div><font face="tahoma, new york, times, serif">
7b:e3:e1:3c:32:95:ca:48:22:eb:56:98:2b:71:90:34:</font></div>
<div><font face="tahoma, new york, times, serif">
9c:24:58:02:15:e2:ed:a8:81:11:bd:a9:1a:80:7d:a1:</font></div>
<div><font face="tahoma, new york, times, serif">
23:d6:33:78:9b:1a:b6:42:43:49:7e:07:02:a4:7a:1b:</font></div>
<div><font face="tahoma, new york, times, serif">
f5:8c:78:a2:23:27:66:be:5f:30:43:a0:46:9b:0e:8d:</font></div>
<div><font face="tahoma, new york, times, serif">
76:9a:b0:6c:e6:ba:54:d2:9d:7a:24:ae:c9:7f:ee:bf:</font></div>
<div><font face="tahoma, new york, times, serif">
5b:6b:b0:c2:3a:ac:d0:9d:cf:d6:36:ec:2b:6d:e9:c2:</font></div>
<div><font face="tahoma, new york, times, serif">
df:ac:27:d6:63:0a:c0:0f:1b:bc:93:8f:0f:4c:62:ca:</font></div>
<div><font face="tahoma, new york, times, serif">
f9:c1:10:94:77:5d:b8:ad:f5:b6:18:1c:26:bc:3d:70:</font></div>
<div><font face="tahoma, new york, times, serif">
30:20:a3:7e:14:e3:a1:84:d4:9f:f8:73:4c:6d:59:a6:</font></div>
<div><font face="tahoma, new york, times, serif">
8d:2b:e3:3f:b5:84:42:62:b9:90:23:dc:24:df:ed:42:</font></div>
<div><font face="tahoma, new york, times, serif">
bc:ab:f4:a4:5e:9f:ed:7f:e3:f2:e5:f4:07:81:ac:7c:</font></div>
<div><font face="tahoma, new york, times, serif">
c4:5d:34:6b:69:7b:6f:29:20:30:95:ef:d3:45:ad:83:</font></div>
<div><font face="tahoma, new york, times, serif">
51:fb:72:cb:a4:eb:85:f3:f6:0d:2d:31:d8:8b:72:54</font></div>
<div><font face="tahoma, new york, times, serif">
Fingerprint (MD5):</font></div>
<div><font face="tahoma, new york, times, serif">
4e:06:54:a8:e4:62:8e:65:a1:7f:3c:31:01:4b:06:bf</font></div>
<div><font face="tahoma, new york, times, serif">
Fingerprint (SHA1):</font></div>
<div><font face="tahoma, new york, times, serif">
a2:43:5f:65:c0:61:13:cf:2c:9c:9d:32:72:d6:cc:78:</font></div>
<div><font face="tahoma, new york, times, serif">
66:6e:f7:77</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
approved_usage = SSLServer intended_usage = SSLServer</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
cert valid True for "CN=ipa02.example.com,O=EXAMPLE.COM"</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
handshake complete, peer = 192.168.0.2:443</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
received Set-Cookie
'ipa_session=eb4b207ba589878a328ee100b9ab16ae;
Domain=ipa02.example.com; Path=/ipa; Expires=Thu, 13 Feb
2014 17:58:46 GMT; Secure; HttpOnly'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
storing cookie
'ipa_session=eb4b207ba589878a328ee100b9ab16ae;
Domain=ipa02.example.com; Path=/ipa; Expires=Thu, 13 Feb
2014 17:58:46 GMT; Secure; HttpOnly' for principal
<a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM">admin@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
args=keyctl search @s user
<a class="moz-txt-link-abbreviated" href="mailto:ipa_session_cookie:admin@EXAMPLE.COM">ipa_session_cookie:admin@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stdout=</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stderr=keyctl_search: Required key not available</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
args=keyctl search @s user
<a class="moz-txt-link-abbreviated" href="mailto:ipa_session_cookie:admin@EXAMPLE.COM">ipa_session_cookie:admin@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stdout=</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stderr=keyctl_search: Required key not available</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
args=keyctl padd user
<a class="moz-txt-link-abbreviated" href="mailto:ipa_session_cookie:admin@EXAMPLE.COM">ipa_session_cookie:admin@EXAMPLE.COM</a> @s</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stdout=227287872</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stderr=</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
Created connection context.xmlclient</font></div>
<div><font face="tahoma, new york, times, serif">First name:
usertest</font></div>
<div><font face="tahoma, new york, times, serif">Last name:
testname</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
raw: user_add(u'usertest', givenname=u'usertest',
sn=u'testname', cn=u'usertest testname', uidnumber=999,
gidnumber=999, noprivate=False, all=False, raw=False,
version=u'2.49', no_members=False)</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
user_add(u'usertest', givenname=u'usertest',
sn=u'testname', cn=u'usertest testname',
displayname=u'usertest testname', initials=u'ut',
gecos=u'usertest testname',
krbprincipalname=u'<a class="moz-txt-link-abbreviated" href="mailto:usertest@EXAMPLE.COM">usertest@EXAMPLE.COM</a>', random=False,
uidnumber=999, gidnumber=999, noprivate=False,
all=False, raw=False, version=u'2.49', no_members=False)</font></div>
<div><font face="tahoma, new york, times, serif">ipa: INFO:
Forwarding 'user_add' to server
u'<a class="moz-txt-link-freetext" href="https://ipa02.example.com/ipa/xml">https://ipa02.example.com/ipa/xml</a>'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
NSSConnection init ipa02.example.com</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
Connecting: 192.168.0.2:0</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
handshake complete, peer = 192.168.0.2:443</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
received Set-Cookie
'ipa_session=d5dcde16a47612ec6debfc7ed42b5efb;
Domain=ipa02.example.com; Path=/ipa; Expires=Thu, 13 Feb
2014 17:59:04 GMT; Secure; HttpOnly'</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
storing cookie
'ipa_session=d5dcde16a47612ec6debfc7ed42b5efb;
Domain=ipa02.example.com; Path=/ipa; Expires=Thu, 13 Feb
2014 17:59:04 GMT; Secure; HttpOnly' for principal
<a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM">admin@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
args=keyctl search @s user
<a class="moz-txt-link-abbreviated" href="mailto:ipa_session_cookie:admin@EXAMPLE.COM">ipa_session_cookie:admin@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stdout=227287872</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stderr=</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
args=keyctl search @s user
<a class="moz-txt-link-abbreviated" href="mailto:ipa_session_cookie:admin@EXAMPLE.COM">ipa_session_cookie:admin@EXAMPLE.COM</a></font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stdout=227287872</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stderr=</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
args=keyctl pupdate 227287872</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stdout=</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
stderr=</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
Caught fault 4203 from server
<a class="moz-txt-link-freetext" href="https://ipa02.example.com/ipa/xml:">https://ipa02.example.com/ipa/xml:</a> Operations error:
Allocation of a new value for range cn=posix
ids,cn=distributed numeric assignment
plugin,cn=plugins,cn=config failed! Unable to proceed.</font></div>
<div><font face="tahoma, new york, times, serif">ipa: DEBUG:
Destroyed connection context.xmlclient</font></div>
<div><font face="tahoma, new york, times, serif">ipa: ERROR:
Operations error: Allocation of a new value for range
cn=posix ids,cn=distributed numeric assignment
plugin,cn=plugins,cn=config failed! Unable to proceed.</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">Under the
labs I did on IPA, I could resolve that by booting the
replica server, but this time I couldn't solve. Looking
for assistance, please!</font></div>
</div>
</div>
</div>
</blockquote>
<br>
<br>
Looks like problems with the DNA plugin.<br>
Did you by any chance tried to install and untinstall replica for
couple dozen times?<br>
I think we would need replica DS logs and the DNA plugin
configuration entries from primary and replica servers.<br>
<br>
<blockquote
cite="mid:87eeeb84-5804-4e63-9a62-9bdd5a27dce5@prod190.prodesan.com.br"
type="cite">
<div style="font-family: tahoma,new york,times,serif; font-size:
12pt; color: #000000">
<div>
<div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">Thank you
for any help you can provide in this situation!</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div><font face="tahoma, new york, times, serif">Bruno
Henrique Barbosa</font></div>
<div><font face="tahoma, new york, times, serif">Jr. Sys
Admin</font></div>
<div><font face="tahoma, new york, times, serif">IT
Department</font></div>
<div><font face="tahoma, new york, times, serif">Santos City
Hall</font></div>
<div><font face="tahoma, new york, times, serif"><br>
</font></div>
<div style="font-family: tahoma, 'new york', times, serif;"><br>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>