<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I am migrating an openLDAP tree into ipa, and when I run ipa migrate-ds, the migration aborts after roughly 36 seconds with:<o:p></o:p></p>
<p class="MsoNormal">ipa: ERROR: cannot connect to 'ldap://10.x.x.x:389’:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">It has transferred 9762 records, but seems to hit a timeout that causes it to stop.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve run it in debug mode, which only provides this:<o:p></o:p></p>
<p class="MsoNormal">ipa: DEBUG: Starting external process<o:p></o:p></p>
<p class="MsoNormal">ipa: DEBUG: args=keyctl pupdate 774698354<o:p></o:p></p>
<p class="MsoNormal">ipa: DEBUG: Process finished, return code=0<o:p></o:p></p>
<p class="MsoNormal">ipa: DEBUG: stdout=<o:p></o:p></p>
<p class="MsoNormal">ipa: DEBUG: stderr=<o:p></o:p></p>
<p class="MsoNormal">ipa: DEBUG: Caught fault 907 from server https://foo.example.com/ipa/session/xml: cannot connect to 'ldap://10.x.x.x:389':
<o:p></o:p></p>
<p class="MsoNormal">ipa: DEBUG: Destroyed connection context.xmlclient<o:p></o:p></p>
<p class="MsoNormal">ipa: ERROR: cannot connect to 'ldap://10.x.x.x:389':<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Initially, it had transferred 2000 records and stopped, until I set nsslapd-sizelimit in cn=config:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">nsslapd-sizelimit: 20000<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I then re-ran the migration a dozen times, each time it would transfer more records, but would always time out at around the 36 second mark. Now that I’m at 9762 records, it seems to have reached a peak.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I suspect this is another tunable, but haven’t been able to find it, any document that mentions it, or anyone else hitting this issue.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">RHEL 7.0 server<o:p></o:p></p>
<p class="MsoNormal">idM ipa-server-3.3.3-28<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">source is RHEL 6.5 running openldap-2.4.23-34<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">command used to migrate:<o:p></o:p></p>
<p class="MsoNormal">ipa migrate-ds --continue --bind-dn="uid=me,ou=people,ou=foo,dc=example,dc=com" --base-dn="ou=foo,dc=example,dc=com" ldap://10.x.x.x:389<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Courier New"">Cheers,<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-family:"Courier New"">-Bill</span></b><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
<br>
CONFIDENTIALITY AND SECURITY NOTICE<br>
<br>
The contents of this message and any attachments may be confidential and proprietary. If you are not an intended recipient, please inform the sender of the transmission error and delete this message immediately without reading, distributing or copying the contents.<br>
</font>
</body>
</html>