<div dir="ltr">We're seeing the following messages in the error log:<div><br></div><div><div>[11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa1.eu-west-1.production.example.com:389/o%3Dipaca">ipa1.eu-west-1.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div><div>[11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://<a href="http://ipa2.west-2.production.example.com:389/o%3Dipaca">ipa2.west-2.production.example.com:389/o%3Dipaca</a>) failed.</div></div><div><br></div><div>I'm wondering, if it is at all related to this:</div><div><br></div><div><div>[michael.moody@ipa1 ~]$ ldapsearch -ZZ -h <a href="http://ipa1.west-2.production.example.com">ipa1.west-2.production.example.com</a> -D "cn=Directory Manager" -W -b "o=ipaca" "(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))" | grep "nsds50ruv\|nsDS5ReplicaId"</div><div>p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit: Permission denied</div><div>Enter LDAP Password:</div><div>nsDS5ReplicaId: 96</div><div>nsds50ruv: {replicageneration} 56941682000000600000</div><div>nsds50ruv: {replica 96 ldap://<a href="http://ipa1.west-2.production.example.com:389">ipa1.west-2.production.example.com:389</a>} 5694168b</div><div>nsds50ruv: {replica 76 ldap://<a href="http://ipa1.eu-west-1.production.example.com:389">ipa1.eu-west-1.production.example.com:389</a>} 57d8a</div><div>nsds50ruv: {replica 81 ldap://<a href="http://ipa1.eu-west-1.production.example.com:389">ipa1.eu-west-1.production.example.com:389</a>} 57d33</div><div>nsds50ruv: {replica 86 ldap://<a href="http://ipa2.west-2.production.example.com:389">ipa2.west-2.production.example.com:389</a>} 5696e792</div><div>nsds50ruv: {replica 91 ldap://<a href="http://ipa2.west-2.production.example.com:389">ipa2.west-2.production.example.com:389</a>} 56941bab</div><div>nsds50ruv: {replica 97 ldap://<a href="http://ipa2.west-2.production.example.com:389">ipa2.west-2.production.example.com:389</a>} 569416ae</div><div>[michael.moody@ipa1 ~]$ ldapsearch -ZZ -h <a href="http://ipa2.west-2.production.example.com">ipa2.west-2.production.example.com</a> -D "cn=Directory Manager" -W -b "o=ipaca" "(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))" | grep "nsds50ruv\|nsDS5ReplicaId"</div><div>p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit: Permission denied</div><div>Enter LDAP Password:</div><div>nsDS5ReplicaId: 86</div><div>nsds50ruv: {replicageneration} 56941682000000600000</div><div>nsds50ruv: {replica 86 ldap://<a href="http://ipa2.west-2.production.example.com:389">ipa2.west-2.production.example.com:389</a>} 5696e792</div><div>nsds50ruv: {replica 96 ldap://<a href="http://ipa1.west-2.production.example.com:389">ipa1.west-2.production.example.com:389</a>} 5694168b</div><div>nsds50ruv: {replica 91 ldap://<a href="http://ipa2.west-2.production.example.com:389">ipa2.west-2.production.example.com:389</a>} 56941bab</div><div>nsds50ruv: {replica 97 ldap://<a href="http://ipa2.west-2.production.example.com:389">ipa2.west-2.production.example.com:389</a>} 569416ae</div><div>nsds50ruv: {replica 81 ldap://<a href="http://ipa1.eu-west-1.production.example.com:389">ipa1.eu-west-1.production.example.com:389</a>} 57d33</div><div>nsds50ruv: {replica 76 ldap://<a href="http://ipa1.eu-west-1.production.example.com:389">ipa1.eu-west-1.production.example.com:389</a>} 57d8a</div><div>[michael.moody@ipa1 ~]$ ldapsearch -ZZ -h <a href="http://ipa1.eu-west-1.production.example.com">ipa1.eu-west-1.production.example.com</a> -D "cn=Directory Manager" -W -b "o=ipaca" "(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))" | grep "nsds50ruv\|nsDS5ReplicaId"</div><div>p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit: Permission denied</div><div>Enter LDAP Password:</div><div>nsDS5ReplicaId: 76</div><div>nsds50ruv: {replicageneration} 56941682000000600000</div><div>nsds50ruv: {replica 76 ldap://<a href="http://ipa1.eu-west-1.production.example.com:389">ipa1.eu-west-1.production.example.com:389</a>} 57d8a</div><div>nsds50ruv: {replica 96 ldap://<a href="http://ipa1.west-2.production.example.com:389">ipa1.west-2.production.example.com:389</a>} 5694168b</div><div>nsds50ruv: {replica 81 ldap://<a href="http://ipa1.eu-west-1.production.example.com:389">ipa1.eu-west-1.production.example.com:389</a>} 57d33</div><div>nsds50ruv: {replica 86 ldap://<a href="http://ipa2.west-2.production.example.com:389">ipa2.west-2.production.example.com:389</a>} 5696e792</div><div>nsds50ruv: {replica 91 ldap://<a href="http://ipa2.west-2.production.example.com:389">ipa2.west-2.production.example.com:389</a>} 56941bab</div><div>nsds50ruv: {replica 97 ldap://<a href="http://ipa2.west-2.production.example.com:389">ipa2.west-2.production.example.com:389</a>} 569416ae</div></div><div><br></div><div>Any pointers would be greatly appreciated.</div><div><br></div><div>Thanks,</div><div>Michael</div></div>