<div dir="ltr"><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">Thanks. This is error was did not include ipaca which is discussed a lot on this list. So I was not sure. </div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif"> </div><div class="gmail_default">There was indeed a dangling reference to an old replica. Removed now. ipa-replica-manage clean-ruv did the trick.</div></div><div class="gmail_extra"> <div class="gmail_quote">On 19 October 2016 at 14:14, Petr Spacek <<a href="mailto:pspacek@redhat.com" target="_blank">pspacek@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 19.10.2016 10:14, Ludwig Krispenz wrote: > > On 10/19/2016 09:39 AM, Prashant Bapat wrote: >> Some more info. >> >> This is happening on one of the hosts for which replica-info file was >> generated but for some reason the replica installation failed. So I went >> ahead and deleted and created the replica file again and this time >> installation went thru fine. Should this cause logs like this ? > you now have two replicaids with the same url, you need to do a cleanruv as > discussed frequently on this list For reference, it is described here: <a href="http://www.freeipa.org/page/Troubleshooting#Obsolete_RUV_records" rel="noreferrer" target="_blank">http://www.freeipa.org/page/Troubleshooting#Obsolete_RUV_records</a> Petr^2 Spacek >> >> These messages are seen every 5 mins. >> >> On 18 October 2016 at 22:38, Prashant Bapat <<a href="mailto:prashant@apigee.com">prashant@apigee.com</a> >> <mailto:<a href="mailto:prashant@apigee.com">prashant@apigee.com</a>>> wrote: >> >> Hi, >> >> I'm seeing lots of error messages like this in the DS logs. >> >> [18/Oct/2016:17:00:37 +0000] attrlist_replace - attr_replace >> (nsslapd-referral, >> ldap://<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a> >> <<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a>>) failed. >> [18/Oct/2016:17:00:37 +0000] attrlist_replace - attr_replace >> (nsslapd-referral, >> ldap://<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a> >> <<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a>>) failed. >> [18/Oct/2016:17:00:37 +0000] attrlist_replace - attr_replace >> (nsslapd-referral, >> ldap://<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a> >> <<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a>>) failed. >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace >> (nsslapd-referral, >> ldap://<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a> >> <<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a>>) failed. >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace >> (nsslapd-referral, >> ldap://<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a> >> <<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a>>) failed. >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace >> (nsslapd-referral, >> ldap://<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a> >> <<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a>>) failed. >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace >> (nsslapd-referral, >> ldap://<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a> >> <<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a>>) failed. >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace >> (nsslapd-referral, >> ldap://<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a> >> <<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a>>) failed. >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace >> (nsslapd-referral, >> ldap://<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a> >> <<a href="http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet" rel="noreferrer" target="_blank">http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet</a>>) failed. >> >> We moved from 4.1.4 (FC21) to 4.2.0 (Centos7.2) recently. We have >> total 8 IPA servers with replication. Below are the steps I followed. >> >> 1. Install a new Centos server. >> 2. Replicated against a Fedora server with CA. >> 3. Moved the DNA ranges. >> 4. From the Centos master created replicas. >> >> Is this related to the DS package version ? We >> have 389-ds-base-1.3.4.0-33.el7_2.x86_64. >> >> Thanks. >> --Prashant >> >> >> >> > > > -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project </blockquote></div> </div>