<html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 11/28/2016 10:22 AM, Giulio Casella wrote: </div> <blockquote cite="mid:c709f95c-144d-8614-e2b7-cd6f6d298d8e@di.unimi.it" type="cite">Il 28/11/2016 15:25, Lukas Slebodnik ha scritto: <blockquote type="cite">On (28/11/16 12:39), Giulio Casella wrote: <blockquote type="cite">Hello, I have a setup with two ipa server in replica, based on CentOS 7. On one server (since a couple of days) ipa cannot start, the failing service is dirsrv@<REALM-NAME>.service. In journal I have: ns-slapd[4617]: segfault at 7fb53b1ce515 ip 00007fb50126e1a6sp 00007ffc0b80d6c8 error 4 in libc-2.17.so[7fb501124000+1b7000] (just after a lot of SSL alerts complaining about some enabled cypher suite, but I cannot say if this could be related). I'm using ipa 4.2.0, and 389-ds-base 1.3.4. </blockquote> It would be good to know the exact version. rpm -q 389-ds-base </blockquote> Installed version is: 389-ds-base-1.3.4.0-33.el7_2.x86_64 <blockquote type="cite"> Please provide backtrace or coredump; other developers will know wheter it's know bug or a new bug. </blockquote> Ok, you can find attached full stacktrace. </blockquote> It's crashing trying to read updates from the replication changelog. Are you using attribute encryption? Any chance you have a way to reproduce this? Since this is happening on only one server then I think recreating the replication changelog will "fix" the issue. Just re-initializing that replica should do it. Does this server start - so it can be reinited? If not, you need to manually remove the changelog and start the directory server, and reinit it. Or perform a manual ldif initialization. (I can help with either one if needed) Regards, Mark <blockquote cite="mid:c709f95c-144d-8614-e2b7-cd6f6d298d8e@di.unimi.it" type="cite"> Thanks in advance, gc <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> </body> </html>