[Freeipa-devel] general error message at the attempt to set domain level to 0

[Martin Basti]

On 20/07/15 12:47, Oleg Fayans wrote:
> Hi everybody,
>
> I keep receiving the same non-specific error message during attepts to 
> set domain level to 0:
> $ ipa domainlevel-set 0
> ipa: ERROR: an internal error has occurred
>
> This error does not get recorded in the directory server errors log. 
> Real-time observations on the access log show that only the following 
> lines get added:
>
> [20/Jul/2015:06:45:07 -0400] conn=151 op=0 BIND dn="" method=sasl 
> version=3 mech=GSSAPI
> [20/Jul/2015:06:45:07 -0400] conn=2 op=984 RESULT err=0 tag=101 
> nentries=1 etime=0
> [20/Jul/2015:06:45:07 -0400] conn=151 op=0 RESULT err=14 tag=97 
> nentries=0 etime=0, SASL bind in progress
> [20/Jul/2015:06:45:08 -0400] conn=151 op=1 BIND dn="" method=sasl 
> version=3 mech=GSSAPI
> [20/Jul/2015:06:45:08 -0400] conn=151 op=2 BIND dn="" method=sasl 
> version=3 mech=GSSAPI
> [20/Jul/2015:06:45:08 -0400] conn=151 op=3 SRCH 
> base="cn=ipaconfig,cn=etc,dc=pesen,dc=net" scope=0 
> filter="(objectClass=*)" attrs=ALL
> [20/Jul/2015:06:45:08 -0400] conn=151 op=2 RESULT err=0 tag=97 
> nentries=0 etime=0 dn="uid=admin,cn=users,cn=accounts,dc=pesen,dc=net"
> [20/Jul/2015:06:45:08 -0400] conn=151 op=3 RESULT err=0 tag=101 
> nentries=1 etime=0
> [20/Jul/2015:06:45:08 -0400] conn=151 op=4 SRCH base="cn=Domain 
> Level,cn=ipa,cn=etc,dc=pesen,dc=net" scope=0 filter="(objectClass=*)" 
> attrs=ALL
> [20/Jul/2015:06:45:08 -0400] conn=151 op=4 RESULT err=0 tag=101 
> nentries=1 etime=0
> [20/Jul/2015:06:45:08 -0400] conn=151 op=1 RESULT err=14 tag=97 
> nentries=0 etime=0, SASL bind in progress
> [20/Jul/2015:06:45:08 -0400] conn=151 op=5 UNBIND
> [20/Jul/2015:06:45:08 -0400] conn=151 op=5 fd=102 closed - U1
>
> According to Ludwig, decreasing of the domain level is not supported, 
> so we should provide some meaningfull error message in this case
>
> P. S.
> $ rpm -q freeipa-server
> freeipa-server-4.2.90.201507171036GITf1f3ef4-0.fc22.x86_64
> The packages were built on Friday from the upstream master.
>
Can you paste apache error log here please?

-- 
Martin Basti