[Freeipa-devel] [PATCH 0007] replica install fails with domain level 1
Oleg Fayans
ofayans at redhat.com
Mon Jun 1 11:34:22 UTC 2015
So far I've bumped into problem, using the newly built packages:
I've installed a master, a replica (replica1) Then replica3 (prepared on
replica1), so, my topology looks like this:
master <=> replica1 <=> replica3
However, the `ipa topologysegment-find` shows correct topology only on
replicas (not on master)
master:
root at testmaster:~]$ ipa topologysegment-find
Suffix name: realm
-----------------
1 segment matched
-----------------
Segment name: replica1.zaeba.li-to-testmaster.zaeba.li
Left node: replica1.zaeba.li
Right node: testmaster.zaeba.li
Connectivity: both
----------------------------
Number of entries returned 1
----------------------------
replica1:
ofayans at replica1:~]$ ipa topologysegment-find
Suffix name: realm
------------------
2 segments matched
------------------
Segment name: replica1.zaeba.li-to-replica3.zaeba.li
Left node: replica1.zaeba.li
Right node: replica3.zaeba.li
Connectivity: both
Segment name: replica1.zaeba.li-to-testmaster.zaeba.li
Left node: replica1.zaeba.li
Right node: testmaster.zaeba.li
Connectivity: both
----------------------------
Number of entries returned 2
----------------------------
replica3:
ofayans at replica3:~]$ ipa topologysegment-find
Suffix name: realm
------------------
2 segments matched
------------------
Segment name: replica1.zaeba.li-to-replica3.zaeba.li
Left node: replica1.zaeba.li
Right node: replica3.zaeba.li
Connectivity: both
Segment name: replica1.zaeba.li-to-testmaster.zaeba.li
Left node: replica1.zaeba.li
Right node: testmaster.zaeba.li
Connectivity: both
----------------------------
Number of entries returned 2
----------------------------
The second problem, is that the changes (like user creation) made on any
of the nodes do not get replicate to other ones. The dirsrv logs are
full of GSSAPI errors like this:
=====================================================================
[01/Jun/2015:07:04:48 -0400] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -1
(Can't contact LDAP server)
[01/Jun/2015:07:09:46 -0400] slapi_ldap_bind - Error: could not send
startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:09:46 -0400] slapi_ldap_bind - Error: could not send
startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:09:47 -0400] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-1 (Can't contact LDAP server) ((null)) errno 0 (Success)
=====================================================================
Full logs are attached
I am using the 389-ds-base from mreynolds/389-ds-base dnf repo:
root at testmaster:~]$ rpm -q 389-ds-base
389-ds-base-2015_03_11-1.fc21.x86_64
On 06/01/2015 11:19 AM, Oleg Fayans wrote:
> Woks for me too. Will perform extensive testing today, and report
> everything that I find.
> Thanks, Ludwig!
>> On 05/29/2015 04:44 PM, Ludwig Krispenz wrote:
>>> This is a patch for the two issues reported in ticket #5035
>>> https://fedorahosted.org/freeipa/ticket/5035
>>>
>>>
>>
>> Works for me. I was able to install 2 replicas with domain level 1 in
>> one topology.
>>
>> Code looks good to me as well. Tentative ACK (would be nice if it was
>> skimmed by Thierry).
>
--
Oleg Fayans
Quality Engineer
FreeIPA team
RedHat.
-------------- next part --------------
389-Directory/1.3.4.a1 B2015.070.423
testmaster.zaeba.li:389 (/etc/dirsrv/slapd-ZAEBA-LI)
[01/Jun/2015:04:58:10 -0400] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[01/Jun/2015:04:58:10 -0400] - check_and_set_import_cache: pagesize: 4096, pages: 488624, procpages: 54078
[01/Jun/2015:04:58:10 -0400] - Import allocates 781796KB import cache.
[01/Jun/2015:04:58:10 -0400] - import userRoot: Beginning import job...
[01/Jun/2015:04:58:10 -0400] - import userRoot: Index buffering enabled with bucket size 100
[01/Jun/2015:04:58:10 -0400] - import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"
[01/Jun/2015:04:58:11 -0400] - import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)
[01/Jun/2015:04:58:11 -0400] - import userRoot: Workers finished; cleaning up...
[01/Jun/2015:04:58:12 -0400] - import userRoot: Workers cleaned up.
[01/Jun/2015:04:58:12 -0400] - import userRoot: Cleaning up producer thread...
[01/Jun/2015:04:58:12 -0400] - import userRoot: Indexing complete. Post-processing...
[01/Jun/2015:04:58:12 -0400] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[01/Jun/2015:04:58:12 -0400] - import userRoot: Generating numSubordinates complete.
[01/Jun/2015:04:58:12 -0400] - import userRoot: Gathering ancestorid non-leaf IDs...
[01/Jun/2015:04:58:12 -0400] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[01/Jun/2015:04:58:12 -0400] - Nothing to do to build ancestorid index
[01/Jun/2015:04:58:12 -0400] - import userRoot: Created ancestorid index (new idl).
[01/Jun/2015:04:58:12 -0400] - import userRoot: Flushing caches...
[01/Jun/2015:04:58:12 -0400] - import userRoot: Closing files...
[01/Jun/2015:04:58:12 -0400] - All database threads now stopped
[01/Jun/2015:04:58:12 -0400] - import userRoot: Import complete. Processed 1 entries in 2 seconds. (0.50 entries/sec)
[01/Jun/2015:04:58:13 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:04:58:13 -0400] - Db home directory is not set. Possibly nsslapd-directory (optionally nsslapd-db-home-directory) is missing in the config file.
[01/Jun/2015:04:58:13 -0400] - resizing db cache size: 800559104 -> 6400000
[01/Jun/2015:04:58:14 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:04:58:14 -0400] - convert_pbe_des_to_aes: Converting DES passwords to AES...
[01/Jun/2015:04:58:14 -0400] - convert_pbe_des_to_aes: Successfully disabled DES plugin (cn=DES,cn=Password Storage Schemes,cn=plugins,cn=config)
[01/Jun/2015:04:58:14 -0400] - convert_pbe_des_to_aes: Finished - no DES passwords to convert.
[01/Jun/2015:04:58:15 -0400] - slapd shutting down - signaling operation threads - op stack size 0 max work q size 0 max work q stack size 0
[01/Jun/2015:04:58:15 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:04:58:15 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:04:58:15 -0400] - All database threads now stopped
[01/Jun/2015:04:58:15 -0400] - slapd shutting down - freed 0 work q stack objects - freed 0 op stack objects
[01/Jun/2015:04:58:15 -0400] - slapd stopped.
[01/Jun/2015:04:58:16 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:04:58:17 -0400] - resizing db cache size: 6400000 -> 5120000
[01/Jun/2015:04:58:17 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:04:58:17 -0400] - The change of nsslapd-ldapilisten will not take effect until the server is restarted
[01/Jun/2015:04:58:18 -0400] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[01/Jun/2015:04:58:18 -0400] - slapd shutting down - waiting for 1 thread to terminate
[01/Jun/2015:04:58:18 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:04:58:18 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:04:58:19 -0400] - All database threads now stopped
[01/Jun/2015:04:58:19 -0400] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[01/Jun/2015:04:58:19 -0400] - slapd stopped.
[01/Jun/2015:04:58:20 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:04:58:20 -0400] - resizing db cache size: 5120000 -> 4096000
[01/Jun/2015:04:58:21 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:04:58:21 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:04:58:21 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:04:58:21 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:04:58:26 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:04:58:28 -0400] NSACLPlugin - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:29 -0400] NSACLPlugin - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:29 -0400] NSACLPlugin - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:29 -0400] NSACLPlugin - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:29 -0400] NSACLPlugin - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:29 -0400] NSACLPlugin - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:30 -0400] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[01/Jun/2015:04:58:31 -0400] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[01/Jun/2015:04:58:33 -0400] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 2 max work q stack size 2
[01/Jun/2015:04:58:34 -0400] - slapd shutting down - waiting for 4 threads to terminate
[01/Jun/2015:04:58:34 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:04:58:34 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:04:58:35 -0400] - All database threads now stopped
[01/Jun/2015:04:58:35 -0400] - slapd shutting down - freed 2 work q stack objects - freed 3 op stack objects
[01/Jun/2015:04:58:35 -0400] - slapd stopped.
[01/Jun/2015:04:58:36 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:04:58:37 -0400] - resizing db cache size: 4096000 -> 3276800
[01/Jun/2015:04:58:38 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:04:58:38 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:04:58:38 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:04:58:38 -0400] NSACLPlugin - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:38 -0400] NSACLPlugin - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:38 -0400] NSACLPlugin - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:38 -0400] NSACLPlugin - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:38 -0400] NSACLPlugin - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:38 -0400] NSACLPlugin - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:04:58:38 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:04:58:38 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:04:58:38 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:04:58:38 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:04:58:38 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:04:58:38 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:04:58:38 -0400] - The change of nsslapd-maxdescriptors will not take effect until the server is restarted
[01/Jun/2015:04:58:59 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:04:59:46 -0400] - ipaca: Indexing VLV: allCerts-pki-tomcatIndex
[01/Jun/2015:04:59:46 -0400] - ipaca: Indexing VLV: allExpiredCerts-pki-tomcatIndex
[01/Jun/2015:04:59:46 -0400] - ipaca: Indexing VLV: allInvalidCerts-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allInValidCertsNotBefore-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allNonRevokedCerts-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allRevokedCaCerts-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allRevokedCerts-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allRevokedCertsNotAfter-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allRevokedExpiredCerts-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCaCerts-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCerts-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allValidCerts-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allValidCertsNotAfter-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: allValidOrRevokedCerts-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caAll-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caCanceled-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caCanceledEnrollment-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caCanceledRenewal-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caCanceledRevocation-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caComplete-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caCompleteEnrollment-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caCompleteRenewal-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caCompleteRevocation-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caEnrollment-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caPending-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caPendingEnrollment-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caPendingRenewal-pki-tomcatIndex
[01/Jun/2015:04:59:47 -0400] - ipaca: Indexing VLV: caPendingRevocation-pki-tomcatIndex
[01/Jun/2015:04:59:48 -0400] - ipaca: Indexing VLV: caRejected-pki-tomcatIndex
[01/Jun/2015:04:59:48 -0400] - ipaca: Indexing VLV: caRejectedEnrollment-pki-tomcatIndex
[01/Jun/2015:04:59:48 -0400] - ipaca: Indexing VLV: caRejectedRenewal-pki-tomcatIndex
[01/Jun/2015:04:59:48 -0400] - ipaca: Indexing VLV: caRejectedRevocation-pki-tomcatIndex
[01/Jun/2015:04:59:48 -0400] - ipaca: Indexing VLV: caRenewal-pki-tomcatIndex
[01/Jun/2015:04:59:48 -0400] - ipaca: Indexing VLV: caRevocation-pki-tomcatIndex
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:48 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[01/Jun/2015:04:59:49 -0400] - ipaca: Finished indexing.
[01/Jun/2015:05:00:50 -0400] - Warning: Adding configuration attribute "nsslapd-security"
[01/Jun/2015:05:00:50 -0400] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 2 max work q stack size 2
[01/Jun/2015:05:00:50 -0400] - slapd shutting down - waiting for 1 thread to terminate
[01/Jun/2015:05:00:50 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:00:51 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:00:52 -0400] - All database threads now stopped
[01/Jun/2015:05:00:52 -0400] - slapd shutting down - freed 2 work q stack objects - freed 3 op stack objects
[01/Jun/2015:05:00:52 -0400] - slapd stopped.
[01/Jun/2015:05:00:54 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:00:54 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:00:54 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:00:55 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:00:55 -0400] - resizing db cache size: 3276800 -> 2621440
[01/Jun/2015:05:00:55 -0400] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...
[01/Jun/2015:05:00:55 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[01/Jun/2015:05:00:55 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...
[01/Jun/2015:05:00:55 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[01/Jun/2015:05:00:55 -0400] attrcrypt - No symmetric key found for cipher AES in backend ipaca, attempting to create one...
[01/Jun/2015:05:00:55 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[01/Jun/2015:05:00:56 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend ipaca, attempting to create one...
[01/Jun/2015:05:00:56 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[01/Jun/2015:05:00:56 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:00:56 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:00:57 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:00:57 -0400] NSACLPlugin - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:00:57 -0400] NSACLPlugin - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:00:57 -0400] NSACLPlugin - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:00:57 -0400] NSACLPlugin - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:00:57 -0400] NSACLPlugin - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:00:57 -0400] NSACLPlugin - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:00:57 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:00:57 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:05:00:57 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:05:00:57 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:00:58 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:00:58 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:00:58 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:01:33 -0400] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[01/Jun/2015:05:01:33 -0400] - slapd shutting down - waiting for 3 threads to terminate
[01/Jun/2015:05:01:33 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:01:33 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:01:36 -0400] - All database threads now stopped
[01/Jun/2015:05:01:36 -0400] - slapd shutting down - freed 1 work q stack objects - freed 3 op stack objects
[01/Jun/2015:05:01:36 -0400] - slapd stopped.
[01/Jun/2015:05:01:37 -0400] - Information: Non-Secure Port Disabled
[01/Jun/2015:05:01:37 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:01:37 -0400] - resizing db cache size: 2621440 -> 2097152
[01/Jun/2015:05:01:38 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:01:38 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:01:38 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:01:38 -0400] NSACLPlugin - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:01:38 -0400] NSACLPlugin - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:01:38 -0400] NSACLPlugin - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:01:38 -0400] NSACLPlugin - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:01:38 -0400] NSACLPlugin - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:01:38 -0400] NSACLPlugin - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:01:38 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:01:38 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:01:38 -0400] - slapd started. Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:01:40 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:01:40 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:01:40 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:01:40 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:01:46 -0400] - userRoot: Indexing attribute: memberuid
[01/Jun/2015:05:01:46 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:01:52 -0400] - userRoot: Indexing attribute: member
[01/Jun/2015:05:01:54 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:01:59 -0400] - userRoot: Indexing attribute: uniquemember
[01/Jun/2015:05:02:00 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:02:05 -0400] - userRoot: Indexing attribute: owner
[01/Jun/2015:05:02:06 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:02:11 -0400] - userRoot: Indexing attribute: seeAlso
[01/Jun/2015:05:02:12 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:02:18 -0400] - userRoot: Indexing attribute: ipatokenradiusconfiglink
[01/Jun/2015:05:02:18 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:02:24 -0400] - userRoot: Indexing attribute: ipaassignedidview
[01/Jun/2015:05:02:24 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:02:30 -0400] - userRoot: Indexing attribute: ntUniqueId
[01/Jun/2015:05:02:31 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:02:36 -0400] - userRoot: Indexing attribute: ntUserDomainId
[01/Jun/2015:05:02:37 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:02:38 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:02:38 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:02:46 -0400] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[01/Jun/2015:05:02:46 -0400] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[01/Jun/2015:05:02:47 -0400] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[01/Jun/2015:05:02:47 -0400] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[01/Jun/2015:05:02:52 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:02:52 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:02:53 -0400] NSACLPlugin - The ACL target cn=keys,cn=sec,cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:02:53 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:02:53 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:23 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:24 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:25 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:27 -0400] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 1 max work q stack size 1
[01/Jun/2015:05:03:27 -0400] - slapd shutting down - waiting for 1 thread to terminate
[01/Jun/2015:05:03:27 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:03:27 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:03:28 -0400] - All database threads now stopped
[01/Jun/2015:05:03:28 -0400] - slapd shutting down - freed 1 work q stack objects - freed 3 op stack objects
[01/Jun/2015:05:03:28 -0400] - slapd stopped.
[01/Jun/2015:05:03:30 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:03:30 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:30 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:03:31 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:03:31 -0400] - resizing db cache size: 2097152 -> 1677721
[01/Jun/2015:05:03:31 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:03:31 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:03:31 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=keys,cn=sec,cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:32 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:05:03:32 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:03:32 -0400] attrcrypt - No symmetric key found for cipher AES in backend changelog, attempting to create one...
[01/Jun/2015:05:03:32 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[01/Jun/2015:05:03:32 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend changelog, attempting to create one...
[01/Jun/2015:05:03:32 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[01/Jun/2015:05:03:34 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:03:34 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:03:34 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:03:34 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:03:35 -0400] - slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
[01/Jun/2015:05:03:35 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:03:35 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:03:36 -0400] - All database threads now stopped
[01/Jun/2015:05:03:36 -0400] - slapd shutting down - freed 1 work q stack objects - freed 1 op stack objects
[01/Jun/2015:05:03:36 -0400] - slapd stopped.
[01/Jun/2015:05:03:37 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:03:37 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:03:37 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:03:37 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:03:37 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:37 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:37 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:37 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:03:37 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:03:38 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:03:38 -0400] - resizing db cache size: 1677721 -> 1342176
[01/Jun/2015:05:03:39 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:03:39 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:03:39 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=keys,cn=sec,cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=dns,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:39 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:03:40 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:05:03:40 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:03:40 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:03:40 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:03:40 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:03:54 -0400] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[01/Jun/2015:05:03:56 -0400] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[01/Jun/2015:05:07:54 -0400] - slapd shutting down - signaling operation threads - op stack size 5 max work q size 2 max work q stack size 2
[01/Jun/2015:05:07:54 -0400] - slapd shutting down - waiting for 1 thread to terminate
[01/Jun/2015:05:07:54 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:07:54 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:07:55 -0400] - All database threads now stopped
[01/Jun/2015:05:07:55 -0400] - slapd shutting down - freed 2 work q stack objects - freed 6 op stack objects
[01/Jun/2015:05:07:55 -0400] - slapd stopped.
[01/Jun/2015:05:07:56 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:07:56 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:07:56 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:07:56 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:07:56 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:07:56 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:07:56 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:07:57 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:07:58 -0400] - resizing db cache size: 1342176 -> 1073740
[01/Jun/2015:05:07:58 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:07:58 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:07:58 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:07:58 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:07:58 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:07:58 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:07:58 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:07:58 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:07:58 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:07:58 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:07:58 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:07:59 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:05:07:59 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:07:59 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:07:59 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:07:59 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:07:59 -0400] - Entry "uid=admin,ou=people,o=ipaca" -- attribute "krbExtraData" not allowed
[01/Jun/2015:05:10:51 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[01/Jun/2015:05:10:53 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meToreplica1.zaeba.li" (replica1:389)".
[01/Jun/2015:05:10:58 -0400] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=meToreplica1.zaeba.li" (replica1:389)". Sent 382 entries.
[01/Jun/2015:05:11:00 -0400] ipa-topology-plugin - ipa_topo_util_modify: failed to modify entry (cn=meToreplica1.zaeba.li,cn=replica,cn=dc\3Dzaeba\2Cdc\3Dli,cn=mapping tree,cn=config): error 53
[01/Jun/2015:05:11:02 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Unable to receive the response for a startReplication extended operation to consumer (Can't contact LDAP server). Will retry later.
[01/Jun/2015:05:11:06 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with SIMPLE auth resumed
[01/Jun/2015:05:12:23 -0400] NSMMReplicationPlugin - agmt="cn=masterAgreement1-replica1.zaeba.li-pki-tomcat" (replica1:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[01/Jun/2015:05:12:26 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=masterAgreement1-replica1.zaeba.li-pki-tomcat" (replica1:389)".
[01/Jun/2015:05:12:30 -0400] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=masterAgreement1-replica1.zaeba.li-pki-tomcat" (replica1:389)". Sent 70 entries.
[01/Jun/2015:05:13:50 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Permission denied)) errno 0 (Success)
[01/Jun/2015:05:13:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[01/Jun/2015:05:13:51 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Permission denied))
[01/Jun/2015:05:13:54 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Permission denied)) errno 0 (Success)
[01/Jun/2015:05:13:54 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[01/Jun/2015:05:14:02 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 104 (Connection reset by peer)
[01/Jun/2015:05:14:02 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:14:02 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:05:14:12 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:14:12 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:14:36 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:14:36 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:15:24 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:15:24 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:17:00 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth resumed
[01/Jun/2015:05:33:50 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:33:50 -0400] NSMMReplicationPlugin - agmt="cn=masterAgreement1-replica1.zaeba.li-pki-tomcat" (replica1:389): Replication bind with SIMPLE auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:05:33:57 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:34:03 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:34:15 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:34:26 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:34:26 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:34:26 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:05:34:33 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:34:33 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:34:39 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:34:39 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:34:39 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:34:51 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:34:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:35:15 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:35:15 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:35:27 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:36:03 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:36:03 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:37:03 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:37:39 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:37:39 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:40:15 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:40:51 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:40:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:45:15 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:45:51 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:45:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:50:15 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:50:51 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:50:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:05:55:15 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:55:51 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:05:55:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:00:15 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:06:00:51 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:06:00:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:05:15 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:06:05:51 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:06:05:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:10:12 -0400] NSMMReplicationPlugin - agmt="cn=masterAgreement1-replica1.zaeba.li-pki-tomcat" (replica1:389): Replication bind with SIMPLE auth resumed
[01/Jun/2015:06:10:48 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth resumed
[01/Jun/2015:06:33:47 -0400] agmt="cn=masterAgreement1-replica1.zaeba.li-pki-tomcat" (replica1:389) - Can't locate CSN 556c30c4000204470000 in the changelog (DB rc=-30988). If replication stops, the consumer may need to be reinitialized.
[01/Jun/2015:06:34:32 -0400] agmt="cn=meToreplica1.zaeba.li" (replica1:389) - Can't locate CSN 556c31dc000200050000 in the changelog (DB rc=-30988). If replication stops, the consumer may need to be reinitialized.
[01/Jun/2015:06:38:09 -0400] agmt="cn=meToreplica1.zaeba.li" (replica1:389) - Can't locate CSN 556c3583000300050000 in the changelog (DB rc=-30988). If replication stops, the consumer may need to be reinitialized.
[01/Jun/2015:06:50:55 -0400] - slapd shutting down - signaling operation threads - op stack size 10 max work q size 2 max work q stack size 2
[01/Jun/2015:06:50:55 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:51:02 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:51:09 -0400] - All database threads now stopped
[01/Jun/2015:06:51:12 -0400] - slapd shutting down - freed 2 work q stack objects - freed 10 op stack objects
[01/Jun/2015:06:51:12 -0400] - slapd stopped.
[01/Jun/2015:06:53:52 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:53:52 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:53:52 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:52 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:52 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:52 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:52 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:53 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:53 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:53 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:53 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:53 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:53 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:53 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:53 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:53:53 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:53:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:54 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:53:54 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:53:54 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:53:55 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:55 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:55 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:55 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:56 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:56 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:56 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:56 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:53:56 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:56 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:53:57 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:53:57 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:53:57 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:53:58 -0400] - resizing db cache size: 1073740 -> 858992
[01/Jun/2015:06:54:00 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:54:00 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:54:00 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:54:01 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:54:01 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:54:01 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:54:01 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:54:02 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:54:02 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:54:02 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:54:02 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:54:02 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:06:54:03 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:54:03 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:54:04 -0400] NSMMReplicationPlugin - agmt="cn=masterAgreement1-replica1.zaeba.li-pki-tomcat" (replica1:389): Replication bind with SIMPLE auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:54:04 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/testmaster.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[01/Jun/2015:06:54:04 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 115 (Operation now in progress)
[01/Jun/2015:06:54:04 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:54:04 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:54:04 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:54:04 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:54:04 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:54:07 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:54:08 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:54:08 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:54:13 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:54:13 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:54:14 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:54:25 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:54:25 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:54:25 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:54:49 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:54:49 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:54:49 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:55:37 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:55:37 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:55:37 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:57:13 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:57:13 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:57:13 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:00:25 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:00:26 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:07:00:26 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:05:25 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:05:25 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:07:05:25 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:10:25 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:10:25 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:07:10:25 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:15:25 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:15:25 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:07:15:25 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
-------------- next part --------------
389-Directory/1.3.4.a1 B2015.070.423
replica1.zaeba.li:389 (/etc/dirsrv/slapd-ZAEBA-LI)
[01/Jun/2015:05:10:32 -0400] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[01/Jun/2015:05:10:32 -0400] - check_and_set_import_cache: pagesize: 4096, pages: 424880, procpages: 54077
[01/Jun/2015:05:10:32 -0400] - WARNING: After allocating import cache 679808KB, the available memory is 1019712KB, which is less than the soft limit 1048576KB. You may want to decrease the import cache size and rerun import.
[01/Jun/2015:05:10:32 -0400] - Import allocates 679808KB import cache.
[01/Jun/2015:05:10:32 -0400] - import userRoot: Beginning import job...
[01/Jun/2015:05:10:32 -0400] - import userRoot: Index buffering enabled with bucket size 100
[01/Jun/2015:05:10:32 -0400] - import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"
[01/Jun/2015:05:10:32 -0400] - import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)
[01/Jun/2015:05:10:33 -0400] - import userRoot: Workers finished; cleaning up...
[01/Jun/2015:05:10:33 -0400] - import userRoot: Workers cleaned up.
[01/Jun/2015:05:10:33 -0400] - import userRoot: Cleaning up producer thread...
[01/Jun/2015:05:10:33 -0400] - import userRoot: Indexing complete. Post-processing...
[01/Jun/2015:05:10:33 -0400] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[01/Jun/2015:05:10:33 -0400] - import userRoot: Generating numSubordinates complete.
[01/Jun/2015:05:10:33 -0400] - import userRoot: Gathering ancestorid non-leaf IDs...
[01/Jun/2015:05:10:34 -0400] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[01/Jun/2015:05:10:34 -0400] - Nothing to do to build ancestorid index
[01/Jun/2015:05:10:34 -0400] - import userRoot: Created ancestorid index (new idl).
[01/Jun/2015:05:10:34 -0400] - import userRoot: Flushing caches...
[01/Jun/2015:05:10:34 -0400] - import userRoot: Closing files...
[01/Jun/2015:05:10:34 -0400] - All database threads now stopped
[01/Jun/2015:05:10:34 -0400] - import userRoot: Import complete. Processed 1 entries in 2 seconds. (0.50 entries/sec)
[01/Jun/2015:05:10:35 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:10:35 -0400] - Db home directory is not set. Possibly nsslapd-directory (optionally nsslapd-db-home-directory) is missing in the config file.
[01/Jun/2015:05:10:35 -0400] - resizing db cache size: 696123392 -> 6400000
[01/Jun/2015:05:10:35 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:10:35 -0400] - convert_pbe_des_to_aes: Converting DES passwords to AES...
[01/Jun/2015:05:10:35 -0400] - convert_pbe_des_to_aes: Successfully disabled DES plugin (cn=DES,cn=Password Storage Schemes,cn=plugins,cn=config)
[01/Jun/2015:05:10:35 -0400] - convert_pbe_des_to_aes: Finished - no DES passwords to convert.
[01/Jun/2015:05:10:36 -0400] - slapd shutting down - signaling operation threads - op stack size 0 max work q size 0 max work q stack size 0
[01/Jun/2015:05:10:36 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:10:37 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:10:37 -0400] - All database threads now stopped
[01/Jun/2015:05:10:37 -0400] - slapd shutting down - freed 0 work q stack objects - freed 0 op stack objects
[01/Jun/2015:05:10:37 -0400] - slapd stopped.
[01/Jun/2015:05:10:38 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:10:38 -0400] - resizing db cache size: 6400000 -> 5120000
[01/Jun/2015:05:10:39 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:10:39 -0400] - The change of nsslapd-ldapilisten will not take effect until the server is restarted
[01/Jun/2015:05:10:39 -0400] - Warning: Adding configuration attribute "nsslapd-security"
[01/Jun/2015:05:10:40 -0400] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 1 max work q stack size 1
[01/Jun/2015:05:10:40 -0400] - slapd shutting down - waiting for 1 thread to terminate
[01/Jun/2015:05:10:40 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:10:40 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:10:41 -0400] - All database threads now stopped
[01/Jun/2015:05:10:41 -0400] - slapd shutting down - freed 1 work q stack objects - freed 3 op stack objects
[01/Jun/2015:05:10:41 -0400] - slapd stopped.
[01/Jun/2015:05:10:42 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:10:42 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:10:42 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:10:42 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:10:43 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:10:43 -0400] - resizing db cache size: 5120000 -> 4096000
[01/Jun/2015:05:10:44 -0400] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...
[01/Jun/2015:05:10:44 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[01/Jun/2015:05:10:44 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...
[01/Jun/2015:05:10:44 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[01/Jun/2015:05:10:44 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:05:10:44 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:05:10:44 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:10:44 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:10:44 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:10:45 -0400] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[01/Jun/2015:05:10:45 -0400] - slapd shutting down - waiting for 3 threads to terminate
[01/Jun/2015:05:10:45 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:10:45 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:10:46 -0400] - All database threads now stopped
[01/Jun/2015:05:10:46 -0400] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[01/Jun/2015:05:10:46 -0400] - slapd stopped.
[01/Jun/2015:05:10:48 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:10:48 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:48 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:10:49 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:10:49 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:10:49 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:10:49 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:10:49 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:10:49 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:10:49 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:10:49 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:10:49 -0400] - resizing db cache size: 4096000 -> 3276800
[01/Jun/2015:05:10:49 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:05:10:49 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:05:10:49 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:10:49 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:10:49 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:10:51 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[01/Jun/2015:05:10:52 -0400] ipa-topology-plugin - ipa_topo_be_state_changebackend userRoot is going offline; inactivate plugin
[01/Jun/2015:05:10:52 -0400] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=zaeba,dc=li is going offline; disabling replication
[01/Jun/2015:05:10:52 -0400] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[01/Jun/2015:05:10:55 -0400] - import userRoot: Workers finished; cleaning up...
[01/Jun/2015:05:10:56 -0400] - import userRoot: Workers cleaned up.
[01/Jun/2015:05:10:56 -0400] - import userRoot: Indexing complete. Post-processing...
[01/Jun/2015:05:10:56 -0400] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[01/Jun/2015:05:10:56 -0400] - import userRoot: Generating numSubordinates complete.
[01/Jun/2015:05:10:56 -0400] - import userRoot: Gathering ancestorid non-leaf IDs...
[01/Jun/2015:05:10:56 -0400] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[01/Jun/2015:05:10:56 -0400] - import userRoot: Creating ancestorid index (new idl)...
[01/Jun/2015:05:10:56 -0400] - import userRoot: Created ancestorid index (new idl).
[01/Jun/2015:05:10:56 -0400] - import userRoot: Flushing caches...
[01/Jun/2015:05:10:56 -0400] - import userRoot: Closing files...
[01/Jun/2015:05:10:57 -0400] - import userRoot: Import complete. Processed 382 entries in 4 seconds. (95.50 entries/sec)
[01/Jun/2015:05:10:57 -0400] ipa-topology-plugin - ipa_topo_be_state_change - backend userRoot is coming online; checking domain level and init shared topology
[01/Jun/2015:05:10:57 -0400] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=zaeba,dc=li is coming online; enabling replication
[01/Jun/2015:05:10:57 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:10:57 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:10:57 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:10:57 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:10:57 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:10:57 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:10:57 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:10:57 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:10:57 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:11:01 -0400] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 2 max work q stack size 2
[01/Jun/2015:05:11:01 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:11:01 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Warning: Attempting to release replica, but unable to receive endReplication extended operation response from the replica. Error -5 (Timed out)
[01/Jun/2015:05:11:01 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:11:02 -0400] - All database threads now stopped
[01/Jun/2015:05:11:02 -0400] - slapd shutting down - freed 2 work q stack objects - freed 3 op stack objects
[01/Jun/2015:05:11:02 -0400] - slapd stopped.
[01/Jun/2015:05:11:04 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:11:04 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:11:04 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:11:05 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:11:05 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:11:05 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:11:05 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:11:05 -0400] - resizing db cache size: 8192000 -> 2621440
[01/Jun/2015:05:11:05 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:11:05 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:11:05 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:11:05 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:11:05 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:11:05 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:11:05 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:11:05 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:11:05 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:11:05 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:11:05 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:11:06 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:11:06 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:05:11:06 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:05:11:06 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:11:06 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:11:06 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:11:06 -0400] - The change of nsslapd-maxdescriptors will not take effect until the server is restarted
[01/Jun/2015:05:11:28 -0400] ipa-topology-plugin - ipa_topo_util_modify: failed to modify entry (cn=meTotestmaster.zaeba.li,cn=replica,cn=dc\3Dzaeba\2Cdc\3Dli,cn=mapping tree,cn=config): error 53
[01/Jun/2015:05:11:38 -0400] attrcrypt - No symmetric key found for cipher AES in backend ipaca, attempting to create one...
[01/Jun/2015:05:11:38 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[01/Jun/2015:05:11:38 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend ipaca, attempting to create one...
[01/Jun/2015:05:11:38 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[01/Jun/2015:05:11:38 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:12:24 -0400] NSMMReplicationPlugin - multimaster_be_state_change: replica o=ipaca is going offline; disabling replication
[01/Jun/2015:05:12:24 -0400] NSMMReplicationPlugin - agmt="cn=cloneAgreement1-replica1.zaeba.li-pki-tomcat" (testmaster:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[01/Jun/2015:05:12:24 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:12:25 -0400] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[01/Jun/2015:05:12:28 -0400] - import ipaca: Workers finished; cleaning up...
[01/Jun/2015:05:12:28 -0400] - import ipaca: Workers cleaned up.
[01/Jun/2015:05:12:29 -0400] - import ipaca: Indexing complete. Post-processing...
[01/Jun/2015:05:12:29 -0400] - import ipaca: Generating numsubordinates (this may take several minutes to complete)...
[01/Jun/2015:05:12:29 -0400] - import ipaca: Generating numSubordinates complete.
[01/Jun/2015:05:12:29 -0400] - import ipaca: Gathering ancestorid non-leaf IDs...
[01/Jun/2015:05:12:29 -0400] - import ipaca: Finished gathering ancestorid non-leaf IDs.
[01/Jun/2015:05:12:29 -0400] - import ipaca: Creating ancestorid index (new idl)...
[01/Jun/2015:05:12:29 -0400] - import ipaca: Created ancestorid index (new idl).
[01/Jun/2015:05:12:29 -0400] - import ipaca: Flushing caches...
[01/Jun/2015:05:12:29 -0400] - import ipaca: Closing files...
[01/Jun/2015:05:12:29 -0400] - import ipaca: Import complete. Processed 70 entries in 5 seconds. (14.00 entries/sec)
[01/Jun/2015:05:12:29 -0400] NSMMReplicationPlugin - multimaster_be_state_change: replica o=ipaca is coming online; enabling replication
[01/Jun/2015:05:12:30 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:12:32 -0400] - ipaca: Indexing VLV: allCerts-pki-tomcatIndex
[01/Jun/2015:05:12:32 -0400] - ipaca: Indexing VLV: allExpiredCerts-pki-tomcatIndex
[01/Jun/2015:05:12:32 -0400] - ipaca: Indexing VLV: allInvalidCerts-pki-tomcatIndex
[01/Jun/2015:05:12:32 -0400] - ipaca: Indexing VLV: allInValidCertsNotBefore-pki-tomcatIndex
[01/Jun/2015:05:12:32 -0400] - ipaca: Indexing VLV: allNonRevokedCerts-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: allRevokedCaCerts-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: allRevokedCerts-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: allRevokedCertsNotAfter-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: allRevokedExpiredCerts-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCaCerts-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCerts-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: allValidCerts-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: allValidCertsNotAfter-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: allValidOrRevokedCerts-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caAll-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caCanceled-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caCanceledEnrollment-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caCanceledRenewal-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caCanceledRevocation-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caComplete-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caCompleteEnrollment-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caCompleteRenewal-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caCompleteRevocation-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caEnrollment-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caPending-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caPendingEnrollment-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caPendingRenewal-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caPendingRevocation-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caRejected-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caRejectedEnrollment-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caRejectedRenewal-pki-tomcatIndex
[01/Jun/2015:05:12:33 -0400] - ipaca: Indexing VLV: caRejectedRevocation-pki-tomcatIndex
[01/Jun/2015:05:12:34 -0400] - ipaca: Indexing VLV: caRenewal-pki-tomcatIndex
[01/Jun/2015:05:12:34 -0400] - ipaca: Indexing VLV: caRevocation-pki-tomcatIndex
[01/Jun/2015:05:12:35 -0400] - ipaca: Finished indexing.
[01/Jun/2015:05:13:00 -0400] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 2 max work q stack size 2
[01/Jun/2015:05:13:01 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:13:01 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:13:02 -0400] - All database threads now stopped
[01/Jun/2015:05:13:02 -0400] - slapd shutting down - freed 2 work q stack objects - freed 3 op stack objects
[01/Jun/2015:05:13:02 -0400] - slapd stopped.
[01/Jun/2015:05:13:04 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:13:04 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:13:04 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:13:05 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:13:05 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:13:05 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:13:05 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:13:05 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:13:05 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:13:05 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:13:05 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:13:05 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:13:05 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:13:05 -0400] - resizing db cache size: 6553600 -> 2097152
[01/Jun/2015:05:13:05 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:13:05 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:13:05 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:13:05 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:13:05 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:13:05 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:13:05 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:13:05 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:13:05 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:13:05 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:13:05 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:13:06 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:13:06 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:05:13:06 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:05:13:06 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:13:06 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:13:06 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:13:48 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/krb5.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[01/Jun/2015:05:13:48 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:05:13:48 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:05:13:48 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[01/Jun/2015:05:13:52 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/krb5.keytab]: 13 (Permission denied)
[01/Jun/2015:05:13:53 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:05:13:53 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:05:13:58 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/krb5.keytab]: 13 (Permission denied)
[01/Jun/2015:05:13:58 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:05:13:58 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:05:14:01 -0400] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 2 max work q stack size 2
[01/Jun/2015:05:14:01 -0400] - slapd shutting down - waiting for 2 threads to terminate
[01/Jun/2015:05:14:01 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:14:02 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:14:02 -0400] - All database threads now stopped
[01/Jun/2015:05:14:03 -0400] - slapd shutting down - freed 2 work q stack objects - freed 3 op stack objects
[01/Jun/2015:05:14:03 -0400] - slapd stopped.
[01/Jun/2015:05:14:04 -0400] - Information: Non-Secure Port Disabled
[01/Jun/2015:05:14:05 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:14:05 -0400] - resizing db cache size: 2097152 -> 1677721
[01/Jun/2015:05:14:05 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:14:05 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:14:05 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:14:05 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:14:05 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:14:05 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:14:05 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:14:05 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:14:05 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:14:05 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:14:05 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:14:05 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:14:05 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
[01/Jun/2015:05:14:06 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:05:14:06 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:05:14:06 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[01/Jun/2015:05:14:06 -0400] - slapd started. Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:14:08 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:14:08 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:14:08 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:14:08 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:14:09 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Replication bind with GSSAPI auth resumed
[01/Jun/2015:05:14:13 -0400] - userRoot: Indexing attribute: memberuid
[01/Jun/2015:05:14:14 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:14:19 -0400] - userRoot: Indexing attribute: member
[01/Jun/2015:05:14:26 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:14:32 -0400] - userRoot: Indexing attribute: uniquemember
[01/Jun/2015:05:14:32 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:14:38 -0400] - userRoot: Indexing attribute: owner
[01/Jun/2015:05:14:38 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:14:44 -0400] - userRoot: Indexing attribute: seeAlso
[01/Jun/2015:05:14:44 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:14:50 -0400] - userRoot: Indexing attribute: ipatokenradiusconfiglink
[01/Jun/2015:05:14:50 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:14:56 -0400] - userRoot: Indexing attribute: ipaassignedidview
[01/Jun/2015:05:14:56 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:15:02 -0400] - userRoot: Indexing attribute: ntUniqueId
[01/Jun/2015:05:15:02 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:15:08 -0400] - userRoot: Indexing attribute: ntUserDomainId
[01/Jun/2015:05:15:08 -0400] - userRoot: Finished indexing.
[01/Jun/2015:05:15:11 -0400] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[01/Jun/2015:05:15:11 -0400] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[01/Jun/2015:05:15:14 -0400] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[01/Jun/2015:05:15:14 -0400] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[01/Jun/2015:05:15:15 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Warning: Attempting to release replica, but unable to receive endReplication extended operation response from the replica. Error -5 (Timed out)
[01/Jun/2015:05:15:15 -0400] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 2 max work q stack size 2
[01/Jun/2015:05:15:15 -0400] - slapd shutting down - waiting for 1 thread to terminate
[01/Jun/2015:05:15:15 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:15:17 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:15:18 -0400] - All database threads now stopped
[01/Jun/2015:05:15:18 -0400] - slapd shutting down - freed 2 work q stack objects - freed 3 op stack objects
[01/Jun/2015:05:15:18 -0400] - slapd stopped.
[01/Jun/2015:05:15:19 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:15:19 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:15:19 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:15:19 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:15:19 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:19 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:19 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:19 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:15:19 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:15:19 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:15:20 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:15:20 -0400] - resizing db cache size: 1677721 -> 1342176
[01/Jun/2015:05:15:20 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:15:21 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:15:21 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:15:21 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:21 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:21 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:21 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:21 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:21 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:21 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:21 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:21 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:05:15:21 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:15:21 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
[01/Jun/2015:05:15:21 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:05:15:21 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:05:15:21 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[01/Jun/2015:05:15:21 -0400] attrcrypt - No symmetric key found for cipher AES in backend changelog, attempting to create one...
[01/Jun/2015:05:15:22 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[01/Jun/2015:05:15:22 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend changelog, attempting to create one...
[01/Jun/2015:05:15:22 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[01/Jun/2015:05:15:22 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:15:22 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:15:22 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:15:22 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:15:22 -0400] - slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
[01/Jun/2015:05:15:22 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:15:23 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:15:23 -0400] - All database threads now stopped
[01/Jun/2015:05:15:24 -0400] - slapd shutting down - freed 1 work q stack objects - freed 1 op stack objects
[01/Jun/2015:05:15:24 -0400] - slapd stopped.
[01/Jun/2015:05:15:26 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:05:15:26 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:26 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:05:15:27 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:05:15:27 -0400] - resizing db cache size: 1342176 -> 1073740
[01/Jun/2015:05:15:28 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:15:28 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:05:15:28 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:05:15:28 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:28 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:28 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:28 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:28 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:28 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:28 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:28 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:05:15:28 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:05:15:28 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:05:15:28 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
[01/Jun/2015:05:15:28 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:05:15:28 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:05:15:28 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[01/Jun/2015:05:15:28 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:05:15:28 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:05:15:28 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:05:15:32 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Replication bind with GSSAPI auth resumed
[01/Jun/2015:05:31:43 -0400] - slapd shutting down - signaling operation threads - op stack size 5 max work q size 2 max work q stack size 2
[01/Jun/2015:05:31:44 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:05:31:46 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:05:31:48 -0400] - All database threads now stopped
[01/Jun/2015:05:31:48 -0400] - slapd shutting down - freed 2 work q stack objects - freed 5 op stack objects
[01/Jun/2015:05:31:49 -0400] - slapd stopped.
[01/Jun/2015:06:06:01 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:06:01 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:06:01 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:06:01 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:06:02 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:06:03 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:06:03 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:06:03 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:06:03 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:06:03 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:06:03 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:06:03 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:06:03 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:06:03 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:06:03 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:06:03 -0400] - resizing db cache size: 1073740 -> 858992
[01/Jun/2015:06:06:04 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:06:04 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:06:04 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:06:04 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:06:04 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:06:04 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:06:05 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:06:05 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:06:05 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:06:05 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:06:05 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:06:05 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:06:06:05 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:06:05 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[01/Jun/2015:06:06:05 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:06:05 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:06:05 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:06:05 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 115 (Operation now in progress)
[01/Jun/2015:06:06:05 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:06:05 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:06:09 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:06:09 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:06:15 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:06:15 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:06:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:06:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:06:51 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:06:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:07:39 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:07:39 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:09:15 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:09:15 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:10:11 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:10:11 -0400] NSMMReplicationPlugin - agmt="cn=cloneAgreement1-replica1.zaeba.li-pki-tomcat" (testmaster:389): Replication bind with SIMPLE auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:10:15 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:10:21 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:10:33 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:10:51 -0400] - Entry "uid=admin,ou=people,o=ipaca" -- attribute "krbExtraData" not allowed
[01/Jun/2015:06:10:57 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:11:45 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:12:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:12:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:13:21 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:13:32 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica3.zaeba.li" (replica3:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[01/Jun/2015:06:13:36 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meToreplica3.zaeba.li" (replica3:389)".
[01/Jun/2015:06:13:44 -0400] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=meToreplica3.zaeba.li" (replica3:389)". Sent 408 entries.
[01/Jun/2015:06:13:46 -0400] ipa-topology-plugin - ipa_topo_util_modify: failed to modify entry (cn=meToreplica3.zaeba.li,cn=replica,cn=dc\3Dzaeba\2Cdc\3Dli,cn=mapping tree,cn=config): error 53
[01/Jun/2015:06:14:17 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica3.zaeba.li" (replica3:389): Unable to receive the response for a startReplication extended operation to consumer (Can't contact LDAP server). Will retry later.
[01/Jun/2015:06:14:20 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica3.zaeba.li" (replica3:389): Replication bind with SIMPLE auth resumed
[01/Jun/2015:06:15:06 -0400] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=masterAgreement1-replica3.zaeba.li-pki-tomcat" (replica3:389)".
[01/Jun/2015:06:15:10 -0400] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=masterAgreement1-replica3.zaeba.li-pki-tomcat" (replica3:389)". Sent 83 entries.
[01/Jun/2015:06:15:47 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:06:15:47 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica3.zaeba.li" (replica3:389): Replication bind with SIMPLE auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:15:51 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica3.zaeba.li" (replica3:389): Replication bind with SIMPLE auth resumed
[01/Jun/2015:06:16:33 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:16:35 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Permission denied)) errno 0 (Success)
[01/Jun/2015:06:16:35 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[01/Jun/2015:06:16:35 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica3.zaeba.li" (replica3:389): Replication bind with GSSAPI auth failed: LDAP error 49 (Invalid credentials) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Permission denied))
[01/Jun/2015:06:16:40 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Permission denied)) errno 0 (Success)
[01/Jun/2015:06:16:40 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[01/Jun/2015:06:16:45 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error 49 (Invalid credentials) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Permission denied)) errno 0 (Success)
[01/Jun/2015:06:16:45 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error 49 (Invalid credentials)
[01/Jun/2015:06:16:57 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:06:16:57 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:16:58 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica3.zaeba.li" (replica3:389): Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:17:21 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:06:17:21 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:17:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:17:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:18:09 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[01/Jun/2015:06:18:09 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:19:45 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica3.zaeba.li" (replica3:389): Replication bind with GSSAPI auth resumed
[01/Jun/2015:06:21:33 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:22:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:22:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:26:33 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:27:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:27:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:31:33 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:32:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:32:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:36:34 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:37:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:37:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:41:33 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:42:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:42:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:46:33 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:47:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:47:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:50:56 -0400] - slapd shutting down - signaling operation threads - op stack size 7 max work q size 3 max work q stack size 3
[01/Jun/2015:06:50:56 -0400] - slapd shutting down - waiting for 28 threads to terminate
[01/Jun/2015:06:50:57 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:51:05 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:51:06 -0400] - All database threads now stopped
[01/Jun/2015:06:51:07 -0400] - slapd shutting down - freed 3 work q stack objects - freed 7 op stack objects
[01/Jun/2015:06:51:08 -0400] - slapd stopped.
[01/Jun/2015:06:53:12 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:53:12 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:53:12 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:12 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:12 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:13 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:13 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:14 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:14 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:14 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:14 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:15 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:15 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:15 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:15 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:53:15 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:53:15 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:15 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:15 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:53:16 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:53:16 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:53:16 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:16 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:16 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:16 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:16 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:16 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:17 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:17 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:53:17 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:17 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:53:17 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:53:17 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:53:17 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:53:18 -0400] - WARNING: userRoot: entry cache size 900717B is less than db size 933888B; We recommend to increase the entry cache size nsslapd-cachememsize.
[01/Jun/2015:06:53:18 -0400] - resizing db cache size: 858992 -> 687193
[01/Jun/2015:06:53:21 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:53:21 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:53:21 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:53:21 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:22 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:22 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:22 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:22 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:22 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:22 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:22 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:23 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:06:53:23 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:53:25 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:53:25 -0400] NSMMReplicationPlugin - agmt="cn=masterAgreement1-replica3.zaeba.li-pki-tomcat" (replica3:389): Replication bind with SIMPLE auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:53:25 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:53:25 -0400] NSMMReplicationPlugin - agmt="cn=cloneAgreement1-replica1.zaeba.li-pki-tomcat" (testmaster:389): Replication bind with SIMPLE auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:53:25 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[01/Jun/2015:06:53:26 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[01/Jun/2015:06:53:26 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 115 (Operation now in progress)
[01/Jun/2015:06:53:26 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:26 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica3.zaeba.li" (replica3:389): Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:53:26 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 115 (Operation now in progress)
[01/Jun/2015:06:53:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:27 -0400] NSMMReplicationPlugin - agmt="cn=meTotestmaster.zaeba.li" (testmaster:389): Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:53:27 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:53:27 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:53:27 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:53:28 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:53:29 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica1.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[01/Jun/2015:06:53:29 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:53:29 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 115 (Operation now in progress)
[01/Jun/2015:06:53:30 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:32 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:53:32 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:34 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:53:34 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:53:35 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:53:36 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:36 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:53:37 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:46 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:53:47 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:53:47 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:53:47 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:48 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:53:48 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:54:10 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:54:11 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:54:11 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:54:11 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:54:12 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:54:12 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:54:58 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:54:58 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:54:59 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:54:59 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:55:00 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:55:00 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:56:34 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:56:34 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:56:35 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:56:35 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:56:36 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:56:36 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:59:46 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:59:46 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:06:59:47 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:59:47 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:59:48 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:06:59:48 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:04:46 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:04:46 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:04:47 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:07:04:47 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:04:48 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:07:04:48 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:09:46 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:09:46 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:09:47 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:07:09:47 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:09:48 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:07:09:48 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:14:46 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:14:47 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 0 (Success)
[01/Jun/2015:07:14:47 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:07:14:47 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:14:48 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 0 (Success)
[01/Jun/2015:07:14:48 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
-------------- next part --------------
389-Directory/1.3.4.a1 B2015.070.423
replica3.zaeba.li:389 (/etc/dirsrv/slapd-ZAEBA-LI)
[01/Jun/2015:06:13:14 -0400] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[01/Jun/2015:06:13:14 -0400] - check_and_set_import_cache: pagesize: 4096, pages: 254384, procpages: 54077
[01/Jun/2015:06:13:14 -0400] - WARNING: After allocating import cache 407012KB, the available memory is 610524KB, which is less than the soft limit 1048576KB. You may want to decrease the import cache size and rerun import.
[01/Jun/2015:06:13:14 -0400] - Import allocates 407012KB import cache.
[01/Jun/2015:06:13:14 -0400] - import userRoot: Beginning import job...
[01/Jun/2015:06:13:14 -0400] - import userRoot: Index buffering enabled with bucket size 100
[01/Jun/2015:06:13:15 -0400] - import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"
[01/Jun/2015:06:13:15 -0400] - import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)
[01/Jun/2015:06:13:15 -0400] - import userRoot: Workers finished; cleaning up...
[01/Jun/2015:06:13:16 -0400] - import userRoot: Workers cleaned up.
[01/Jun/2015:06:13:16 -0400] - import userRoot: Cleaning up producer thread...
[01/Jun/2015:06:13:16 -0400] - import userRoot: Indexing complete. Post-processing...
[01/Jun/2015:06:13:16 -0400] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[01/Jun/2015:06:13:16 -0400] - import userRoot: Generating numSubordinates complete.
[01/Jun/2015:06:13:16 -0400] - import userRoot: Gathering ancestorid non-leaf IDs...
[01/Jun/2015:06:13:16 -0400] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[01/Jun/2015:06:13:16 -0400] - Nothing to do to build ancestorid index
[01/Jun/2015:06:13:16 -0400] - import userRoot: Created ancestorid index (new idl).
[01/Jun/2015:06:13:16 -0400] - import userRoot: Flushing caches...
[01/Jun/2015:06:13:16 -0400] - import userRoot: Closing files...
[01/Jun/2015:06:13:16 -0400] - All database threads now stopped
[01/Jun/2015:06:13:16 -0400] - import userRoot: Import complete. Processed 1 entries in 2 seconds. (0.50 entries/sec)
[01/Jun/2015:06:13:17 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:13:17 -0400] - Db home directory is not set. Possibly nsslapd-directory (optionally nsslapd-db-home-directory) is missing in the config file.
[01/Jun/2015:06:13:17 -0400] - resizing db cache size: 333424230 -> 6400000
[01/Jun/2015:06:13:17 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:13:17 -0400] - convert_pbe_des_to_aes: Converting DES passwords to AES...
[01/Jun/2015:06:13:17 -0400] - convert_pbe_des_to_aes: Successfully disabled DES plugin (cn=DES,cn=Password Storage Schemes,cn=plugins,cn=config)
[01/Jun/2015:06:13:17 -0400] - convert_pbe_des_to_aes: Finished - no DES passwords to convert.
[01/Jun/2015:06:13:18 -0400] - slapd shutting down - signaling operation threads - op stack size 0 max work q size 0 max work q stack size 0
[01/Jun/2015:06:13:18 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:13:18 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:13:19 -0400] - All database threads now stopped
[01/Jun/2015:06:13:19 -0400] - slapd shutting down - freed 0 work q stack objects - freed 0 op stack objects
[01/Jun/2015:06:13:19 -0400] - slapd stopped.
[01/Jun/2015:06:13:21 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:13:21 -0400] - resizing db cache size: 6400000 -> 5120000
[01/Jun/2015:06:13:21 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:13:21 -0400] - The change of nsslapd-ldapilisten will not take effect until the server is restarted
[01/Jun/2015:06:13:22 -0400] - Warning: Adding configuration attribute "nsslapd-security"
[01/Jun/2015:06:13:22 -0400] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[01/Jun/2015:06:13:23 -0400] - slapd shutting down - waiting for 1 thread to terminate
[01/Jun/2015:06:13:23 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:13:23 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:13:23 -0400] - All database threads now stopped
[01/Jun/2015:06:13:23 -0400] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[01/Jun/2015:06:13:23 -0400] - slapd stopped.
[01/Jun/2015:06:13:24 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:13:24 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:13:24 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:24 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:24 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:24 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:24 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:24 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:24 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:13:25 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:13:25 -0400] - resizing db cache size: 5120000 -> 4096000
[01/Jun/2015:06:13:26 -0400] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...
[01/Jun/2015:06:13:26 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[01/Jun/2015:06:13:26 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...
[01/Jun/2015:06:13:26 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[01/Jun/2015:06:13:26 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:06:13:26 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:06:13:26 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:13:26 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:13:26 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:13:27 -0400] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[01/Jun/2015:06:13:27 -0400] - slapd shutting down - waiting for 3 threads to terminate
[01/Jun/2015:06:13:27 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:13:27 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:13:28 -0400] - All database threads now stopped
[01/Jun/2015:06:13:28 -0400] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[01/Jun/2015:06:13:28 -0400] - slapd stopped.
[01/Jun/2015:06:13:30 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:13:30 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:30 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:31 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:31 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:31 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:31 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:13:31 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:31 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:13:31 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:13:31 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:13:31 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:13:31 -0400] - resizing db cache size: 4096000 -> 3276800
[01/Jun/2015:06:13:31 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:06:13:31 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:06:13:31 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:13:31 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:13:31 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:13:32 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[01/Jun/2015:06:13:33 -0400] ipa-topology-plugin - ipa_topo_be_state_changebackend userRoot is going offline; inactivate plugin
[01/Jun/2015:06:13:33 -0400] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=zaeba,dc=li is going offline; disabling replication
[01/Jun/2015:06:13:35 -0400] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[01/Jun/2015:06:13:41 -0400] - import userRoot: Workers finished; cleaning up...
[01/Jun/2015:06:13:42 -0400] - import userRoot: Workers cleaned up.
[01/Jun/2015:06:13:42 -0400] - import userRoot: Indexing complete. Post-processing...
[01/Jun/2015:06:13:42 -0400] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[01/Jun/2015:06:13:42 -0400] - import userRoot: Generating numSubordinates complete.
[01/Jun/2015:06:13:42 -0400] - import userRoot: Gathering ancestorid non-leaf IDs...
[01/Jun/2015:06:13:42 -0400] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[01/Jun/2015:06:13:42 -0400] - import userRoot: Creating ancestorid index (new idl)...
[01/Jun/2015:06:13:42 -0400] - import userRoot: Created ancestorid index (new idl).
[01/Jun/2015:06:13:42 -0400] - import userRoot: Flushing caches...
[01/Jun/2015:06:13:42 -0400] - import userRoot: Closing files...
[01/Jun/2015:06:13:43 -0400] - import userRoot: Import complete. Processed 408 entries in 8 seconds. (51.00 entries/sec)
[01/Jun/2015:06:13:43 -0400] ipa-topology-plugin - ipa_topo_be_state_change - backend userRoot is coming online; checking domain level and init shared topology
[01/Jun/2015:06:13:43 -0400] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=zaeba,dc=li is coming online; enabling replication
[01/Jun/2015:06:13:43 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:13:43 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:43 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:43 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:43 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:43 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:43 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:43 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:44 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:48 -0400] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 2 max work q stack size 2
[01/Jun/2015:06:13:48 -0400] - slapd shutting down - waiting for 4 threads to terminate
[01/Jun/2015:06:13:48 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:13:49 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:13:49 -0400] - All database threads now stopped
[01/Jun/2015:06:13:49 -0400] - slapd shutting down - freed 2 work q stack objects - freed 3 op stack objects
[01/Jun/2015:06:13:49 -0400] - slapd stopped.
[01/Jun/2015:06:13:51 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:13:51 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:13:51 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:13:52 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:13:52 -0400] - resizing db cache size: 8192000 -> 2621440
[01/Jun/2015:06:13:52 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:13:52 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:13:52 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:13:52 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:53 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:53 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:53 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:53 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:53 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:53 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:53 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:13:53 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:13:53 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:06:13:53 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:06:13:53 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:13:53 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:13:53 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:13:53 -0400] - The change of nsslapd-maxdescriptors will not take effect until the server is restarted
[01/Jun/2015:06:14:14 -0400] ipa-topology-plugin - ipa_topo_util_modify: failed to modify entry (cn=meToreplica1.zaeba.li,cn=replica,cn=dc\3Dzaeba\2Cdc\3Dli,cn=mapping tree,cn=config): error 53
[01/Jun/2015:06:14:19 -0400] attrcrypt - No symmetric key found for cipher AES in backend ipaca, attempting to create one...
[01/Jun/2015:06:14:19 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[01/Jun/2015:06:14:19 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend ipaca, attempting to create one...
[01/Jun/2015:06:14:19 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[01/Jun/2015:06:14:20 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:15:04 -0400] NSMMReplicationPlugin - multimaster_be_state_change: replica o=ipaca is going offline; disabling replication
[01/Jun/2015:06:15:05 -0400] NSMMReplicationPlugin - agmt="cn=cloneAgreement1-replica3.zaeba.li-pki-tomcat" (replica1:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[01/Jun/2015:06:15:05 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:15:05 -0400] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[01/Jun/2015:06:15:09 -0400] - import ipaca: Workers finished; cleaning up...
[01/Jun/2015:06:15:09 -0400] - import ipaca: Workers cleaned up.
[01/Jun/2015:06:15:09 -0400] - import ipaca: Indexing complete. Post-processing...
[01/Jun/2015:06:15:09 -0400] - import ipaca: Generating numsubordinates (this may take several minutes to complete)...
[01/Jun/2015:06:15:09 -0400] - import ipaca: Generating numSubordinates complete.
[01/Jun/2015:06:15:10 -0400] - import ipaca: Gathering ancestorid non-leaf IDs...
[01/Jun/2015:06:15:10 -0400] - import ipaca: Finished gathering ancestorid non-leaf IDs.
[01/Jun/2015:06:15:10 -0400] - import ipaca: Creating ancestorid index (new idl)...
[01/Jun/2015:06:15:10 -0400] - import ipaca: Created ancestorid index (new idl).
[01/Jun/2015:06:15:10 -0400] - import ipaca: Flushing caches...
[01/Jun/2015:06:15:10 -0400] - import ipaca: Closing files...
[01/Jun/2015:06:15:10 -0400] - import ipaca: Import complete. Processed 83 entries in 5 seconds. (16.60 entries/sec)
[01/Jun/2015:06:15:10 -0400] NSMMReplicationPlugin - multimaster_be_state_change: replica o=ipaca is coming online; enabling replication
[01/Jun/2015:06:15:10 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:15:12 -0400] - ipaca: Indexing VLV: allCerts-pki-tomcatIndex
[01/Jun/2015:06:15:12 -0400] - ipaca: Indexing VLV: allExpiredCerts-pki-tomcatIndex
[01/Jun/2015:06:15:12 -0400] - ipaca: Indexing VLV: allInvalidCerts-pki-tomcatIndex
[01/Jun/2015:06:15:12 -0400] - ipaca: Indexing VLV: allInValidCertsNotBefore-pki-tomcatIndex
[01/Jun/2015:06:15:12 -0400] - ipaca: Indexing VLV: allNonRevokedCerts-pki-tomcatIndex
[01/Jun/2015:06:15:12 -0400] - ipaca: Indexing VLV: allRevokedCaCerts-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: allRevokedCerts-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: allRevokedCertsNotAfter-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: allRevokedExpiredCerts-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCaCerts-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCerts-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: allValidCerts-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: allValidCertsNotAfter-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: allValidOrRevokedCerts-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caAll-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caCanceled-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caCanceledEnrollment-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caCanceledRenewal-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caCanceledRevocation-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caComplete-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caCompleteEnrollment-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caCompleteRenewal-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caCompleteRevocation-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caEnrollment-pki-tomcatIndex
[01/Jun/2015:06:15:13 -0400] - ipaca: Indexing VLV: caPending-pki-tomcatIndex
[01/Jun/2015:06:15:14 -0400] - ipaca: Indexing VLV: caPendingEnrollment-pki-tomcatIndex
[01/Jun/2015:06:15:14 -0400] - ipaca: Indexing VLV: caPendingRenewal-pki-tomcatIndex
[01/Jun/2015:06:15:14 -0400] - ipaca: Indexing VLV: caPendingRevocation-pki-tomcatIndex
[01/Jun/2015:06:15:14 -0400] - ipaca: Indexing VLV: caRejected-pki-tomcatIndex
[01/Jun/2015:06:15:14 -0400] - ipaca: Indexing VLV: caRejectedEnrollment-pki-tomcatIndex
[01/Jun/2015:06:15:14 -0400] - ipaca: Indexing VLV: caRejectedRenewal-pki-tomcatIndex
[01/Jun/2015:06:15:14 -0400] - ipaca: Indexing VLV: caRejectedRevocation-pki-tomcatIndex
[01/Jun/2015:06:15:14 -0400] - ipaca: Indexing VLV: caRenewal-pki-tomcatIndex
[01/Jun/2015:06:15:14 -0400] - ipaca: Indexing VLV: caRevocation-pki-tomcatIndex
[01/Jun/2015:06:15:16 -0400] - ipaca: Finished indexing.
[01/Jun/2015:06:15:43 -0400] - slapd shutting down - signaling operation threads - op stack size 9 max work q size 9 max work q stack size 9
[01/Jun/2015:06:15:43 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:15:44 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:15:45 -0400] - All database threads now stopped
[01/Jun/2015:06:15:45 -0400] - slapd shutting down - freed 9 work q stack objects - freed 9 op stack objects
[01/Jun/2015:06:15:45 -0400] - slapd stopped.
[01/Jun/2015:06:15:47 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:15:47 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:15:47 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:15:48 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:15:48 -0400] - resizing db cache size: 6553600 -> 2097152
[01/Jun/2015:06:15:49 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:15:49 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:15:49 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:15:49 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:15:49 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:15:49 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:15:49 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:15:49 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:15:49 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:15:49 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:15:49 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:15:50 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:15:50 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[01/Jun/2015:06:15:50 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[01/Jun/2015:06:15:50 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:15:50 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:15:50 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:16:35 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica3.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/krb5.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[01/Jun/2015:06:16:35 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:06:16:35 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:06:16:35 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[01/Jun/2015:06:16:39 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica3.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/krb5.keytab]: 13 (Permission denied)
[01/Jun/2015:06:16:39 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:06:16:39 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:06:16:45 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica3.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/krb5.keytab]: 13 (Permission denied)
[01/Jun/2015:06:16:45 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:06:16:45 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:06:16:47 -0400] - slapd shutting down - signaling operation threads - op stack size 11 max work q size 10 max work q stack size 10
[01/Jun/2015:06:16:47 -0400] - slapd shutting down - waiting for 2 threads to terminate
[01/Jun/2015:06:16:47 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:16:48 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:16:49 -0400] - All database threads now stopped
[01/Jun/2015:06:16:49 -0400] - slapd shutting down - freed 10 work q stack objects - freed 11 op stack objects
[01/Jun/2015:06:16:49 -0400] - slapd stopped.
[01/Jun/2015:06:16:51 -0400] - Information: Non-Secure Port Disabled
[01/Jun/2015:06:16:51 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:16:51 -0400] - resizing db cache size: 2097152 -> 1677721
[01/Jun/2015:06:16:51 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:16:51 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:16:52 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:16:52 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:16:52 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:16:52 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:16:52 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:16:52 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:16:52 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:16:52 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:16:52 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:16:52 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:16:53 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica3.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
[01/Jun/2015:06:16:53 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:06:16:53 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:06:16:53 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[01/Jun/2015:06:16:53 -0400] - slapd started. Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:16:55 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:16:55 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:16:55 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:16:55 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:16:56 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth resumed
[01/Jun/2015:06:17:01 -0400] - userRoot: Indexing attribute: memberuid
[01/Jun/2015:06:17:01 -0400] - userRoot: Finished indexing.
[01/Jun/2015:06:17:07 -0400] - userRoot: Indexing attribute: member
[01/Jun/2015:06:17:20 -0400] - userRoot: Finished indexing.
[01/Jun/2015:06:17:26 -0400] - userRoot: Indexing attribute: uniquemember
[01/Jun/2015:06:17:26 -0400] - userRoot: Finished indexing.
[01/Jun/2015:06:17:32 -0400] - userRoot: Indexing attribute: owner
[01/Jun/2015:06:17:32 -0400] - userRoot: Finished indexing.
[01/Jun/2015:06:17:38 -0400] - userRoot: Indexing attribute: seeAlso
[01/Jun/2015:06:17:38 -0400] - userRoot: Finished indexing.
[01/Jun/2015:06:17:44 -0400] - userRoot: Indexing attribute: ipatokenradiusconfiglink
[01/Jun/2015:06:17:44 -0400] - userRoot: Finished indexing.
[01/Jun/2015:06:17:50 -0400] - userRoot: Indexing attribute: ipaassignedidview
[01/Jun/2015:06:17:50 -0400] - userRoot: Finished indexing.
[01/Jun/2015:06:17:56 -0400] - userRoot: Indexing attribute: ntUniqueId
[01/Jun/2015:06:17:56 -0400] - userRoot: Finished indexing.
[01/Jun/2015:06:18:02 -0400] - userRoot: Indexing attribute: ntUserDomainId
[01/Jun/2015:06:18:03 -0400] - userRoot: Finished indexing.
[01/Jun/2015:06:18:05 -0400] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[01/Jun/2015:06:18:05 -0400] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[01/Jun/2015:06:18:08 -0400] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[01/Jun/2015:06:18:08 -0400] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[01/Jun/2015:06:18:09 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Warning: Attempting to release replica, but unable to receive endReplication extended operation response from the replica. Error -5 (Timed out)
[01/Jun/2015:06:18:09 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Unable to receive the response for a startReplication extended operation to consumer (Timed out). Will retry later.
[01/Jun/2015:06:18:09 -0400] - slapd shutting down - signaling operation threads - op stack size 3 max work q size 1 max work q stack size 1
[01/Jun/2015:06:18:09 -0400] - slapd shutting down - waiting for 1 thread to terminate
[01/Jun/2015:06:18:09 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:18:12 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:18:12 -0400] - All database threads now stopped
[01/Jun/2015:06:18:12 -0400] - slapd shutting down - freed 1 work q stack objects - freed 3 op stack objects
[01/Jun/2015:06:18:12 -0400] - slapd stopped.
[01/Jun/2015:06:18:13 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:18:13 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:18:14 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:18:15 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:18:15 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:18:15 -0400] - resizing db cache size: 1677721 -> 1342176
[01/Jun/2015:06:18:15 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:18:15 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:18:15 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:18:15 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:15 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:15 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:15 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:15 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:15 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:15 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:15 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:15 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:06:18:15 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:18:16 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica3.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
[01/Jun/2015:06:18:16 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:06:18:16 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:06:18:16 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[01/Jun/2015:06:18:16 -0400] attrcrypt - No symmetric key found for cipher AES in backend changelog, attempting to create one...
[01/Jun/2015:06:18:16 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[01/Jun/2015:06:18:16 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend changelog, attempting to create one...
[01/Jun/2015:06:18:16 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[01/Jun/2015:06:18:17 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:18:17 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:18:17 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:18:17 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:18:18 -0400] - slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
[01/Jun/2015:06:18:18 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:18:18 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:18:19 -0400] - All database threads now stopped
[01/Jun/2015:06:18:19 -0400] - slapd shutting down - freed 1 work q stack objects - freed 1 op stack objects
[01/Jun/2015:06:18:19 -0400] - slapd stopped.
[01/Jun/2015:06:18:21 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:18:21 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:21 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:18:22 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:18:22 -0400] - resizing db cache size: 1342176 -> 1073740
[01/Jun/2015:06:18:23 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:18:23 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:18:23 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:18:23 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:23 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:23 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:23 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:23 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:23 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:23 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:23 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:18:23 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:06:18:23 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:18:24 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica3.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
[01/Jun/2015:06:18:24 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:06:18:24 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:06:18:24 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[01/Jun/2015:06:18:24 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:18:24 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:18:24 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:18:27 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth resumed
[01/Jun/2015:06:18:48 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 111 (Connection refused)
[01/Jun/2015:06:18:48 -0400] NSMMReplicationPlugin - agmt="cn=cloneAgreement1-replica3.zaeba.li-pki-tomcat" (replica1:389): Replication bind with SIMPLE auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:18:54 -0400] slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 111 (Connection refused)
[01/Jun/2015:06:18:58 -0400] NSMMReplicationPlugin - agmt="cn=cloneAgreement1-replica3.zaeba.li-pki-tomcat" (replica1:389): Replication bind with SIMPLE auth resumed
[01/Jun/2015:06:19:34 -0400] - slapd shutting down - signaling operation threads - op stack size 6 max work q size 1 max work q stack size 1
[01/Jun/2015:06:19:34 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:19:34 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:19:35 -0400] - All database threads now stopped
[01/Jun/2015:06:19:36 -0400] - slapd shutting down - freed 1 work q stack objects - freed 6 op stack objects
[01/Jun/2015:06:19:36 -0400] - slapd stopped.
[01/Jun/2015:06:19:39 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:19:39 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:19:39 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:19:40 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:19:40 -0400] - resizing db cache size: 1073740 -> 858992
[01/Jun/2015:06:19:41 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:19:41 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:19:41 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:19:41 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:19:41 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:19:41 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:19:41 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:19:41 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:19:41 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:19:41 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:19:41 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:19:41 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:06:19:41 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:19:42 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica3.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[01/Jun/2015:06:19:42 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:19:42 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:19:42 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:19:42 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)) errno 0 (Success)
[01/Jun/2015:06:19:42 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -2 (Local error)
[01/Jun/2015:06:19:42 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available))
[01/Jun/2015:06:19:45 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth resumed
[01/Jun/2015:06:31:06 -0400] dna-plugin - dna_request_range: Unable to retrieve replica bind credentials.
[01/Jun/2015:06:31:06 -0400] dna-plugin - dna_pre_op: no more values available!!
[01/Jun/2015:06:31:46 -0400] dna-plugin - dna_request_range: Unable to retrieve replica bind credentials.
[01/Jun/2015:06:31:46 -0400] dna-plugin - dna_pre_op: no more values available!!
[01/Jun/2015:06:33:50 -0400] dna-plugin - dna_request_range: Unable to retrieve replica bind credentials.
[01/Jun/2015:06:33:50 -0400] dna-plugin - dna_pre_op: no more values available!!
[01/Jun/2015:06:35:42 -0400] dna-plugin - dna_request_range: Unable to retrieve replica bind credentials.
[01/Jun/2015:06:50:55 -0400] - slapd shutting down - signaling operation threads - op stack size 9 max work q size 2 max work q stack size 2
[01/Jun/2015:06:50:57 -0400] - slapd shutting down - closing down internal subsystems and plugins
[01/Jun/2015:06:51:07 -0400] - Waiting for 4 database threads to stop
[01/Jun/2015:06:51:08 -0400] - All database threads now stopped
[01/Jun/2015:06:51:09 -0400] - slapd shutting down - freed 2 work q stack objects - freed 10 op stack objects
[01/Jun/2015:06:51:09 -0400] - slapd stopped.
[01/Jun/2015:06:53:01 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[01/Jun/2015:06:53:02 -0400] - SSL alert: Configured NSS Ciphers
[01/Jun/2015:06:53:02 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:03 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:03 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:03 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:03 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:03 -0400] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:04 -0400] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:04 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:05 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:05 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:06 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:06 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:53:06 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:53:06 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:07 -0400] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:07 -0400] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:53:07 -0400] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:53:07 -0400] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:53:07 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:08 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:08 -0400] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:08 -0400] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:08 -0400] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[01/Jun/2015:06:53:08 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[01/Jun/2015:06:53:08 -0400] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[01/Jun/2015:06:53:08 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[01/Jun/2015:06:53:08 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[01/Jun/2015:06:53:09 -0400] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[01/Jun/2015:06:53:09 -0400] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[01/Jun/2015:06:53:09 -0400] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[01/Jun/2015:06:53:09 -0400] - 389-Directory/1.3.4.a1 B2015.070.423 starting up
[01/Jun/2015:06:53:09 -0400] - WARNING: userRoot: entry cache size 900717B is less than db size 901120B; We recommend to increase the entry cache size nsslapd-cachememsize.
[01/Jun/2015:06:53:10 -0400] - resizing db cache size: 858992 -> 687193
[01/Jun/2015:06:53:13 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:53:13 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=zaeba,dc=li
[01/Jun/2015:06:53:13 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=zaeba,dc=li
[01/Jun/2015:06:53:14 -0400] NSACLPlugin - The ACL target cn=groups,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:14 -0400] NSACLPlugin - The ACL target cn=computers,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:14 -0400] NSACLPlugin - The ACL target cn=ng,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:15 -0400] NSACLPlugin - The ACL target ou=sudoers,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:15 -0400] NSACLPlugin - The ACL target cn=users,cn=compat,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:15 -0400] NSACLPlugin - The ACL target cn=ad,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:15 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:16 -0400] NSACLPlugin - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=zaeba,dc=li does not exist
[01/Jun/2015:06:53:16 -0400] NSACLPlugin - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
[01/Jun/2015:06:53:16 -0400] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=zaeba,dc=li--no CoS Templates found, which should be added before the CoS Definition.
[01/Jun/2015:06:53:17 -0400] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[01/Jun/2015:06:53:17 -0400] - Listening on All Interfaces port 636 for LDAPS requests
[01/Jun/2015:06:53:17 -0400] - Listening on /var/run/slapd-ZAEBA-LI.socket for LDAPI requests
[01/Jun/2015:06:53:17 -0400] set_krb5_creds - Could not get initial credentials for principal [ldap/replica3.zaeba.li at ZAEBA.LI] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm)
[01/Jun/2015:06:53:17 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 115 (Operation now in progress)
[01/Jun/2015:06:53:17 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:18 -0400] NSMMReplicationPlugin - agmt="cn=meToreplica1.zaeba.li" (replica1:389): Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) ()
[01/Jun/2015:06:53:22 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:53:22 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:53:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:53:39 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:53:39 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:54:03 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:54:04 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:54:51 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:54:51 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:56:27 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:56:27 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:06:59:39 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:06:59:40 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:04:39 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:07:04:39 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:09:39 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:07:09:39 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
[01/Jun/2015:07:14:39 -0400] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 2 (No such file or directory)
[01/Jun/2015:07:14:39 -0400] slapi_ldap_bind - Error: could not perform interactive bind for id [] authentication mechanism [GSSAPI]: error -1 (Can't contact LDAP server)
More information about the Freeipa-devel
mailing list