[Freeipa-users] adding 45 users to a group crashes dirsrv

[Craig White]

RHEL 6.5 - new install
ipa-server-3.0.0-42.el6.x86_64
389-ds-base-1.2.11.15-47.el6.x86_64

Create a new group, click 'add users' and click the box on the top to select all 45 users, click the arrows to move all of the users over and click 'Add' on the bottom at which point it will lose connection to the LDAP server, throw up an error and dirsrv is dead and has to be restarted.

Seems as though I can make it crash with as few as 4-6 users at a time.

[27/Oct/2014:17:40:23 +0000] agmt="cn=meToipa002.stt.local" (ipa002:389) - session end: state=5 load=1 sent=3 skipped=0 skipped_new_rid=0 skipped_csn_gt_cons_maxcsn=0 skipped_up_to_date=0 skipped_csn_gt_ruv=0 skipped_csn_covered=0
[27/Oct/2014:17:40:23 +0000] NSMMReplicationPlugin - agmt="cn=meToipa002.stt.local" (ipa002:389): Successfully released consumer
[27/Oct/2014:17:40:23 +0000] NSMMReplicationPlugin - agmt="cn=meToipa002.stt.local " (ipa002:389): Beginning linger on the connection
[27/Oct/2014:17:40:23 +0000] NSMMReplicationPlugin - agmt="cn=meToipa002.stt.local " (ipa002:389): State: sending_updates -> wait_for_changes
[27/Oct/2014:17:40:24 +0000] NSMMReplicationPlugin - conn=69789 op=6 Acquired consumer connection extension
[27/Oct/2014:17:40:24 +0000] NSMMReplicationPlugin - conn=69789 op=6 repl="dc=stt-internal,dc=local": Released replica held by locking_purl=conn=69789 id=5
[27/Oct/2014:17:40:24 +0000] NSMMReplicationPlugin - conn=69789 op=6 Relinquishing consumer connection extension
[27/Oct/2014:17:40:24 +0000] NSMMReplicationPlugin - conn=69789 op=7 Acquired consumer connection extension
[27/Oct/2014:17:40:24 +0000] NSMMReplicationPlugin - conn=69789 op=7 repl="dc=stt-internal,dc=local": Begin incremental protocol
[27/Oct/2014:17:40:24 +0000] - csngen_adjust_time: gen state before 544e83890005:1414431621:0:4
[27/Oct/2014:17:40:24 +0000] - _csngen_adjust_local_time: gen state before 544e83890005:1414431621:0:4
[27/Oct/2014:17:40:24 +0000] - _csngen_adjust_local_time: gen state after 544e838c0000:1414431624:0:4
[27/Oct/2014:17:40:24 +0000] - csngen_adjust_time: gen state after 544e838e0001:1414431624:2:4
[27/Oct/2014:17:40:24 +0000] NSMMReplicationPlugin - conn=69789 op=7 repl="dc=stt-internal,dc=local": Acquired replica
[27/Oct/2014:17:40:24 +0000] NSMMReplicationPlugin - conn=69789 op=7 repl="dc=stt-internal,dc=local": StartNSDS90ReplicationRequest: response=0 rc=0
[27/Oct/2014:17:40:24 +0000] NSMMReplicationPlugin - conn=69789 op=7 Relinquishing consumer connection extension
[27/Oct/2014:17:40:28 +0000] NSMMReplicationPlugin - changelog program - _cl5GetDBFile: found DB object 7fb95801fbf0 for database /var/lib/dirsrv/slapd-STT-INTERNAL-LOCAL/cldb/d7273483-5bb011e4-8073dfa6-7d9cbbef_544aa332000000040000.db4
[27/Oct/2014:17:40:28 +0000] NSMMReplicationPlugin - changelog program - cl5GetOperationCount: found DB object 7fb95801fbf0
[27/Oct/2014:17:40:30 +0000] NSMMReplicationPlugin - conn=69789 op=8 Acquired consumer connection extension
[27/Oct/2014:17:40:30 +0000] NSMMReplicationPlugin - conn=69789 op=8 repl="dc=stt-internal,dc=local": Released replica held by locking_purl=conn=69789 id=7
[27/Oct/2014:17:40:30 +0000] NSMMReplicationPlugin - conn=69789 op=8 Relinquishing consumer connection extension
[27/Oct/2014:17:41:24 +0000] NSMMReplicationPlugin - agmt="cn=meToipa002.stt" (ipa002:389): Linger timeout has expired on the connection
[27/Oct/2014:17:41:24 +0000] NSMMReplicationPlugin - agmt="cn=meToipa002.stt" (ipa002:389): Disconnected from the consumer
[27/Oct/2014:17:45:53 +0000] NSMMReplicationPlugin - agmt="cn=meToipa002.stt" (ipa002:389): Consumer failed to replay change (uniqueid 46305b1f-5ad711e4-89d1dfa6-7d9cbbef, CSN 544e84d7000200040000): Can't contact LDAP server(-1). Will retry later.
[27/Oct/2014:17:45:55 +0000] NSMMReplicationPlugin - agmt="cn=meToipa002.stt" (ipa002:389): Warning: unable to send endReplication extended operation (Can't contact LDAP server)
[27/Oct/2014:17:45:55 +0000] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[27/Oct/2014:17:45:55 +0000] slapi_ldap_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: error -1 (Can't contact LDAP server)
[27/Oct/2014:17:45:59 +0000] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[27/Oct/2014:17:45:59 +0000] slapi_ldap_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: error -1 (Can't contact LDAP server)
[27/Oct/2014:17:46:05 +0000] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)
[27/Oct/2014:17:46:05 +0000] slapi_ldap_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: error -1 (Can't contact LDAP server)
[27/Oct/2014:17:46:17 +0000] slapd_ldap_sasl_interactive_bind - Error: could not perform interactive bind for id [] mech [GSSAPI]: LDAP error -1 (Can't contact LDAP server) ((null)) errno 107 (Transport endpoint is not connected)

Craig White
System Administrator
O 623-201-8179   M 602-377-9752

[cid:image001.png at 01CF86FE.42D51630]

SkyTouch Technology     4225 E. Windrose Dr.     Phoenix, AZ 85032

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141027/300676b6/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 7660 bytes
Desc: image001.png
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141027/300676b6/attachment.png>