[Freeipa-users] Upgrade from 3x to 4x cant create first replica.
Chris Mohler
cmohler at oberlin.edu
Fri Feb 6 23:27:26 UTC 2015
I'm having some troubles. I have an older IPA install Version 3.0.0. on
Centos 6.6. It's currently the only master for my domain. I have about
4k user accounts on here and it's a live system called "idm"
I'm trying to upgrade to V4.x as I am hoping to fix some issues I am
having. (clients can't auth unless service sssd is restarted multiple
times "10 (User not known to the underlying authentication module") I
think this is possibly unrelated and the topic for another thread.
I created a new VM and installed Fedora Server 21 and FreeIPA 4.1.2 it's
called "ipa"
on the master "idm" I ran "ipa-replica-prepare" and transfered the file
to the future replica "ipa" Then I ran the install replica script
ipa-replica-install --setup-ca
/home/svradm/replica-info-ipa.cs.oberlin.edu.gpg
Things went well until it failed
[24/35]: setting up initial replication
Starting replication, please wait until this has completed.
Update in progress, 133 seconds elapsed
Update in progress yet not in progress
Update in progress yet not in progress
Update in progress yet not in progress
[idm.cs.oberlin.edu] reports: Update failed! Status: [10 Total update
abortedLDAP error: Referral]
[error] RuntimeError: Failed to start replication
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.
Please help I'm getting nowhere by myself.
Thanks,
-Chris
Attached and below are some relevant logs I hope.
ipareplica-install.log - is the replica install log
errors is the dirsrv error log
-IPA replica install log-
> 2015-02-06T22:08:28Z DEBUG /sbin/ipa-replica-install was invoked with
> argument "/home/svradm/replica-info-ipa.cs.oberlin.edu.gpg" and
> options: {'no_forwarders': False, 'conf_ssh': True,
> 'skip_schema_check': False, 'ui_redirect': True, 'trust_sshfp': False,
> 'unattended': False, 'ip_addresses': [], 'setup_pkinit': True,
> 'no_host_dns': False, 'mkhomedir': False, 'no_reverse': False,
> 'setup_dns': False, 'no_dnssec_validation': False, 'conf_sshd': True,
> 'forwarders': None, 'debug': False, 'conf_ntp': True, 'setup_ca':
> True, 'reverse_zones': [], 'skip_conncheck': False, 'create_sshfp': True}
> 2015-02-06T22:08:28Z DEBUG IPA version 4.1.2-1.fc21
> 2015-02-06T22:08:28Z DEBUG Loading Index file from
> '/var/lib/ipa-client/sysrestore/sysrestore.index'
> 2015-02-06T22:08:28Z DEBUG Loading StateFile from
> '/var/lib/ipa/sysrestore/sysrestore.state'
> 2015-02-06T22:08:28Z DEBUG Loading Index file from
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2015-02-06T22:08:28Z DEBUG Starting external process
> 2015-02-06T22:08:28Z DEBUG args='/usr/sbin/httpd' '-t' '-D' 'DUMP_VHOSTS'
> 2015-02-06T22:08:28Z DEBUG Process finished, return code=0
> 2015-02-06T22:08:28Z DEBUG stdout=VirtualHost configuration:
> *:8443 ipa.cs.oberlin.edu (/etc/httpd/conf.d/nss.conf:83)
>
> 2015-02-06T22:08:28Z DEBUG stderr=
> 2015-02-06T22:08:28Z DEBUG Starting external process
> 2015-02-06T22:08:28Z DEBUG args='/bin/systemctl' 'is-enabled'
> 'chronyd.service'
> 2015-02-06T22:08:28Z DEBUG Process finished, return code=1
> 2015-02-06T22:08:28Z DEBUG stdout=
> 2015-02-06T22:08:28Z DEBUG stderr=Failed to get unit file state for
> chronyd.service: No such file or directory
>
> 2015-02-06T22:08:28Z DEBUG Starting external process
> 2015-02-06T22:08:28Z DEBUG args='/bin/systemctl' 'is-active'
> 'chronyd.service'
> 2015-02-06T22:08:29Z DEBUG Process finished, return code=3
> 2015-02-06T22:08:29Z DEBUG stdout=unknown
>
> 2015-02-06T22:08:29Z DEBUG stderr=
> 2015-02-06T22:08:37Z DEBUG Starting external process
> 2015-02-06T22:08:37Z DEBUG args='/usr/bin/gpg-agent' '--batch'
> '--homedir' '/tmp/tmpzmYHXxipa/ipa-sy2uJe/.gnupg' '--daemon'
> '/usr/bin/gpg' '--batch' '--homedir'
> '/tmp/tmpzmYHXxipa/ipa-sy2uJe/.gnupg' '--passphrase-fd' '0' '--yes'
> '--no-tty' '-o' '/tmp/tmpzmYHXxipa/files.tar' '-d'
> '/home/svradm/replica-info-ipa.cs.oberlin.edu.gpg'
> 2015-02-06T22:08:38Z DEBUG Process finished, return code=0
> 2015-02-06T22:08:38Z DEBUG Starting external process
> 2015-02-06T22:08:38Z DEBUG args='tar' 'xf'
> '/tmp/tmpzmYHXxipa/files.tar' '-C' '/tmp/tmpzmYHXxipa'
> 2015-02-06T22:08:38Z DEBUG Process finished, return code=0
> 2015-02-06T22:08:38Z DEBUG stdout=
> 2015-02-06T22:08:38Z DEBUG stderr=
> 2015-02-06T22:08:38Z DEBUG Installing replica file with version 300 (0
> means no version in prepared file).
> 2015-02-06T22:08:38Z DEBUG Check if ipa.cs.oberlin.edu is a primary
> hostname for localhost
> 2015-02-06T22:08:38Z DEBUG Primary hostname for localhost:
> ipa.cs.oberlin.edu
> 2015-02-06T22:08:38Z DEBUG Search DNS for ipa.cs.oberlin.edu
> 2015-02-06T22:08:38Z DEBUG Check if ipa.cs.oberlin.edu is not a CNAME
> 2015-02-06T22:08:38Z DEBUG Check reverse address of 132.162.201.65
> 2015-02-06T22:08:38Z DEBUG Found reverse name: ipa.cs.oberlin.edu
> 2015-02-06T22:08:38Z DEBUG Check if idm.cs.oberlin.edu is a primary
> hostname for localhost
> 2015-02-06T22:08:38Z DEBUG Primary hostname for localhost:
> idm.cs.oberlin.edu
> 2015-02-06T22:08:38Z DEBUG Search DNS for idm.cs.oberlin.edu
> 2015-02-06T22:08:38Z DEBUG Check if idm.cs.oberlin.edu is not a CNAME
> 2015-02-06T22:08:38Z DEBUG Check reverse address of 132.162.201.73
> 2015-02-06T22:08:38Z DEBUG Found reverse name: idm.cs.oberlin.edu
> 2015-02-06T22:08:38Z DEBUG Starting external process
> 2015-02-06T22:08:38Z DEBUG args='/usr/sbin/ipa-replica-conncheck'
> '--master' 'idm.cs.oberlin.edu' '--auto-master-check' '--realm'
> 'CS.OBERLIN.EDU' '--principal' 'admin' '--hostname'
> 'ipa.cs.oberlin.edu' '--check-ca'
> 2015-02-06T22:09:03Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:03Z DEBUG Starting external process
> 2015-02-06T22:09:03Z DEBUG args='/sbin/ip' '-family' 'inet' '-oneline'
> 'address' 'show'
> 2015-02-06T22:09:03Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:03Z DEBUG stdout=1: lo inet 127.0.0.1/8 scope host
> lo\ valid_lft forever preferred_lft forever
> 2: eth0 inet 132.162.201.65/24 brd 132.162.201.255 scope global
> dynamic eth0\ valid_lft 842351sec preferred_lft 842351sec
>
> 2015-02-06T22:09:03Z DEBUG stderr=
> 2015-02-06T22:09:03Z DEBUG importing all plugin modules in
> '/usr/lib/python2.7/site-packages/ipalib/plugins'...
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/aci.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/automember.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/automount.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/baseldap.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/batch.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/cert.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/config.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/delegation.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/dns.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/group.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/hbacrule.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/hbacsvc.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/hbacsvcgroup.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/hbactest.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/host.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/hostgroup.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/idrange.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/idviews.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/internal.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/kerberos.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/krbtpolicy.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/migration.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/misc.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/netgroup.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/otptoken.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/otptoken_yubikey.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/passwd.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/permission.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/ping.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/pkinit.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/privilege.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/pwpolicy.py'
> 2015-02-06T22:09:03Z DEBUG Starting external process
> 2015-02-06T22:09:03Z DEBUG args='klist' '-V'
> 2015-02-06T22:09:03Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:03Z DEBUG stdout=Kerberos 5 version 1.12.2
>
> 2015-02-06T22:09:03Z DEBUG stderr=
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/radiusproxy.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/realmdomains.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/role.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/rpcclient.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/selfservice.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/selinuxusermap.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/service.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/sudocmd.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/sudocmdgroup.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/sudorule.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/trust.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/user.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipalib/plugins/virtual.py'
> 2015-02-06T22:09:03Z DEBUG importing all plugin modules in
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins'...
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/adtrust.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/baseupdate.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/ca_renewal_master.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/dns.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/fix_replica_agreements.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/rename_managed.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_idranges.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_managed_permissions.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_pacs.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_referint.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_services.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_uniqueness.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/updateclient.py'
> 2015-02-06T22:09:03Z DEBUG importing plugin module
> '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/upload_cacrt.py'
> 2015-02-06T22:09:04Z DEBUG group dirsrv exists
> 2015-02-06T22:09:04Z DEBUG user dirsrv exists
> 2015-02-06T22:09:04Z DEBUG Created connection
> context.ldap2_140649775824016
> 2015-02-06T22:09:04Z DEBUG flushing ldaps://idm.cs.oberlin.edu from
> SchemaCache
> 2015-02-06T22:09:04Z DEBUG retrieving schema for SchemaCache
> url=ldaps://idm.cs.oberlin.edu conn=<ldap.ldapobject.SimpleLDAPObject
> instance at 0x7feb93ece830>
> 2015-02-06T22:09:04Z DEBUG Created connection context.ldap2
> 2015-02-06T22:09:04Z DEBUG flushing ldaps://idm.cs.oberlin.edu from
> SchemaCache
> 2015-02-06T22:09:04Z DEBUG retrieving schema for SchemaCache
> url=ldaps://idm.cs.oberlin.edu conn=<ldap.ldapobject.SimpleLDAPObject
> instance at 0x7feb937a7368>
> 2015-02-06T22:09:04Z DEBUG Destroyed connection context.ldap2
> 2015-02-06T22:09:04Z DEBUG No IPA DNS servers, skipping
> forward/reverse resolution check
> 2015-02-06T22:09:04Z DEBUG Destroyed connection
> context.ldap2_140649775824016
> 2015-02-06T22:09:04Z DEBUG Loading StateFile from
> '/var/lib/ipa/sysrestore/sysrestore.state'
> 2015-02-06T22:09:04Z DEBUG Checking if IPA schema is present in
> ldap://idm.cs.oberlin.edu:7389
> 2015-02-06T22:09:04Z DEBUG retrieving schema for SchemaCache
> url=ldap://idm.cs.oberlin.edu:7389
> conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7feb93f0a0e0>
> 2015-02-06T22:09:05Z DEBUG Check OK
> 2015-02-06T22:09:05Z DEBUG Starting external process
> 2015-02-06T22:09:05Z DEBUG args='/bin/systemctl' 'is-enabled'
> 'chronyd.service'
> 2015-02-06T22:09:05Z DEBUG Process finished, return code=1
> 2015-02-06T22:09:05Z DEBUG stdout=
> 2015-02-06T22:09:05Z DEBUG stderr=Failed to get unit file state for
> chronyd.service: No such file or directory
>
> 2015-02-06T22:09:05Z DEBUG Starting external process
> 2015-02-06T22:09:05Z DEBUG args='/bin/systemctl' 'is-active'
> 'chronyd.service'
> 2015-02-06T22:09:05Z DEBUG Process finished, return code=3
> 2015-02-06T22:09:05Z DEBUG stdout=unknown
>
> 2015-02-06T22:09:05Z DEBUG stderr=
> 2015-02-06T22:09:05Z DEBUG Loading StateFile from
> '/var/lib/ipa/sysrestore/sysrestore.state'
> 2015-02-06T22:09:05Z DEBUG Loading Index file from
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2015-02-06T22:09:05Z DEBUG Configuring NTP daemon (ntpd)
> 2015-02-06T22:09:05Z DEBUG [1/4]: stopping ntpd
> 2015-02-06T22:09:05Z DEBUG Starting external process
> 2015-02-06T22:09:05Z DEBUG args='/bin/systemctl' 'is-active'
> 'ntpd.service'
> 2015-02-06T22:09:05Z DEBUG Process finished, return code=3
> 2015-02-06T22:09:05Z DEBUG stdout=unknown
>
> 2015-02-06T22:09:05Z DEBUG stderr=
> 2015-02-06T22:09:05Z DEBUG Saving StateFile to
> '/var/lib/ipa/sysrestore/sysrestore.state'
> 2015-02-06T22:09:05Z DEBUG Starting external process
> 2015-02-06T22:09:05Z DEBUG args='/bin/systemctl' 'stop' 'ntpd.service'
> 2015-02-06T22:09:05Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:05Z DEBUG stdout=
> 2015-02-06T22:09:05Z DEBUG stderr=
> 2015-02-06T22:09:05Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:05Z DEBUG [2/4]: writing configuration
> 2015-02-06T22:09:05Z DEBUG Backing up system configuration file
> '/etc/ntp.conf'
> 2015-02-06T22:09:05Z DEBUG Saving Index File to
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2015-02-06T22:09:05Z DEBUG Backing up system configuration file
> '/etc/sysconfig/ntpd'
> 2015-02-06T22:09:05Z DEBUG Saving Index File to
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2015-02-06T22:09:05Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:05Z DEBUG [3/4]: configuring ntpd to start on boot
> 2015-02-06T22:09:05Z DEBUG Starting external process
> 2015-02-06T22:09:05Z DEBUG args='/bin/systemctl' 'is-enabled'
> 'ntpd.service'
> 2015-02-06T22:09:05Z DEBUG Process finished, return code=1
> 2015-02-06T22:09:05Z DEBUG stdout=disabled
>
> 2015-02-06T22:09:05Z DEBUG stderr=
> 2015-02-06T22:09:05Z DEBUG Saving StateFile to
> '/var/lib/ipa/sysrestore/sysrestore.state'
> 2015-02-06T22:09:05Z DEBUG Starting external process
> 2015-02-06T22:09:05Z DEBUG args='/bin/systemctl' 'enable' 'ntpd.service'
> 2015-02-06T22:09:05Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:05Z DEBUG stdout=
> 2015-02-06T22:09:05Z DEBUG stderr=Created symlink from
> /etc/systemd/system/multi-user.target.wants/ntpd.service to
> /usr/lib/systemd/system/ntpd.service.
>
> 2015-02-06T22:09:05Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:05Z DEBUG [4/4]: starting ntpd
> 2015-02-06T22:09:05Z DEBUG Starting external process
> 2015-02-06T22:09:05Z DEBUG args='/bin/systemctl' 'start' 'ntpd.service'
> 2015-02-06T22:09:05Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:05Z DEBUG stdout=
> 2015-02-06T22:09:05Z DEBUG stderr=
> 2015-02-06T22:09:05Z DEBUG Starting external process
> 2015-02-06T22:09:05Z DEBUG args='/bin/systemctl' 'is-active'
> 'ntpd.service'
> 2015-02-06T22:09:05Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:05Z DEBUG stdout=active
>
> 2015-02-06T22:09:05Z DEBUG stderr=
> 2015-02-06T22:09:05Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:05Z DEBUG Done configuring NTP daemon (ntpd).
> 2015-02-06T22:09:05Z DEBUG Loading StateFile from
> '/var/lib/ipa/sysrestore/sysrestore.state'
> 2015-02-06T22:09:05Z DEBUG Loading Index file from
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2015-02-06T22:09:05Z DEBUG Configuring directory server (dirsrv):
> Estimated time 1 minute
> 2015-02-06T22:09:05Z DEBUG [1/35]: creating directory server user
> 2015-02-06T22:09:05Z DEBUG group dirsrv exists
> 2015-02-06T22:09:05Z DEBUG user dirsrv exists
> 2015-02-06T22:09:05Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:05Z DEBUG [2/35]: creating directory server instance
> 2015-02-06T22:09:05Z DEBUG Saving StateFile to
> '/var/lib/ipa/sysrestore/sysrestore.state'
> 2015-02-06T22:09:05Z DEBUG Backing up system configuration file
> '/etc/sysconfig/dirsrv'
> 2015-02-06T22:09:05Z DEBUG Saving Index File to
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2015-02-06T22:09:05Z DEBUG
> dn: dc=cs,dc=oberlin,dc=edu
> objectClass: top
> objectClass: domain
> objectClass: pilotObject
> dc: cs
> info: IPA V2.0
>
> 2015-02-06T22:09:05Z DEBUG writing inf template
> 2015-02-06T22:09:05Z DEBUG
> [General]
> FullMachineName= ipa.cs.oberlin.edu
> SuiteSpotUserID= dirsrv
> SuiteSpotGroup= dirsrv
> ServerRoot= /usr/lib64/dirsrv
> [slapd]
> ServerPort= 389
> ServerIdentifier= CS-OBERLIN-EDU
> Suffix= dc=cs,dc=oberlin,dc=edu
> RootDN= cn=Directory Manager
> InstallLdifFile= /var/lib/dirsrv/boot.ldif
> inst_dir= /var/lib/dirsrv/scripts-CS-OBERLIN-EDU
>
> 2015-02-06T22:09:05Z DEBUG calling setup-ds.pl
> 2015-02-06T22:09:05Z DEBUG Starting external process
> 2015-02-06T22:09:05Z DEBUG args='/usr/sbin/setup-ds.pl' '--silent'
> '--logfile' '-' '-f' '/tmp/tmpGMb2Tk'
> 2015-02-06T22:09:09Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:09Z DEBUG stdout=[15/02/06:17:09:09] - [Setup] Info
> Your new DS instance 'CS-OBERLIN-EDU' was successfully created.
> Your new DS instance 'CS-OBERLIN-EDU' was successfully created.
> [15/02/06:17:09:09] - [Setup] Success Exiting . . .
> Log file is '-'
>
> Exiting . . .
> Log file is '-'
>
>
> 2015-02-06T22:09:09Z DEBUG stderr=
> 2015-02-06T22:09:09Z DEBUG completed creating ds instance
> 2015-02-06T22:09:09Z DEBUG restarting ds instance
> 2015-02-06T22:09:09Z DEBUG Starting external process
> 2015-02-06T22:09:09Z DEBUG args='/bin/systemctl' '--system'
> 'daemon-reload'
> 2015-02-06T22:09:09Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:09Z DEBUG stdout=
> 2015-02-06T22:09:09Z DEBUG stderr=
> 2015-02-06T22:09:09Z DEBUG Starting external process
> 2015-02-06T22:09:09Z DEBUG args='/bin/systemctl' 'restart'
> 'dirsrv at CS-OBERLIN-EDU.service'
> 2015-02-06T22:09:09Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:09Z DEBUG stdout=
> 2015-02-06T22:09:09Z DEBUG stderr=
> 2015-02-06T22:09:09Z DEBUG Starting external process
> 2015-02-06T22:09:09Z DEBUG args='/bin/systemctl' 'is-active'
> 'dirsrv at CS-OBERLIN-EDU.service'
> 2015-02-06T22:09:09Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:09Z DEBUG stdout=active
>
> 2015-02-06T22:09:09Z DEBUG stderr=
> 2015-02-06T22:09:09Z DEBUG wait_for_open_ports: localhost [389]
> timeout 300
> 2015-02-06T22:09:11Z DEBUG Starting external process
> 2015-02-06T22:09:11Z DEBUG args='/bin/systemctl' 'is-active'
> 'dirsrv at CS-OBERLIN-EDU.service'
> 2015-02-06T22:09:11Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:11Z DEBUG stdout=active
>
> 2015-02-06T22:09:11Z DEBUG stderr=
> 2015-02-06T22:09:11Z DEBUG done restarting ds instance
> 2015-02-06T22:09:11Z DEBUG duration: 6 seconds
> 2015-02-06T22:09:11Z DEBUG [3/35]: adding default schema
> 2015-02-06T22:09:11Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:11Z DEBUG [4/35]: enabling memberof plugin
> 2015-02-06T22:09:11Z DEBUG Starting external process
> 2015-02-06T22:09:11Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/memberof-conf.ldif' '-H'
> 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D' 'cn=Directory Manager' '-y'
> '/tmp/tmpyB3DDP'
> 2015-02-06T22:09:11Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:11Z DEBUG stdout=replace nsslapd-pluginenabled:
> on
> add memberofgroupattr:
> memberUser
> add memberofgroupattr:
> memberHost
> modifying entry "cn=MemberOf Plugin,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:11Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:11Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:11Z DEBUG [5/35]: enabling winsync plugin
> 2015-02-06T22:09:11Z DEBUG Starting external process
> 2015-02-06T22:09:11Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/ipa-winsync-conf.ldif' '-H'
> 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D' 'cn=Directory Manager' '-y'
> '/tmp/tmpvjCszA'
> 2015-02-06T22:09:11Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:11Z DEBUG stdout=add objectclass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> ipa-winsync
> add nsslapd-pluginpath:
> libipa_winsync
> add nsslapd-plugininitfunc:
> ipa_winsync_plugin_init
> add nsslapd-pluginDescription:
> Allows IPA to work with the DS windows sync feature
> add nsslapd-pluginid:
> ipa-winsync
> add nsslapd-pluginversion:
> 1.0
> add nsslapd-pluginvendor:
> Red Hat
> add nsslapd-plugintype:
> preoperation
> add nsslapd-pluginenabled:
> on
> add nsslapd-plugin-depends-on-type:
> database
> add ipaWinSyncRealmFilter:
> (objectclass=krbRealmContainer)
> add ipaWinSyncRealmAttr:
> cn
> add ipaWinSyncNewEntryFilter:
> (cn=ipaConfig)
> add ipaWinSyncNewUserOCAttr:
> ipauserobjectclasses
> add ipaWinSyncUserFlatten:
> true
> add ipaWinsyncHomeDirAttr:
> ipaHomesRootDir
> add ipaWinsyncLoginShellAttr:
> ipaDefaultLoginShell
> add ipaWinSyncDefaultGroupAttr:
> ipaDefaultPrimaryGroup
> add ipaWinSyncDefaultGroupFilter:
> (gidNumber=*)(objectclass=posixGroup)(objectclass=groupOfNames)
> add ipaWinSyncAcctDisable:
> both
> add ipaWinSyncForceSync:
> true
> add ipaWinSyncUserAttr:
> uidNumber -1
> gidNumber -1
> adding new entry "cn=ipa-winsync,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:11Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:11Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:11Z DEBUG [6/35]: configuring replication version
> plugin
> 2015-02-06T22:09:11Z DEBUG Starting external process
> 2015-02-06T22:09:11Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/version-conf.ldif' '-H'
> 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D' 'cn=Directory Manager' '-y'
> '/tmp/tmp9q4t0H'
> 2015-02-06T22:09:11Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:11Z DEBUG stdout=add objectclass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> IPA Version Replication
> add nsslapd-pluginpath:
> libipa_repl_version
> add nsslapd-plugininitfunc:
> repl_version_plugin_init
> add nsslapd-plugintype:
> preoperation
> add nsslapd-pluginenabled:
> off
> add nsslapd-pluginid:
> ipa_repl_version
> add nsslapd-pluginversion:
> 1.0
> add nsslapd-pluginvendor:
> Red Hat, Inc.
> add nsslapd-plugindescription:
> IPA Replication version plugin
> add nsslapd-plugin-depends-on-type:
> database
> add nsslapd-plugin-depends-on-named:
> Multimaster Replication Plugin
> adding new entry "cn=IPA Version Replication,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:11Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:11Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:11Z DEBUG [7/35]: enabling IPA enrollment plugin
> 2015-02-06T22:09:11Z DEBUG Starting external process
> 2015-02-06T22:09:11Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/tmp/tmplWOYWQ' '-H' 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D'
> 'cn=Directory Manager' '-y' '/tmp/tmplhf7bh'
> 2015-02-06T22:09:11Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:11Z DEBUG stdout=add objectclass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> ipa_enrollment_extop
> add nsslapd-pluginpath:
> libipa_enrollment_extop
> add nsslapd-plugininitfunc:
> ipaenrollment_init
> add nsslapd-plugintype:
> extendedop
> add nsslapd-pluginenabled:
> on
> add nsslapd-pluginid:
> ipa_enrollment_extop
> add nsslapd-pluginversion:
> 1.0
> add nsslapd-pluginvendor:
> RedHat
> add nsslapd-plugindescription:
> Enroll hosts into the IPA domain
> add nsslapd-plugin-depends-on-type:
> database
> add nsslapd-realmTree:
> dc=cs,dc=oberlin,dc=edu
> adding new entry "cn=ipa_enrollment_extop,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:11Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:11Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:11Z DEBUG [8/35]: enabling ldapi
> 2015-02-06T22:09:11Z DEBUG Starting external process
> 2015-02-06T22:09:11Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/tmp/tmpUre1PI' '-H' 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D'
> 'cn=Directory Manager' '-y' '/tmp/tmpQasEep'
> 2015-02-06T22:09:11Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:11Z DEBUG stdout=replace nsslapd-ldapilisten:
> on
> modifying entry "cn=config"
> modify complete
>
>
> 2015-02-06T22:09:11Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:11Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:11Z DEBUG [9/35]: configuring uniqueness plugin
> 2015-02-06T22:09:11Z DEBUG Starting external process
> 2015-02-06T22:09:11Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/tmp/tmps9ltjb' '-H' 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D'
> 'cn=Directory Manager' '-y' '/tmp/tmpkT9Aql'
> 2015-02-06T22:09:11Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:11Z DEBUG stdout=add objectClass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> krbPrincipalName uniqueness
> add nsslapd-pluginPath:
> libattr-unique-plugin
> add nsslapd-pluginInitfunc:
> NSUniqueAttr_Init
> add nsslapd-pluginType:
> preoperation
> add nsslapd-pluginEnabled:
> on
> add nsslapd-pluginarg0:
> krbPrincipalName
> add nsslapd-pluginarg1:
> dc=cs,dc=oberlin,dc=edu
> add nsslapd-plugin-depends-on-type:
> database
> add nsslapd-pluginId:
> NSUniqueAttr
> add nsslapd-pluginVersion:
> 1.1.0
> add nsslapd-pluginVendor:
> Fedora Project
> add nsslapd-pluginDescription:
> Enforce unique attribute values
> adding new entry "cn=krbPrincipalName uniqueness,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> krbCanonicalName uniqueness
> add nsslapd-pluginPath:
> libattr-unique-plugin
> add nsslapd-pluginInitfunc:
> NSUniqueAttr_Init
> add nsslapd-pluginType:
> preoperation
> add nsslapd-pluginEnabled:
> on
> add nsslapd-pluginarg0:
> krbCanonicalName
> add nsslapd-pluginarg1:
> dc=cs,dc=oberlin,dc=edu
> add nsslapd-plugin-depends-on-type:
> database
> add nsslapd-pluginId:
> NSUniqueAttr
> add nsslapd-pluginVersion:
> 1.1.0
> add nsslapd-pluginVendor:
> Fedora Project
> add nsslapd-pluginDescription:
> Enforce unique attribute values
> adding new entry "cn=krbCanonicalName uniqueness,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> netgroup uniqueness
> add nsslapd-pluginPath:
> libattr-unique-plugin
> add nsslapd-pluginInitfunc:
> NSUniqueAttr_Init
> add nsslapd-pluginType:
> preoperation
> add nsslapd-pluginEnabled:
> on
> add nsslapd-pluginarg0:
> cn
> add nsslapd-pluginarg1:
> cn=ng,cn=alt,dc=cs,dc=oberlin,dc=edu
> add nsslapd-plugin-depends-on-type:
> database
> add nsslapd-pluginId:
> NSUniqueAttr
> add nsslapd-pluginVersion:
> 1.1.0
> add nsslapd-pluginVendor:
> Fedora Project
> add nsslapd-pluginDescription:
> Enforce unique attribute values
> adding new entry "cn=netgroup uniqueness,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> ipaUniqueID uniqueness
> add nsslapd-pluginPath:
> libattr-unique-plugin
> add nsslapd-pluginInitfunc:
> NSUniqueAttr_Init
> add nsslapd-pluginType:
> preoperation
> add nsslapd-pluginEnabled:
> on
> add nsslapd-pluginarg0:
> ipaUniqueID
> add nsslapd-pluginarg1:
> dc=cs,dc=oberlin,dc=edu
> add nsslapd-plugin-depends-on-type:
> database
> add nsslapd-pluginId:
> NSUniqueAttr
> add nsslapd-pluginVersion:
> 1.1.0
> add nsslapd-pluginVendor:
> Fedora Project
> add nsslapd-pluginDescription:
> Enforce unique attribute values
> adding new entry "cn=ipaUniqueID uniqueness,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> sudorule name uniqueness
> add nsslapd-pluginDescription:
> Enforce unique attribute values
> add nsslapd-pluginPath:
> libattr-unique-plugin
> add nsslapd-pluginInitfunc:
> NSUniqueAttr_Init
> add nsslapd-pluginType:
> preoperation
> add nsslapd-pluginEnabled:
> on
> add nsslapd-pluginarg0:
> cn
> add nsslapd-pluginarg1:
> cn=sudorules,cn=sudo,dc=cs,dc=oberlin,dc=edu
> add nsslapd-plugin-depends-on-type:
> database
> add nsslapd-pluginId:
> NSUniqueAttr
> add nsslapd-pluginVersion:
> 1.1.0
> add nsslapd-pluginVendor:
> Fedora Project
> adding new entry "cn=sudorule name uniqueness,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:11Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:11Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:11Z DEBUG [10/35]: configuring uuid plugin
> 2015-02-06T22:09:11Z DEBUG Starting external process
> 2015-02-06T22:09:11Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/uuid-conf.ldif' '-H' 'ldap://ipa.cs.oberlin.edu:389'
> '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpp9Iniz'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=add objectclass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> IPA UUID
> add nsslapd-pluginpath:
> libipa_uuid
> add nsslapd-plugininitfunc:
> ipauuid_init
> add nsslapd-plugintype:
> preoperation
> add nsslapd-pluginenabled:
> on
> add nsslapd-pluginid:
> ipauuid_version
> add nsslapd-pluginversion:
> 1.0
> add nsslapd-pluginvendor:
> Red Hat, Inc.
> add nsslapd-plugindescription:
> IPA UUID plugin
> add nsslapd-plugin-depends-on-type:
> database
> adding new entry "cn=IPA UUID,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/tmp/tmpNODjOh' '-H' 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D'
> 'cn=Directory Manager' '-y' '/tmp/tmpVdYknN'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=add objectclass:
> top
> extensibleObject
> add cn:
> IPA Unique IDs
> add ipaUuidAttr:
> ipaUniqueID
> add ipaUuidMagicRegen:
> autogenerate
> add ipaUuidFilter:
> (|(objectclass=ipaObject)(objectclass=ipaAssociation))
> add ipaUuidScope:
> dc=cs,dc=oberlin,dc=edu
> add ipaUuidEnforce:
> TRUE
> adding new entry "cn=IPA Unique IDs,cn=IPA UUID,cn=plugins,cn=config"
> modify complete
>
> add objectclass:
> top
> extensibleObject
> add cn:
> IPK11 Unique IDs
> add ipaUuidAttr:
> ipk11UniqueID
> add ipaUuidMagicRegen:
> autogenerate
> add ipaUuidFilter:
> (objectclass=ipk11Object)
> add ipaUuidScope:
> dc=cs,dc=oberlin,dc=edu
> add ipaUuidEnforce:
> FALSE
> adding new entry "cn=IPK11 Unique IDs,cn=IPA UUID,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:12Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:12Z DEBUG [11/35]: configuring modrdn plugin
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/modrdn-conf.ldif' '-H' 'ldap://ipa.cs.oberlin.edu:389'
> '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpBmZRfj'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=add objectclass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> IPA MODRDN
> add nsslapd-pluginpath:
> libipa_modrdn
> add nsslapd-plugininitfunc:
> ipamodrdn_init
> add nsslapd-plugintype:
> betxnpostoperation
> add nsslapd-pluginenabled:
> on
> add nsslapd-pluginid:
> ipamodrdn_version
> add nsslapd-pluginversion:
> 1.0
> add nsslapd-pluginvendor:
> Red Hat, Inc.
> add nsslapd-plugindescription:
> IPA MODRDN plugin
> add nsslapd-plugin-depends-on-type:
> database
> add nsslapd-pluginPrecedence:
> 60
> adding new entry "cn=IPA MODRDN,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/tmp/tmphvemrG' '-H' 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D'
> 'cn=Directory Manager' '-y' '/tmp/tmp_waPJ6'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=add objectclass:
> top
> extensibleObject
> add cn:
> Kerberos Principal Name
> add ipaModRDNsourceAttr:
> uid
> add ipaModRDNtargetAttr:
> krbPrincipalName
> add ipaModRDNsuffix:
> @CS.OBERLIN.EDU
> add ipaModRDNfilter:
> (&(objectclass=posixaccount)(objectclass=krbPrincipalAux))
> add ipaModRDNscope:
> dc=cs,dc=oberlin,dc=edu
> adding new entry "cn=Kerberos Principal Name,cn=IPA
> MODRDN,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:12Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:12Z DEBUG [12/35]: configuring DNS plugin
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/ipa-dns-conf.ldif' '-H'
> 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D' 'cn=Directory Manager' '-y'
> '/tmp/tmpmaaDmQ'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=add objectclass:
> top
> nsslapdPlugin
> extensibleObject
> add cn:
> IPA DNS
> add nsslapd-plugindescription:
> IPA DNS support plugin
> add nsslapd-pluginenabled:
> on
> add nsslapd-pluginid:
> ipa_dns
> add nsslapd-plugininitfunc:
> ipadns_init
> add nsslapd-pluginpath:
> libipa_dns.so
> add nsslapd-plugintype:
> preoperation
> add nsslapd-pluginvendor:
> Red Hat, Inc.
> add nsslapd-pluginversion:
> 1.0
> add nsslapd-plugin-depends-on-type:
> database
> adding new entry "cn=IPA DNS,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:12Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:12Z DEBUG [13/35]: enabling entryUSN plugin
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/entryusn.ldif' '-H' 'ldap://ipa.cs.oberlin.edu:389'
> '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmp5pjssE'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=replace nsslapd-entryusn-global:
> on
> modifying entry "cn=config"
> modify complete
>
> replace nsslapd-entryusn-import-initval:
> next
> modifying entry "cn=config"
> modify complete
>
> replace nsslapd-pluginenabled:
> on
> modifying entry "cn=USN,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:12Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:12Z DEBUG [14/35]: configuring lockout plugin
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/lockout-conf.ldif' '-H'
> 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D' 'cn=Directory Manager' '-y'
> '/tmp/tmpt91sUQ'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=add objectclass:
> top
> nsSlapdPlugin
> extensibleObject
> add cn:
> IPA Lockout
> add nsslapd-pluginpath:
> libipa_lockout
> add nsslapd-plugininitfunc:
> ipalockout_init
> add nsslapd-plugintype:
> object
> add nsslapd-pluginenabled:
> on
> add nsslapd-pluginid:
> ipalockout_version
> add nsslapd-pluginversion:
> 1.0
> add nsslapd-pluginvendor:
> Red Hat, Inc.
> add nsslapd-plugindescription:
> IPA Lockout plugin
> add nsslapd-plugin-depends-on-type:
> database
> adding new entry "cn=IPA Lockout,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:12Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:12Z DEBUG [15/35]: creating indices
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/indices.ldif' '-H' 'ldap://ipa.cs.oberlin.edu:389'
> '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpHAiHnm'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=add objectClass:
> top
> nsIndex
> add cn:
> krbPrincipalName
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> sub
> adding new entry "cn=krbPrincipalName,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsIndex
> add cn:
> ou
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> sub
> adding new entry "cn=ou,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsIndex
> add cn:
> carLicense
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> sub
> adding new entry "cn=carLicense,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsIndex
> add cn:
> title
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> sub
> adding new entry "cn=title,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsIndex
> add cn:
> manager
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=manager,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsIndex
> add cn:
> secretary
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=secretary,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsIndex
> add cn:
> displayname
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> sub
> adding new entry "cn=displayname,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add nsIndexType:
> sub
> modifying entry "cn=uid,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsIndex
> add cn:
> uidnumber
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> add nsMatchingRule:
> integerOrderingMatch
> adding new entry "cn=uidnumber,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add objectClass:
> top
> nsIndex
> add cn:
> gidnumber
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> add nsMatchingRule:
> integerOrderingMatch
> adding new entry "cn=gidnumber,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> replace nsIndexType:
> eq,pres
> modifying entry "cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> replace nsIndexType:
> eq,pres
> modifying entry "cn=ntUserDomainId,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add ObjectClass:
> top
> nsIndex
> add cn:
> fqdn
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> adding new entry "cn=fqdn,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add ObjectClass:
> top
> nsIndex
> add cn:
> macAddress
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> adding new entry "cn=macAddress,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> memberHost
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=memberHost,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> memberUser
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=memberUser,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> sourcehost
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=sourcehost,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> memberservice
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=memberservice,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> managedby
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=managedby,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> memberallowcmd
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=memberallowcmd,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> memberdenycmd
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=memberdenycmd,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> ipasudorunas
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=ipasudorunas,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> ipasudorunasgroup
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> pres
> sub
> adding new entry "cn=ipasudorunasgroup,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> automountkey
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> adding new entry "cn=automountkey,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> ipakrbprincipalalias
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> adding new entry "cn=ipakrbprincipalalias,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
> add cn:
> ipauniqueid
> add ObjectClass:
> top
> nsIndex
> add nsSystemIndex:
> false
> add nsIndexType:
> eq
> adding new entry "cn=ipauniqueid,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:12Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:12Z DEBUG [16/35]: enabling referential integrity
> plugin
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/referint-conf.ldif' '-H'
> 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D' 'cn=Directory Manager' '-y'
> '/tmp/tmp5G8YDP'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=replace nsslapd-pluginenabled:
> on
> modifying entry "cn=referential integrity
> postoperation,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:12Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:12Z DEBUG [17/35]: configuring ssl for ds instance
> 2015-02-06T22:09:12Z DEBUG Loading Index file from
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-N' '-f'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU//pwdfile.txt'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/pk12util' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-i'
> '/tmp/tmpzmYHXxipa/realm_info/dscert.p12' '-k'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU//pwdfile.txt' '-v' '-w' '/dev/stdin'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=pk12util: PKCS12 IMPORT SUCCESSFUL
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-L'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=
> Certificate Nickname Trust
> Attributes
> SSL,S/MIME,JAR/XPI
>
> Server-Cert u,u,u
> CS.OBERLIN.EDU IPA CA ,,
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-A' '-n' 'CA 1' '-t' ',,' '-a'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-O' '-n' 'Server-Cert'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout="CS.OBERLIN.EDU IPA CA"
> [CN=Certificate Authority,O=CS.OBERLIN.EDU]
>
> "Server-Cert" [CN=ipa.cs.oberlin.edu,O=CS.OBERLIN.EDU]
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-M' '-n' 'CS.OBERLIN.EDU IPA CA'
> '-t' 'CT,C,C'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-O' '-n' 'Server-Cert'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout="CS.OBERLIN.EDU IPA CA"
> [CN=Certificate Authority,O=CS.OBERLIN.EDU]
>
> "Server-Cert" [CN=ipa.cs.oberlin.edu,O=CS.OBERLIN.EDU]
>
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-L' '-n' 'CS.OBERLIN.EDU IPA CA' '-a'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=-----BEGIN CERTIFICATE-----
> MIIDlDCCAnygAwIBAgIBATANBgkqhkiG9w0BAQsFADA5MRcwFQYDVQQKEw5DUy5P
> QkVSTElOLkVEVTEeMBwGA1UEAxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE0
> MDMyMTA5MzAyOFoXDTM0MDMyMTA5MzAyOFowOTEXMBUGA1UEChMOQ1MuT0JFUkxJ
> Ti5FRFUxHjAcBgNVBAMTFUNlcnRpZmljYXRlIEF1dGhvcml0eTCCASIwDQYJKoZI
> hvcNAQEBBQADggEPADCCAQoCggEBAKb+vPeISgGklCdSOnDeUwdfO85yIpR4jYjR
> ye5wDxFzYbHPtO9VGDtV5odKodeCfKIkvVldJzGW3Y8R7G5Fg00M627kJ74RgHCD
> bI8vW9XNxeuTJ4q7oW6a9SPXEUDp7kJF8Qyb9ci9/5Ki7Xgc7+lQ4tzIGF05NIAp
> fHNriUZm7RVFp1TunVYKuzMw8XbiwwayqOk/DfEZLHZX1mwN317uaNEILR4dE+YU
> owThGl0lVlF8UJbRkudQ+139ne7XwFTPkGln1q4A9p6pr9oc2HQYDIEI589NRFVV
> 8fQDHnfYaku1aAj9WyRB3i7+AjilLEX/TDSh0P0p81dUETrx9wcCAwEAAaOBpjCB
> ozAfBgNVHSMEGDAWgBSMRQizFrNQL2a/Cr7qKvmGk7vfCDAPBgNVHRMBAf8EBTAD
> AQH/MA4GA1UdDwEB/wQEAwIBxjAdBgNVHQ4EFgQUjEUIsxazUC9mvwq+6ir5hpO7
> 3wgwQAYIKwYBBQUHAQEENDAyMDAGCCsGAQUFBzABhiRodHRwOi8vaWRtLmNzLm9i
> ZXJsaW4uZWR1OjgwL2NhL29jc3AwDQYJKoZIhvcNAQELBQADggEBAFDGFQnwYeOy
> 6qqLMcMM50+957Ejwta1oVFZ7XUXR9nznlc2RZz0gbjDbH2B0+CNflbkRHge3uB9
> 9ud2CHVKqsHzWsmbCiEjqwo0W+tSPtpp29G16ar8YHdmj79xFIpN6UQG5PuHL9wr
> MsFTFDGx5UkkHHzveCVnlMZ2TGp9imsQ17ZbzIGwddTZ5rVLPpwcIvtmqtYNkBMO
> PUzQwdyNw3o0GoKD60os24j2SjCsQxn4L0hc6/srjkm+CHoMA2/iUR8SueZt9Kft
> 9vKpuS7w86lu0X5heqpUBfAJ4uiv7Bu2qWRXv+rA4wInCTBnGx8SP53ENIFM7WIa
> 5pOh4NxH5Jc=
> -----END CERTIFICATE-----
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-L'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=
> Certificate Nickname Trust
> Attributes
> SSL,S/MIME,JAR/XPI
>
> Server-Cert u,u,u
> CS.OBERLIN.EDU IPA CA CT,C,C
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-L' '-n' 'Server-Cert' '-a'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=-----BEGIN CERTIFICATE-----
> MIIDnzCCAoegAwIBAgIBdTANBgkqhkiG9w0BAQsFADA5MRcwFQYDVQQKEw5DUy5P
> QkVSTElOLkVEVTEeMBwGA1UEAxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE1
> MDIwNjE0MDEzM1oXDTE3MDIwNjE0MDEzM1owNjEXMBUGA1UEChMOQ1MuT0JFUkxJ
> Ti5FRFUxGzAZBgNVBAMTEmlwYS5jcy5vYmVybGluLmVkdTCCASIwDQYJKoZIhvcN
> AQEBBQADggEPADCCAQoCggEBAOig6uDWVeG7W/642c0vsSK6Zf3U4uyIl1AZJ4VK
> LsT2I/e1zdcORJJ2w6iZ5VQ/YZe89zeiDCrzWc8rkfztjZdouzUP/xd6uyx54kBs
> hB6QOtbpxxWakJsN2jdyR/rCk9mTOQ2SW5mY8kTeKecReDcd7snYw5SgbySI2Pn/
> IJwMjLuflxkleJzadaTJTqGlrp3hj1/H07j+q+dDfxeWHbDK/XAwruWshEtrOAEW
> ziZOFGcdXNoDNS3e2A20/gAEvVUb1VPuKlZifh621AqqNhOeF8LPNrMgYjoQ7IlD
> sF5ZWZ1dRu0ShKxkKpdTiiaOLxaMRdfoywlt03aHiTw1JekCAwEAAaOBtDCBsTAf
> BgNVHSMEGDAWgBSMRQizFrNQL2a/Cr7qKvmGk7vfCDBABggrBgEFBQcBAQQ0MDIw
> MAYIKwYBBQUHMAGGJGh0dHA6Ly9pZG0uY3Mub2Jlcmxpbi5lZHU6ODAvY2Evb2Nz
> cDAOBgNVHQ8BAf8EBAMCBPAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
> MB0GA1UdDgQWBBRqFfQJ2o3ZEeyPDfOFAQA553TVWDANBgkqhkiG9w0BAQsFAAOC
> AQEADMD/VdR6j5RvcyZwrhAqYtdSSL4yvyTVwkYuRgbHw86gwTqm6tBbVe2Vwdok
> IIWu+/EXolIzq/5XyDJ1dxoW9e6zEyDWtupLOKDRSoHrw7z2+DejVdzIRizU1h48
> zBTVF+cWXja6Q+AqmEkCby76X5+UfeYcyc2vEBfxhAQySU/mrrhaGA0qG+xsdewh
> F8FF/XWpDxyscwAhJL6DKNyZKuDyQM6EOkxQ3OYRqRs21mVis1ONt6fvzIC1fSIy
> GYJ6shm5O6cPijjKwaZo8XsW0ZlF6SRybCuGEJSGmbZYdlP0A1ZR9/YMVim1ghR2
> KvAXCSL+tYpWmbNLgsxnZswr0A==
> -----END CERTIFICATE-----
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/bin/systemctl' 'is-active'
> 'certmonger.service'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=active
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/usr/bin/certutil' '-d'
> '/etc/dirsrv/slapd-CS-OBERLIN-EDU/' '-L' '-n' 'Server-Cert' '-a'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=-----BEGIN CERTIFICATE-----
> MIIDnzCCAoegAwIBAgIBdTANBgkqhkiG9w0BAQsFADA5MRcwFQYDVQQKEw5DUy5P
> QkVSTElOLkVEVTEeMBwGA1UEAxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE1
> MDIwNjE0MDEzM1oXDTE3MDIwNjE0MDEzM1owNjEXMBUGA1UEChMOQ1MuT0JFUkxJ
> Ti5FRFUxGzAZBgNVBAMTEmlwYS5jcy5vYmVybGluLmVkdTCCASIwDQYJKoZIhvcN
> AQEBBQADggEPADCCAQoCggEBAOig6uDWVeG7W/642c0vsSK6Zf3U4uyIl1AZJ4VK
> LsT2I/e1zdcORJJ2w6iZ5VQ/YZe89zeiDCrzWc8rkfztjZdouzUP/xd6uyx54kBs
> hB6QOtbpxxWakJsN2jdyR/rCk9mTOQ2SW5mY8kTeKecReDcd7snYw5SgbySI2Pn/
> IJwMjLuflxkleJzadaTJTqGlrp3hj1/H07j+q+dDfxeWHbDK/XAwruWshEtrOAEW
> ziZOFGcdXNoDNS3e2A20/gAEvVUb1VPuKlZifh621AqqNhOeF8LPNrMgYjoQ7IlD
> sF5ZWZ1dRu0ShKxkKpdTiiaOLxaMRdfoywlt03aHiTw1JekCAwEAAaOBtDCBsTAf
> BgNVHSMEGDAWgBSMRQizFrNQL2a/Cr7qKvmGk7vfCDBABggrBgEFBQcBAQQ0MDIw
> MAYIKwYBBQUHMAGGJGh0dHA6Ly9pZG0uY3Mub2Jlcmxpbi5lZHU6ODAvY2Evb2Nz
> cDAOBgNVHQ8BAf8EBAMCBPAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
> MB0GA1UdDgQWBBRqFfQJ2o3ZEeyPDfOFAQA553TVWDANBgkqhkiG9w0BAQsFAAOC
> AQEADMD/VdR6j5RvcyZwrhAqYtdSSL4yvyTVwkYuRgbHw86gwTqm6tBbVe2Vwdok
> IIWu+/EXolIzq/5XyDJ1dxoW9e6zEyDWtupLOKDRSoHrw7z2+DejVdzIRizU1h48
> zBTVF+cWXja6Q+AqmEkCby76X5+UfeYcyc2vEBfxhAQySU/mrrhaGA0qG+xsdewh
> F8FF/XWpDxyscwAhJL6DKNyZKuDyQM6EOkxQ3OYRqRs21mVis1ONt6fvzIC1fSIy
> GYJ6shm5O6cPijjKwaZo8XsW0ZlF6SRybCuGEJSGmbZYdlP0A1ZR9/YMVim1ghR2
> KvAXCSL+tYpWmbNLgsxnZswr0A==
> -----END CERTIFICATE-----
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/bin/systemctl' 'is-active'
> 'certmonger.service'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=active
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG Starting external process
> 2015-02-06T22:09:12Z DEBUG args='/bin/systemctl' 'is-active'
> 'certmonger.service'
> 2015-02-06T22:09:12Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:12Z DEBUG stdout=active
>
> 2015-02-06T22:09:12Z DEBUG stderr=
> 2015-02-06T22:09:12Z DEBUG flushing ldap://ipa.cs.oberlin.edu:389 from
> SchemaCache
> 2015-02-06T22:09:12Z DEBUG retrieving schema for SchemaCache
> url=ldap://ipa.cs.oberlin.edu:389
> conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7feb92d347a0>
> 2015-02-06T22:09:12Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:12Z DEBUG [18/35]: configuring certmap.conf
> 2015-02-06T22:09:13Z DEBUG Loading StateFile from
> '/var/lib/ipa/sysupgrade/sysupgrade.state'
> 2015-02-06T22:09:13Z DEBUG Saving StateFile to
> '/var/lib/ipa/sysupgrade/sysupgrade.state'
> 2015-02-06T22:09:13Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:13Z DEBUG [19/35]: configure autobind for root
> 2015-02-06T22:09:13Z DEBUG Starting external process
> 2015-02-06T22:09:13Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/usr/share/ipa/root-autobind.ldif' '-H'
> 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D' 'cn=Directory Manager' '-y'
> '/tmp/tmpF6vyIt'
> 2015-02-06T22:09:13Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:13Z DEBUG stdout=add objectClass:
> extensibleObject
> top
> add cn:
> root-autobind
> add uidNumber:
> 0
> add gidNumber:
> 0
> adding new entry "cn=root-autobind,cn=config"
> modify complete
>
> replace nsslapd-ldapiautobind:
> on
> modifying entry "cn=config"
> modify complete
>
> replace nsslapd-ldapimaptoentries:
> on
> modifying entry "cn=config"
> modify complete
>
>
> 2015-02-06T22:09:13Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:13Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:13Z DEBUG [20/35]: configure new location for
> managed entries
> 2015-02-06T22:09:13Z DEBUG Starting external process
> 2015-02-06T22:09:13Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/tmp/tmpiwedy2' '-H' 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D'
> 'cn=Directory Manager' '-y' '/tmp/tmpVbs2ru'
> 2015-02-06T22:09:13Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:13Z DEBUG stdout=add nsslapd-pluginConfigArea:
> cn=Definitions,cn=Managed Entries,cn=etc,dc=cs,dc=oberlin,dc=edu
> modifying entry "cn=Managed Entries,cn=plugins,cn=config"
> modify complete
>
>
> 2015-02-06T22:09:13Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:13Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:13Z DEBUG [21/35]: configure dirsrv ccache
> 2015-02-06T22:09:13Z DEBUG Backing up system configuration file
> '/etc/sysconfig/dirsrv'
> 2015-02-06T22:09:13Z DEBUG Saving Index File to
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2015-02-06T22:09:13Z DEBUG Starting external process
> 2015-02-06T22:09:13Z DEBUG args='/usr/sbin/selinuxenabled'
> 2015-02-06T22:09:13Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:13Z DEBUG stdout=
> 2015-02-06T22:09:13Z DEBUG stderr=
> 2015-02-06T22:09:13Z DEBUG Starting external process
> 2015-02-06T22:09:13Z DEBUG args='/sbin/restorecon' '/etc/sysconfig/dirsrv'
> 2015-02-06T22:09:13Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:13Z DEBUG stdout=
> 2015-02-06T22:09:13Z DEBUG stderr=
> 2015-02-06T22:09:13Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:13Z DEBUG [22/35]: enable SASL mapping fallback
> 2015-02-06T22:09:13Z DEBUG Starting external process
> 2015-02-06T22:09:13Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f'
> '/tmp/tmpMksQKm' '-H' 'ldap://ipa.cs.oberlin.edu:389' '-x' '-D'
> 'cn=Directory Manager' '-y' '/tmp/tmpvbLong'
> 2015-02-06T22:09:13Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:13Z DEBUG stdout=replace nsslapd-sasl-mapping-fallback:
> on
> modifying entry "cn=config"
> modify complete
>
>
> 2015-02-06T22:09:13Z DEBUG stderr=ldap_initialize(
> ldap://ipa.cs.oberlin.edu:389/??base )
>
> 2015-02-06T22:09:13Z DEBUG duration: 0 seconds
> 2015-02-06T22:09:13Z DEBUG [23/35]: restarting directory server
> 2015-02-06T22:09:13Z DEBUG Starting external process
> 2015-02-06T22:09:13Z DEBUG args='/bin/systemctl' '--system'
> 'daemon-reload'
> 2015-02-06T22:09:13Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:13Z DEBUG stdout=
> 2015-02-06T22:09:13Z DEBUG stderr=
> 2015-02-06T22:09:13Z DEBUG Starting external process
> 2015-02-06T22:09:13Z DEBUG args='/bin/systemctl' 'restart'
> 'dirsrv at CS-OBERLIN-EDU.service'
> 2015-02-06T22:09:14Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:14Z DEBUG stdout=
> 2015-02-06T22:09:14Z DEBUG stderr=
> 2015-02-06T22:09:14Z DEBUG Starting external process
> 2015-02-06T22:09:14Z DEBUG args='/bin/systemctl' 'is-active'
> 'dirsrv at CS-OBERLIN-EDU.service'
> 2015-02-06T22:09:14Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:14Z DEBUG stdout=active
>
> 2015-02-06T22:09:14Z DEBUG stderr=
> 2015-02-06T22:09:14Z DEBUG wait_for_open_ports: localhost [389]
> timeout 300
> 2015-02-06T22:09:18Z DEBUG Starting external process
> 2015-02-06T22:09:18Z DEBUG args='/bin/systemctl' 'is-active'
> 'dirsrv at CS-OBERLIN-EDU.service'
> 2015-02-06T22:09:18Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:18Z DEBUG stdout=active
>
> 2015-02-06T22:09:18Z DEBUG stderr=
> 2015-02-06T22:09:18Z DEBUG duration: 5 seconds
> 2015-02-06T22:09:18Z DEBUG [24/35]: setting up initial replication
> 2015-02-06T22:09:18Z DEBUG flushing
> ldapi://%2fvar%2frun%2fslapd-CS-OBERLIN-EDU.socket from SchemaCache
> 2015-02-06T22:09:18Z DEBUG retrieving schema for SchemaCache
> url=ldapi://%2fvar%2frun%2fslapd-CS-OBERLIN-EDU.socket
> conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7feb92d563f8>
> 2015-02-06T22:09:18Z DEBUG Starting external process
> 2015-02-06T22:09:18Z DEBUG args='/bin/systemctl' '--system'
> 'daemon-reload'
> 2015-02-06T22:09:18Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:18Z DEBUG stdout=
> 2015-02-06T22:09:18Z DEBUG stderr=
> 2015-02-06T22:09:18Z DEBUG Starting external process
> 2015-02-06T22:09:18Z DEBUG args='/bin/systemctl' 'restart'
> 'dirsrv at CS-OBERLIN-EDU.service'
> 2015-02-06T22:09:20Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:20Z DEBUG stdout=
> 2015-02-06T22:09:20Z DEBUG stderr=
> 2015-02-06T22:09:20Z DEBUG Starting external process
> 2015-02-06T22:09:20Z DEBUG args='/bin/systemctl' 'is-active'
> 'dirsrv at CS-OBERLIN-EDU.service'
> 2015-02-06T22:09:20Z DEBUG Process finished, return code=0
> 2015-02-06T22:09:20Z DEBUG stdout=active
>
> 2015-02-06T22:09:20Z DEBUG stderr=
> 2015-02-06T22:09:20Z DEBUG wait_for_open_ports: localhost [389]
> timeout 300
> 2015-02-06T22:09:23Z DEBUG flushing ldap://idm.cs.oberlin.edu:389 from
> SchemaCache
> 2015-02-06T22:09:23Z DEBUG retrieving schema for SchemaCache
> url=ldap://idm.cs.oberlin.edu:389
> conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7feb9299e050>
> 2015-02-06T22:09:23Z DEBUG flushing ldaps://ipa.cs.oberlin.edu:636
> from SchemaCache
> 2015-02-06T22:09:23Z DEBUG retrieving schema for SchemaCache
> url=ldaps://ipa.cs.oberlin.edu:636
> conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7feb92995e60>
> 2015-02-06T22:11:42Z DEBUG Traceback (most recent call last):
> File
> "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line
> 382, in start_creation
> run_step(full_msg, method)
> File
> "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line
> 372, in run_step
> method()
> File
> "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
> line 368, in __setup_replica
> r_bindpw=self.dm_password)
> File
> "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py",
> line 965, in setup_replication
> raise RuntimeError("Failed to start replication")
> RuntimeError: Failed to start replication
>
> 2015-02-06T22:11:42Z DEBUG [error] RuntimeError: Failed to start
> replication
> 2015-02-06T22:11:43Z DEBUG File
> "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py",
> line 642, in run_script
> return_value = main_function()
>
> File "/sbin/ipa-replica-install", line 700, in main
> ds = install_replica_ds(config)
>
> File "/sbin/ipa-replica-install", line 195, in install_replica_ds
> ca_file=config.dir + "/ca.crt",
>
> File
> "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
> line 355, in create_replica
> self.start_creation(runtime=60)
>
> File
> "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line
> 382, in start_creation
> run_step(full_msg, method)
>
> File
> "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line
> 372, in run_step
> method()
>
> File
> "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
> line 368, in __setup_replica
> r_bindpw=self.dm_password)
>
> File
> "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py",
> line 965, in setup_replication
> raise RuntimeError("Failed to start replication")
>
> 2015-02-06T22:11:43Z DEBUG The ipa-replica-install command failed,
> exception: RuntimeError: Failed to start replication
-dirsrv error log-
> 389-Directory/1.3.3.5 B2014.289.1826
> ipa.cs.oberlin.edu:389 (/etc/dirsrv/slapd-CS-OBERLIN-EDU)
>
> [06/Feb/2015:11:11:58 -0500] - WARNING: Import is running with
> nsslapd-db-private-import-mem on; No other process is allowed to
> access the database
> [06/Feb/2015:11:11:58 -0500] - check_and_set_import_cache: pagesize:
> 4096, pages: 2043953, procpages: 55635
> [06/Feb/2015:11:11:58 -0500] - Import allocates 3270324KB import cache.
> [06/Feb/2015:11:11:59 -0500] - import userRoot: Beginning import job...
> [06/Feb/2015:11:11:59 -0500] - import userRoot: Index buffering
> enabled with bucket size 100
> [06/Feb/2015:11:11:59 -0500] - import userRoot: Processing file
> "/var/lib/dirsrv/boot.ldif"
> [06/Feb/2015:11:11:59 -0500] - import userRoot: Finished scanning file
> "/var/lib/dirsrv/boot.ldif" (1 entries)
> [06/Feb/2015:11:12:01 -0500] - import userRoot: Workers finished;
> cleaning up...
> [06/Feb/2015:11:12:01 -0500] - import userRoot: Workers cleaned up.
> [06/Feb/2015:11:12:01 -0500] - import userRoot: Cleaning up producer
> thread...
> [06/Feb/2015:11:12:01 -0500] - import userRoot: Indexing complete.
> Post-processing...
> [06/Feb/2015:11:12:01 -0500] - import userRoot: Generating
> numsubordinates (this may take several minutes to complete)...
> [06/Feb/2015:11:12:02 -0500] - import userRoot: Generating
> numSubordinates complete.
> [06/Feb/2015:11:12:02 -0500] - import userRoot: Gathering ancestorid
> non-leaf IDs...
> [06/Feb/2015:11:12:02 -0500] - import userRoot: Finished gathering
> ancestorid non-leaf IDs.
> [06/Feb/2015:11:12:02 -0500] - Nothing to do to build ancestorid index
> [06/Feb/2015:11:12:02 -0500] - import userRoot: Created ancestorid
> index (new idl).
> [06/Feb/2015:11:12:02 -0500] - import userRoot: Flushing caches...
> [06/Feb/2015:11:12:02 -0500] - import userRoot: Closing files...
> [06/Feb/2015:11:12:02 -0500] - All database threads now stopped
> [06/Feb/2015:11:12:02 -0500] - import userRoot: Import complete.
> Processed 1 entries in 3 seconds. (0.33 entries/sec)
> [06/Feb/2015:11:12:04 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:11:12:04 -0500] - Db home directory is not set. Possibly
> nsslapd-directory (optionally nsslapd-db-home-directory) is missing in
> the config file.
> [06/Feb/2015:11:12:04 -0500] - I'm resizing my cache now...cache was
> 3348811776 and is now 6400000
> [06/Feb/2015:11:12:05 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:11:12:05 -0500] - slapd shutting down - signaling
> operation threads - op stack size 0 max work q size 0 max work q stack
> size 0
> [06/Feb/2015:11:12:06 -0500] - slapd shutting down - closing down
> internal subsystems and plugins
> [06/Feb/2015:11:12:06 -0500] - Waiting for 4 database threads to stop
> [06/Feb/2015:11:12:07 -0500] - All database threads now stopped
> [06/Feb/2015:11:12:07 -0500] - slapd shutting down - freed 0 work q
> stack objects - freed 0 op stack objects
> [06/Feb/2015:11:12:07 -0500] - slapd stopped.
> [06/Feb/2015:11:12:09 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:11:12:09 -0500] - I'm resizing my cache now...cache was
> 6400000 and is now 5120000
> [06/Feb/2015:11:12:09 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:11:12:19 -0500] - The change of nsslapd-ldapilisten will
> not take effect until the server is restarted
> [06/Feb/2015:11:12:24 -0500] - Warning: Adding configuration attribute
> "nsslapd-security"
> [06/Feb/2015:11:12:25 -0500] - slapd shutting down - signaling
> operation threads - op stack size 2 max work q size 1 max work q stack
> size 1
> [06/Feb/2015:11:12:25 -0500] - slapd shutting down - waiting for 29
> threads to terminate
> [06/Feb/2015:11:12:25 -0500] - slapd shutting down - closing down
> internal subsystems and plugins
> [06/Feb/2015:11:12:25 -0500] - Waiting for 4 database threads to stop
> [06/Feb/2015:11:12:26 -0500] - All database threads now stopped
> [06/Feb/2015:11:12:26 -0500] - slapd shutting down - freed 1 work q
> stack objects - freed 2 op stack objects
> [06/Feb/2015:11:12:26 -0500] - slapd stopped.
> [06/Feb/2015:11:12:28 -0500] - SSL alert: Configured NSS Ciphers
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:12:28 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:29 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:11:12:30 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:30 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA:
> enabled
> [06/Feb/2015:11:12:30 -0500] SSL Initialization - SSL version range:
> min: TLS1.0, max: TLS1.2
> [06/Feb/2015:11:12:30 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:11:12:30 -0500] - I'm resizing my cache now...cache was
> 5120000 and is now 4096000
> [06/Feb/2015:11:12:30 -0500] attrcrypt - No symmetric key found for
> cipher AES in backend userRoot, attempting to create one...
> [06/Feb/2015:11:12:31 -0500] attrcrypt - Key for cipher AES
> successfully generated and stored
> [06/Feb/2015:11:12:31 -0500] attrcrypt - No symmetric key found for
> cipher 3DES in backend userRoot, attempting to create one...
> [06/Feb/2015:11:12:31 -0500] attrcrypt - Key for cipher 3DES
> successfully generated and stored
> [06/Feb/2015:11:12:31 -0500] ipalockout_get_global_config - [file
> ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
> [06/Feb/2015:11:12:32 -0500] ipaenrollment_start - [file
> ipa_enrollment.c, line 393]: Failed to get default realm?!
> [06/Feb/2015:11:12:32 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:11:12:32 -0500] - Listening on All Interfaces port 636
> for LDAPS requests
> [06/Feb/2015:11:12:32 -0500] - Listening on
> /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
> [06/Feb/2015:11:12:33 -0500] - slapd shutting down - signaling
> operation threads - op stack size 1 max work q size 1 max work q stack
> size 1
> [06/Feb/2015:11:12:33 -0500] - slapd shutting down - waiting for 2
> threads to terminate
> [06/Feb/2015:11:12:33 -0500] - slapd shutting down - closing down
> internal subsystems and plugins
> [06/Feb/2015:11:12:33 -0500] - Waiting for 4 database threads to stop
> [06/Feb/2015:11:12:34 -0500] - All database threads now stopped
> [06/Feb/2015:11:12:34 -0500] - slapd shutting down - freed 1 work q
> stack objects - freed 1 op stack objects
> [06/Feb/2015:11:12:34 -0500] - slapd stopped.
> [06/Feb/2015:11:12:35 -0500] - SSL alert: Configured NSS Ciphers
> [06/Feb/2015:11:12:35 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:12:35 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:12:35 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:35 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:36 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:11:12:37 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:12:38 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA:
> enabled
> [06/Feb/2015:11:12:38 -0500] SSL Initialization - SSL version range:
> min: TLS1.0, max: TLS1.2
> [06/Feb/2015:11:12:38 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:11:12:38 -0500] - I'm resizing my cache now...cache was
> 4096000 and is now 3276800
> [06/Feb/2015:11:12:38 -0500] ipalockout_get_global_config - [file
> ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
> [06/Feb/2015:11:12:38 -0500] ipaenrollment_start - [file
> ipa_enrollment.c, line 393]: Failed to get default realm?!
> [06/Feb/2015:11:12:39 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:11:12:39 -0500] - Listening on All Interfaces port 636
> for LDAPS requests
> [06/Feb/2015:11:12:39 -0500] - Listening on
> /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
> [06/Feb/2015:11:12:40 -0500] NSMMReplicationPlugin -
> agmt="cn=meToidm.cs.oberlin.edu" (idm:389): The remote replica has a
> different database generation ID than the local database. You may
> have to reinitialize the remote replica, or the local replica.
> [06/Feb/2015:11:12:40 -0500] NSMMReplicationPlugin -
> multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is going
> offline; disabling replication
> [06/Feb/2015:11:12:41 -0500] - WARNING: Import is running with
> nsslapd-db-private-import-mem on; No other process is allowed to
> access the database
> [06/Feb/2015:11:12:43 -0500] schema - [C] Local objectClasses must not
> be overwritten (set replication log for additional info)
> [06/Feb/2015:11:13:01 -0500] - import userRoot: Processed 1828 entries
> -- average rate 91.4/sec, recent rate 91.3/sec, hit ratio 0%
> [06/Feb/2015:11:13:21 -0500] - import userRoot: Processed 1828 entries
> -- average rate 45.7/sec, recent rate 45.7/sec, hit ratio 0%
> [06/Feb/2015:11:13:41 -0500] - import userRoot: Processed 1828 entries
> -- average rate 30.5/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:11:14:01 -0500] - import userRoot: Processed 1828 entries
> -- average rate 22.9/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:11:14:21 -0500] - import userRoot: Processed 1828 entries
> -- average rate 18.3/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:11:14:41 -0500] - import userRoot: Processed 1828 entries
> -- average rate 15.2/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:11:14:51 -0500] - import userRoot: Workers finished;
> cleaning up...
> [06/Feb/2015:11:14:52 -0500] - import userRoot: Workers cleaned up.
> [06/Feb/2015:11:14:52 -0500] - import userRoot: Indexing complete.
> Post-processing...
> [06/Feb/2015:11:14:52 -0500] - import userRoot: Generating
> numsubordinates (this may take several minutes to complete)...
> [06/Feb/2015:11:14:52 -0500] - import userRoot: Generating
> numSubordinates complete.
> [06/Feb/2015:11:14:52 -0500] - import userRoot: Gathering ancestorid
> non-leaf IDs...
> [06/Feb/2015:11:14:52 -0500] - import userRoot: Finished gathering
> ancestorid non-leaf IDs.
> [06/Feb/2015:11:14:53 -0500] - import userRoot: Creating ancestorid
> index (new idl)...
> [06/Feb/2015:11:14:53 -0500] - import userRoot: Created ancestorid
> index (new idl).
> [06/Feb/2015:11:14:53 -0500] - import userRoot: Flushing caches...
> [06/Feb/2015:11:14:53 -0500] - import userRoot: Closing files...
> [06/Feb/2015:11:14:55 -0500] - import userRoot: Import complete.
> Processed 2088 entries in 135 seconds. (15.47 entries/sec)
> [06/Feb/2015:11:14:55 -0500] NSMMReplicationPlugin -
> multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is coming
> online; enabling replication
> [06/Feb/2015:11:14:56 -0500] - Skipping CoS Definition cn=Password
> Policy,cn=accounts,dc=cs,dc=oberlin,dc=edu--no CoS Templates found,
> which should be added before the CoS Definition.
> [06/Feb/2015:11:43:39 -0500] - slapd shutting down - signaling
> operation threads - op stack size 2 max work q size 1 max work q stack
> size 1
> [06/Feb/2015:11:43:39 -0500] - slapd shutting down - closing down
> internal subsystems and plugins
> [06/Feb/2015:11:43:40 -0500] - Waiting for 4 database threads to stop
> [06/Feb/2015:11:43:40 -0500] - All database threads now stopped
> [06/Feb/2015:11:43:40 -0500] - slapd shutting down - freed 1 work q
> stack objects - freed 2 op stack objects
> [06/Feb/2015:11:43:40 -0500] - slapd stopped.
> [06/Feb/2015:11:45:30 -0500] - WARNING: Import is running with
> nsslapd-db-private-import-mem on; No other process is allowed to
> access the database
> [06/Feb/2015:11:45:31 -0500] - check_and_set_import_cache: pagesize:
> 4096, pages: 2043953, procpages: 55634
> [06/Feb/2015:11:45:31 -0500] - Import allocates 3270324KB import cache.
> [06/Feb/2015:11:45:31 -0500] - import userRoot: Beginning import job...
> [06/Feb/2015:11:45:31 -0500] - import userRoot: Index buffering
> enabled with bucket size 100
> [06/Feb/2015:11:45:31 -0500] - import userRoot: Processing file
> "/var/lib/dirsrv/boot.ldif"
> [06/Feb/2015:11:45:31 -0500] - import userRoot: Finished scanning file
> "/var/lib/dirsrv/boot.ldif" (1 entries)
> [06/Feb/2015:11:45:32 -0500] - import userRoot: Workers finished;
> cleaning up...
> [06/Feb/2015:11:45:32 -0500] - import userRoot: Workers cleaned up.
> [06/Feb/2015:11:45:32 -0500] - import userRoot: Cleaning up producer
> thread...
> [06/Feb/2015:11:45:32 -0500] - import userRoot: Indexing complete.
> Post-processing...
> [06/Feb/2015:11:45:32 -0500] - import userRoot: Generating
> numsubordinates (this may take several minutes to complete)...
> [06/Feb/2015:11:45:32 -0500] - import userRoot: Generating
> numSubordinates complete.
> [06/Feb/2015:11:45:33 -0500] - import userRoot: Gathering ancestorid
> non-leaf IDs...
> [06/Feb/2015:11:45:33 -0500] - import userRoot: Finished gathering
> ancestorid non-leaf IDs.
> [06/Feb/2015:11:45:33 -0500] - Nothing to do to build ancestorid index
> [06/Feb/2015:11:45:33 -0500] - import userRoot: Created ancestorid
> index (new idl).
> [06/Feb/2015:11:45:33 -0500] - import userRoot: Flushing caches...
> [06/Feb/2015:11:45:33 -0500] - import userRoot: Closing files...
> [06/Feb/2015:11:45:33 -0500] - All database threads now stopped
> [06/Feb/2015:11:45:33 -0500] - import userRoot: Import complete.
> Processed 1 entries in 2 seconds. (0.50 entries/sec)
> [06/Feb/2015:11:45:34 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:11:45:34 -0500] - Db home directory is not set. Possibly
> nsslapd-directory (optionally nsslapd-db-home-directory) is missing in
> the config file.
> [06/Feb/2015:11:45:34 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:11:45:34 -0500] - Db home directory is not set. Possibly
> nsslapd-directory (optionally nsslapd-db-home-directory) is missing in
> the config file.
> [06/Feb/2015:11:45:34 -0500] - I'm resizing my cache now...cache was
> 3348811776 and is now 6400000
> [06/Feb/2015:11:45:35 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:11:45:35 -0500] - The change of nsslapd-ldapilisten will
> not take effect until the server is restarted
> [06/Feb/2015:11:45:52 -0500] - Warning: Adding configuration attribute
> "nsslapd-security"
> [06/Feb/2015:11:45:52 -0500] - slapd shutting down - signaling
> operation threads - op stack size 2 max work q size 1 max work q stack
> size 1
> [06/Feb/2015:11:45:52 -0500] - slapd shutting down - waiting for 29
> threads to terminate
> [06/Feb/2015:11:45:53 -0500] - slapd shutting down - closing down
> internal subsystems and plugins
> [06/Feb/2015:11:45:53 -0500] - Waiting for 4 database threads to stop
> [06/Feb/2015:11:45:54 -0500] - All database threads now stopped
> [06/Feb/2015:11:45:54 -0500] - slapd shutting down - freed 1 work q
> stack objects - freed 2 op stack objects
> [06/Feb/2015:11:45:54 -0500] - slapd stopped.
> [06/Feb/2015:11:45:56 -0500] - SSL alert: Configured NSS Ciphers
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:45:56 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:57 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:57 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:57 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:57 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:11:45:57 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:57 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:57 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:57 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA:
> enabled
> [06/Feb/2015:11:45:58 -0500] SSL Initialization - SSL version range:
> min: TLS1.0, max: TLS1.2
> [06/Feb/2015:11:45:58 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:11:45:58 -0500] - I'm resizing my cache now...cache was
> 6400000 and is now 5120000
> [06/Feb/2015:11:45:59 -0500] attrcrypt - No symmetric key found for
> cipher AES in backend userRoot, attempting to create one...
> [06/Feb/2015:11:45:59 -0500] attrcrypt - Key for cipher AES
> successfully generated and stored
> [06/Feb/2015:11:45:59 -0500] attrcrypt - No symmetric key found for
> cipher 3DES in backend userRoot, attempting to create one...
> [06/Feb/2015:11:45:59 -0500] attrcrypt - Key for cipher 3DES
> successfully generated and stored
> [06/Feb/2015:11:45:59 -0500] ipalockout_get_global_config - [file
> ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
> [06/Feb/2015:11:46:00 -0500] ipaenrollment_start - [file
> ipa_enrollment.c, line 393]: Failed to get default realm?!
> [06/Feb/2015:11:46:00 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:11:46:00 -0500] - Listening on All Interfaces port 636
> for LDAPS requests
> [06/Feb/2015:11:46:00 -0500] - Listening on
> /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
> [06/Feb/2015:11:46:00 -0500] - slapd shutting down - signaling
> operation threads - op stack size 1 max work q size 1 max work q stack
> size 1
> [06/Feb/2015:11:46:00 -0500] - slapd shutting down - waiting for 27
> threads to terminate
> [06/Feb/2015:11:46:00 -0500] - slapd shutting down - closing down
> internal subsystems and plugins
> [06/Feb/2015:11:46:00 -0500] - Waiting for 4 database threads to stop
> [06/Feb/2015:11:46:00 -0500] - All database threads now stopped
> [06/Feb/2015:11:46:01 -0500] - slapd shutting down - freed 1 work q
> stack objects - freed 1 op stack objects
> [06/Feb/2015:11:46:01 -0500] - slapd stopped.
> [06/Feb/2015:11:46:02 -0500] - SSL alert: Configured NSS Ciphers
> [06/Feb/2015:11:46:02 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:46:02 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:46:02 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:02 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:02 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:02 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:46:02 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:46:02 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:11:46:03 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:11:46:04 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:04 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:11:46:04 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:11:46:04 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA:
> enabled
> [06/Feb/2015:11:46:04 -0500] SSL Initialization - SSL version range:
> min: TLS1.0, max: TLS1.2
> [06/Feb/2015:11:46:04 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:11:46:04 -0500] - I'm resizing my cache now...cache was
> 5120000 and is now 4096000
> [06/Feb/2015:11:46:05 -0500] ipalockout_get_global_config - [file
> ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
> [06/Feb/2015:11:46:05 -0500] ipaenrollment_start - [file
> ipa_enrollment.c, line 393]: Failed to get default realm?!
> [06/Feb/2015:11:46:05 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:11:46:05 -0500] - Listening on All Interfaces port 636
> for LDAPS requests
> [06/Feb/2015:11:46:05 -0500] - Listening on
> /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
> [06/Feb/2015:11:46:06 -0500] NSMMReplicationPlugin -
> agmt="cn=meToidm.cs.oberlin.edu" (idm:389): The remote replica has a
> different database generation ID than the local database. You may
> have to reinitialize the remote replica, or the local replica.
> [06/Feb/2015:11:46:06 -0500] NSMMReplicationPlugin -
> multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is going
> offline; disabling replication
> [06/Feb/2015:11:46:07 -0500] - WARNING: Import is running with
> nsslapd-db-private-import-mem on; No other process is allowed to
> access the database
> [06/Feb/2015:11:46:09 -0500] schema - [C] Local objectClasses must not
> be overwritten (set replication log for additional info)
> [06/Feb/2015:11:46:27 -0500] - import userRoot: Processed 1917 entries
> -- average rate 95.8/sec, recent rate 95.8/sec, hit ratio 0%
> [06/Feb/2015:11:46:47 -0500] - import userRoot: Processed 1917 entries
> -- average rate 47.9/sec, recent rate 47.9/sec, hit ratio 0%
> [06/Feb/2015:11:47:07 -0500] - import userRoot: Processed 1917 entries
> -- average rate 31.9/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:11:47:27 -0500] - import userRoot: Processed 1917 entries
> -- average rate 24.0/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:11:47:47 -0500] - import userRoot: Processed 1917 entries
> -- average rate 19.2/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:11:48:07 -0500] - import userRoot: Processed 1917 entries
> -- average rate 16.0/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:11:48:17 -0500] - import userRoot: Workers finished;
> cleaning up...
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Workers cleaned up.
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Indexing complete.
> Post-processing...
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Generating
> numsubordinates (this may take several minutes to complete)...
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Generating
> numSubordinates complete.
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Gathering ancestorid
> non-leaf IDs...
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Finished gathering
> ancestorid non-leaf IDs.
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Creating ancestorid
> index (new idl)...
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Created ancestorid
> index (new idl).
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Flushing caches...
> [06/Feb/2015:11:48:18 -0500] - import userRoot: Closing files...
> [06/Feb/2015:11:48:20 -0500] - import userRoot: Import complete.
> Processed 2240 entries in 133 seconds. (16.84 entries/sec)
> [06/Feb/2015:11:48:20 -0500] NSMMReplicationPlugin -
> multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is coming
> online; enabling replication
> [06/Feb/2015:11:48:21 -0500] - Skipping CoS Definition cn=Password
> Policy,cn=accounts,dc=cs,dc=oberlin,dc=edu--no CoS Templates found,
> which should be added before the CoS Definition.
> [06/Feb/2015:12:12:59 -0500] - slapd shutting down - signaling
> operation threads - op stack size 2 max work q size 1 max work q stack
> size 1
> [06/Feb/2015:12:13:00 -0500] - slapd shutting down - waiting for 28
> threads to terminate
> [06/Feb/2015:12:13:00 -0500] - slapd shutting down - closing down
> internal subsystems and plugins
> [06/Feb/2015:12:13:00 -0500] - Waiting for 4 database threads to stop
> [06/Feb/2015:12:13:01 -0500] - All database threads now stopped
> [06/Feb/2015:12:13:01 -0500] - slapd shutting down - freed 1 work q
> stack objects - freed 2 op stack objects
> [06/Feb/2015:12:13:01 -0500] - slapd stopped.
> [06/Feb/2015:17:09:05 -0500] - WARNING: Import is running with
> nsslapd-db-private-import-mem on; No other process is allowed to
> access the database
> [06/Feb/2015:17:09:06 -0500] - check_and_set_import_cache: pagesize:
> 4096, pages: 2043953, procpages: 55634
> [06/Feb/2015:17:09:06 -0500] - Import allocates 3270324KB import cache.
> [06/Feb/2015:17:09:06 -0500] - import userRoot: Beginning import job...
> [06/Feb/2015:17:09:06 -0500] - import userRoot: Index buffering
> enabled with bucket size 100
> [06/Feb/2015:17:09:06 -0500] - import userRoot: Processing file
> "/var/lib/dirsrv/boot.ldif"
> [06/Feb/2015:17:09:06 -0500] - import userRoot: Finished scanning file
> "/var/lib/dirsrv/boot.ldif" (1 entries)
> [06/Feb/2015:17:09:07 -0500] - import userRoot: Workers finished;
> cleaning up...
> [06/Feb/2015:17:09:07 -0500] - import userRoot: Workers cleaned up.
> [06/Feb/2015:17:09:07 -0500] - import userRoot: Cleaning up producer
> thread...
> [06/Feb/2015:17:09:08 -0500] - import userRoot: Indexing complete.
> Post-processing...
> [06/Feb/2015:17:09:08 -0500] - import userRoot: Generating
> numsubordinates (this may take several minutes to complete)...
> [06/Feb/2015:17:09:08 -0500] - import userRoot: Generating
> numSubordinates complete.
> [06/Feb/2015:17:09:08 -0500] - import userRoot: Gathering ancestorid
> non-leaf IDs...
> [06/Feb/2015:17:09:08 -0500] - import userRoot: Finished gathering
> ancestorid non-leaf IDs.
> [06/Feb/2015:17:09:08 -0500] - Nothing to do to build ancestorid index
> [06/Feb/2015:17:09:08 -0500] - import userRoot: Created ancestorid
> index (new idl).
> [06/Feb/2015:17:09:08 -0500] - import userRoot: Flushing caches...
> [06/Feb/2015:17:09:08 -0500] - import userRoot: Closing files...
> [06/Feb/2015:17:09:08 -0500] - All database threads now stopped
> [06/Feb/2015:17:09:08 -0500] - import userRoot: Import complete.
> Processed 1 entries in 2 seconds. (0.50 entries/sec)
> [06/Feb/2015:17:09:09 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:17:09:09 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:17:09:09 -0500] - Db home directory is not set. Possibly
> nsslapd-directory (optionally nsslapd-db-home-directory) is missing in
> the config file.
> [06/Feb/2015:17:09:10 -0500] - I'm resizing my cache now...cache was
> 3348811776 and is now 6400000
> [06/Feb/2015:17:09:11 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:17:09:11 -0500] - The change of nsslapd-ldapilisten will
> not take effect until the server is restarted
> [06/Feb/2015:17:09:12 -0500] - Warning: Adding configuration attribute
> "nsslapd-security"
> [06/Feb/2015:17:09:13 -0500] - slapd shutting down - signaling
> operation threads - op stack size 2 max work q size 1 max work q stack
> size 1
> [06/Feb/2015:17:09:13 -0500] - slapd shutting down - closing down
> internal subsystems and plugins
> [06/Feb/2015:17:09:13 -0500] - Waiting for 4 database threads to stop
> [06/Feb/2015:17:09:13 -0500] - All database threads now stopped
> [06/Feb/2015:17:09:13 -0500] - slapd shutting down - freed 1 work q
> stack objects - freed 2 op stack objects
> [06/Feb/2015:17:09:13 -0500] - slapd stopped.
> [06/Feb/2015:17:09:14 -0500] - SSL alert: Configured NSS Ciphers
> [06/Feb/2015:17:09:14 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:15 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:16 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:17:09:17 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:17 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA:
> enabled
> [06/Feb/2015:17:09:17 -0500] SSL Initialization - SSL version range:
> min: TLS1.0, max: TLS1.2
> [06/Feb/2015:17:09:17 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:17:09:17 -0500] - I'm resizing my cache now...cache was
> 6400000 and is now 5120000
> [06/Feb/2015:17:09:17 -0500] attrcrypt - No symmetric key found for
> cipher AES in backend userRoot, attempting to create one...
> [06/Feb/2015:17:09:17 -0500] attrcrypt - Key for cipher AES
> successfully generated and stored
> [06/Feb/2015:17:09:17 -0500] attrcrypt - No symmetric key found for
> cipher 3DES in backend userRoot, attempting to create one...
> [06/Feb/2015:17:09:17 -0500] attrcrypt - Key for cipher 3DES
> successfully generated and stored
> [06/Feb/2015:17:09:18 -0500] ipalockout_get_global_config - [file
> ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
> [06/Feb/2015:17:09:18 -0500] ipaenrollment_start - [file
> ipa_enrollment.c, line 393]: Failed to get default realm?!
> [06/Feb/2015:17:09:18 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:17:09:18 -0500] - Listening on All Interfaces port 636
> for LDAPS requests
> [06/Feb/2015:17:09:18 -0500] - Listening on
> /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
> [06/Feb/2015:17:09:18 -0500] - slapd shutting down - signaling
> operation threads - op stack size 1 max work q size 1 max work q stack
> size 1
> [06/Feb/2015:17:09:18 -0500] - slapd shutting down - waiting for 17
> threads to terminate
> [06/Feb/2015:17:09:18 -0500] - slapd shutting down - closing down
> internal subsystems and plugins
> [06/Feb/2015:17:09:19 -0500] - Waiting for 4 database threads to stop
> [06/Feb/2015:17:09:19 -0500] - All database threads now stopped
> [06/Feb/2015:17:09:19 -0500] - slapd shutting down - freed 1 work q
> stack objects - freed 1 op stack objects
> [06/Feb/2015:17:09:19 -0500] - slapd stopped.
> [06/Feb/2015:17:09:20 -0500] - SSL alert: Configured NSS Ciphers
> [06/Feb/2015:17:09:20 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:17:09:20 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:17:09:20 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:20 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:20 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:20 -0500] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
> [06/Feb/2015:17:09:21 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:22 -0500] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
> [06/Feb/2015:17:09:22 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [06/Feb/2015:17:09:22 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:22 -0500] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
> [06/Feb/2015:17:09:22 -0500] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [06/Feb/2015:17:09:22 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA:
> enabled
> [06/Feb/2015:17:09:22 -0500] SSL Initialization - SSL version range:
> min: TLS1.0, max: TLS1.2
> [06/Feb/2015:17:09:22 -0500] - 389-Directory/1.3.3.5 B2014.289.1826
> starting up
> [06/Feb/2015:17:09:22 -0500] - I'm resizing my cache now...cache was
> 5120000 and is now 4096000
> [06/Feb/2015:17:09:23 -0500] ipalockout_get_global_config - [file
> ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
> [06/Feb/2015:17:09:23 -0500] ipaenrollment_start - [file
> ipa_enrollment.c, line 393]: Failed to get default realm?!
> [06/Feb/2015:17:09:23 -0500] - slapd started. Listening on All
> Interfaces port 389 for LDAP requests
> [06/Feb/2015:17:09:23 -0500] - Listening on All Interfaces port 636
> for LDAPS requests
> [06/Feb/2015:17:09:23 -0500] - Listening on
> /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
> [06/Feb/2015:17:09:23 -0500] NSMMReplicationPlugin -
> agmt="cn=meToidm.cs.oberlin.edu" (idm:389): The remote replica has a
> different database generation ID than the local database. You may
> have to reinitialize the remote replica, or the local replica.
> [06/Feb/2015:17:09:24 -0500] schema - [C] Local objectClasses must not
> be overwritten (set replication log for additional info)
> [06/Feb/2015:17:09:25 -0500] NSMMReplicationPlugin -
> multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is going
> offline; disabling replication
> [06/Feb/2015:17:09:25 -0500] - WARNING: Import is running with
> nsslapd-db-private-import-mem on; No other process is allowed to
> access the database
> [06/Feb/2015:17:09:45 -0500] - import userRoot: Processed 2000 entries
> -- average rate 100.0/sec, recent rate 100.0/sec, hit ratio 0%
> [06/Feb/2015:17:10:05 -0500] - import userRoot: Processed 2000 entries
> -- average rate 48.8/sec, recent rate 48.8/sec, hit ratio 0%
> [06/Feb/2015:17:10:25 -0500] - import userRoot: Processed 2000 entries
> -- average rate 32.8/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:17:10:45 -0500] - import userRoot: Processed 2000 entries
> -- average rate 24.7/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:17:11:05 -0500] - import userRoot: Processed 2000 entries
> -- average rate 19.8/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:17:11:26 -0500] - import userRoot: Processed 2000 entries
> -- average rate 16.5/sec, recent rate 0.0/sec, hit ratio 0%
> [06/Feb/2015:17:11:33 -0500] - import userRoot: Workers finished;
> cleaning up...
> [06/Feb/2015:17:11:33 -0500] - import userRoot: Workers cleaned up.
> [06/Feb/2015:17:11:33 -0500] - import userRoot: Indexing complete.
> Post-processing...
> [06/Feb/2015:17:11:33 -0500] - import userRoot: Generating
> numsubordinates (this may take several minutes to complete)...
> [06/Feb/2015:17:11:34 -0500] - import userRoot: Generating
> numSubordinates complete.
> [06/Feb/2015:17:11:34 -0500] - import userRoot: Gathering ancestorid
> non-leaf IDs...
> [06/Feb/2015:17:11:34 -0500] - import userRoot: Finished gathering
> ancestorid non-leaf IDs.
> [06/Feb/2015:17:11:34 -0500] - import userRoot: Creating ancestorid
> index (new idl)...
> [06/Feb/2015:17:11:34 -0500] - import userRoot: Created ancestorid
> index (new idl).
> [06/Feb/2015:17:11:34 -0500] - import userRoot: Flushing caches...
> [06/Feb/2015:17:11:34 -0500] - import userRoot: Closing files...
> [06/Feb/2015:17:11:36 -0500] - import userRoot: Import complete.
> Processed 2264 entries in 131 seconds. (17.28 entries/sec)
> [06/Feb/2015:17:11:36 -0500] NSMMReplicationPlugin -
> multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is coming
> online; enabling replication
> [06/Feb/2015:17:11:36 -0500] - Skipping CoS Definition cn=Password
> Policy,cn=accounts,dc=cs,dc=oberlin,dc=edu--no CoS Templates found,
> which should be added before the CoS Definition.
-------------- next part --------------
389-Directory/1.3.3.5 B2014.289.1826
ipa.cs.oberlin.edu:389 (/etc/dirsrv/slapd-CS-OBERLIN-EDU)
[06/Feb/2015:11:11:58 -0500] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[06/Feb/2015:11:11:58 -0500] - check_and_set_import_cache: pagesize: 4096, pages: 2043953, procpages: 55635
[06/Feb/2015:11:11:58 -0500] - Import allocates 3270324KB import cache.
[06/Feb/2015:11:11:59 -0500] - import userRoot: Beginning import job...
[06/Feb/2015:11:11:59 -0500] - import userRoot: Index buffering enabled with bucket size 100
[06/Feb/2015:11:11:59 -0500] - import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"
[06/Feb/2015:11:11:59 -0500] - import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)
[06/Feb/2015:11:12:01 -0500] - import userRoot: Workers finished; cleaning up...
[06/Feb/2015:11:12:01 -0500] - import userRoot: Workers cleaned up.
[06/Feb/2015:11:12:01 -0500] - import userRoot: Cleaning up producer thread...
[06/Feb/2015:11:12:01 -0500] - import userRoot: Indexing complete. Post-processing...
[06/Feb/2015:11:12:01 -0500] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[06/Feb/2015:11:12:02 -0500] - import userRoot: Generating numSubordinates complete.
[06/Feb/2015:11:12:02 -0500] - import userRoot: Gathering ancestorid non-leaf IDs...
[06/Feb/2015:11:12:02 -0500] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[06/Feb/2015:11:12:02 -0500] - Nothing to do to build ancestorid index
[06/Feb/2015:11:12:02 -0500] - import userRoot: Created ancestorid index (new idl).
[06/Feb/2015:11:12:02 -0500] - import userRoot: Flushing caches...
[06/Feb/2015:11:12:02 -0500] - import userRoot: Closing files...
[06/Feb/2015:11:12:02 -0500] - All database threads now stopped
[06/Feb/2015:11:12:02 -0500] - import userRoot: Import complete. Processed 1 entries in 3 seconds. (0.33 entries/sec)
[06/Feb/2015:11:12:04 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:11:12:04 -0500] - Db home directory is not set. Possibly nsslapd-directory (optionally nsslapd-db-home-directory) is missing in the config file.
[06/Feb/2015:11:12:04 -0500] - I'm resizing my cache now...cache was 3348811776 and is now 6400000
[06/Feb/2015:11:12:05 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:11:12:05 -0500] - slapd shutting down - signaling operation threads - op stack size 0 max work q size 0 max work q stack size 0
[06/Feb/2015:11:12:06 -0500] - slapd shutting down - closing down internal subsystems and plugins
[06/Feb/2015:11:12:06 -0500] - Waiting for 4 database threads to stop
[06/Feb/2015:11:12:07 -0500] - All database threads now stopped
[06/Feb/2015:11:12:07 -0500] - slapd shutting down - freed 0 work q stack objects - freed 0 op stack objects
[06/Feb/2015:11:12:07 -0500] - slapd stopped.
[06/Feb/2015:11:12:09 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:11:12:09 -0500] - I'm resizing my cache now...cache was 6400000 and is now 5120000
[06/Feb/2015:11:12:09 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:11:12:19 -0500] - The change of nsslapd-ldapilisten will not take effect until the server is restarted
[06/Feb/2015:11:12:24 -0500] - Warning: Adding configuration attribute "nsslapd-security"
[06/Feb/2015:11:12:25 -0500] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[06/Feb/2015:11:12:25 -0500] - slapd shutting down - waiting for 29 threads to terminate
[06/Feb/2015:11:12:25 -0500] - slapd shutting down - closing down internal subsystems and plugins
[06/Feb/2015:11:12:25 -0500] - Waiting for 4 database threads to stop
[06/Feb/2015:11:12:26 -0500] - All database threads now stopped
[06/Feb/2015:11:12:26 -0500] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[06/Feb/2015:11:12:26 -0500] - slapd stopped.
[06/Feb/2015:11:12:28 -0500] - SSL alert: Configured NSS Ciphers
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:12:28 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:29 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:11:12:30 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:12:30 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[06/Feb/2015:11:12:30 -0500] SSL Initialization - SSL version range: min: TLS1.0, max: TLS1.2
[06/Feb/2015:11:12:30 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:11:12:30 -0500] - I'm resizing my cache now...cache was 5120000 and is now 4096000
[06/Feb/2015:11:12:30 -0500] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...
[06/Feb/2015:11:12:31 -0500] attrcrypt - Key for cipher AES successfully generated and stored
[06/Feb/2015:11:12:31 -0500] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...
[06/Feb/2015:11:12:31 -0500] attrcrypt - Key for cipher 3DES successfully generated and stored
[06/Feb/2015:11:12:31 -0500] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[06/Feb/2015:11:12:32 -0500] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[06/Feb/2015:11:12:32 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:11:12:32 -0500] - Listening on All Interfaces port 636 for LDAPS requests
[06/Feb/2015:11:12:32 -0500] - Listening on /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
[06/Feb/2015:11:12:33 -0500] - slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
[06/Feb/2015:11:12:33 -0500] - slapd shutting down - waiting for 2 threads to terminate
[06/Feb/2015:11:12:33 -0500] - slapd shutting down - closing down internal subsystems and plugins
[06/Feb/2015:11:12:33 -0500] - Waiting for 4 database threads to stop
[06/Feb/2015:11:12:34 -0500] - All database threads now stopped
[06/Feb/2015:11:12:34 -0500] - slapd shutting down - freed 1 work q stack objects - freed 1 op stack objects
[06/Feb/2015:11:12:34 -0500] - slapd stopped.
[06/Feb/2015:11:12:35 -0500] - SSL alert: Configured NSS Ciphers
[06/Feb/2015:11:12:35 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:12:35 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:12:35 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:35 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:36 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:11:12:37 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:12:38 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[06/Feb/2015:11:12:38 -0500] SSL Initialization - SSL version range: min: TLS1.0, max: TLS1.2
[06/Feb/2015:11:12:38 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:11:12:38 -0500] - I'm resizing my cache now...cache was 4096000 and is now 3276800
[06/Feb/2015:11:12:38 -0500] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[06/Feb/2015:11:12:38 -0500] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[06/Feb/2015:11:12:39 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:11:12:39 -0500] - Listening on All Interfaces port 636 for LDAPS requests
[06/Feb/2015:11:12:39 -0500] - Listening on /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
[06/Feb/2015:11:12:40 -0500] NSMMReplicationPlugin - agmt="cn=meToidm.cs.oberlin.edu" (idm:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[06/Feb/2015:11:12:40 -0500] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is going offline; disabling replication
[06/Feb/2015:11:12:41 -0500] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[06/Feb/2015:11:12:43 -0500] schema - [C] Local objectClasses must not be overwritten (set replication log for additional info)
[06/Feb/2015:11:13:01 -0500] - import userRoot: Processed 1828 entries -- average rate 91.4/sec, recent rate 91.3/sec, hit ratio 0%
[06/Feb/2015:11:13:21 -0500] - import userRoot: Processed 1828 entries -- average rate 45.7/sec, recent rate 45.7/sec, hit ratio 0%
[06/Feb/2015:11:13:41 -0500] - import userRoot: Processed 1828 entries -- average rate 30.5/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:11:14:01 -0500] - import userRoot: Processed 1828 entries -- average rate 22.9/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:11:14:21 -0500] - import userRoot: Processed 1828 entries -- average rate 18.3/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:11:14:41 -0500] - import userRoot: Processed 1828 entries -- average rate 15.2/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:11:14:51 -0500] - import userRoot: Workers finished; cleaning up...
[06/Feb/2015:11:14:52 -0500] - import userRoot: Workers cleaned up.
[06/Feb/2015:11:14:52 -0500] - import userRoot: Indexing complete. Post-processing...
[06/Feb/2015:11:14:52 -0500] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[06/Feb/2015:11:14:52 -0500] - import userRoot: Generating numSubordinates complete.
[06/Feb/2015:11:14:52 -0500] - import userRoot: Gathering ancestorid non-leaf IDs...
[06/Feb/2015:11:14:52 -0500] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[06/Feb/2015:11:14:53 -0500] - import userRoot: Creating ancestorid index (new idl)...
[06/Feb/2015:11:14:53 -0500] - import userRoot: Created ancestorid index (new idl).
[06/Feb/2015:11:14:53 -0500] - import userRoot: Flushing caches...
[06/Feb/2015:11:14:53 -0500] - import userRoot: Closing files...
[06/Feb/2015:11:14:55 -0500] - import userRoot: Import complete. Processed 2088 entries in 135 seconds. (15.47 entries/sec)
[06/Feb/2015:11:14:55 -0500] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is coming online; enabling replication
[06/Feb/2015:11:14:56 -0500] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=cs,dc=oberlin,dc=edu--no CoS Templates found, which should be added before the CoS Definition.
[06/Feb/2015:11:43:39 -0500] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[06/Feb/2015:11:43:39 -0500] - slapd shutting down - closing down internal subsystems and plugins
[06/Feb/2015:11:43:40 -0500] - Waiting for 4 database threads to stop
[06/Feb/2015:11:43:40 -0500] - All database threads now stopped
[06/Feb/2015:11:43:40 -0500] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[06/Feb/2015:11:43:40 -0500] - slapd stopped.
[06/Feb/2015:11:45:30 -0500] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[06/Feb/2015:11:45:31 -0500] - check_and_set_import_cache: pagesize: 4096, pages: 2043953, procpages: 55634
[06/Feb/2015:11:45:31 -0500] - Import allocates 3270324KB import cache.
[06/Feb/2015:11:45:31 -0500] - import userRoot: Beginning import job...
[06/Feb/2015:11:45:31 -0500] - import userRoot: Index buffering enabled with bucket size 100
[06/Feb/2015:11:45:31 -0500] - import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"
[06/Feb/2015:11:45:31 -0500] - import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)
[06/Feb/2015:11:45:32 -0500] - import userRoot: Workers finished; cleaning up...
[06/Feb/2015:11:45:32 -0500] - import userRoot: Workers cleaned up.
[06/Feb/2015:11:45:32 -0500] - import userRoot: Cleaning up producer thread...
[06/Feb/2015:11:45:32 -0500] - import userRoot: Indexing complete. Post-processing...
[06/Feb/2015:11:45:32 -0500] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[06/Feb/2015:11:45:32 -0500] - import userRoot: Generating numSubordinates complete.
[06/Feb/2015:11:45:33 -0500] - import userRoot: Gathering ancestorid non-leaf IDs...
[06/Feb/2015:11:45:33 -0500] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[06/Feb/2015:11:45:33 -0500] - Nothing to do to build ancestorid index
[06/Feb/2015:11:45:33 -0500] - import userRoot: Created ancestorid index (new idl).
[06/Feb/2015:11:45:33 -0500] - import userRoot: Flushing caches...
[06/Feb/2015:11:45:33 -0500] - import userRoot: Closing files...
[06/Feb/2015:11:45:33 -0500] - All database threads now stopped
[06/Feb/2015:11:45:33 -0500] - import userRoot: Import complete. Processed 1 entries in 2 seconds. (0.50 entries/sec)
[06/Feb/2015:11:45:34 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:11:45:34 -0500] - Db home directory is not set. Possibly nsslapd-directory (optionally nsslapd-db-home-directory) is missing in the config file.
[06/Feb/2015:11:45:34 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:11:45:34 -0500] - Db home directory is not set. Possibly nsslapd-directory (optionally nsslapd-db-home-directory) is missing in the config file.
[06/Feb/2015:11:45:34 -0500] - I'm resizing my cache now...cache was 3348811776 and is now 6400000
[06/Feb/2015:11:45:35 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:11:45:35 -0500] - The change of nsslapd-ldapilisten will not take effect until the server is restarted
[06/Feb/2015:11:45:52 -0500] - Warning: Adding configuration attribute "nsslapd-security"
[06/Feb/2015:11:45:52 -0500] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[06/Feb/2015:11:45:52 -0500] - slapd shutting down - waiting for 29 threads to terminate
[06/Feb/2015:11:45:53 -0500] - slapd shutting down - closing down internal subsystems and plugins
[06/Feb/2015:11:45:53 -0500] - Waiting for 4 database threads to stop
[06/Feb/2015:11:45:54 -0500] - All database threads now stopped
[06/Feb/2015:11:45:54 -0500] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[06/Feb/2015:11:45:54 -0500] - slapd stopped.
[06/Feb/2015:11:45:56 -0500] - SSL alert: Configured NSS Ciphers
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:45:56 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:45:57 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:45:57 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:45:57 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:45:57 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:11:45:57 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:45:57 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:45:57 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:45:57 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:45:58 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[06/Feb/2015:11:45:58 -0500] SSL Initialization - SSL version range: min: TLS1.0, max: TLS1.2
[06/Feb/2015:11:45:58 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:11:45:58 -0500] - I'm resizing my cache now...cache was 6400000 and is now 5120000
[06/Feb/2015:11:45:59 -0500] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...
[06/Feb/2015:11:45:59 -0500] attrcrypt - Key for cipher AES successfully generated and stored
[06/Feb/2015:11:45:59 -0500] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...
[06/Feb/2015:11:45:59 -0500] attrcrypt - Key for cipher 3DES successfully generated and stored
[06/Feb/2015:11:45:59 -0500] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[06/Feb/2015:11:46:00 -0500] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[06/Feb/2015:11:46:00 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:11:46:00 -0500] - Listening on All Interfaces port 636 for LDAPS requests
[06/Feb/2015:11:46:00 -0500] - Listening on /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
[06/Feb/2015:11:46:00 -0500] - slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
[06/Feb/2015:11:46:00 -0500] - slapd shutting down - waiting for 27 threads to terminate
[06/Feb/2015:11:46:00 -0500] - slapd shutting down - closing down internal subsystems and plugins
[06/Feb/2015:11:46:00 -0500] - Waiting for 4 database threads to stop
[06/Feb/2015:11:46:00 -0500] - All database threads now stopped
[06/Feb/2015:11:46:01 -0500] - slapd shutting down - freed 1 work q stack objects - freed 1 op stack objects
[06/Feb/2015:11:46:01 -0500] - slapd stopped.
[06/Feb/2015:11:46:02 -0500] - SSL alert: Configured NSS Ciphers
[06/Feb/2015:11:46:02 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:46:02 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:46:02 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:46:02 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:46:02 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:46:02 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:46:02 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:46:02 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:11:46:03 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:11:46:04 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:11:46:04 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:11:46:04 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:11:46:04 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[06/Feb/2015:11:46:04 -0500] SSL Initialization - SSL version range: min: TLS1.0, max: TLS1.2
[06/Feb/2015:11:46:04 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:11:46:04 -0500] - I'm resizing my cache now...cache was 5120000 and is now 4096000
[06/Feb/2015:11:46:05 -0500] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[06/Feb/2015:11:46:05 -0500] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[06/Feb/2015:11:46:05 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:11:46:05 -0500] - Listening on All Interfaces port 636 for LDAPS requests
[06/Feb/2015:11:46:05 -0500] - Listening on /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
[06/Feb/2015:11:46:06 -0500] NSMMReplicationPlugin - agmt="cn=meToidm.cs.oberlin.edu" (idm:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[06/Feb/2015:11:46:06 -0500] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is going offline; disabling replication
[06/Feb/2015:11:46:07 -0500] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[06/Feb/2015:11:46:09 -0500] schema - [C] Local objectClasses must not be overwritten (set replication log for additional info)
[06/Feb/2015:11:46:27 -0500] - import userRoot: Processed 1917 entries -- average rate 95.8/sec, recent rate 95.8/sec, hit ratio 0%
[06/Feb/2015:11:46:47 -0500] - import userRoot: Processed 1917 entries -- average rate 47.9/sec, recent rate 47.9/sec, hit ratio 0%
[06/Feb/2015:11:47:07 -0500] - import userRoot: Processed 1917 entries -- average rate 31.9/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:11:47:27 -0500] - import userRoot: Processed 1917 entries -- average rate 24.0/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:11:47:47 -0500] - import userRoot: Processed 1917 entries -- average rate 19.2/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:11:48:07 -0500] - import userRoot: Processed 1917 entries -- average rate 16.0/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:11:48:17 -0500] - import userRoot: Workers finished; cleaning up...
[06/Feb/2015:11:48:18 -0500] - import userRoot: Workers cleaned up.
[06/Feb/2015:11:48:18 -0500] - import userRoot: Indexing complete. Post-processing...
[06/Feb/2015:11:48:18 -0500] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[06/Feb/2015:11:48:18 -0500] - import userRoot: Generating numSubordinates complete.
[06/Feb/2015:11:48:18 -0500] - import userRoot: Gathering ancestorid non-leaf IDs...
[06/Feb/2015:11:48:18 -0500] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[06/Feb/2015:11:48:18 -0500] - import userRoot: Creating ancestorid index (new idl)...
[06/Feb/2015:11:48:18 -0500] - import userRoot: Created ancestorid index (new idl).
[06/Feb/2015:11:48:18 -0500] - import userRoot: Flushing caches...
[06/Feb/2015:11:48:18 -0500] - import userRoot: Closing files...
[06/Feb/2015:11:48:20 -0500] - import userRoot: Import complete. Processed 2240 entries in 133 seconds. (16.84 entries/sec)
[06/Feb/2015:11:48:20 -0500] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is coming online; enabling replication
[06/Feb/2015:11:48:21 -0500] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=cs,dc=oberlin,dc=edu--no CoS Templates found, which should be added before the CoS Definition.
[06/Feb/2015:12:12:59 -0500] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[06/Feb/2015:12:13:00 -0500] - slapd shutting down - waiting for 28 threads to terminate
[06/Feb/2015:12:13:00 -0500] - slapd shutting down - closing down internal subsystems and plugins
[06/Feb/2015:12:13:00 -0500] - Waiting for 4 database threads to stop
[06/Feb/2015:12:13:01 -0500] - All database threads now stopped
[06/Feb/2015:12:13:01 -0500] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[06/Feb/2015:12:13:01 -0500] - slapd stopped.
[06/Feb/2015:17:09:05 -0500] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[06/Feb/2015:17:09:06 -0500] - check_and_set_import_cache: pagesize: 4096, pages: 2043953, procpages: 55634
[06/Feb/2015:17:09:06 -0500] - Import allocates 3270324KB import cache.
[06/Feb/2015:17:09:06 -0500] - import userRoot: Beginning import job...
[06/Feb/2015:17:09:06 -0500] - import userRoot: Index buffering enabled with bucket size 100
[06/Feb/2015:17:09:06 -0500] - import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"
[06/Feb/2015:17:09:06 -0500] - import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)
[06/Feb/2015:17:09:07 -0500] - import userRoot: Workers finished; cleaning up...
[06/Feb/2015:17:09:07 -0500] - import userRoot: Workers cleaned up.
[06/Feb/2015:17:09:07 -0500] - import userRoot: Cleaning up producer thread...
[06/Feb/2015:17:09:08 -0500] - import userRoot: Indexing complete. Post-processing...
[06/Feb/2015:17:09:08 -0500] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[06/Feb/2015:17:09:08 -0500] - import userRoot: Generating numSubordinates complete.
[06/Feb/2015:17:09:08 -0500] - import userRoot: Gathering ancestorid non-leaf IDs...
[06/Feb/2015:17:09:08 -0500] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[06/Feb/2015:17:09:08 -0500] - Nothing to do to build ancestorid index
[06/Feb/2015:17:09:08 -0500] - import userRoot: Created ancestorid index (new idl).
[06/Feb/2015:17:09:08 -0500] - import userRoot: Flushing caches...
[06/Feb/2015:17:09:08 -0500] - import userRoot: Closing files...
[06/Feb/2015:17:09:08 -0500] - All database threads now stopped
[06/Feb/2015:17:09:08 -0500] - import userRoot: Import complete. Processed 1 entries in 2 seconds. (0.50 entries/sec)
[06/Feb/2015:17:09:09 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:17:09:09 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:17:09:09 -0500] - Db home directory is not set. Possibly nsslapd-directory (optionally nsslapd-db-home-directory) is missing in the config file.
[06/Feb/2015:17:09:10 -0500] - I'm resizing my cache now...cache was 3348811776 and is now 6400000
[06/Feb/2015:17:09:11 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:17:09:11 -0500] - The change of nsslapd-ldapilisten will not take effect until the server is restarted
[06/Feb/2015:17:09:12 -0500] - Warning: Adding configuration attribute "nsslapd-security"
[06/Feb/2015:17:09:13 -0500] - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1
[06/Feb/2015:17:09:13 -0500] - slapd shutting down - closing down internal subsystems and plugins
[06/Feb/2015:17:09:13 -0500] - Waiting for 4 database threads to stop
[06/Feb/2015:17:09:13 -0500] - All database threads now stopped
[06/Feb/2015:17:09:13 -0500] - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects
[06/Feb/2015:17:09:13 -0500] - slapd stopped.
[06/Feb/2015:17:09:14 -0500] - SSL alert: Configured NSS Ciphers
[06/Feb/2015:17:09:14 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:15 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:16 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:17:09:17 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:17:09:17 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[06/Feb/2015:17:09:17 -0500] SSL Initialization - SSL version range: min: TLS1.0, max: TLS1.2
[06/Feb/2015:17:09:17 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:17:09:17 -0500] - I'm resizing my cache now...cache was 6400000 and is now 5120000
[06/Feb/2015:17:09:17 -0500] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...
[06/Feb/2015:17:09:17 -0500] attrcrypt - Key for cipher AES successfully generated and stored
[06/Feb/2015:17:09:17 -0500] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...
[06/Feb/2015:17:09:17 -0500] attrcrypt - Key for cipher 3DES successfully generated and stored
[06/Feb/2015:17:09:18 -0500] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[06/Feb/2015:17:09:18 -0500] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[06/Feb/2015:17:09:18 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:17:09:18 -0500] - Listening on All Interfaces port 636 for LDAPS requests
[06/Feb/2015:17:09:18 -0500] - Listening on /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
[06/Feb/2015:17:09:18 -0500] - slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
[06/Feb/2015:17:09:18 -0500] - slapd shutting down - waiting for 17 threads to terminate
[06/Feb/2015:17:09:18 -0500] - slapd shutting down - closing down internal subsystems and plugins
[06/Feb/2015:17:09:19 -0500] - Waiting for 4 database threads to stop
[06/Feb/2015:17:09:19 -0500] - All database threads now stopped
[06/Feb/2015:17:09:19 -0500] - slapd shutting down - freed 1 work q stack objects - freed 1 op stack objects
[06/Feb/2015:17:09:19 -0500] - slapd stopped.
[06/Feb/2015:17:09:20 -0500] - SSL alert: Configured NSS Ciphers
[06/Feb/2015:17:09:20 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:17:09:20 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:17:09:20 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:20 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:20 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:20 -0500] - SSL alert: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[06/Feb/2015:17:09:21 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[06/Feb/2015:17:09:22 -0500] - SSL alert: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[06/Feb/2015:17:09:22 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[06/Feb/2015:17:09:22 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[06/Feb/2015:17:09:22 -0500] - SSL alert: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[06/Feb/2015:17:09:22 -0500] - SSL alert: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[06/Feb/2015:17:09:22 -0500] - SSL alert: TLS_RSA_WITH_SEED_CBC_SHA: enabled
[06/Feb/2015:17:09:22 -0500] SSL Initialization - SSL version range: min: TLS1.0, max: TLS1.2
[06/Feb/2015:17:09:22 -0500] - 389-Directory/1.3.3.5 B2014.289.1826 starting up
[06/Feb/2015:17:09:22 -0500] - I'm resizing my cache now...cache was 5120000 and is now 4096000
[06/Feb/2015:17:09:23 -0500] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[06/Feb/2015:17:09:23 -0500] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!
[06/Feb/2015:17:09:23 -0500] - slapd started. Listening on All Interfaces port 389 for LDAP requests
[06/Feb/2015:17:09:23 -0500] - Listening on All Interfaces port 636 for LDAPS requests
[06/Feb/2015:17:09:23 -0500] - Listening on /var/run/slapd-CS-OBERLIN-EDU.socket for LDAPI requests
[06/Feb/2015:17:09:23 -0500] NSMMReplicationPlugin - agmt="cn=meToidm.cs.oberlin.edu" (idm:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
[06/Feb/2015:17:09:24 -0500] schema - [C] Local objectClasses must not be overwritten (set replication log for additional info)
[06/Feb/2015:17:09:25 -0500] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is going offline; disabling replication
[06/Feb/2015:17:09:25 -0500] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[06/Feb/2015:17:09:45 -0500] - import userRoot: Processed 2000 entries -- average rate 100.0/sec, recent rate 100.0/sec, hit ratio 0%
[06/Feb/2015:17:10:05 -0500] - import userRoot: Processed 2000 entries -- average rate 48.8/sec, recent rate 48.8/sec, hit ratio 0%
[06/Feb/2015:17:10:25 -0500] - import userRoot: Processed 2000 entries -- average rate 32.8/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:17:10:45 -0500] - import userRoot: Processed 2000 entries -- average rate 24.7/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:17:11:05 -0500] - import userRoot: Processed 2000 entries -- average rate 19.8/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:17:11:26 -0500] - import userRoot: Processed 2000 entries -- average rate 16.5/sec, recent rate 0.0/sec, hit ratio 0%
[06/Feb/2015:17:11:33 -0500] - import userRoot: Workers finished; cleaning up...
[06/Feb/2015:17:11:33 -0500] - import userRoot: Workers cleaned up.
[06/Feb/2015:17:11:33 -0500] - import userRoot: Indexing complete. Post-processing...
[06/Feb/2015:17:11:33 -0500] - import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[06/Feb/2015:17:11:34 -0500] - import userRoot: Generating numSubordinates complete.
[06/Feb/2015:17:11:34 -0500] - import userRoot: Gathering ancestorid non-leaf IDs...
[06/Feb/2015:17:11:34 -0500] - import userRoot: Finished gathering ancestorid non-leaf IDs.
[06/Feb/2015:17:11:34 -0500] - import userRoot: Creating ancestorid index (new idl)...
[06/Feb/2015:17:11:34 -0500] - import userRoot: Created ancestorid index (new idl).
[06/Feb/2015:17:11:34 -0500] - import userRoot: Flushing caches...
[06/Feb/2015:17:11:34 -0500] - import userRoot: Closing files...
[06/Feb/2015:17:11:36 -0500] - import userRoot: Import complete. Processed 2264 entries in 131 seconds. (17.28 entries/sec)
[06/Feb/2015:17:11:36 -0500] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=cs,dc=oberlin,dc=edu is coming online; enabling replication
[06/Feb/2015:17:11:36 -0500] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=cs,dc=oberlin,dc=edu--no CoS Templates found, which should be added before the CoS Definition.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipareplica-install.log
Type: text/x-log
Size: 60578 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150206/25bbbfbc/attachment.bin>
More information about the Freeipa-users
mailing list