[Freeipa-users] Kerberos hanging approx. once a day

Wed Jul 22 15:03:20 UTC 2015

On 07/22/2015 03:39 AM, Torsten Harenberg wrote:
> Dear Alexander, dear Sumit,
>
> thank you very much indeed for the quick replies.
>
> Am 22.07.15 um 11:21 schrieb Sumit Bose:
>> Looks like there are issues getting the needed data from the local LDAP
>> server. The message below about the master key points into the same
>> direction. Can you check the 389ds logs?
> I have attached the
> /var/log/dirsrv/slapd-PLEIADES-UNI-WUPPERTAL-DE/errors file to the end
> of the mail, it's a bit larger.
>
> There are some "ticket expired" messages, could that point to the source
> of the problem?
>
>
> Am 22.07.15 um 11:22 schrieb Alexander Bokovoy:
>> Do you have 389-ds actually operating? If you would install debuginfo
>> packages, what does 'pstack <pid of ns-slapd>' print?
> here is the output:
>

It might be helpful to do a # debuginfo-install 389-ds-base ipa-server 
slapi-nis
and follow the directions at 
http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-hangs
to get a full stack trace

> /lib64/libpthread.so.0
> #1  0x00007fb8544f5440 in PR_WaitCondVar () from /lib64/libnspr4.so
> #2  0x00007fb8565f19a5 in ps_send_results ()
> #3  0x00007fb8544facab in _pt_root () from /lib64/libnspr4.so
> #4  0x00007fb853e9b52a in start_thread () from /lib64/libpthread.so.0
> #5  0x00007fb853bd722d in clone () from /lib64/libc.so.6

What is the client here that is doing a persistent search or syncrepl?  
Is it BIND?

> Thread 1 (Thread 0x7fb856808800 (LWP 800)):
> #0  0x00007fb853bcbc8d in poll () from /lib64/libc.so.6
> #1  0x00007fb8544f6da8 in _pr_poll_with_poll () from /lib64/libnspr4.so
> #2  0x00007fb8565e9b11 in slapd_daemon ()
> #3  0x00007fb8565dc4f4 in main ()
> [root at ipa log]#
>
> Best regards and thanks again
>
>    Torsten
>
>
> /var/log/dirsrv/slapd-PLEIADES-UNI-WUPPERTAL-DE/errors:
>
> [root at ipa slapd-PLEIADES-UNI-WUPPERTAL-DE]# cat errors
> 	389-Directory/1.3.3.8 B2015.036.047
> 	ipa.pleiades.uni-wuppertal.de:636
> (/etc/dirsrv/slapd-PLEIADES-UNI-WUPPERTAL-DE)
>
> [20/Jul/2015:16:48:26 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [20/Jul/2015:16:48:26 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [20/Jul/2015:16:48:26 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [20/Jul/2015:16:48:26 +0200] NSMMReplicationPlugin -
> agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
> bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1):
> generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may
> provide more information (Ticket expired))
> [20/Jul/2015:16:48:30 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [20/Jul/2015:16:48:30 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [20/Jul/2015:16:48:30 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [20/Jul/2015:16:48:36 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [20/Jul/2015:16:48:36 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [20/Jul/2015:16:48:36 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [20/Jul/2015:16:48:48 +0200] NSMMReplicationPlugin -
> agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
> bind with GSSAPI auth resumed
> [21/Jul/2015:14:41:05 +0200] find_sid_for_ldap_entry - [file
> ipa_sidgen_common.c, line 522]: Cannot convert Posix ID [50088] into an
> unused SID.
> [21/Jul/2015:14:41:05 +0200] ipa_sidgen_add_post_op - [file
> ipa_sidgen.c, line 149]: Cannot add SID to new entry.
> [21/Jul/2015:16:51:28 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:51:28 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:51:28 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:51:28 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:51:28 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:16:51:28 +0200] NSMMReplicationPlugin -
> agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
> bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1):
> generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may
> provide more information (Ticket expired))
> [21/Jul/2015:16:51:31 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:51:31 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:51:31 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:51:31 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:51:31 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:16:51:37 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:51:37 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:51:37 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:51:37 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:51:37 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:16:51:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:51:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:51:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:51:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:51:49 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:16:52:13 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:52:13 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:52:13 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:52:13 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:52:13 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:16:53:01 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:53:01 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:53:01 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:53:01 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:53:01 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:16:54:37 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:54:37 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:54:37 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:54:37 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:54:37 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:16:57:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:57:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:57:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:16:57:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:16:57:49 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:17:02:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:17:02:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:17:02:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:17:02:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:17:02:49 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:17:07:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:17:07:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:17:07:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:17:07:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:17:07:49 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:17:12:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:17:12:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:17:12:49 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:17:12:50 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (Ticket expired))
> errno 2 (No such file or directory)
> [21/Jul/2015:17:12:50 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:17:13:16 +0200] - slapd shutting down - signaling operation
> threads - op stack size 0 max work q size 99 max work q stack size 5
> [21/Jul/2015:17:13:16 +0200] - slapd shutting down - waiting for 30
> threads to terminate
> [21/Jul/2015:17:15:20 +0200] nis-plugin - error connecting rpcbind
> client socket to the service
> [21/Jul/2015:17:15:21 +0200] SSL Initialization - Configured SSL version
> range: min: TLS1.0, max: TLS1.2
> [21/Jul/2015:17:15:21 +0200] - SSL alert: Configured NSS Ciphers
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert: 	TLS_RSA_WITH_AES_128_CBC_SHA:
> enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert: 	TLS_RSA_WITH_AES_256_CBC_SHA:
> enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [21/Jul/2015:17:15:21 +0200] - SSL alert: 	TLS_RSA_WITH_SEED_CBC_SHA:
> enabled
> [21/Jul/2015:17:15:21 +0200] - 389-Directory/1.3.3.8 B2015.036.047
> starting up
> [21/Jul/2015:17:15:21 +0200] - WARNING: cache too small, increasing to
> 500K bytes
> [21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [21/Jul/2015:17:15:21 +0200] - WARNING: userRoot: entry cache size
> 512000B is less than db size 4177920B; We recommend to increase the
> entry cache size nsslapd-cachememsize.
> [21/Jul/2015:17:15:21 +0200] - WARNING: changelog: entry cache size
> 512000B is less than db size 18096128B; We recommend to increase the
> entry cache size nsslapd-cachememsize.
> [21/Jul/2015:17:15:21 +0200] - Detected Disorderly Shutdown last time
> Directory Server was running, recovering database.
> [21/Jul/2015:17:15:21 +0200] nis-plugin - warning: no entries in
> domain=pleiades.uni-wuppertal.de,map=ethers.byaddr
> [21/Jul/2015:17:15:21 +0200] nis-plugin - warning: no entries in
> domain=pleiades.uni-wuppertal.de,map=ethers.byname
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
> portmap service
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
> portmap service
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
> portmap service
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
> portmap service
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
> portmap service
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
> portmap service
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
> portmap service
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
> portmap service
> [21/Jul/2015:17:15:24 +0200] schema-compat-plugin - warning: no entries
> set up under cn=computers, cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de
> [21/Jul/2015:17:15:24 +0200] schema-compat-plugin - warning: no entries
> set up under ou=sudoers,dc=pleiades,dc=uni-wuppertal,dc=de
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=keys,cn=sec,cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=groups,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=computers,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=ng,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> ou=sudoers,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=users,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=casigningcert
> cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=pleiades,dc=uni-wuppertal,dc=de
> does not exist
> [21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
> cn=casigningcert
> cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=pleiades,dc=uni-wuppertal,dc=de
> does not exist
> [21/Jul/2015:17:15:25 +0200] NSACLPlugin - The ACL target cn=automember
> rebuild membership,cn=tasks,cn=config does not exist
> [21/Jul/2015:17:15:25 +0200] - Skipping CoS Definition cn=Password
> Policy,cn=accounts,dc=pleiades,dc=uni-wuppertal,dc=de--no CoS Templates
> found, which should be added before the CoS Definition.
> [21/Jul/2015:17:15:27 +0200] NSMMReplicationPlugin -
> replica_check_for_data_reload: Warning: disordely shutdown for replica
> dc=pleiades,dc=uni-wuppertal,dc=de. Check if DB RUV needs to be updated
> [21/Jul/2015:17:15:27 +0200] NSMMReplicationPlugin - Force update of
> database RUV (from CL RUV) ->  55ae7baf00a100040000
> [21/Jul/2015:17:15:27 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [21/Jul/2015:17:15:27 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (No Kerberos
> credentials available)) errno 0 (Success)
> [21/Jul/2015:17:15:27 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [21/Jul/2015:17:15:27 +0200] NSMMReplicationPlugin -
> agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
> bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1):
> generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may
> provide more information (No Kerberos credentials available))
> [21/Jul/2015:17:15:27 +0200] - Skipping CoS Definition cn=Password
> Policy,cn=accounts,dc=pleiades,dc=uni-wuppertal,dc=de--no CoS Templates
> found, which should be added before the CoS Definition.
> [21/Jul/2015:17:15:28 +0200] - slapd started.  Listening on All
> Interfaces port 389 for LDAP requests
> [21/Jul/2015:17:15:28 +0200] - Listening on All Interfaces port 636 for
> LDAPS requests
> [21/Jul/2015:17:15:28 +0200] - Listening on
> /var/run/slapd-PLEIADES-UNI-WUPPERTAL-DE.socket for LDAPI requests
> [21/Jul/2015:17:15:31 +0200] NSMMReplicationPlugin -
> agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
> bind with GSSAPI auth resumed
> [22/Jul/2015:09:42:27 +0200] find_sid_for_ldap_entry - [file
> ipa_sidgen_common.c, line 522]: Cannot convert Posix ID [50091] into an
> unused SID.
> [22/Jul/2015:09:42:27 +0200] ipa_sidgen_add_post_op - [file
> ipa_sidgen.c, line 149]: Cannot add SID to new entry.
> [22/Jul/2015:11:01:26 +0200] - slapd shutting down - signaling operation
> threads - op stack size 1 max work q size 260 max work q stack size 97
> [22/Jul/2015:11:01:26 +0200] - slapd shutting down - waiting for 30
> threads to terminate
> [22/Jul/2015:11:03:30 +0200] nis-plugin - error connecting rpcbind
> client socket to the service
> [22/Jul/2015:11:03:31 +0200] SSL Initialization - Configured SSL version
> range: min: TLS1.0, max: TLS1.2
> [22/Jul/2015:11:03:31 +0200] - SSL alert: Configured NSS Ciphers
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert: 	TLS_RSA_WITH_AES_128_CBC_SHA:
> enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert: 	TLS_RSA_WITH_AES_256_CBC_SHA:
> enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert:
> TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
> [22/Jul/2015:11:03:31 +0200] - SSL alert: 	TLS_RSA_WITH_SEED_CBC_SHA:
> enabled
> [22/Jul/2015:11:03:31 +0200] - 389-Directory/1.3.3.8 B2015.036.047
> starting up
> [22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
> -- rounding up
> [22/Jul/2015:11:03:31 +0200] - WARNING: userRoot: entry cache size
> 512000B is less than db size 4218880B; We recommend to increase the
> entry cache size nsslapd-cachememsize.
> [22/Jul/2015:11:03:31 +0200] - WARNING: changelog: entry cache size
> 512000B is less than db size 27992064B; We recommend to increase the
> entry cache size nsslapd-cachememsize.
> [22/Jul/2015:11:03:31 +0200] - Detected Disorderly Shutdown last time
> Directory Server was running, recovering database.
> [22/Jul/2015:11:03:32 +0200] nis-plugin - warning: no entries in
> domain=pleiades.uni-wuppertal.de,map=ethers.byaddr
> [22/Jul/2015:11:03:32 +0200] nis-plugin - warning: no entries in
> domain=pleiades.uni-wuppertal.de,map=ethers.byname
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
> portmap service
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
> portmap service
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
> portmap service
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
> portmap service
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
> portmap service
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
> portmap service
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
> portmap service
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
> portmap or rpcbind on 9: Connection refused
> [22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
> portmap service
> [22/Jul/2015:11:03:34 +0200] schema-compat-plugin - warning: no entries
> set up under cn=computers, cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de
> [22/Jul/2015:11:03:34 +0200] schema-compat-plugin - warning: no entries
> set up under ou=sudoers,dc=pleiades,dc=uni-wuppertal,dc=de
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=keys,cn=sec,cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=groups,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=computers,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=ng,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> ou=sudoers,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=users,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=casigningcert
> cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=pleiades,dc=uni-wuppertal,dc=de
> does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
> cn=casigningcert
> cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=pleiades,dc=uni-wuppertal,dc=de
> does not exist
> [22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target cn=automember
> rebuild membership,cn=tasks,cn=config does not exist
> [22/Jul/2015:11:03:35 +0200] - Skipping CoS Definition cn=Password
> Policy,cn=accounts,dc=pleiades,dc=uni-wuppertal,dc=de--no CoS Templates
> found, which should be added before the CoS Definition.
> [22/Jul/2015:11:03:38 +0200] NSMMReplicationPlugin -
> replica_check_for_data_reload: Warning: disordely shutdown for replica
> dc=pleiades,dc=uni-wuppertal,dc=de. Check if DB RUV needs to be updated
> [22/Jul/2015:11:03:38 +0200] NSMMReplicationPlugin - Force update of
> database RUV (from CL RUV) ->  55af7af3000e00040000
> [22/Jul/2015:11:03:39 +0200] set_krb5_creds - Could not get initial
> credentials for principal
> [ldap/ipa.pleiades.uni-wuppertal.de at PLEIADES.UNI-WUPPERTAL.DE] in keytab
> [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
> requested realm)
> [22/Jul/2015:11:03:39 +0200] - Skipping CoS Definition cn=Password
> Policy,cn=accounts,dc=pleiades,dc=uni-wuppertal,dc=de--no CoS Templates
> found, which should be added before the CoS Definition.
> [22/Jul/2015:11:03:39 +0200] slapd_ldap_sasl_interactive_bind - Error:
> could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
> -2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
> GSS failure.  Minor code may provide more information (No Kerberos
> credentials available)) errno 0 (Success)
> [22/Jul/2015:11:03:39 +0200] slapi_ldap_bind - Error: could not perform
> interactive bind for id [] authentication mechanism [GSSAPI]: error -2
> (Local error)
> [22/Jul/2015:11:03:39 +0200] NSMMReplicationPlugin -
> agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
> bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1):
> generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may
> provide more information (No Kerberos credentials available))
> [22/Jul/2015:11:03:39 +0200] - slapd started.  Listening on All
> Interfaces port 389 for LDAP requests
> [22/Jul/2015:11:03:39 +0200] - Listening on All Interfaces port 636 for
> LDAPS requests
> [22/Jul/2015:11:03:39 +0200] - Listening on
> /var/run/slapd-PLEIADES-UNI-WUPPERTAL-DE.socket for LDAPI requests
> [22/Jul/2015:11:03:43 +0200] NSMMReplicationPlugin -
> agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
> bind with GSSAPI auth resumed
>
>