[Freeipa-users] What am I missing? ipaca?

[thierry bordaz]

On 03/23/2015 01:50 PM, Janelle wrote:
> On 3/23/15 4:04 AM, Martin Kosek wrote:
>> On 03/23/2015 04:07 AM, Janelle wrote:
>>> Hello
>>>
>>> Starting to see a lot of these and wondering what I am dealign with?
>>>
>>> attrlist_replace - attr_replace (nsslapd-referral,
>>> ldap://ipa1.example.com:389/o%3Dipaca) failed.
>> Hm, I do not met this error yet. This looks like error from 
>> 389-ds-base, it has
>> functions like attrlist_replace.
>>
>> If this is the case, can you please share a bigger section of the 
>> errors log,
>> ideally for the whole day (if not too big)? There might be some other 
>> related
>> error messages. CCing Ludwig and Thierry for reference.
>>
>> Also, what environment are we talking about, is this still
>> FreeIPA 4.1.3 at CentOS-7? Maybe the server also has a replication 
>> agreement also
>> with CentOS-6? We need to know this also.
>>
>> Thanks,
>> Martin
> FreeIPA 4.1.3, CentOS 7
> Only  CentOS 7 -- no other versions intermixed.
>
> Nothing else to give you. Sadly, it just repeats alot. No  other 
> errrors in the log.
>
> It has a replication agreement with another master - both CA's
> One interesting note -- this was the server that had the 
> ipa-replica-install --setup-ca run on it from the other master. And 
> the other master is ipa1 server. This server that has these errors is 
> ipa2. So this is complaining(?) that the original server is doing 
> something?
>
> [23/Mar/2015:04:13:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:23:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:23:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:23:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:28:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:28:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:28:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:38:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:38:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:38:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:43:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:43:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:43:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:53:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:53:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:53:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:58:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:58:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:04:58:53 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:00:00 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:00:00 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:00:00 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:05:02 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:05:02 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:05:02 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:08:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:08:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:08:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:13:52 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:13:52 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:13:52 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:23:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:23:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:23:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:28:52 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:28:52 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:28:52 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:38:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:38:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
> [23/Mar/2015:05:38:50 -0700] attrlist_replace - attr_replace 
> (nsslapd-referral, ldap://ipa1.example.com:389/o%3Dipaca) failed.
Hello,

These messages  report that DS fails to update (MOD/replace) an entry 
with the 'nsslapd-referral: ldap://ipa1.example.com:389/o%3Dipaca' .
Unfortunately neither the error code and the entry are logged.
I think we should be able to see this in DS access logs if the operation 
is not an internal operation.

Thanks
thierry

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150323/4b8521b6/attachment.htm>