[Freeipa-users] Hourly messages in error log

Michael S. Moody michael at sykosoft.com
Fri Oct 14 14:17:53 UTC 2016 

We're seeing the following messages in the error log:

[11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.

I'm wondering, if it is at all related to this:

[michael.moody at ipa1 ~]$ ldapsearch -ZZ -h ipa1.west-2.production.example.com
-D "cn=Directory Manager" -W -b "o=ipaca"
"(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))"
| grep "nsds50ruv\|nsDS5ReplicaId"
p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit:
Permission denied
Enter LDAP Password:
nsDS5ReplicaId: 96
nsds50ruv: {replicageneration} 56941682000000600000
nsds50ruv: {replica 96 ldap://ipa1.west-2.production.example.com:389}
5694168b
nsds50ruv: {replica 76 ldap://ipa1.eu-west-1.production.example.com:389}
57d8a
nsds50ruv: {replica 81 ldap://ipa1.eu-west-1.production.example.com:389}
57d33
nsds50ruv: {replica 86 ldap://ipa2.west-2.production.example.com:389}
5696e792
nsds50ruv: {replica 91 ldap://ipa2.west-2.production.example.com:389}
56941bab
nsds50ruv: {replica 97 ldap://ipa2.west-2.production.example.com:389}
569416ae
[michael.moody at ipa1 ~]$ ldapsearch -ZZ -h ipa2.west-2.production.example.com
-D "cn=Directory Manager" -W -b "o=ipaca"
"(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))"
| grep "nsds50ruv\|nsDS5ReplicaId"
p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit:
Permission denied
Enter LDAP Password:
nsDS5ReplicaId: 86
nsds50ruv: {replicageneration} 56941682000000600000
nsds50ruv: {replica 86 ldap://ipa2.west-2.production.example.com:389}
5696e792
nsds50ruv: {replica 96 ldap://ipa1.west-2.production.example.com:389}
5694168b
nsds50ruv: {replica 91 ldap://ipa2.west-2.production.example.com:389}
56941bab
nsds50ruv: {replica 97 ldap://ipa2.west-2.production.example.com:389}
569416ae
nsds50ruv: {replica 81 ldap://ipa1.eu-west-1.production.example.com:389}
57d33
nsds50ruv: {replica 76 ldap://ipa1.eu-west-1.production.example.com:389}
57d8a
[michael.moody at ipa1 ~]$ ldapsearch -ZZ -h
ipa1.eu-west-1.production.example.com -D "cn=Directory Manager" -W -b
"o=ipaca"
"(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))"
| grep "nsds50ruv\|nsDS5ReplicaId"
p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit:
Permission denied
Enter LDAP Password:
nsDS5ReplicaId: 76
nsds50ruv: {replicageneration} 56941682000000600000
nsds50ruv: {replica 76 ldap://ipa1.eu-west-1.production.example.com:389}
57d8a
nsds50ruv: {replica 96 ldap://ipa1.west-2.production.example.com:389}
5694168b
nsds50ruv: {replica 81 ldap://ipa1.eu-west-1.production.example.com:389}
57d33
nsds50ruv: {replica 86 ldap://ipa2.west-2.production.example.com:389}
5696e792
nsds50ruv: {replica 91 ldap://ipa2.west-2.production.example.com:389}
56941bab
nsds50ruv: {replica 97 ldap://ipa2.west-2.production.example.com:389}
569416ae

Any pointers would be greatly appreciated.

Thanks,
Michael
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20161014/06f288a9/attachment.htm>

More information about the Freeipa-users mailing list