<html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 03/23/2015 01:50 PM, Janelle wrote: </div> <blockquote cite="mid:55100C00.3010302@gmail.com" type="cite">On 3/23/15 4:04 AM, Martin Kosek wrote: <blockquote type="cite">On 03/23/2015 04:07 AM, Janelle wrote: <blockquote type="cite">Hello Starting to see a lot of these and wondering what I am dealign with? attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. </blockquote> Hm, I do not met this error yet. This looks like error from 389-ds-base, it has functions like attrlist_replace. If this is the case, can you please share a bigger section of the errors log, ideally for the whole day (if not too big)? There might be some other related error messages. CCing Ludwig and Thierry for reference. Also, what environment are we talking about, is this still FreeIPA 4.1.3@CentOS-7? Maybe the server also has a replication agreement also with CentOS-6? We need to know this also. Thanks, Martin </blockquote> FreeIPA 4.1.3, CentOS 7 Only CentOS 7 -- no other versions intermixed. Nothing else to give you. Sadly, it just repeats alot. No other errrors in the log. It has a replication agreement with another master - both CA's One interesting note -- this was the server that had the ipa-replica-install --setup-ca run on it from the other master. And the other master is ipa1 server. This server that has these errors is ipa2. So this is complaining(?) that the original server is doing something? [23/Mar/2015:04:13:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:23:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:23:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:23:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:28:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:28:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:28:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:38:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:38:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:38:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:43:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:43:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:43:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:53:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:53:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:53:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:58:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:58:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:04:58:53 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:00:00 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:00:00 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:00:00 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:05:02 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:05:02 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:05:02 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:08:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:08:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:08:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:13:52 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:13:52 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:13:52 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:23:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:23:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:23:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:28:52 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:28:52 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:28:52 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:38:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:38:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. [23/Mar/2015:05:38:50 -0700] attrlist_replace - attr_replace (nsslapd-referral, <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>) failed. </blockquote> Hello, These messages report that DS fails to update (MOD/replace) an entry with the 'nsslapd-referral: <a class="moz-txt-link-freetext" href="ldap://ipa1.example.com:389/o%3Dipaca">ldap://ipa1.example.com:389/o%3Dipaca</a>' . Unfortunately neither the error code and the entry are logged. I think we should be able to see this in DS access logs if the operation is not an internal operation. Thanks thierry </body> </html>