<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 09/04/2015 04:37 PM, Christoph Kaminski wrote: </div> <blockquote cite="mid:OF52B5A32E.9BF68B8D-ONC1257EB6.004FE20E-C1257EB6.00505B53@biotronik.com" type="cite">Hi we have a lot of this messages in the error log of dirsrv... What can be the problem and how can we fix it? our (first) master (ipa-1.mgmt.biotronik-homemonitoring.int): [04/Sep/2015:16:06:41 +0200] ipalockout_postop - [file ipa_lockout.c, line 503]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.datacenter-homemonitoring.int-pki-tomcat,ou=csusers,cn=config":32 [04/Sep/2015:16:08:00 +0200] ipalockout_preop - [file ipa_lockout.c, line 749]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.hss.int-pki-tomcat,ou=csusers,cn=config": 32 [04/Sep/2015:16:08:00 +0200] ipalockout_postop - [file ipa_lockout.c, line 503]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.hss.int-pki-tomcat,ou=csusers,cn=config": 32 [04/Sep/2015:16:11:41 +0200] ipalockout_preop - [file ipa_lockout.c, line 749]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.datacenter-homemonitoring.int-pki-tomcat,ou=csusers,cn=config":32 [04/Sep/2015:16:11:41 +0200] ipalockout_postop - [file ipa_lockout.c, line 503]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.datacenter-homemonitoring.int-pki-tomcat,ou=csusers,cn=config":32 [04/Sep/2015:16:13:00 +0200] ipalockout_preop - [file ipa_lockout.c, line 749]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.hss.int-pki-tomcat,ou=csusers,cn=config": 32 [04/Sep/2015:16:13:00 +0200] ipalockout_postop - [file ipa_lockout.c, line 503]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.hss.int-pki-tomcat,ou=csusers,cn=config": 32 [04/Sep/2015:16:16:40 +0200] ipalockout_preop - [file ipa_lockout.c, line 749]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.datacenter-homemonitoring.int-pki-tomcat,ou=csusers,cn=config":32 [04/Sep/2015:16:16:40 +0200] ipalockout_postop - [file ipa_lockout.c, line 503]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.datacenter-homemonitoring.int-pki-tomcat,ou=csusers,cn=config":32 [04/Sep/2015:16:18:00 +0200] ipalockout_preop - [file ipa_lockout.c, line 749]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.hss.int-pki-tomcat,ou=csusers,cn=config": 32 [04/Sep/2015:16:18:00 +0200] ipalockout_postop - [file ipa_lockout.c, line 503]: Failed to retrieve entry "cn=Replication Manager masterAgreement1-ipa-1.mgmt.hss.int-pki-tomcat,ou=csusers,cn=config": 32 one of our other ipa's (ipa-1.mgmt.datacenter-homemonitoring.int): [04/Sep/2015:16:21:41 +0200] slapi_ldap_bind - Error: could not bind id [cn=Replication Manager masterAgreement1-ipa-1.mgmt.datacenter-homemonitoring.int-pki-tomcat,ou=csusers,cn=config] authentication mechanism [SIMPLE]: error 32 (No such object) errno 0 (Success) </blockquote> this means you somehow lost the user for authentication in replication. you could try to add it back, as a template use one existing user in ou=csusers,cn=config <blockquote cite="mid:OF52B5A32E.9BF68B8D-ONC1257EB6.004FE20E-C1257EB6.00505B53@biotronik.com" type="cite"> </blockquote> <blockquote cite="mid:OF52B5A32E.9BF68B8D-ONC1257EB6.004FE20E-C1257EB6.00505B53@biotronik.com" type="cite"> Greetz Christoph Kaminski <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> </body> </html>