<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>Hi,<br></div><div><br></div><div>i'm having the same problem. I'm in the process of migration from our 389DS v1.2.10.25/CentOS5 to 389DS on CentOS 7. Everything is working fine on standalone servers but the replication (especially online initialization). It stucks _each time_ during the online initialization with SSL/TLS (and sometimes without SSL/TLS). And exactly with the same error messages as you describe.<br></div><div>The network problems in my case are excluded - i used both virtual machines on the same ESXi in the same network and/or physical servers, the results are the same.<br></div><div>I've tried compiling all the branches latest available (tags 1.3.2.24, 1.3.1.22, 1.3.3.5). In all the cases the result was the same. The server pushing the updates just gets stuck at some random number of entries sent to consumer (we have ~30000 entries, it gets stuck at random somewhere from 1200 to 25000 entries, the entries stuck have nothing particular in size, it's completely random).</div><div>1.2.10.24 compiled with compat-db-4.7 on CentOS 7 has the least of these problems (and the initial replication is 10 times faster - it takes 8 seconds instead of 80 for 1.3.x!). I've been using 1.2.10.24 on CentOS5 compiled with mozilla ldap labraries and 1.2.10.23 obn CentOS 7 compiled with opendlap librarires. The first one had no problems at all to push the initial replication, the second one had intermittent problems, but much less than v1.3.x<br></div><div><br></div><div>I've noticed that this problem is getting worse (or simply appears) if :</div><div>* the replica is be of type 3 (multi-master), with replication agreements in both directions<br></div><div>* our schema has several additional attribuites, it may be also important<br></div><div>* if the virtual machine has only one CPU. Adding a second CPU increases the number of transferred entries before the initialization gets stuck. So it may me some thread/transaction contention or deadlock.<br></div><div>* if the replication agreement uses SSL(port 636) or TLS(port389). Using port 389 with LDAP protocol instead of TLS/SSL increases the number of transferred entries before the initialization gets stuck. Sometimes the initialization even ends successfully in this case.<br></div><div>* decreasing nsslapd-db-checkpoint-interval (say, to 5 seconds) also gets the problem worse<br></div><div><br></div><div>When the on-line intialization is finished (if it finishes), there are no problems. I think it is related to the volume of data transferred, so small incremental updates do not generate any problem....<br></div><div>If necessary, i will make any debugs/tests - it is a critical element of our infrastructure, so i'd like this problem to be resolved...<br></div><div><br></div><div>Regards,<br></div><div>Andrey IVANOV<br></div><div><br></div><div><br></div><hr id="zwchr"><blockquote style="border-left:2px solid #1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>De: </b>"陳含林" <laneovcc@gmail.com><br><b>À: </b>389-users@lists.fedoraproject.org<br><b>Envoyé: </b>Mercredi 5 Novembre 2014 18:01:37<br><b>Objet: </b>[389-users] 389-Directory/1.3.1.6 cannot setup replica<br><div><br></div><div dir="ltr">hello all,<div><br></div><div><br></div><div>I have setup a IDM/freeipa master using CentOS7 , and import about 5000 hosts.</div><div><br></div><div>then i try to setup a IDM/freeipa replication server by using <span style="color:rgb(84,84,84);font-family:arial,sans-serif;line-height:18.2000007629395px" data-mce-style="color: #545454; font-family: arial,sans-serif; line-height: 18.2000007629395px;"> ipa-replica-install.</span></div><div><span style="color:rgb(84,84,84);font-family:arial,sans-serif;line-height:18.2000007629395px" data-mce-style="color: #545454; font-family: arial,sans-serif; line-height: 18.2000007629395px;"><br></span></div><div><span style="color:rgb(84,84,84);font-family:arial,sans-serif;line-height:18.2000007629395px" data-mce-style="color: #545454; font-family: arial,sans-serif; line-height: 18.2000007629395px;"><br></span></div><div>It seems the total update on replication server hangs after about 1000+ entries imported.</div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;"><br></span></span></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;">I try to trigger a </span></span> total update by setting nsds5beginreplicarefresh, but the result was the same.</div><div><br></div><div><br></div><div>Any one help me ? Thanks!</div><div><br></div><div><br></div><div><br></div><div><br></div><div>idm1 is the master, idm2 is the replication server.</div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;">master server logs:</span></span></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;"><br></span></span></div><div><div style="" data-mce-style="">[06/Nov/2014:00:21:48 +0800] - 389-Directory/<a href="http://1.3.1.6" target="_blank" data-mce-href="http://1.3.1.6">1.3.1.6</a> B2014.219.1825 starting up</div><div style="" data-mce-style="">[06/Nov/2014:00:21:48 +0800] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=idc</div><div style="" data-mce-style="">[06/Nov/2014:00:21:51 +0800] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idc--no CoS Templates found, which should be added before the CoS Definition.</div><div style="" data-mce-style="">[06/Nov/2014:00:21:51 +0800] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idc--no CoS Templates found, which should be added before the CoS Definition.</div><div style="" data-mce-style="">[06/Nov/2014:00:21:51 +0800] - slapd started. Listening on All Interfaces port 389 for LDAP requests</div><div style="" data-mce-style="">[06/Nov/2014:00:21:51 +0800] - Listening on All Interfaces port 636 for LDAPS requests</div><div style="" data-mce-style="">[06/Nov/2014:00:21:51 +0800] - Listening on /var/run/slapd-IDC.socket for LDAPI requests</div><div style="" data-mce-style="">[06/Nov/2014:00:21:51 +0800] - Entry "uid=admin,ou=people,o=ipaca" -- attribute "krbExtraData" not allowed</div><div style="" data-mce-style="">[06/Nov/2014:00:40:26 +0800] NSMMReplicationPlugin - agmt="cn=meToidm2.ra.cn.idc" (idm2:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.</div><div style="" data-mce-style="">[06/Nov/2014:00:40:26 +0800] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=meToidm2.ra.cn.idc" (idm2:389)".</div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""><br></div><div style="" data-mce-style="">replication server logs:</div><div style="" data-mce-style=""><div>[06/Nov/2014:00:40:18 +0800] - 389-Directory/<a href="http://1.3.1.6" target="_blank" data-mce-href="http://1.3.1.6">1.3.1.6</a> B2014.219.1825 starting up</div><div>[06/Nov/2014:00:40:18 +0800] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)</div><div>[06/Nov/2014:00:40:18 +0800] ipaenrollment_start - [file ipa_enrollment.c, line 393]: Failed to get default realm?!</div><div>[06/Nov/2014:00:40:18 +0800] - slapd started. Listening on All Interfaces port 389 for LDAP requests</div><div>[06/Nov/2014:00:40:18 +0800] - Listening on All Interfaces port 636 for LDAPS requests</div><div>[06/Nov/2014:00:40:18 +0800] - Listening on /var/run/slapd-IDC.socket for LDAPI requests</div><div>[06/Nov/2014:00:40:19 +0800] NSMMReplicationPlugin - agmt="cn=meToidm1.ra.cn.idc" (idm1:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.</div><div>[06/Nov/2014:00:40:20 +0800] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=idc is going offline; disabling replication</div><div>[06/Nov/2014:00:40:20 +0800] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database</div><div>[06/Nov/2014:00:40:40 +0800] - import userRoot: Processed 1581 entries -- average rate 79.0/sec, recent rate 79.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:41:00 +0800] - import userRoot: Processed 1581 entries -- average rate 39.5/sec, recent rate 39.5/sec, hit ratio 0%</div><div>[06/Nov/2014:00:41:20 +0800] - import userRoot: Processed 1581 entries -- average rate 26.4/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:41:41 +0800] - import userRoot: Processed 1581 entries -- average rate 19.8/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:42:01 +0800] - import userRoot: Processed 1581 entries -- average rate 15.8/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:42:21 +0800] - import userRoot: Processed 1581 entries -- average rate 13.2/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:42:41 +0800] - import userRoot: Processed 1581 entries -- average rate 11.3/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:43:01 +0800] - import userRoot: Processed 1581 entries -- average rate 9.9/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:43:21 +0800] - import userRoot: Processed 1581 entries -- average rate 8.8/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:43:41 +0800] - import userRoot: Processed 1581 entries -- average rate 7.9/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:44:01 +0800] - import userRoot: Processed 1581 entries -- average rate 7.2/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:44:21 +0800] - import userRoot: Processed 1581 entries -- average rate 6.6/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:44:41 +0800] - import userRoot: Processed 1581 entries -- average rate 6.1/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:45:01 +0800] - import userRoot: Processed 1581 entries -- average rate 5.6/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:45:21 +0800] - import userRoot: Processed 1581 entries -- average rate 5.3/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:45:21 +0800] - import userRoot: Decided to end this pass because the progress rate has dropped below the 50% threshold.</div><div>[06/Nov/2014:00:45:21 +0800] - import userRoot: Ending pass number 1 ...</div><div>[06/Nov/2014:00:45:22 +0800] - import userRoot: Foreman is done; waiting for workers to finish...</div><div>[06/Nov/2014:00:45:22 +0800] - import userRoot: Workers finished; cleaning up...</div><div>[06/Nov/2014:00:45:22 +0800] - import userRoot: Workers cleaned up.</div><div>[06/Nov/2014:00:45:22 +0800] - import userRoot: Sweeping files for merging later...</div><div>[06/Nov/2014:00:45:22 +0800] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database</div><div>[06/Nov/2014:00:45:22 +0800] - import userRoot: Sweep done.</div><div>[06/Nov/2014:00:45:22 +0800] - import userRoot: Beginning pass number 2</div><div>[06/Nov/2014:00:45:42 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 214748285.8/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:46:02 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 107374142.9/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:46:22 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 71582761.9/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:46:42 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 53687071.4/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:47:02 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 42949657.1/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:47:22 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 35791381.0/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:47:43 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 30678326.5/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:48:03 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 26843535.7/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:48:23 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 23860920.6/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:48:43 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 21474828.6/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:49:03 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 19522571.4/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:49:23 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 17895690.5/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:49:43 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 16519098.9/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:50:03 +0800] - import userRoot: Processed 1581 entries (pass 2) -- average rate 15339163.3/sec, recent rate 0.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:50:23 +0800] - import userRoot: Processed 1722 entries (pass 2) -- average rate 0.5/sec, recent rate 43.0/sec, hit ratio 0%</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: Workers finished; cleaning up...</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: Workers cleaned up.</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: Sweeping files for merging later...</div><div>[06/Nov/2014:00:50:26 +0800] - WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: Sweep done.</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: Beginning 2-way merge of up to 44 files...</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "aci".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "automountkey".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "carLicense".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "cn".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "displayname".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "entryusn".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "fqdn".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "gidnumber".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "givenName".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "ipakrbprincipalalias".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "ipasudorunas".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "ipasudorunasgroup".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "ipauniqueid".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "krbPrincipalName".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "macAddress".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "mail".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "mailAlternateAddress".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "mailHost".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "managedby".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "manager".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "member".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "memberallowcmd".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "memberdenycmd".</div><div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No files to merge for "memberHost".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "memberOf".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "memberservice".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "memberUser".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "nscpEntryDN".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "nsds5ReplConflict".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "nsuniqueid".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "ntUniqueId".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "ntUserDomainId".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "objectclass".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "ou".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "owner".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "secretary".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "seeAlso".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "sn".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "sourcehost".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "telephoneNumber".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "title".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "uid".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "uidnumber".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No files to merge for "uniquemember".</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: Merging completed in 0 seconds.</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: Indexing complete. Post-processing...</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: Generating numSubordinates complete.</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: Flushing caches...</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: Closing files...</div><div>[06/Nov/2014:00:50:27 +0800] - import userRoot: Import complete. Processed 1722 entries in 607 seconds. (2.84 entries/sec)</div><div>[06/Nov/2014:00:50:27 +0800] NSMMReplicationPlugin - multimaster_be_state_change: replica dc=idc is coming online; enabling replication</div><div>[06/Nov/2014:00:50:27 +0800] - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=idc--no CoS Templates found, which should be added before the CoS Definition.</div></div></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;"><br></span></span></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;"><br></span></span></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;"><br></span></span></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;"><br></span></span></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;"><br></span></span></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;"><br></span></span></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;"><br></span></span></div><div><span style="color: #545454; font-family: arial,sans-serif;" data-mce-style="color: #545454; font-family: arial,sans-serif;" color="#545454" face="arial, sans-serif"><span style="line-height:18.2000007629395px" data-mce-style="line-height: 18.2000007629395px;">mapping tree</span></span></div><div><div style="" data-mce-style=""># extended LDIF</div><div style="" data-mce-style="">#</div><div style="" data-mce-style=""># LDAPv3</div><div style="" data-mce-style=""># base <cn=mapping tree,cn=config> with scope subtree</div><div style="" data-mce-style=""># filter: (objectclass=*)</div><div style="" data-mce-style=""># requesting: ALL</div><div style="" data-mce-style="">#</div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""># mapping tree, config</div><div style="" data-mce-style="">dn: cn=mapping tree,cn=config</div><div style="" data-mce-style="">objectClass: top</div><div style="" data-mce-style="">objectClass: extensibleObject</div><div style="" data-mce-style="">cn: mapping tree</div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""># dc\3Didc, mapping tree, config</div><div style="" data-mce-style="">dn: cn=dc\3Didc,cn=mapping tree,cn=config</div><div style="" data-mce-style="">objectClass: top</div><div style="" data-mce-style="">objectClass: extensibleObject</div><div style="" data-mce-style="">objectClass: nsMappingTree</div><div style="" data-mce-style="">cn: dc=idc</div><div style="" data-mce-style="">cn: "dc=idc"</div><div style="" data-mce-style="">nsslapd-state: backend</div><div style="" data-mce-style="">nsslapd-backend: userRoot</div><div style="" data-mce-style="">nsslapd-referral: ldap://idm1.ra.cn.idc:389/dc%3Didc</div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""># replica, dc\3Didc, mapping tree, config</div><div style="" data-mce-style="">dn: cn=replica,cn=dc\3Didc,cn=mapping tree,cn=config</div><div style="" data-mce-style="">cn: replica</div><div style="" data-mce-style="">nsDS5Flags: 1</div><div style="" data-mce-style="">objectClass: top</div><div style="" data-mce-style="">objectClass: nsds5replica</div><div style="" data-mce-style="">objectClass: extensibleobject</div><div style="" data-mce-style="">nsDS5ReplicaType: 3</div><div style="" data-mce-style="">nsDS5ReplicaRoot: dc=idc</div><div style="" data-mce-style="">nsds5ReplicaLegacyConsumer: off</div><div style="" data-mce-style="">nsDS5ReplicaId: 3</div><div style="" data-mce-style="">nsDS5ReplicaBindDN: cn=replication manager,cn=config</div><div style="" data-mce-style="">nsState:: AwAAAAAAAADzUlpUAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAA==</div><div style="" data-mce-style="">nsDS5ReplicaName: 6cf48589-650a11e4-90ecc46a-d11f6771</div><div style="" data-mce-style="">nsds5ReplicaChangeCount: 0</div><div style="" data-mce-style="">nsds5replicareapactive: 0</div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""># meToidm1.ra.cn.idc, replica, dc\3Didc, mapping tree, config</div><div style="" data-mce-style="">dn: cn=meToidm1.ra.cn.idc,cn=replica,cn=dc\3Didc,cn=mapping tree,cn=config</div><div style="" data-mce-style="">cn: meToidm1.ra.cn.idc</div><div style="" data-mce-style="">objectClass: nsds5replicationagreement</div><div style="" data-mce-style="">objectClass: top</div><div style="" data-mce-style="">nsDS5ReplicaTransportInfo: TLS</div><div style="" data-mce-style="">description: me to idm1.ra.cn.idc</div><div style="" data-mce-style="">nsDS5ReplicaRoot: dc=idc</div><div style="" data-mce-style="">nsDS5ReplicaHost: idm1.ra.cn.idc</div><div style="" data-mce-style="">nsds5replicaTimeout: 600</div><div style="" data-mce-style="">nsDS5ReplicaBindDN: cn=replication manager,cn=config</div><div style="" data-mce-style="">nsDS5ReplicaPort: 389</div><div style="" data-mce-style="">nsDS5ReplicaBindMethod: simple</div><div style="" data-mce-style="">nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof idnssoaserial</div><div style="" data-mce-style=""> entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount</div><div style="" data-mce-style="">nsds5ReplicaStripAttrs: modifiersName modifyTimestamp internalModifiersName in</div><div style="" data-mce-style=""> ternalModifyTimestamp</div><div style="" data-mce-style="">nsDS5ReplicaCredentials: {DES} </div><div style="" data-mce-style="">nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn krblasts</div><div style="" data-mce-style=""> uccessfulauth krblastfailedauth krbloginfailedcount</div><div style="" data-mce-style="">nsds5replicareapactive: 0</div><div style="" data-mce-style="">nsds5replicaLastUpdateStart: 0</div><div style="" data-mce-style="">nsds5replicaLastUpdateEnd: 0</div><div style="" data-mce-style="">nsds5replicaChangesSentSinceStartup:</div><div style="" data-mce-style="">nsds5replicaLastUpdateStatus: 402 Replication error acquiring replica: unknown</div><div style="" data-mce-style=""> error - Replica has different database generation ID, remote replica may nee</div><div style="" data-mce-style=""> d to be initialized</div><div style="" data-mce-style="">nsds5replicaUpdateInProgress: FALSE</div><div style="" data-mce-style="">nsds5replicaLastInitStart: 0</div><div style="" data-mce-style="">nsds5replicaLastInitEnd: 0</div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""># search result</div><div style="" data-mce-style="">search: 2</div><div style="" data-mce-style="">result: 0 Success</div><div style="" data-mce-style=""><br></div><div style="" data-mce-style=""># numResponses: 5</div><div style="" data-mce-style=""># numEntries: 4</div></div></div><br>--<br>389 users mailing list<br>389-users@lists.fedoraproject.org<br>https://admin.fedoraproject.org/mailman/listinfo/389-users</blockquote><div><br></div></div></body></html>