<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Hello Andrey,<br>
      <br>
      On 11/05/2014 11:53 AM, Ivanov Andrey (M.) wrote:<br>
    </div>
    <blockquote
cite="mid:937737699.851337.1415217238747.JavaMail.zimbra@zimbra.polytechnique.fr"
      type="cite">
      <div style="font-family: times new roman, new york, times, serif;
        font-size: 12pt; color: #000000">
        <div>Hi,<br>
        </div>
        <div><br>
        </div>
        <div>i'm having the same problem. I'm in the process of
          migration from our 389DS v1.2.10.25/CentOS5 to 389DS on CentOS
          7. Everything is working fine on standalone servers but the
          replication (especially online initialization). It stucks
          _each time_ during the online initialization  with SSL/TLS
          (and sometimes without SSL/TLS). And exactly with the same
          error messages as you describe.<br>
        </div>
        <div>The network problems in my case are excluded - i used both
          virtual machines on the same ESXi in the same network and/or
          physical servers, the results are the same.<br>
        </div>
        <div>I've tried compiling all the branches latest available
          (tags 1.3.2.24, 1.3.1.22, 1.3.3.5). In all the cases the
          result was the same. The server pushing the updates just gets
          stuck at some random number of entries sent to consumer (we
          have ~30000 entries, it gets stuck at random somewhere from
          1200 to 25000 entries, the entries stuck have nothing
          particular in size, it's completely random).</div>
      </div>
    </blockquote>
    When you tried the versions "(tags 1.3.2.24, 1.3.1.22, 1.3.3.5)", it
    does not report any extra errors in the error log? E.g.,<br>
    <blockquote>
      Incoming BER Element was @@@ bytes, max allowable is ### bytes.
      Change the nsslapd-maxbersize attribute in cn=config to increase.<br>
    </blockquote>
    Next time it happens, could it be possible to get the stacktraces
    from the hung server?<br>
    <blockquote><a class="moz-txt-link-freetext" href="http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-hangs">http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-hangs</a><br>
    </blockquote>
    <blockquote
cite="mid:937737699.851337.1415217238747.JavaMail.zimbra@zimbra.polytechnique.fr"
      type="cite">
      <div style="font-family: times new roman, new york, times, serif;
        font-size: 12pt; color: #000000">
        <div>1.2.10.24 compiled with compat-db-4.7 on CentOS 7 has the
          least of these problems (and the initial replication is 10
          times faster - it takes 8 seconds instead of 80 for 1.3.x!).
          I've been using 1.2.10.24 on CentOS5 compiled with mozilla
          ldap labraries and 1.2.10.23 obn CentOS 7 compiled with
          opendlap librarires. The first one had no problems at all to
          push the initial replication, the second one had intermittent
          problems, but much less than v1.3.x<br>
        </div>
        <div><br>
        </div>
        <div>I've noticed that this problem is getting worse  (or simply
          appears) if :</div>
        <div>* the replica is be of type 3 (multi-master), with
          replication agreements in both directions<br>
        </div>
        <div>* our schema has several additional attribuites, it may be
          also important<br>
        </div>
      </div>
    </blockquote>
    We improved the schema replication at some time, which should be in
    1.3.2.24 and 1.3.3.5.<br>
    <a class="moz-txt-link-freetext" href="https://fedorahosted.org/389/ticket/47721">https://fedorahosted.org/389/ticket/47721</a><br>
    <blockquote
cite="mid:937737699.851337.1415217238747.JavaMail.zimbra@zimbra.polytechnique.fr"
      type="cite">
      <div style="font-family: times new roman, new york, times, serif;
        font-size: 12pt; color: #000000">
        <div>* if the virtual machine has only one CPU. Adding a second
          CPU increases the number of transferred entries before the
          initialization gets stuck. So it may me some
          thread/transaction  contention or deadlock.<br>
        </div>
        <div>* if the replication agreement uses SSL(port 636) or
          TLS(port389). Using port 389 with LDAP protocol instead of
          TLS/SSL increases the number of transferred entries before the
          initialization gets stuck. Sometimes the initialization even
          ends successfully in this case.<br>
        </div>
        <div>* decreasing nsslapd-db-checkpoint-interval (say, to 5
          seconds) also gets the problem worse<br>
        </div>
      </div>
    </blockquote>
    This indicates the issue is in the BDB?<br>
    <br>
    Thanks,<br>
    --noriko<br>
    <blockquote
cite="mid:937737699.851337.1415217238747.JavaMail.zimbra@zimbra.polytechnique.fr"
      type="cite">
      <div style="font-family: times new roman, new york, times, serif;
        font-size: 12pt; color: #000000">
        <div><br>
        </div>
        <div>When the on-line intialization is finished (if it
          finishes), there are no problems. I think it is related to the
          volume of data transferred, so small incremental updates do
          not generate any problem....<br>
        </div>
        <div>If necessary, i will make any debugs/tests - it is a
          critical element of our infrastructure, so i'd like this
          problem to be resolved...<br>
        </div>
        <div><br>
        </div>
        <div>Regards,<br>
        </div>
        <div>Andrey IVANOV<br>
        </div>
        <div><br>
        </div>
        <div><br>
        </div>
        <hr id="zwchr">
        <blockquote style="border-left:2px solid
#1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"
          data-mce-style="border-left: 2px solid #1010FF; margin-left:
          5px; padding-left: 5px; color: #000; font-weight: normal;
          font-style: normal; text-decoration: none; font-family:
          Helvetica,Arial,sans-serif; font-size: 12pt;"><b>De: </b>"陳含
          林" <a class="moz-txt-link-rfc2396E" href="mailto:laneovcc@gmail.com">&lt;laneovcc@gmail.com&gt;</a><br>
          <b>À: </b><a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><br>
          <b>Envoyé: </b>Mercredi 5 Novembre 2014 18:01:37<br>
          <b>Objet: </b>[389-users] 389-Directory/1.3.1.6 cannot setup
          replica<br>
          <div><br>
          </div>
          <div dir="ltr">hello all,
            <div><br>
            </div>
            <div><br>
            </div>
            <div>I have setup a IDM/freeipa  master  using  CentOS7 ,
               and import about 5000  hosts.</div>
            <div><br>
            </div>
            <div>then i try to setup a  IDM/freeipa replication server
              by using <span
style="color:rgb(84,84,84);font-family:arial,sans-serif;line-height:18.2000007629395px"
                data-mce-style="color: #545454; font-family:
                arial,sans-serif; line-height: 18.2000007629395px;"> ipa-replica-install.</span></div>
            <div><span
style="color:rgb(84,84,84);font-family:arial,sans-serif;line-height:18.2000007629395px"
                data-mce-style="color: #545454; font-family:
                arial,sans-serif; line-height: 18.2000007629395px;"><br>
              </span></div>
            <div><span
style="color:rgb(84,84,84);font-family:arial,sans-serif;line-height:18.2000007629395px"
                data-mce-style="color: #545454; font-family:
                arial,sans-serif; line-height: 18.2000007629395px;"><br>
              </span></div>
            <div>It seems the total update on replication server   hangs
              after about 1000+ entries imported.</div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;"><br>
                </span></span></div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;">I
                  try to trigger  a </span></span> total update by
              setting  nsds5beginreplicarefresh, but the result was the
              same.</div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div>Any one help me ?  Thanks!</div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div>idm1 is the master, idm2 is the replication server.</div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;">master
                  server  logs:</span></span></div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;"><br>
                </span></span></div>
            <div>
              <div style="" data-mce-style="">[06/Nov/2014:00:21:48
                +0800] - 389-Directory/<a moz-do-not-send="true"
                  href="http://1.3.1.6" target="_blank"
                  data-mce-href="http://1.3.1.6">1.3.1.6</a>
                B2014.219.1825 starting up</div>
              <div style="" data-mce-style="">[06/Nov/2014:00:21:48
                +0800] schema-compat-plugin - warning: no entries set up
                under cn=computers, cn=compat,dc=idc</div>
              <div style="" data-mce-style="">[06/Nov/2014:00:21:51
                +0800] - Skipping CoS Definition cn=Password
                Policy,cn=accounts,dc=idc--no CoS Templates found, which
                should be added before the CoS Definition.</div>
              <div style="" data-mce-style="">[06/Nov/2014:00:21:51
                +0800] - Skipping CoS Definition cn=Password
                Policy,cn=accounts,dc=idc--no CoS Templates found, which
                should be added before the CoS Definition.</div>
              <div style="" data-mce-style="">[06/Nov/2014:00:21:51
                +0800] - slapd started.  Listening on All Interfaces
                port 389 for LDAP requests</div>
              <div style="" data-mce-style="">[06/Nov/2014:00:21:51
                +0800] - Listening on All Interfaces port 636 for LDAPS
                requests</div>
              <div style="" data-mce-style="">[06/Nov/2014:00:21:51
                +0800] - Listening on /var/run/slapd-IDC.socket for
                LDAPI requests</div>
              <div style="" data-mce-style="">[06/Nov/2014:00:21:51
                +0800] - Entry "uid=admin,ou=people,o=ipaca" --
                attribute "krbExtraData" not allowed</div>
              <div style="" data-mce-style="">[06/Nov/2014:00:40:26
                +0800] NSMMReplicationPlugin -
                agmt="cn=meToidm2.ra.cn.idc" (idm2:389): The remote
                replica has a different database generation ID than the
                local database.  You may have to reinitialize the remote
                replica, or the local replica.</div>
              <div style="" data-mce-style="">[06/Nov/2014:00:40:26
                +0800] NSMMReplicationPlugin - Beginning total update of
                replica "agmt="cn=meToidm2.ra.cn.idc" (idm2:389)".</div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style="">replication server  logs:</div>
              <div style="" data-mce-style="">
                <div>[06/Nov/2014:00:40:18 +0800] - 389-Directory/<a
                    moz-do-not-send="true" href="http://1.3.1.6"
                    target="_blank" data-mce-href="http://1.3.1.6">1.3.1.6</a>
                  B2014.219.1825 starting up</div>
                <div>[06/Nov/2014:00:40:18 +0800]
                  ipalockout_get_global_config - [file ipa_lockout.c,
                  line 185]: Failed to get default realm (-1765328160)</div>
                <div>[06/Nov/2014:00:40:18 +0800] ipaenrollment_start -
                  [file ipa_enrollment.c, line 393]: Failed to get
                  default realm?!</div>
                <div>[06/Nov/2014:00:40:18 +0800] - slapd started. 
                  Listening on All Interfaces port 389 for LDAP requests</div>
                <div>[06/Nov/2014:00:40:18 +0800] - Listening on All
                  Interfaces port 636 for LDAPS requests</div>
                <div>[06/Nov/2014:00:40:18 +0800] - Listening on
                  /var/run/slapd-IDC.socket for LDAPI requests</div>
                <div>[06/Nov/2014:00:40:19 +0800] NSMMReplicationPlugin
                  - agmt="cn=meToidm1.ra.cn.idc" (idm1:389): The remote
                  replica has a different database generation ID than
                  the local database.  You may have to reinitialize the
                  remote replica, or the local replica.</div>
                <div>[06/Nov/2014:00:40:20 +0800] NSMMReplicationPlugin
                  - multimaster_be_state_change: replica dc=idc is going
                  offline; disabling replication</div>
                <div>[06/Nov/2014:00:40:20 +0800] - WARNING: Import is
                  running with nsslapd-db-private-import-mem on; No
                  other process is allowed to access the database</div>
                <div>[06/Nov/2014:00:40:40 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 79.0/sec,
                  recent rate 79.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:41:00 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 39.5/sec,
                  recent rate 39.5/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:41:20 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 26.4/sec,
                  recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:41:41 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 19.8/sec,
                  recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:42:01 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 15.8/sec,
                  recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:42:21 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 13.2/sec,
                  recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:42:41 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 11.3/sec,
                  recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:43:01 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 9.9/sec, recent
                  rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:43:21 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 8.8/sec, recent
                  rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:43:41 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 7.9/sec, recent
                  rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:44:01 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 7.2/sec, recent
                  rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:44:21 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 6.6/sec, recent
                  rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:44:41 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 6.1/sec, recent
                  rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:45:01 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 5.6/sec, recent
                  rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:45:21 +0800] - import userRoot:
                  Processed 1581 entries -- average rate 5.3/sec, recent
                  rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:45:21 +0800] - import userRoot:
                  Decided to end this pass because the progress rate has
                  dropped below the 50% threshold.</div>
                <div>[06/Nov/2014:00:45:21 +0800] - import userRoot:
                  Ending pass number 1 ...</div>
                <div>[06/Nov/2014:00:45:22 +0800] - import userRoot:
                  Foreman is done; waiting for workers to finish...</div>
                <div>[06/Nov/2014:00:45:22 +0800] - import userRoot:
                  Workers finished; cleaning up...</div>
                <div>[06/Nov/2014:00:45:22 +0800] - import userRoot:
                  Workers cleaned up.</div>
                <div>[06/Nov/2014:00:45:22 +0800] - import userRoot:
                  Sweeping files for merging later...</div>
                <div>[06/Nov/2014:00:45:22 +0800] - WARNING: Import is
                  running with nsslapd-db-private-import-mem on; No
                  other process is allowed to access the database</div>
                <div>[06/Nov/2014:00:45:22 +0800] - import userRoot:
                  Sweep done.</div>
                <div>[06/Nov/2014:00:45:22 +0800] - import userRoot:
                  Beginning pass number 2</div>
                <div>[06/Nov/2014:00:45:42 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  214748285.8/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:46:02 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  107374142.9/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:46:22 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  71582761.9/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:46:42 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  53687071.4/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:47:02 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  42949657.1/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:47:22 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  35791381.0/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:47:43 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  30678326.5/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:48:03 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  26843535.7/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:48:23 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  23860920.6/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:48:43 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  21474828.6/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:49:03 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  19522571.4/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:49:23 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  17895690.5/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:49:43 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  16519098.9/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:50:03 +0800] - import userRoot:
                  Processed 1581 entries (pass 2) -- average rate
                  15339163.3/sec, recent rate 0.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:50:23 +0800] - import userRoot:
                  Processed 1722 entries (pass 2) -- average rate
                  0.5/sec, recent rate 43.0/sec, hit ratio 0%</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot:
                  Workers finished; cleaning up...</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot:
                  Workers cleaned up.</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot:
                  Sweeping files for merging later...</div>
                <div>[06/Nov/2014:00:50:26 +0800] - WARNING: Import is
                  running with nsslapd-db-private-import-mem on; No
                  other process is allowed to access the database</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot:
                  Sweep done.</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot:
                  Beginning 2-way merge of up to 44 files...</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "aci".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "automountkey".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "carLicense".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "cn".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "displayname".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "entryusn".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "fqdn".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "gidnumber".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "givenName".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "ipakrbprincipalalias".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "ipasudorunas".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "ipasudorunasgroup".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "ipauniqueid".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "krbPrincipalName".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "macAddress".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "mail".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "mailAlternateAddress".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "mailHost".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "managedby".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "manager".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "member".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "memberallowcmd".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "memberdenycmd".</div>
                <div>[06/Nov/2014:00:50:26 +0800] - import userRoot: No
                  files to merge for "memberHost".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "memberOf".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "memberservice".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "memberUser".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "nscpEntryDN".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "nsds5ReplConflict".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "nsuniqueid".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "ntUniqueId".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "ntUserDomainId".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "objectclass".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "ou".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "owner".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "secretary".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "seeAlso".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "sn".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "sourcehost".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "telephoneNumber".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "title".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "uid".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "uidnumber".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot: No
                  files to merge for "uniquemember".</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot:
                  Merging completed in 0 seconds.</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot:
                  Indexing complete.  Post-processing...</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot:
                  Generating numSubordinates complete.</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot:
                  Flushing caches...</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot:
                  Closing files...</div>
                <div>[06/Nov/2014:00:50:27 +0800] - import userRoot:
                  Import complete.  Processed 1722 entries in 607
                  seconds. (2.84 entries/sec)</div>
                <div>[06/Nov/2014:00:50:27 +0800] NSMMReplicationPlugin
                  - multimaster_be_state_change: replica dc=idc is
                  coming online; enabling replication</div>
                <div>[06/Nov/2014:00:50:27 +0800] - Skipping CoS
                  Definition cn=Password Policy,cn=accounts,dc=idc--no
                  CoS Templates found, which should be added before the
                  CoS Definition.</div>
              </div>
            </div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;"><br>
                </span></span></div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;"><br>
                </span></span></div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;"><br>
                </span></span></div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;"><br>
                </span></span></div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;"><br>
                </span></span></div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;"><br>
                </span></span></div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;"><br>
                </span></span></div>
            <div><span style="color: #545454; font-family:
                arial,sans-serif;" data-mce-style="color: #545454;
                font-family: arial,sans-serif;" color="#545454"
                face="arial, sans-serif"><span
                  style="line-height:18.2000007629395px"
                  data-mce-style="line-height: 18.2000007629395px;">mapping
                  tree</span></span></div>
            <div>
              <div style="" data-mce-style=""># extended LDIF</div>
              <div style="" data-mce-style="">#</div>
              <div style="" data-mce-style=""># LDAPv3</div>
              <div style="" data-mce-style=""># base &lt;cn=mapping
                tree,cn=config&gt; with scope subtree</div>
              <div style="" data-mce-style=""># filter: (objectclass=*)</div>
              <div style="" data-mce-style=""># requesting: ALL</div>
              <div style="" data-mce-style="">#</div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""># mapping tree, config</div>
              <div style="" data-mce-style="">dn: cn=mapping
                tree,cn=config</div>
              <div style="" data-mce-style="">objectClass: top</div>
              <div style="" data-mce-style="">objectClass:
                extensibleObject</div>
              <div style="" data-mce-style="">cn: mapping tree</div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""># dc\3Didc, mapping tree,
                config</div>
              <div style="" data-mce-style="">dn: cn=dc\3Didc,cn=mapping
                tree,cn=config</div>
              <div style="" data-mce-style="">objectClass: top</div>
              <div style="" data-mce-style="">objectClass:
                extensibleObject</div>
              <div style="" data-mce-style="">objectClass: nsMappingTree</div>
              <div style="" data-mce-style="">cn: dc=idc</div>
              <div style="" data-mce-style="">cn: "dc=idc"</div>
              <div style="" data-mce-style="">nsslapd-state: backend</div>
              <div style="" data-mce-style="">nsslapd-backend: userRoot</div>
              <div style="" data-mce-style="">nsslapd-referral:
                <a class="moz-txt-link-freetext" href="ldap://idm1.ra.cn.idc:389/dc%3Didc">ldap://idm1.ra.cn.idc:389/dc%3Didc</a></div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""># replica, dc\3Didc,
                mapping tree, config</div>
              <div style="" data-mce-style="">dn:
                cn=replica,cn=dc\3Didc,cn=mapping tree,cn=config</div>
              <div style="" data-mce-style="">cn: replica</div>
              <div style="" data-mce-style="">nsDS5Flags: 1</div>
              <div style="" data-mce-style="">objectClass: top</div>
              <div style="" data-mce-style="">objectClass: nsds5replica</div>
              <div style="" data-mce-style="">objectClass:
                extensibleobject</div>
              <div style="" data-mce-style="">nsDS5ReplicaType: 3</div>
              <div style="" data-mce-style="">nsDS5ReplicaRoot: dc=idc</div>
              <div style="" data-mce-style="">nsds5ReplicaLegacyConsumer:
                off</div>
              <div style="" data-mce-style="">nsDS5ReplicaId: 3</div>
              <div style="" data-mce-style="">nsDS5ReplicaBindDN:
                cn=replication manager,cn=config</div>
              <div style="" data-mce-style="">nsState::
                AwAAAAAAAADzUlpUAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAA==</div>
              <div style="" data-mce-style="">nsDS5ReplicaName:
                6cf48589-650a11e4-90ecc46a-d11f6771</div>
              <div style="" data-mce-style="">nsds5ReplicaChangeCount: 0</div>
              <div style="" data-mce-style="">nsds5replicareapactive: 0</div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""># meToidm1.ra.cn.idc,
                replica, dc\3Didc, mapping tree, config</div>
              <div style="" data-mce-style="">dn:
                cn=meToidm1.ra.cn.idc,cn=replica,cn=dc\3Didc,cn=mapping
                tree,cn=config</div>
              <div style="" data-mce-style="">cn: meToidm1.ra.cn.idc</div>
              <div style="" data-mce-style="">objectClass:
                nsds5replicationagreement</div>
              <div style="" data-mce-style="">objectClass: top</div>
              <div style="" data-mce-style="">nsDS5ReplicaTransportInfo:
                TLS</div>
              <div style="" data-mce-style="">description: me to
                idm1.ra.cn.idc</div>
              <div style="" data-mce-style="">nsDS5ReplicaRoot: dc=idc</div>
              <div style="" data-mce-style="">nsDS5ReplicaHost:
                idm1.ra.cn.idc</div>
              <div style="" data-mce-style="">nsds5replicaTimeout: 600</div>
              <div style="" data-mce-style="">nsDS5ReplicaBindDN:
                cn=replication manager,cn=config</div>
              <div style="" data-mce-style="">nsDS5ReplicaPort: 389</div>
              <div style="" data-mce-style="">nsDS5ReplicaBindMethod:
                simple</div>
              <div style="" data-mce-style="">nsDS5ReplicatedAttributeList:
                (objectclass=*) $ EXCLUDE memberof idnssoaserial</div>
              <div style="" data-mce-style="">  entryusn
                krblastsuccessfulauth krblastfailedauth
                krbloginfailedcount</div>
              <div style="" data-mce-style="">nsds5ReplicaStripAttrs:
                modifiersName modifyTimestamp internalModifiersName in</div>
              <div style="" data-mce-style=""> ternalModifyTimestamp</div>
              <div style="" data-mce-style="">nsDS5ReplicaCredentials:
                {DES} </div>
              <div style="" data-mce-style="">nsDS5ReplicatedAttributeListTotal:
                (objectclass=*) $ EXCLUDE entryusn krblasts</div>
              <div style="" data-mce-style=""> uccessfulauth
                krblastfailedauth krbloginfailedcount</div>
              <div style="" data-mce-style="">nsds5replicareapactive: 0</div>
              <div style="" data-mce-style="">nsds5replicaLastUpdateStart:
                0</div>
              <div style="" data-mce-style="">nsds5replicaLastUpdateEnd:
                0</div>
              <div style="" data-mce-style="">nsds5replicaChangesSentSinceStartup:</div>
              <div style="" data-mce-style="">nsds5replicaLastUpdateStatus:
                402 Replication error acquiring replica: unknown</div>
              <div style="" data-mce-style="">  error - Replica has
                different database generation ID, remote replica may nee</div>
              <div style="" data-mce-style=""> d to be initialized</div>
              <div style="" data-mce-style="">nsds5replicaUpdateInProgress:
                FALSE</div>
              <div style="" data-mce-style="">nsds5replicaLastInitStart:
                0</div>
              <div style="" data-mce-style="">nsds5replicaLastInitEnd: 0</div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""># search result</div>
              <div style="" data-mce-style="">search: 2</div>
              <div style="" data-mce-style="">result: 0 Success</div>
              <div style="" data-mce-style=""><br>
              </div>
              <div style="" data-mce-style=""># numResponses: 5</div>
              <div style="" data-mce-style=""># numEntries: 4</div>
            </div>
          </div>
          <br>
          --<br>
          389 users mailing list<br>
          <a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><br>
          <a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></blockquote>
        <div><br>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">--
389 users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
    </blockquote>
    <br>
  </body>
</html>