<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Thahk you for your update.<br>
<br>
Others should be ok, but this looks suspicious. We recommend to
put it back to on.<br>
<span
style="color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;font-size:13px;line-height:17.3333339691162px">set </span><font
color="#333333" face="Arial, Helvetica, FreeSans, sans-serif"><span
style="line-height:17.3333339691162px">nsslapd-pluginbetxn off</span></font><br>
<br>
--noriko<br>
<br>
On 11/05/2014 12:43 PM, 陳含林 wrote:<br>
</div>
<blockquote
cite="mid:CAG5g5XdiE5Se36fWmfKapRZ-Jov1figTJZMAsQJgJEJRMF_hiA@mail.gmail.com"
type="cite">
<div dir="ltr">Thanks for your replay!
<div><br>
</div>
<div>After change nsDS5ReplicaTransportInfo from TLS to LDAP,
total update finished in 5 sec and succeeded. This should be
a workaround for my case.</div>
<div><br>
</div>
<div><br>
</div>
<div>While nsDS5ReplicaTransportInfo set to TLS, i have tried </div>
<div> set nsslapd-maxbersize to 2147483647</div>
<div> set <span
style="color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;font-size:13px;line-height:17.3333339691162px">nsslapd-cachememsize
to </span><span
style="color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;font-size:13px;line-height:17.3333339691162px">2147483648</span></div>
<div><span
style="color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;font-size:13px;line-height:17.3333339691162px">
set </span><font color="#333333" face="Arial, Helvetica,
FreeSans, sans-serif"><span
style="line-height:17.3333339691162px">nsslapd-pluginbetxn
off</span></font></div>
<div><font color="#333333" face="Arial, Helvetica, FreeSans,
sans-serif"><span style="line-height:17.3333339691162px">
set export LDAPTLS_REQCERT=never in /etc/sysconfig/dirsrv</span></font></div>
<div><font color="#333333" face="Arial, Helvetica, FreeSans,
sans-serif"><span style="line-height:17.3333339691162px">all
of above not work.</span></font></div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2014-11-06 4:26 GMT+08:00 Noriko Hosoi
<span dir="ltr"><<a moz-do-not-send="true"
href="mailto:nhosoi@redhat.com" target="_blank">nhosoi@redhat.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello Andrey,<span class=""><br>
<br>
On 11/05/2014 11:53 AM, Ivanov Andrey (M.) wrote:<br>
</span></div>
<span class="">
<blockquote type="cite">
<div style="font-family:times new roman,new
york,times,serif;font-size:12pt;color:#000000">
<div>Hi,<br>
</div>
<div><br>
</div>
<div>i'm having the same problem. I'm in the process
of migration from our 389DS v1.2.10.25/CentOS5 to
389DS on CentOS 7. Everything is working fine on
standalone servers but the replication (especially
online initialization). It stucks _each time_
during the online initialization with SSL/TLS
(and sometimes without SSL/TLS). And exactly with
the same error messages as you describe.<br>
</div>
<div>The network problems in my case are excluded -
i used both virtual machines on the same ESXi in
the same network and/or physical servers, the
results are the same.<br>
</div>
<div>I've tried compiling all the branches latest
available (tags 1.3.2.24, 1.3.1.22, 1.3.3.5). In
all the cases the result was the same. The server
pushing the updates just gets stuck at some random
number of entries sent to consumer (we have ~30000
entries, it gets stuck at random somewhere from
1200 to 25000 entries, the entries stuck have
nothing particular in size, it's completely
random).</div>
</div>
</blockquote>
</span> When you tried the versions "(tags 1.3.2.24,
1.3.1.22, 1.3.3.5)", it does not report any extra errors
in the error log? E.g.,<br>
<blockquote> Incoming BER Element was @@@ bytes, max
allowable is ### bytes. Change the nsslapd-maxbersize
attribute in cn=config to increase.<br>
</blockquote>
Next time it happens, could it be possible to get the
stacktraces from the hung server?<br>
<blockquote><a moz-do-not-send="true"
href="http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-hangs"
target="_blank">http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-hangs</a><br>
</blockquote>
<span class="">
<blockquote type="cite">
<div style="font-family:times new roman,new
york,times,serif;font-size:12pt;color:#000000">
<div>1.2.10.24 compiled with compat-db-4.7 on CentOS
7 has the least of these problems (and the initial
replication is 10 times faster - it takes 8
seconds instead of 80 for 1.3.x!). I've been using
1.2.10.24 on CentOS5 compiled with mozilla ldap
labraries and 1.2.10.23 obn CentOS 7 compiled with
opendlap librarires. The first one had no problems
at all to push the initial replication, the second
one had intermittent problems, but much less than
v1.3.x<br>
</div>
<div><br>
</div>
<div>I've noticed that this problem is getting
worse (or simply appears) if :</div>
<div>* the replica is be of type 3 (multi-master),
with replication agreements in both directions<br>
</div>
<div>* our schema has several additional
attribuites, it may be also important<br>
</div>
</div>
</blockquote>
</span> We improved the schema replication at some time,
which should be in 1.3.2.24 and 1.3.3.5.<br>
<a moz-do-not-send="true"
href="https://fedorahosted.org/389/ticket/47721"
target="_blank">https://fedorahosted.org/389/ticket/47721</a><span
class=""><br>
<blockquote type="cite">
<div style="font-family:times new roman,new
york,times,serif;font-size:12pt;color:#000000">
<div>* if the virtual machine has only one CPU.
Adding a second CPU increases the number of
transferred entries before the initialization gets
stuck. So it may me some thread/transaction
contention or deadlock.<br>
</div>
<div>* if the replication agreement uses SSL(port
636) or TLS(port389). Using port 389 with LDAP
protocol instead of TLS/SSL increases the number
of transferred entries before the initialization
gets stuck. Sometimes the initialization even ends
successfully in this case.<br>
</div>
<div>* decreasing nsslapd-db-checkpoint-interval
(say, to 5 seconds) also gets the problem worse<br>
</div>
</div>
</blockquote>
</span> This indicates the issue is in the BDB?<br>
<br>
Thanks,<br>
--noriko<br>
<blockquote type="cite">
<div style="font-family:times new roman,new
york,times,serif;font-size:12pt;color:#000000"><span
class="">
<div><br>
</div>
<div>When the on-line intialization is finished (if
it finishes), there are no problems. I think it is
related to the volume of data transferred, so
small incremental updates do not generate any
problem....<br>
</div>
<div>If necessary, i will make any debugs/tests - it
is a critical element of our infrastructure, so
i'd like this problem to be resolved...<br>
</div>
<div><br>
</div>
<div>Regards,<br>
</div>
<div>Andrey IVANOV<br>
</div>
<div><br>
</div>
<div><br>
</div>
<hr> </span>
<blockquote style="border-left:2px solid
#1010ff;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><b>De:
</b>"陳含 林" <a moz-do-not-send="true"
href="mailto:laneovcc@gmail.com" target="_blank"><laneovcc@gmail.com></a>
<div>
<div class="h5"><br>
<b>À: </b><a moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org"
target="_blank">389-users@lists.fedoraproject.org</a><br>
<b>Envoyé: </b>Mercredi 5 Novembre 2014
18:01:37<br>
<b>Objet: </b>[389-users] 389-Directory/<a
moz-do-not-send="true" href="http://1.3.1.6"
target="_blank">1.3.1.6</a> cannot setup
replica<br>
<div><br>
</div>
<div dir="ltr">hello all,
<div><br>
</div>
<div><br>
</div>
<div>I have setup a IDM/freeipa master using
CentOS7 , and import about 5000 hosts.</div>
<div><br>
</div>
<div>then i try to setup a
IDM/freeipa replication server by using <span
style="color:rgb(84,84,84);font-family:arial,sans-serif;line-height:18.2000007629395px"> ipa-replica-install.</span></div>
<div><span
style="color:rgb(84,84,84);font-family:arial,sans-serif;line-height:18.2000007629395px"><br>
</span></div>
<div><span
style="color:rgb(84,84,84);font-family:arial,sans-serif;line-height:18.2000007629395px"><br>
</span></div>
<div>It seems the total update on replication
server hangs after about 1000+ entries
imported.</div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px"><br>
</span></span></div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px">I
try to trigger a </span></span> total
update by setting nsds5beginreplicarefresh,
but the result was the same.</div>
<div><br>
</div>
<div><br>
</div>
<div>Any one help me ? Thanks!</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>idm1 is the master, idm2 is the
replication server.</div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px">master
server logs:</span></span></div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px"><br>
</span></span></div>
<div>
<div>[06/Nov/2014:00:21:48 +0800] -
389-Directory/<a moz-do-not-send="true"
href="http://1.3.1.6" target="_blank">1.3.1.6</a>
B2014.219.1825 starting up</div>
<div>[06/Nov/2014:00:21:48 +0800]
schema-compat-plugin - warning: no entries
set up under cn=computers,
cn=compat,dc=idc</div>
<div>[06/Nov/2014:00:21:51 +0800] - Skipping
CoS Definition cn=Password
Policy,cn=accounts,dc=idc--no CoS
Templates found, which should be added
before the CoS Definition.</div>
<div>[06/Nov/2014:00:21:51 +0800] - Skipping
CoS Definition cn=Password
Policy,cn=accounts,dc=idc--no CoS
Templates found, which should be added
before the CoS Definition.</div>
<div>[06/Nov/2014:00:21:51 +0800] - slapd
started. Listening on All Interfaces port
389 for LDAP requests</div>
<div>[06/Nov/2014:00:21:51 +0800] -
Listening on All Interfaces port 636 for
LDAPS requests</div>
<div>[06/Nov/2014:00:21:51 +0800] -
Listening on /var/run/slapd-IDC.socket for
LDAPI requests</div>
<div>[06/Nov/2014:00:21:51 +0800] - Entry
"uid=admin,ou=people,o=ipaca" -- attribute
"krbExtraData" not allowed</div>
<div>[06/Nov/2014:00:40:26 +0800]
NSMMReplicationPlugin -
agmt="cn=meToidm2.ra.cn.idc" (idm2:389):
The remote replica has a different
database generation ID than the local
database. You may have to reinitialize
the remote replica, or the local replica.</div>
<div>[06/Nov/2014:00:40:26 +0800]
NSMMReplicationPlugin - Beginning total
update of replica
"agmt="cn=meToidm2.ra.cn.idc" (idm2:389)".</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>replication server logs:</div>
<div>
<div>[06/Nov/2014:00:40:18 +0800] -
389-Directory/<a moz-do-not-send="true"
href="http://1.3.1.6" target="_blank">1.3.1.6</a>
B2014.219.1825 starting up</div>
<div>[06/Nov/2014:00:40:18 +0800]
ipalockout_get_global_config - [file
ipa_lockout.c, line 185]: Failed to get
default realm (-1765328160)</div>
<div>[06/Nov/2014:00:40:18 +0800]
ipaenrollment_start - [file
ipa_enrollment.c, line 393]: Failed to
get default realm?!</div>
<div>[06/Nov/2014:00:40:18 +0800] - slapd
started. Listening on All Interfaces
port 389 for LDAP requests</div>
<div>[06/Nov/2014:00:40:18 +0800] -
Listening on All Interfaces port 636 for
LDAPS requests</div>
<div>[06/Nov/2014:00:40:18 +0800] -
Listening on /var/run/slapd-IDC.socket
for LDAPI requests</div>
<div>[06/Nov/2014:00:40:19 +0800]
NSMMReplicationPlugin -
agmt="cn=meToidm1.ra.cn.idc" (idm1:389):
The remote replica has a different
database generation ID than the local
database. You may have to reinitialize
the remote replica, or the local
replica.</div>
<div>[06/Nov/2014:00:40:20 +0800]
NSMMReplicationPlugin -
multimaster_be_state_change: replica
dc=idc is going offline; disabling
replication</div>
<div>[06/Nov/2014:00:40:20 +0800] -
WARNING: Import is running with
nsslapd-db-private-import-mem on; No
other process is allowed to access the
database</div>
<div>[06/Nov/2014:00:40:40 +0800] - import
userRoot: Processed 1581 entries --
average rate 79.0/sec, recent rate
79.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:41:00 +0800] - import
userRoot: Processed 1581 entries --
average rate 39.5/sec, recent rate
39.5/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:41:20 +0800] - import
userRoot: Processed 1581 entries --
average rate 26.4/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:41:41 +0800] - import
userRoot: Processed 1581 entries --
average rate 19.8/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:42:01 +0800] - import
userRoot: Processed 1581 entries --
average rate 15.8/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:42:21 +0800] - import
userRoot: Processed 1581 entries --
average rate 13.2/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:42:41 +0800] - import
userRoot: Processed 1581 entries --
average rate 11.3/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:43:01 +0800] - import
userRoot: Processed 1581 entries --
average rate 9.9/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:43:21 +0800] - import
userRoot: Processed 1581 entries --
average rate 8.8/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:43:41 +0800] - import
userRoot: Processed 1581 entries --
average rate 7.9/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:44:01 +0800] - import
userRoot: Processed 1581 entries --
average rate 7.2/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:44:21 +0800] - import
userRoot: Processed 1581 entries --
average rate 6.6/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:44:41 +0800] - import
userRoot: Processed 1581 entries --
average rate 6.1/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:45:01 +0800] - import
userRoot: Processed 1581 entries --
average rate 5.6/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:45:21 +0800] - import
userRoot: Processed 1581 entries --
average rate 5.3/sec, recent rate
0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:45:21 +0800] - import
userRoot: Decided to end this pass
because the progress rate has dropped
below the 50% threshold.</div>
<div>[06/Nov/2014:00:45:21 +0800] - import
userRoot: Ending pass number 1 ...</div>
<div>[06/Nov/2014:00:45:22 +0800] - import
userRoot: Foreman is done; waiting for
workers to finish...</div>
<div>[06/Nov/2014:00:45:22 +0800] - import
userRoot: Workers finished; cleaning
up...</div>
<div>[06/Nov/2014:00:45:22 +0800] - import
userRoot: Workers cleaned up.</div>
<div>[06/Nov/2014:00:45:22 +0800] - import
userRoot: Sweeping files for merging
later...</div>
<div>[06/Nov/2014:00:45:22 +0800] -
WARNING: Import is running with
nsslapd-db-private-import-mem on; No
other process is allowed to access the
database</div>
<div>[06/Nov/2014:00:45:22 +0800] - import
userRoot: Sweep done.</div>
<div>[06/Nov/2014:00:45:22 +0800] - import
userRoot: Beginning pass number 2</div>
<div>[06/Nov/2014:00:45:42 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 214748285.8/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:46:02 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 107374142.9/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:46:22 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 71582761.9/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:46:42 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 53687071.4/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:47:02 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 42949657.1/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:47:22 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 35791381.0/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:47:43 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 30678326.5/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:48:03 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 26843535.7/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:48:23 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 23860920.6/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:48:43 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 21474828.6/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:49:03 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 19522571.4/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:49:23 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 17895690.5/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:49:43 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 16519098.9/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:50:03 +0800] - import
userRoot: Processed 1581 entries (pass
2) -- average rate 15339163.3/sec,
recent rate 0.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:50:23 +0800] - import
userRoot: Processed 1722 entries (pass
2) -- average rate 0.5/sec, recent rate
43.0/sec, hit ratio 0%</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: Workers finished; cleaning
up...</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: Workers cleaned up.</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: Sweeping files for merging
later...</div>
<div>[06/Nov/2014:00:50:26 +0800] -
WARNING: Import is running with
nsslapd-db-private-import-mem on; No
other process is allowed to access the
database</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: Sweep done.</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: Beginning 2-way merge of up to
44 files...</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for "aci".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"automountkey".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"carLicense".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for "cn".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"displayname".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"entryusn".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for "fqdn".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"gidnumber".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"givenName".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"ipakrbprincipalalias".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"ipasudorunas".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"ipasudorunasgroup".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"ipauniqueid".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"krbPrincipalName".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"macAddress".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for "mail".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"mailAlternateAddress".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"mailHost".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"managedby".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"manager".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"member".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"memberallowcmd".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"memberdenycmd".</div>
<div>[06/Nov/2014:00:50:26 +0800] - import
userRoot: No files to merge for
"memberHost".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"memberOf".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"memberservice".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"memberUser".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"nscpEntryDN".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"nsds5ReplConflict".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"nsuniqueid".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"ntUniqueId".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"ntUserDomainId".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"objectclass".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for "ou".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for "owner".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"secretary".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"seeAlso".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for "sn".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"sourcehost".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"telephoneNumber".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for "title".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for "uid".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"uidnumber".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: No files to merge for
"uniquemember".</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: Merging completed in 0
seconds.</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: Indexing complete.
Post-processing...</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: Generating numSubordinates
complete.</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: Flushing caches...</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: Closing files...</div>
<div>[06/Nov/2014:00:50:27 +0800] - import
userRoot: Import complete. Processed
1722 entries in 607 seconds. (2.84
entries/sec)</div>
<div>[06/Nov/2014:00:50:27 +0800]
NSMMReplicationPlugin -
multimaster_be_state_change: replica
dc=idc is coming online; enabling
replication</div>
<div>[06/Nov/2014:00:50:27 +0800] -
Skipping CoS Definition cn=Password
Policy,cn=accounts,dc=idc--no CoS
Templates found, which should be added
before the CoS Definition.</div>
</div>
</div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px"><br>
</span></span></div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px"><br>
</span></span></div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px"><br>
</span></span></div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px"><br>
</span></span></div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px"><br>
</span></span></div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px"><br>
</span></span></div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px"><br>
</span></span></div>
<div><span
style="color:#545454;font-family:arial,sans-serif"
color="#545454" face="arial, sans-serif"><span
style="line-height:18.2000007629395px">mapping
tree</span></span></div>
<div>
<div># extended LDIF</div>
<div>#</div>
<div># LDAPv3</div>
<div># base <cn=mapping
tree,cn=config> with scope subtree</div>
<div># filter: (objectclass=*)</div>
<div># requesting: ALL</div>
<div>#</div>
<div><br>
</div>
<div># mapping tree, config</div>
<div>dn: cn=mapping tree,cn=config</div>
<div>objectClass: top</div>
<div>objectClass: extensibleObject</div>
<div>cn: mapping tree</div>
<div><br>
</div>
<div># dc\3Didc, mapping tree, config</div>
<div>dn: cn=dc\3Didc,cn=mapping
tree,cn=config</div>
<div>objectClass: top</div>
<div>objectClass: extensibleObject</div>
<div>objectClass: nsMappingTree</div>
<div>cn: dc=idc</div>
<div>cn: "dc=idc"</div>
<div>nsslapd-state: backend</div>
<div>nsslapd-backend: userRoot</div>
<div>nsslapd-referral: <a
moz-do-not-send="true">ldap://idm1.ra.cn.idc:389/dc%3Didc</a></div>
<div><br>
</div>
<div># replica, dc\3Didc, mapping tree,
config</div>
<div>dn: cn=replica,cn=dc\3Didc,cn=mapping
tree,cn=config</div>
<div>cn: replica</div>
<div>nsDS5Flags: 1</div>
<div>objectClass: top</div>
<div>objectClass: nsds5replica</div>
<div>objectClass: extensibleobject</div>
<div>nsDS5ReplicaType: 3</div>
<div>nsDS5ReplicaRoot: dc=idc</div>
<div>nsds5ReplicaLegacyConsumer: off</div>
<div>nsDS5ReplicaId: 3</div>
<div>nsDS5ReplicaBindDN: cn=replication
manager,cn=config</div>
<div>nsState::
AwAAAAAAAADzUlpUAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAA==</div>
<div>nsDS5ReplicaName:
6cf48589-650a11e4-90ecc46a-d11f6771</div>
<div>nsds5ReplicaChangeCount: 0</div>
<div>nsds5replicareapactive: 0</div>
<div><br>
</div>
<div># meToidm1.ra.cn.idc, replica,
dc\3Didc, mapping tree, config</div>
<div>dn:
cn=meToidm1.ra.cn.idc,cn=replica,cn=dc\3Didc,cn=mapping
tree,cn=config</div>
<div>cn: meToidm1.ra.cn.idc</div>
<div>objectClass: nsds5replicationagreement</div>
<div>objectClass: top</div>
<div>nsDS5ReplicaTransportInfo: TLS</div>
<div>description: me to idm1.ra.cn.idc</div>
<div>nsDS5ReplicaRoot: dc=idc</div>
<div>nsDS5ReplicaHost: idm1.ra.cn.idc</div>
<div>nsds5replicaTimeout: 600</div>
<div>nsDS5ReplicaBindDN: cn=replication
manager,cn=config</div>
<div>nsDS5ReplicaPort: 389</div>
<div>nsDS5ReplicaBindMethod: simple</div>
<div>nsDS5ReplicatedAttributeList:
(objectclass=*) $ EXCLUDE memberof
idnssoaserial</div>
<div> entryusn krblastsuccessfulauth
krblastfailedauth krbloginfailedcount</div>
<div>nsds5ReplicaStripAttrs: modifiersName
modifyTimestamp internalModifiersName in</div>
<div> ternalModifyTimestamp</div>
<div>nsDS5ReplicaCredentials: {DES} </div>
<div>nsDS5ReplicatedAttributeListTotal:
(objectclass=*) $ EXCLUDE entryusn
krblasts</div>
<div> uccessfulauth krblastfailedauth
krbloginfailedcount</div>
<div>nsds5replicareapactive: 0</div>
<div>nsds5replicaLastUpdateStart: 0</div>
<div>nsds5replicaLastUpdateEnd: 0</div>
<div>nsds5replicaChangesSentSinceStartup:</div>
<div>nsds5replicaLastUpdateStatus: 402
Replication error acquiring replica:
unknown</div>
<div> error - Replica has different
database generation ID, remote replica may
nee</div>
<div> d to be initialized</div>
<div>nsds5replicaUpdateInProgress: FALSE</div>
<div>nsds5replicaLastInitStart: 0</div>
<div>nsds5replicaLastInitEnd: 0</div>
<div><br>
</div>
<div># search result</div>
<div>search: 2</div>
<div>result: 0 Success</div>
<div><br>
</div>
<div># numResponses: 5</div>
<div># numEntries: 4</div>
</div>
</div>
<br>
--<br>
389 users mailing list<br>
<a moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org"
target="_blank">389-users@lists.fedoraproject.org</a><br>
<a moz-do-not-send="true"
href="https://admin.fedoraproject.org/mailman/listinfo/389-users"
target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></div>
</div>
</blockquote>
<div><br>
</div>
</div>
<div>
<div class="h5"> <br>
<fieldset></fieldset>
<br>
<pre>--
389 users mailing list
<a moz-do-not-send="true" href="mailto:389-users@lists.fedoraproject.org" target="_blank">389-users@lists.fedoraproject.org</a>
<a moz-do-not-send="true" href="https://admin.fedoraproject.org/mailman/listinfo/389-users" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</div>
</div>
</blockquote>
<br>
</div>
<br>
--<br>
389 users mailing list<br>
<a moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><br>
<a moz-do-not-send="true"
href="https://admin.fedoraproject.org/mailman/listinfo/389-users"
target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
389 users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</blockquote>
<br>
</body>
</html>