Best Regards
Scott Crooks
Systems Engineer
scott.crooks@mcon.net
Phone: +86 10 8587 7441
Mobile: +86 138 1089 8314
http://www.mcon.net
MCON China Ltd. Suite 1202, e-Tower 12C Guanghua Road Chaoyang District Beijing 100020 |
埃蒙坎信息系统集
成技术(北
京)有限公司 中国 北京市朝阳区光华路丙12号 数码01大厦1202室 邮编:100020 |
On 03/22/2013 03:24 AM, Scott Crooks wrote:
Greetings,
We're using 389-ds on CentOS 6.4
What version of 389-ds-base? rpm -q 389-ds-base
with 3 master LDAP servers in different locations. All three master servers have a problem adding new users in our organization database using the DNA plugin.
We receive the following (unhelpful) error message in the log files:
[22/Mar/2013:09:54:37 +0800] NSUniqueAttr - ADD begin
[22/Mar/2013:09:54:37 +0800] NSUniqueAttr - ADD parameter untagged: uid
[22/Mar/2013:09:54:37 +0800] NSUniqueAttr - ADD target=cn=testuser01,ou=Organizations,dc=test,dc=net
[22/Mar/2013:09:54:37 +0800] dna-plugin - dna_pre_op: failed to allocate a new ID!!
[22/Mar/2013:09:54:37 +0800] dna-plugin - dna_pre_op: operation failure [1]
[22/Mar/2013:09:54:37 +0800] roles-plugin - --> roles_post_op
[22/Mar/2013:09:54:37 +0800] roles-plugin - --> roles_cache_change_notify
[22/Mar/2013:09:54:37 +0800] roles-plugin - <-- roles_post_op
We've tried indexing the uidNumber and employeeNumber attributes as described here: http://www.spinics.net/linux/fedora/389-users/msg10796.html
One curious fact: there are exactly 1000 users in our database for ou=Organizations,dc=test,dc=net. When following the instructions for the above link, the log outputs the following
organizations: Indexing attribute: employeenumber
organizations: Indexed 1000 entries (97%).
organizations: Finished indexing.
Our organization uses employeenumber rather than uidNumber, but they're the same in the end. We find it strange that the user creation fails at exactly 1000 entries.
What do you mean "user creation fails at exactly 1000 entries"? Do you mean "after adding the 1000th user entry"? The error above is from attempting to add cn=testuser01 - was that the 1000th user entry?
Any ideas on where the configuration is wrong? We assume it's a configuration problem.
Untitled Document
Best Regards
Scott Crooks
Systems Engineerscott.crooks@mcon.net
Phone: +86 10 8587 7441
Mobile: +86 138 1089 8314
http://www.mcon.net
MCON China Ltd.
Suite 1202, e-Tower
12C Guanghua Road
Chaoyang District
Beijing 100020埃蒙坎信息系统集 成技术(北 京)有限公司
中国 北京市朝阳区光华路丙12号
数码01大厦1202室
邮编:100020Member of mcon group: Australia • Austria • China • Czech Republic • Germany • India • Japan • Malaysia • Russia • South Korea • Switzerland • USA
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users