On 03/22/2013 03:24 AM, Scott Crooks wrote:
Greetings,
We're using 389-ds on CentOS 6.4
What version of 389-ds-base? rpm -q 389-ds-base
with 3 master LDAP servers in different locations. All three master
servers have a problem adding new users in our organization database
using the DNA plugin.
We receive the following (unhelpful) error message in the log files:
/[22/Mar/2013:09:54:37 +0800] NSUniqueAttr - ADD begin//
//[22/Mar/2013:09:54:37 +0800] NSUniqueAttr - ADD parameter untagged:
uid//
//[22/Mar/2013:09:54:37 +0800] NSUniqueAttr - ADD
target=cn=testuser01,ou=Organizations,dc=test,dc=net//
//*[22/Mar/2013:09:54:37 +0800] dna-plugin - dna_pre_op: failed to
allocate a new ID!!*//*
*//*[22/Mar/2013:09:54:37 +0800] dna-plugin - dna_pre_op: operation
failure [1]*//*
*//[22/Mar/2013:09:54:37 +0800] roles-plugin - --> roles_post_op//
//[22/Mar/2013:09:54:37 +0800] roles-plugin - -->
roles_cache_change_notify//
//[22/Mar/2013:09:54:37 +0800] roles-plugin - <-- roles_post_op/
We've tried indexing the uidNumber and employeeNumber attributes as
described here:
*http://www.spinics.net/linux/fedora/389-users/msg10796.html*
One curious fact: there are exactly 1000 users in our database for
ou=Organizations,dc=test,dc=net. When following the instructions for
the above link, the log outputs the following
/*organizations: Indexing attribute: employeenumber*//*
*//*organizations: Indexed 1000 entries (97%).*//*
*//*organizations: Finished indexing.*//
/
Our organization uses employeenumber rather than uidNumber, but
they're the same in the end. We find it strange that the user creation
fails at *exactly* 1000 entries.
What do you mean "user creation fails at exactly 1000 entries"? Do you
mean "after adding the 1000th user entry"? The error above is from
attempting to add cn=testuser01 - was that the 1000th user entry?
Any ideas on where the configuration is wrong? We assume it's a
configuration problem.
Untitled Document
Best Regards
Scott Crooks
Systems Engineer
scott.crooks(a)mcon.net <mailto:scott.crooks@mcon.net>
Phone: +86 10 8587 7441
Mobile: +86 138 1089 8314
http://www.mcon.net
Logo MCON China Ltd.
Suite 1202, e-Tower
12C Guanghua Road
Chaoyang District
Beijing 100020 *埃蒙坎信息系**统**集 成技**术**(**北 京**)**有限公司**
*中国 北京市朝阳区光华路丙12号
数码01大厦1202室
邮编:100020
Member of mcon group: Australia • Austria • China • Czech Republic •
Germany • India • Japan • Malaysia • Russia • South Korea •
Switzerland • USA
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users