[Freeipa-users] Re: ERR - attrlist_replace - attr_replace (nsslapd-referral,

[Mark Reynolds]

https://pagure.io/389-ds-base/c/6f585fa9adaa83efa98b72aa112e162f180b0ad1


On 08/01/2018 09:55 PM, James Harrison via FreeIPA-users wrote:
>  Any ideas, anyone? 
This is a known "issue".  The
message itself is harmless, and it has 
been "fixed" in 389-ds-base-1.3.6.1-22
>      On Tue, 31 Jul 2018 at 13:22, James Harrison via FreeIPA-users
>      <freeipa-users(a)lists.fedorahosted.org&gt; wrote:
>      Hello,
>
>      We have a machine with the following set up:
>      CentOS Linux release 7.4.1708 (Core)
>      ipa-server-4.5.0-21.el7.centos.2.2.x86_64
>      CA-less setup
>
>      We're getting a lot of errors on one of our FreeIPA servers. Hope
>      you can help.
>
>      Many thanks
>      James Harrison
>
>      [31/Jul/2018:12:19:05.542401358 +0100] - ERR - cos-plugin -
>      cos_dn_defs_cb - Skipping CoS Definition cn=Password
>      Policy,cn=accounts,dc=int,dc=DOMAIN,dc=com--no CoS Templates
>      found, which should be added before the CoS Definition.
>      [31/Jul/2018:12:19:05.611267011 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://cro-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:05.613868420 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://cro-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:05.634974836 +0100] - ERR -
>      schema-compat-plugin - schema-compat-plugin tree scan will start
>      in about 5 seconds!
>      [31/Jul/2018:12:19:05.646685174 +0100] - ERR - set_krb5_creds -
>      Could not get initial credentials for principal
>      [ldap/pul-system-01.DOMAINNAME@DOMAINNAME] in keytab
>      [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see e-text))
>      [31/Jul/2018:12:19:05.657290290 +0100] - INFO - slapd_daemon -
>      slapd started.  Listening on All Interfaces port 389 for LDAP requests
>      [31/Jul/2018:12:19:05.660478907 +0100] - INFO - slapd_daemon -
>      Listening on All Interfaces port 636 for LDAPS requests
>      [31/Jul/2018:12:19:05.664268080 +0100] - INFO - slapd_daemon -
>      Listening on /var/run/slapd-INT-DOMAIN-COM.socket for LDAPI requests
>      [31/Jul/2018:12:19:05.712942138 +0100] - ERR -
>      NSMMReplicationPlugin - bind_and_check_pwp -
>      agmt="cn=pul-system-01.DOMAINNAME-to-pul-system-02.DOMAINNAME"
>      (pul-system-02:389) - Replication bind with GSSAPI auth failed:
>      LDAP error -6 (Unknown authentication method) (SASL(-4): no
>      mechanism available: No worthy mechs found)
>      [31/Jul/2018:12:19:08.916600270 +0100] - INFO -
>      NSMMReplicationPlugin - bind_and_check_pwp -
>      agmt="cn=pul-system-01.DOMAINNAME-to-pul-system-02.DOMAINNAME"
>      (pul-system-02:389): Replication bind with GSSAPI auth resumed
>      [31/Jul/2018:12:19:11.139026788 +0100] - ERR -
>      schema-compat-plugin - warning: no entries set up under
>      cn=computers, cn=compat,dc=int,dc=DOMAIN,dc=com
>      [31/Jul/2018:12:19:11.143128988 +0100] - ERR -
>      schema-compat-plugin - Finished plugin initialization.
>      [31/Jul/2018:12:19:26.258468102 +0100] - ERR - ipa-topology-plugin
>      - ipa_topo_util_get_replica_conf: server configuration missing
>      [31/Jul/2018:12:19:26.261488755 +0100] - ERR - ipa-topology-plugin
>      - ipa_topo_util_get_replica_conf: cannot create replica
>      [31/Jul/2018:12:19:41.405312942 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://cro-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:41.407352984 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://cro-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:41.409312145 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://cro-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:44.484329977 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://hk-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:44.489032389 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://hk-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:44.490775486 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://hk-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:46.882743610 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://hk-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:46.887246145 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://hk-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>      [31/Jul/2018:12:19:46.889667896 +0100] - ERR - attrlist_replace -
>      attr_replace (nsslapd-referral,
>      ldap://hk-system-02.DOMAINNAME:389/dc%3Dint%2Cdc%3DDOMAIN%2Cdc%3Dcom)
>      failed.
>
>
>      _______________________________________________
>      FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>      To unsubscribe send an email to
>      freeipa-users-leave(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>      Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>      List Guidelines:
>      https://fedoraproject.org/wiki/Mailing_list_guidelines
>      List Archives:
>     
> https://lists.fedoraproject.org/archives/list/[e-mail]...
>
>
>
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...