Errors in dirsrv log

[Ranbir]

I'm seeing errors like the ones below on my ipa servers (excuse the wrapping):

[11/Aug/2023:22:07:37.684144411 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d5d558000400130000
[11/Aug/2023:22:07:37.686865097 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d5d8d00004003e0000
[11/Aug/2023:22:07:37.689902756 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d5dc51000700190000
[11/Aug/2023:22:07:37.693576614 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d5ff800005002d0000
[11/Aug/2023:22:07:37.696088129 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d60301000400380000
[11/Aug/2023:22:07:37.698351038 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d606800007000d0000

I can't find anything about what they mean.

What do these errors mean? How do I resolve the problem?

[Alexander Bokovoy]

On Няд, 13 жні 2023, Ranbir via FreeIPA-users wrote:
> I'm seeing errors like the ones below on my ipa servers (excuse the wrapping):
>
> [11/Aug/2023:22:07:37.684144411 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d5d558000400130000
> [11/Aug/2023:22:07:37.686865097 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d5d8d00004003e0000
> [11/Aug/2023:22:07:37.689902756 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d5dc51000700190000
> [11/Aug/2023:22:07:37.693576614 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d5ff800005002d0000
> [11/Aug/2023:22:07:37.696088129 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d60301000400380000
> [11/Aug/2023:22:07:37.698351038 -0700] - ERR - get_value_from_string - type does not match: dsEntryDN != dsEntryDN;vucsn-64d606800007000d0000
>
> I can't find anything about what they mean.
>
> What do these errors mean? How do I resolve the problem?

This is from 389-ds backend database code.

I'd suggest you to open an issue with them directly
(https://github.com/389ds/389-ds-base/issues/)

[Ranbir]

On Tue, 2023-08-15 at 14:08 +0300, Alexander Bokovoy via FreeIPA-users
wrote:
> This is from 389-ds backend database code.
>
> I'd suggest you to open an issue with them directly
> (https://github.com/389ds/389-ds-base/issues/)

I can certainly do that, though it seems weird I'd report it to a
component of freeipa instead of to the project (i.e. freeipa) that's
using it.

If it matters, I'm getting these errors immediately after upgrading the
IPA servers from AlmaLinux 9.1 to 9.2. On the surface, it appears to be
a bug.

I'll reply with a link to the issue after I've submitted it.

[Ranbir]

On Tue, 2023-08-15 at 10:46 -0400, Ranbir via FreeIPA-users wrote:
> I'll reply with a link to the issue after I've submitted it.

Submitted:

https://github.com/389ds/389-ds-base/issues/5898

[Mark Reynolds]

On 8/15/23 7:08 AM, Alexander Bokovoy via FreeIPA-users wrote:
> On Няд, 13 жні 2023, Ranbir via FreeIPA-users wrote:
> > I'm seeing errors like the ones below on my ipa servers (excuse the 
> > wrapping):
> >
> > [11/Aug/2023:22:07:37.684144411 -0700] - ERR - get_value_from_string
> > type does not match: dsEntryDN != dsEntryDN;vucsn-64d5d558000400130000
> >
> > [11/Aug/2023:22:07:37.686865097 -0700] - ERR - get_value_from_string
> > type does not match: dsEntryDN != dsEntryDN;vucsn-64d5d8d00004003e0000
> >
> > [11/Aug/2023:22:07:37.689902756 -0700] - ERR - get_value_from_string
> > type does not match: dsEntryDN != dsEntryDN;vucsn-64d5dc51000700190000
> >
> > [11/Aug/2023:22:07:37.693576614 -0700] - ERR - get_value_from_string
> > type does not match: dsEntryDN != dsEntryDN;vucsn-64d5ff800005002d0000
> >
> > [11/Aug/2023:22:07:37.696088129 -0700] - ERR - get_value_from_string
> > type does not match: dsEntryDN != dsEntryDN;vucsn-64d60301000400380000
> >
> > [11/Aug/2023:22:07:37.698351038 -0700] - ERR - get_value_from_string
> > type does not match: dsEntryDN != dsEntryDN;vucsn-64d606800007000d0000

What was happening at this time?  Is there anything before this message 
in the log?  Like an LDIF import?

Mark
> > I can't find anything about what they mean.
> >
> > What do these errors mean? How do I resolve the problem?
>
> This is from 389-ds backend database code.
>
> I'd suggest you to open an issue with them directly
> (https://github.com/389ds/389-ds-base/issues/)

[Ranbir]

On Tue, 2023-08-15 at 12:09 -0400, Mark Reynolds via FreeIPA-users
wrote:
> What was happening at this time?  Is there anything before this
> message 
> in the log?  Like an LDIF import?

I know I'm replying to an old thread, but I started it and I'm seeing
the same errors still and I looked online and saw your reply in the
search results and this is a run on sentence now.

Anyway, all I did at the time was apply available updates. One of those
updates was for the 389-ds package. There were no LDIF imports running.
The servers were just doing their normal "ipa" things.

The errors persist to this day.