[389-users] Error using db2ldif to backup NetscapeRoot

Noriko Hosoi nhosoi at redhat.com
Mon Apr 25 17:13:27 UTC 2011


On 04/25/2011 09:43 AM, Diego Woitasen wrote:
>
>
> 2011/4/25 Noriko Hosoi <nhosoi at redhat.com <mailto:nhosoi at redhat.com>>
>
>     On 04/25/2011 09:27 AM, Diego Woitasen wrote:
>>
>>
>>     On Mon, Apr 25, 2011 at 1:26 PM, Diego Woitasen
>>     <diego at woitasen.com.ar <mailto:diego at woitasen.com.ar>> wrote:
>>
>>
>>
>>         On Mon, Apr 25, 2011 at 1:19 PM, Rich Megginson
>>         <rmeggins at redhat.com <mailto:rmeggins at redhat.com>> wrote:
>>
>>             On 04/25/2011 10:13 AM, Diego Woitasen wrote:
>>>             Hi,
>>>              [...]
>>>
>>>
>>>             Shall I worry about that lines?
>>             389-ds-base version?  If not 1.2.8.2, can you try with
>>             1.2.8.2?
>>>
>>>             Regards,
>>>              Diego
>>>
>>>             -- 
>>>             Diego Woitasen
>>>
>>>
>>>             --
>>>             389 users mailing list
>>>             389-users at lists.fedoraproject.org  <mailto:389-users at lists.fedoraproject.org>
>>>             https://admin.fedoraproject.org/mailman/listinfo/389-users
>>
>>
>>
>>         /opt/dirsrv/sbin/ns-slapd --version
>>         389 Project
>>         389-Directory/1.2.8.2 <http://1.2.8.2> B2011.105.012
>>
>>
>>         -- 
>>         Diego Woitasen
>>
>>
>>
>>     I don't know if this is important or not but database was created
>>     with a previus version, 1.2.7.5 I think. I don't remember
>>     exactly, but is 1.2.5.7 or newer.
>     Could you share the output of this command line with us?
>     # dbscan -f /var/lib/dirsrv/slapd-YOURID/db/NetscapeRoot/id2entry.db4
>
>     --
>     389 users mailing list
>     389-users at lists.fedoraproject.org
>     <mailto:389-users at lists.fedoraproject.org>
>     https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>
> The output is in http://www.woitasen.com.ar/dbscan.out (430K). Let me 
> know if you forget to rename important information.
>
> I haven't ran "db-setup.pl <http://db-setup.pl> -u" yet. I have an 
> error with a Perl module that I'm trying to fix now. (Can't locate 
> auto/Mozilla/LDAP/API/prldap_inst.al <http://prldap_inst.al>).
>
> Regards,
>  Diego
>
> -- 
> Diego Woitasen
>
>
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
Unfortunately, your NetscapeRoot has some issues.  This is a snippet of 
your dbscan output.  Entry 170 does not exist, but Entry 171 is pointing 
Entry 170 as a parent.  It looks you are replicating NetscapeRoot.  Is 
it intentional?

id 169
     rdn: cn=SearchResultTable
     
modifyTimestamp;adcsn-4d6ea07a000300010000;vucsn-4d6ea07a000300010000: 
2011030
      2195432Z
     
modifiersName;adcsn-4d6ea07a000300010000;vucsn-4d6ea07a000300010000: 
uid=admin
      ,ou=administrators,ou=topologymanagement,o=netscaperoot
     
nsPreference;adcsn-4d6ea07a000300010000;vucsn-4d6ea07a000300010000:: 
IwojV2Vk
     
  IE1hciAwMiAxNjo1NDozMyBBUlQgMjAxMQpBdHRyaWJ1dGUzPXRlbGVwaG9uZW51bWJlcgpDb2x1
     
  bW5Db3VudD00CkF0dHJpYnV0ZTI9bWFpbApBdHRyaWJ1dGUxPXVpZApBdHRyaWJ1dGUwPWNuCkxh
     
  YmVsMz1QaG9uZQpMYWJlbDI9RS1NYWlsCkxhYmVsMT1Vc2VyIElECkxhYmVsMD1OYW1lCg==
     nsUniqueId: e7764201-42d111e0-bcdebcde-bd679a5a
     cn;vucsn-4d6aecc9000000010000;mdcsn-4d6aecc9000000010000: 
SearchResultTable
     objectClass;vucsn-4d6aecc9000000010000: top
     objectClass;vucsn-4d6aecc9000000010000: nsAdminConsoleUser
     creatorsName;vucsn-4d6aecc9000000010000: 
uid=admin,ou=administrators,ou=topolo
      gymanagement,o=netscaperoot
     createTimestamp;vucsn-4d6aecc9000000010000: 20110228003104Z
     parentid: 97
     entryid: 169

id 171
     rdn: nsuniqueid=7df93202-42d711e0-bcdebcde-bd679a5a,cn=Server Group
     nsUniqueId: 7df93202-42d711e0-bcdebcde-bd679a5a
     
modifyTimestamp;adcsn-4d6af609000000010000;vucsn-4d6af609000000010000: 
2011022
      8011032Z
     
modifiersName;adcsn-4d6af609000000010000;vucsn-4d6af609000000010000: 
uid=admin
      ,ou=administrators,ou=topologymanagement,o=netscaperoot
     aci;adcsn-4d6af609000000010000;vucsn-4d6af609000000010000: 
(targetattr=*)(vers
      ion 3.0; acl "Enable delegated access"; allow (read, search, 
compare) userdn
      ="ldap:///cn=admin-serv-cpmon,cn=389 Administration 
Server,cn=Server Group,c
      n=cpmon.example.ar,ou=example-ldap.ar,o=NetscapeRoot";)
     objectClass;vucsn-4d6af607000000010000: nsAdminGroup
     objectClass;vucsn-4d6af607000000010000: groupOfUniqueNames
     objectClass;vucsn-4d6af607000000010000: nsDirectoryInfo
     objectClass;vucsn-4d6af607000000010000: top
     objectClass;vucsn-4d8d272d000400010000: nsTombstone
     nsAdminGroupName;vucsn-4d6af607000000010000: Server Group
     cn;vucsn-4d6af607000000010000;mdcsn-4d6af607000000010000: Server Group
     nsDirectoryInfoRef;vucsn-4d6af607000000010000: 
cn=UserDirectory,ou=Global Pref
      erences,ou=example-ldap.ar,o=NetscapeRoot
     nsAdminSIEDN;vucsn-4d6af607000000010000: cn=admin-serv-cpmon,cn=389 
Administra
      tion Server,cn=Server 
Group,cn=cpmon.example.ar,ou=example-ldap.ar,o=NetscapeRoot
     uniqueMember;vucsn-4d6af607000000010000: cn=389 Directory 
Server,cn=Server Gro
      up,cn=cpmon.example.ar,ou=example-ldap.ar,o=NetscapeRoot
     uniqueMember;vucsn-4d6af609000000010000: cn=389 Administration 
Server,cn=Serve
      r Group,cn=cpmon.example.ar,ou=example-ldap.ar,o=NetscapeRoot
     creatorsName;vucsn-4d6af607000000010000: 
uid=admin,ou=administrators,ou=topolo
      gymanagement,o=netscaperoot
     createTimestamp;vucsn-4d6af607000000010000: 20110228011030Z
*parentid: 170*
     entryid: 171
     nsParentUniqueId: 7df93201-42d711e0-bcdebcde-bd679a5a
     nscpEntryDN: cn=server 
group,cn=cpmon.example.ar,ou=example-ldap.ar,o=netscaperoot

You might have exported and imported NetscapeRoot before and hit this 
bug, I guess.

https://bugzilla.redhat.com/show_bug.cgi?id=684996

Is it possible to take these steps to fix the missing parent?  (but 
please aware this cleans up tombstones and replication state info.)
1. check your exported ldif (exported without -r option) with the output 
of dbscan and make sure all non-tombstone entries are in the exported 
ldif file.
2. import the ldif file to the server.
3. initialize replicas.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20110425/db373609/attachment.html>


More information about the 389-users mailing list