We're seeing the following messages in the error log:
[11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://
ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed.
[11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
[11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace
(nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca)
failed.
I'm wondering, if it is at all related to this:
[michael.moody@ipa1 ~]$ ldapsearch -ZZ -h ipa1.west-2.production.example.com
-D "cn=Directory Manager" -W -b "o=ipaca"
"(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))"
| grep "nsds50ruv\|nsDS5ReplicaId"
p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit:
Permission denied
Enter LDAP Password:
nsDS5ReplicaId: 96
nsds50ruv: {replicageneration} 56941682000000600000
nsds50ruv: {replica 96 ldap://ipa1.west-2.production.example.com:389}
5694168b
nsds50ruv: {replica 76 ldap://ipa1.eu-west-1.production.example.com:389}
57d8a
nsds50ruv: {replica 81 ldap://ipa1.eu-west-1.production.example.com:389}
57d33
nsds50ruv: {replica 86 ldap://ipa2.west-2.production.example.com:389}
5696e792
nsds50ruv: {replica 91 ldap://ipa2.west-2.production.example.com:389}
56941bab
nsds50ruv: {replica 97 ldap://ipa2.west-2.production.example.com:389}
569416ae
[michael.moody@ipa1 ~]$ ldapsearch -ZZ -h ipa2.west-2.production.example.com
-D "cn=Directory Manager" -W -b "o=ipaca"
"(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))"
| grep "nsds50ruv\|nsDS5ReplicaId"
p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit:
Permission denied
Enter LDAP Password:
nsDS5ReplicaId: 86
nsds50ruv: {replicageneration} 56941682000000600000
nsds50ruv: {replica 86 ldap://ipa2.west-2.production.example.com:389}
5696e792
nsds50ruv: {replica 96 ldap://ipa1.west-2.production.example.com:389}
5694168b
nsds50ruv: {replica 91 ldap://ipa2.west-2.production.example.com:389}
56941bab
nsds50ruv: {replica 97 ldap://ipa2.west-2.production.example.com:389}
569416ae
nsds50ruv: {replica 81 ldap://ipa1.eu-west-1.production.example.com:389}
57d33
nsds50ruv: {replica 76 ldap://ipa1.eu-west-1.production.example.com:389}
57d8a
[michael.moody@ipa1 ~]$ ldapsearch -ZZ -h
ipa1.eu-west-1.production.example.com -D "cn=Directory Manager" -W -b
"o=ipaca"
"(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))"
| grep "nsds50ruv\|nsDS5ReplicaId"
p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit:
Permission denied
Enter LDAP Password:
nsDS5ReplicaId: 76
nsds50ruv: {replicageneration} 56941682000000600000
nsds50ruv: {replica 76 ldap://ipa1.eu-west-1.production.example.com:389}
57d8a
nsds50ruv: {replica 96 ldap://ipa1.west-2.production.example.com:389}
5694168b
nsds50ruv: {replica 81 ldap://ipa1.eu-west-1.production.example.com:389}
57d33
nsds50ruv: {replica 86 ldap://ipa2.west-2.production.example.com:389}
5696e792
nsds50ruv: {replica 91 ldap://ipa2.west-2.production.example.com:389}
56941bab
nsds50ruv: {replica 97 ldap://ipa2.west-2.production.example.com:389}
569416ae
Any pointers would be greatly appreciated.
Thanks,
Michael
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
