Thanks. This is error was did not include ipaca which is discussed a lot on this list. So I was not sure.
There was indeed a dangling reference to an old replica. Removed now. ipa-replica-manage clean-ruv did the trick. On 19 October 2016 at 14:14, Petr Spacek <pspa...@redhat.com> wrote: > On 19.10.2016 10:14, Ludwig Krispenz wrote: > > > > On 10/19/2016 09:39 AM, Prashant Bapat wrote: > >> Some more info. > >> > >> This is happening on one of the hosts for which replica-info file was > >> generated but for some reason the replica installation failed. So I went > >> ahead and deleted and created the replica file again and this time > >> installation went thru fine. Should this cause logs like this ? > > you now have two replicaids with the same url, you need to do a cleanruv > as > > discussed frequently on this list > > For reference, it is described here: > http://www.freeipa.org/page/Troubleshooting#Obsolete_RUV_records > > Petr^2 Spacek > > >> > >> These messages are seen every 5 mins. > >> > >> On 18 October 2016 at 22:38, Prashant Bapat <prash...@apigee.com > >> <mailto:prash...@apigee.com>> wrote: > >> > >> Hi, > >> > >> I'm seeing lots of error messages like this in the DS logs. > >> > >> [18/Oct/2016:17:00:37 +0000] attrlist_replace - attr_replace > >> (nsslapd-referral, > >> ldap://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet > >> <http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet>) > failed. > >> [18/Oct/2016:17:00:37 +0000] attrlist_replace - attr_replace > >> (nsslapd-referral, > >> ldap://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet > >> <http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet>) > failed. > >> [18/Oct/2016:17:00:37 +0000] attrlist_replace - attr_replace > >> (nsslapd-referral, > >> ldap://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet > >> <http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet>) > failed. > >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace > >> (nsslapd-referral, > >> ldap://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet > >> <http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet>) > failed. > >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace > >> (nsslapd-referral, > >> ldap://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet > >> <http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet>) > failed. > >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace > >> (nsslapd-referral, > >> ldap://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet > >> <http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet>) > failed. > >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace > >> (nsslapd-referral, > >> ldap://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet > >> <http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet>) > failed. > >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace > >> (nsslapd-referral, > >> ldap://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet > >> <http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet>) > failed. > >> [18/Oct/2016:17:00:46 +0000] attrlist_replace - attr_replace > >> (nsslapd-referral, > >> ldap://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet > >> <http://ipa-primary.example.net:389/dc%3Dexample%2Cdc%3Dnet>) > failed. > >> > >> We moved from 4.1.4 (FC21) to 4.2.0 (Centos7.2) recently. We have > >> total 8 IPA servers with replication. Below are the steps I > followed. > >> > >> 1. Install a new Centos server. > >> 2. Replicated against a Fedora server with CA. > >> 3. Moved the DNA ranges. > >> 4. From the Centos master created replicas. > >> > >> Is this related to the DS package version ? We > >> have 389-ds-base-1.3.4.0-33.el7_2.x86_64. > >> > >> Thanks. > >> --Prashant > >> > >> > >> > >> > > > > > > > > > -- > Petr^2 Spacek > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project >
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project