Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-09 Thread thierry bordaz
@redhat.com Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/2015 02:19 PM, Alexander Frolushkin wrote: On one of accidently upgraded server I have following error in dirsrv logs: [08/Apr/2015:13:24:12 +0300] connection - conn=1095 fd=131 Incoming BER Element was too long, max

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-09 Thread thierry bordaz
: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/2015 02:19 PM, Alexander Frolushkin wrote: On one of accidently upgraded server I have following error in dirsrv logs: [08/Apr/2015:13:24:12 +0300] connection - conn=1095 fd=131 Incoming BER Element was too long, max allowable is 209715200

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-09 Thread Alexander Frolushkin
-Original Message- From: Martin Kosek [mailto:mko...@redhat.com] Sent: Thursday, April 09, 2015 11:51 AM To: Alexander Frolushkin (SIB); 'thierry bordaz' Cc: 'Ludwig Krispenz'; freeipa-users@redhat.com Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/09/2015 05:59 AM

[Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
Hello! We used have a geo-replicated IPA with RHEL 7.0, and on one site ipa servers was upgraded by mistake to RHEL 7.1 (ipa-server-4.1.0-18.el7_1.3.x86_64). Now it is broken globally, in logs I see these: [08/Apr/2015:13:06:47 +0600] NSACLPlugin - ACL PARSE ERR(rv=-5):

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: Martin Kosek [mailto:mko...@redhat.com] Sent: Wednesday, April 08, 2015 4:04 PM To: Alexander Frolushkin (SIB); freeipa-users@redhat.com; Ludwig Krispenz; Thierry Bordaz Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/2015 11:52 AM, Alexander

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Martin Kosek
: [Freeipa-users] Accident upgrade 3.3 to 4.1 On Wed, Apr 08, 2015 at 11:07:25AM +, Alexander Frolushkin wrote: -Original Message- From: Martin Kosek [mailto:mko...@redhat.com] Sent: Wednesday, April 08, 2015 4:47 PM To: Alexander Frolushkin (SIB); freeipa-users@redhat.com; Ludwig

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Ludwig Krispenz
On 04/08/2015 12:04 PM, Martin Kosek wrote: On 04/08/2015 11:52 AM, Alexander Frolushkin wrote: Hello! We used have a geo-replicated IPA with RHEL 7.0, and on one site ipa servers was upgraded by mistake to RHEL 7.1 (ipa-server-4.1.0-18.el7_1.3.x86_64). Now it is broken globally, in logs I

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: Ludwig Krispenz [mailto:lkris...@redhat.com] Sent: Wednesday, April 08, 2015 4:18 PM To: Martin Kosek Cc: Alexander Frolushkin (SIB); freeipa-users@redhat.com; Thierry Bordaz Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/2015 12:04 PM, Martin

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: Martin Kosek [mailto:mko...@redhat.com] Sent: Wednesday, April 08, 2015 4:47 PM To: Alexander Frolushkin (SIB); freeipa-users@redhat.com; Ludwig Krispenz; Thierry Bordaz; Jakub Hrozek Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 In any case, upgrade

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: Jakub Hrozek [mailto:jhro...@redhat.com] Sent: Wednesday, April 08, 2015 5:12 PM To: Alexander Frolushkin (SIB) Cc: 'Martin Kosek'; freeipa-users@redhat.com; Ludwig Krispenz; Thierry Bordaz Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On Wed, Apr 08

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread thierry bordaz
] Accident upgrade 3.3 to 4.1 On 04/08/2015 12:04 PM, Martin Kosek wrote: On 04/08/2015 11:52 AM, Alexander Frolushkin wrote: Hello! We used have a geo-replicated IPA with RHEL 7.0, and on one site ipa servers was upgraded by mistake to RHEL 7.1 (ipa-server-4.1.0-18.el7_1.3.x86_64). Now it is broken

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Jakub Hrozek
On Wed, Apr 08, 2015 at 11:40:08AM +, Alexander Frolushkin wrote: After that, client are able to login via ssh on servers connected to 7.1 servers, but still no login on client servers connected to 7.0 IPA servers... There we might be a problem with ACIs, can you check the logs on the

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Martin Kosek
] Accident upgrade 3.3 to 4.1 On 04/08/2015 11:52 AM, Alexander Frolushkin wrote: Hello! We used have a geo-replicated IPA with RHEL 7.0, and on one site ipa servers was upgraded by mistake to RHEL 7.1 (ipa-server-4.1.0-18.el7_1.3.x86_64). Now it is broken globally, in logs I see these: [08/Apr

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Martin Kosek
On 04/08/2015 11:52 AM, Alexander Frolushkin wrote: Hello! We used have a geo-replicated IPA with RHEL 7.0, and on one site ipa servers was upgraded by mistake to RHEL 7.1 (ipa-server-4.1.0-18.el7_1.3.x86_64). Now it is broken globally, in logs I see these: [08/Apr/2015:13:06:47 +0600]

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
On one of accidently upgraded server I have following error in dirsrv logs: [08/Apr/2015:13:24:12 +0300] connection - conn=1095 fd=131 Incoming BER Element was too long, max allowable is 209715200 bytes. Change the nsslapd-maxbersize attribute in cn=config to increase.

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread thierry bordaz
On 04/08/2015 02:19 PM, Alexander Frolushkin wrote: On one of accidently upgraded server I have following error in dirsrv logs: [08/Apr/2015:13:24:12 +0300] connection - conn=1095 fd=131 Incoming BER Element was too long, max allowable is 209715200 bytes. Change the nsslapd-maxbersize

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: thierry bordaz [mailto:tbor...@redhat.com] Sent: Wednesday, April 08, 2015 6:36 PM To: Alexander Frolushkin (SIB) Cc: 'Ludwig Krispenz'; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/2015 02:19 PM

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Martin Kosek
] Accident upgrade 3.3 to 4.1 On 04/08/2015 02:19 PM, Alexander Frolushkin wrote: On one of accidently upgraded server I have following error in dirsrv logs: [08/Apr/2015:13:24:12 +0300] connection - conn=1095 fd=131 Incoming BER Element was too long, max allowable is 209715200 bytes. Change