We're seeing the following messages in the error log: [11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:23:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:38:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:53:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:16:53:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:00:00 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:00:03 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:08:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:08:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:23:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:23:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:38:30 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:38:31 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap:// ipa1.eu-west-1.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed. [11/Oct/2016:17:53:29 +0000] attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa2.west-2.production.example.com:389/o%3Dipaca) failed.
I'm wondering, if it is at all related to this: [michael.moody@ipa1 ~]$ ldapsearch -ZZ -h ipa1.west-2.production.example.com -D "cn=Directory Manager" -W -b "o=ipaca" "(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))" | grep "nsds50ruv\|nsDS5ReplicaId" p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit: Permission denied Enter LDAP Password: nsDS5ReplicaId: 96 nsds50ruv: {replicageneration} 56941682000000600000 nsds50ruv: {replica 96 ldap://ipa1.west-2.production.example.com:389} 5694168b nsds50ruv: {replica 76 ldap://ipa1.eu-west-1.production.example.com:389} 57d8a nsds50ruv: {replica 81 ldap://ipa1.eu-west-1.production.example.com:389} 57d33 nsds50ruv: {replica 86 ldap://ipa2.west-2.production.example.com:389} 5696e792 nsds50ruv: {replica 91 ldap://ipa2.west-2.production.example.com:389} 56941bab nsds50ruv: {replica 97 ldap://ipa2.west-2.production.example.com:389} 569416ae [michael.moody@ipa1 ~]$ ldapsearch -ZZ -h ipa2.west-2.production.example.com -D "cn=Directory Manager" -W -b "o=ipaca" "(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))" | grep "nsds50ruv\|nsDS5ReplicaId" p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit: Permission denied Enter LDAP Password: nsDS5ReplicaId: 86 nsds50ruv: {replicageneration} 56941682000000600000 nsds50ruv: {replica 86 ldap://ipa2.west-2.production.example.com:389} 5696e792 nsds50ruv: {replica 96 ldap://ipa1.west-2.production.example.com:389} 5694168b nsds50ruv: {replica 91 ldap://ipa2.west-2.production.example.com:389} 56941bab nsds50ruv: {replica 97 ldap://ipa2.west-2.production.example.com:389} 569416ae nsds50ruv: {replica 81 ldap://ipa1.eu-west-1.production.example.com:389} 57d33 nsds50ruv: {replica 76 ldap://ipa1.eu-west-1.production.example.com:389} 57d8a [michael.moody@ipa1 ~]$ ldapsearch -ZZ -h ipa1.eu-west-1.production.example.com -D "cn=Directory Manager" -W -b "o=ipaca" "(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff-ffffffff))" | grep "nsds50ruv\|nsDS5ReplicaId" p11-kit: couldn't open and map file: /etc/pki/ca-trust/source/ipa.p11-kit: Permission denied Enter LDAP Password: nsDS5ReplicaId: 76 nsds50ruv: {replicageneration} 56941682000000600000 nsds50ruv: {replica 76 ldap://ipa1.eu-west-1.production.example.com:389} 57d8a nsds50ruv: {replica 96 ldap://ipa1.west-2.production.example.com:389} 5694168b nsds50ruv: {replica 81 ldap://ipa1.eu-west-1.production.example.com:389} 57d33 nsds50ruv: {replica 86 ldap://ipa2.west-2.production.example.com:389} 5696e792 nsds50ruv: {replica 91 ldap://ipa2.west-2.production.example.com:389} 56941bab nsds50ruv: {replica 97 ldap://ipa2.west-2.production.example.com:389} 569416ae Any pointers would be greatly appreciated. Thanks, Michael
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project