Unfortunately, your NetscapeRoot has some issues. This is a snippet
of your dbscan output. Entry 170 does not exist, but Entry 171 is
pointing Entry 170 as a parent. It looks you are replicating
NetscapeRoot. Is it intentional?
id 169
rdn: cn=SearchResultTable
modifyTimestamp;adcsn-4d6ea07a000300010000;vucsn-4d6ea07a000300010000:
2011030
2195432Z
modifiersName;adcsn-4d6ea07a000300010000;vucsn-4d6ea07a000300010000:
uid=admin
,ou=administrators,ou=topologymanagement,o=netscaperoot
nsPreference;adcsn-4d6ea07a000300010000;vucsn-4d6ea07a000300010000::
IwojV2Vk
IE1hciAwMiAxNjo1NDozMyBBUlQgMjAxMQpBdHRyaWJ1dGUzPXRlbGVwaG9uZW51bWJlcgpDb2x1
bW5Db3VudD00CkF0dHJpYnV0ZTI9bWFpbApBdHRyaWJ1dGUxPXVpZApBdHRyaWJ1dGUwPWNuCkxh
YmVsMz1QaG9uZQpMYWJlbDI9RS1NYWlsCkxhYmVsMT1Vc2VyIElECkxhYmVsMD1OYW1lCg==
nsUniqueId: e7764201-42d111e0-bcdebcde-bd679a5a
cn;vucsn-4d6aecc9000000010000;mdcsn-4d6aecc9000000010000:
SearchResultTable
objectClass;vucsn-4d6aecc9000000010000: top
objectClass;vucsn-4d6aecc9000000010000: nsAdminConsoleUser
creatorsName;vucsn-4d6aecc9000000010000:
uid=admin,ou=administrators,ou=topolo
gymanagement,o=netscaperoot
createTimestamp;vucsn-4d6aecc9000000010000: 20110228003104Z
parentid: 97
entryid: 169
id 171
rdn: nsuniqueid=7df93202-42d711e0-bcdebcde-bd679a5a,cn=Server
Group
nsUniqueId: 7df93202-42d711e0-bcdebcde-bd679a5a
modifyTimestamp;adcsn-4d6af609000000010000;vucsn-4d6af609000000010000:
2011022
8011032Z
modifiersName;adcsn-4d6af609000000010000;vucsn-4d6af609000000010000:
uid=admin
,ou=administrators,ou=topologymanagement,o=netscaperoot
aci;adcsn-4d6af609000000010000;vucsn-4d6af609000000010000:
(targetattr=*)(vers
ion 3.0; acl "Enable delegated access"; allow (read, search,
compare) userdn
="
ldap:///cn=admin-serv-cpmon,cn=389 Administration
Server,cn=Server Group,c
n=
cpmon.example.ar,ou=
example-ldap.ar,o=NetscapeRoot";)
objectClass;vucsn-4d6af607000000010000: nsAdminGroup
objectClass;vucsn-4d6af607000000010000: groupOfUniqueNames
objectClass;vucsn-4d6af607000000010000: nsDirectoryInfo
objectClass;vucsn-4d6af607000000010000: top
objectClass;vucsn-4d8d272d000400010000: nsTombstone
nsAdminGroupName;vucsn-4d6af607000000010000: Server Group
cn;vucsn-4d6af607000000010000;mdcsn-4d6af607000000010000: Server
Group
nsDirectoryInfoRef;vucsn-4d6af607000000010000:
cn=UserDirectory,ou=Global Pref
erences,ou=
example-ldap.ar,o=NetscapeRoot
nsAdminSIEDN;vucsn-4d6af607000000010000:
cn=admin-serv-cpmon,cn=389 Administra
tion Server,cn=Server
Group,cn=
cpmon.example.ar,ou=
example-ldap.ar,o=NetscapeRoot
uniqueMember;vucsn-4d6af607000000010000: cn=389 Directory
Server,cn=Server Gro
up,cn=
cpmon.example.ar,ou=
example-ldap.ar,o=NetscapeRoot
uniqueMember;vucsn-4d6af609000000010000: cn=389 Administration
Server,cn=Serve
r Group,cn=
cpmon.example.ar,ou=
example-ldap.ar,o=NetscapeRoot
creatorsName;vucsn-4d6af607000000010000:
uid=admin,ou=administrators,ou=topolo
gymanagement,o=netscaperoot
createTimestamp;vucsn-4d6af607000000010000: 20110228011030Z
parentid: 170
entryid: 171
nsParentUniqueId: 7df93201-42d711e0-bcdebcde-bd679a5a
nscpEntryDN: cn=server
group,cn=
cpmon.example.ar,ou=
example-ldap.ar,o=netscaperoot
You might have exported and imported NetscapeRoot before and hit
this bug, I guess.
https://bugzilla.redhat.com/show_bug.cgi?id=684996
Is it possible to take these steps to fix the missing parent? (but
please aware this cleans up tombstones and replication state info.)
1. check your exported ldif (exported without -r option) with the
output of dbscan and make sure all non-tombstone entries are in the
exported ldif file.
2. import the ldif file to the server.
3. initialize replicas.