As I was investigating this, I realized I missed a bunch of log entries. My script
'createusr test06032016d' runs three commands, and at least one of them looks like
it 'spawns?' another process in the 389ds server. I think it is the first
'conn=66087' entries that really matter.
here is the more complete set of logs:
[03/Jun/2016:12:02:39 -0700] conn=66087 fd=85 slot=85 connection from 192.168.x.y to
192.168.x.z
[03/Jun/2016:12:02:39 -0700] conn=66087 op=0 EXT oid="1.3.6.1.4.1.1466.20037"
name="startTLS"
[03/Jun/2016:12:02:39 -0700] conn=66087 op=0 RESULT err=0 tag=120 nentries=0 etime=0
[03/Jun/2016:12:02:39 -0700] conn=66087 SSL 256-bit AES
[03/Jun/2016:12:02:39 -0700] conn=66087 op=1 BIND dn="cn=Directory Manager"
method=128 version=3
[03/Jun/2016:12:02:39 -0700] conn=66087 op=1 RESULT err=0 tag=97 nentries=0 etime=0
dn="cn=directory manager"
[03/Jun/2016:12:02:39 -0700] conn=66087 op=2 SRCH base="dc=domain,dc=com"
scope=2 filter="(&(objectClass=posixAccount)(uid=test06032016d))" attrs=ALL
[03/Jun/2016:12:02:39 -0700] conn=66087 op=2 RESULT err=0 tag=101 nentries=0 etime=0
[03/Jun/2016:12:02:39 -0700] conn=66087 op=3 SRCH
base="sambaDomainName=MYWORKGROUP,dc=domain,dc=com" scope=0
filter="(objectClass=sambaUnixIdPool)" attrs="uidNumber"
[03/Jun/2016:12:02:39 -0700] conn=66087 op=3 RESULT err=0 tag=101 nentries=1 etime=0
[03/Jun/2016:12:02:39 -0700] conn=66087 op=4 MOD
dn="sambaDomainName=MYWORKGROUP,dc=domain,dc=com"
[03/Jun/2016:12:02:39 -0700] conn=66087 op=4 RESULT err=0 tag=103 nentries=0 etime=0
[03/Jun/2016:12:02:39 -0700] conn=66087 op=5 SRCH base="dc=domain,dc=com"
scope=2 filter="(&(objectClass=posixAccount)(uidNumber=1761))" attrs=ALL
[03/Jun/2016:12:02:39 -0700] conn=66087 op=5 RESULT err=0 tag=101 nentries=0 etime=0
notes=U
[03/Jun/2016:12:02:39 -0700] conn=66087 op=6 SRCH
base="ou=GROUPS,dc=domain,dc=com" scope=2
filter="(&(objectClass=posixGroup)(gidNumber=513))" attrs=ALL
[03/Jun/2016:12:02:39 -0700] conn=66087 op=6 RESULT err=0 tag=101 nentries=0 etime=0
[03/Jun/2016:12:02:39 -0700] conn=66087 op=-1 fd=85 closed - B1
[03/Jun/2016:12:02:39 -0700] conn=66088 fd=85 slot=85 connection from 192.168.x.y to
192.168.x.z
[03/Jun/2016:12:02:40 -0700] conn=66088 op=0 EXT oid="1.3.6.1.4.1.1466.20037"
name="startTLS"
[03/Jun/2016:12:02:40 -0700] conn=66088 op=0 RESULT err=0 tag=120 nentries=0 etime=0
[03/Jun/2016:12:02:40 -0700] conn=66088 SSL 256-bit AES
[03/Jun/2016:12:02:40 -0700] conn=66088 op=1 BIND dn="cn=Directory Manager"
method=128 version=3
[03/Jun/2016:12:02:40 -0700] conn=66088 op=1 RESULT err=0 tag=97 nentries=0 etime=0
dn="cn=directory manager"
[03/Jun/2016:12:02:40 -0700] conn=66088 op=2 SRCH base="dc=domain,dc=com"
scope=2 filter="(&(objectClass=posixAccount)(uid=test06032016d))" attrs=ALL
[03/Jun/2016:12:02:40 -0700] conn=66088 op=2 RESULT err=0 tag=101 nentries=0 etime=0
[03/Jun/2016:12:02:40 -0700] conn=66088 op=-1 fd=85 closed - B1
[03/Jun/2016:12:02:40 -0700] conn=66089 fd=85 slot=85 connection from 192.168.x.y to
192.168.x.z
[03/Jun/2016:12:02:40 -0700] conn=66089 op=0 EXT oid="1.3.6.1.4.1.1466.20037"
name="startTLS"
[03/Jun/2016:12:02:40 -0700] conn=66089 op=0 RESULT err=0 tag=120 nentries=0 etime=0
[03/Jun/2016:12:02:40 -0700] conn=66089 SSL 256-bit AES
[03/Jun/2016:12:02:40 -0700] conn=66089 op=1 BIND dn="cn=Directory Manager"
method=128 version=3
[03/Jun/2016:12:02:40 -0700] conn=66089 op=1 RESULT err=0 tag=97 nentries=0 etime=0
dn="cn=directory manager"
[03/Jun/2016:12:02:40 -0700] conn=66089 op=2 SRCH
base="ou=GROUPS,dc=domain,dc=com" scope=2
filter="(&(objectClass=posixGroup)(cn=Domain Users))" attrs=ALL
[03/Jun/2016:12:02:40 -0700] conn=66089 op=2 RESULT err=0 tag=101 nentries=1 etime=0
[03/Jun/2016:12:02:40 -0700] conn=66089 op=3 SRCH base="dc=domain,dc=com"
scope=2 filter="(&(objectClass=posixAccount)(uid=test06032016d))" attrs=ALL
[03/Jun/2016:12:02:40 -0700] conn=66089 op=3 RESULT err=0 tag=101 nentries=0 etime=0
[03/Jun/2016:12:02:40 -0700] conn=66089 op=4 UNBIND
[03/Jun/2016:12:02:40 -0700] conn=66089 op=4 fd=85 closed - U1
[03/Jun/2016:12:02:40 -0700] conn=24 op=5428 SRCH base="dc=domain,dc=com"
scope=2 filter="(&(objectClass=posixAccount)(uid=test06032016d))"
attrs="userPassword cn gidNumber uidNumber loginShell objectClass gecos uid
homeDirectory"
[03/Jun/2016:12:02:40 -0700] conn=24 op=5428 RESULT err=0 tag=101 nentries=0 etime=0