Hi Flo,
Good point. I was using `ldapsearch -H
ldapi://%2fvar%2frun%2f/slapd-DOMAIN.socket`
On CentOS7 that gives all entries in cn=plugins,cn=config
On CentOS 8 that does not work.
Indeed when I use bind cn=directory manager I'm seeing 409 entries. Great.
Now back to my original problem, the nameservers are not updated.
I'm suspecting that it is caused setting nsslapd-changelogmaxage to -1
We changed that value because of a deadlock problem a while ago.
-- Kees
On 29-06-2021 10:09, Florence Renaud wrote:
Hi Kees,
How are you looking for the plugins? If you are performing a
ldapsearch, make sure to bind as cn=directory manager, otherwise the
returned entries may be filtered by ACIs.
You can also look directly in /etc/dirsrv/slapd-DOMAIN/dse.ldif.
What are the exact versions installed on your centos 8 machine? rpm -q
389-ds-base ipa-server
flo
On Mon, Jun 28, 2021 at 8:38 PM Kees Bakker via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>> wrote:
Hey,
We have three masters. One is CentOS 7, the other two are CentOS 8
Stream.
I'm seeing many plugins on the CentOS 7 in cn=plugins,cn=config
(about 388
entries)
But on the CentOS 8 systems there are very few plugins (about 30
entries).
Is that normal?
BTW. I struggling with nameservers not being updated (see thread:
"dns of two out of three masters not up to date"). I'm not making any
progress with that.
--
Kees
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
<
https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
<
https://fedoraproject.org/wiki/Mailing_list_guidelines>
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
<
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
<
https://pagure.io/fedora-infrastructure>