Hi Flo,

Good point. I was using `ldapsearch -H ldapi://%2fvar%2frun%2f/slapd-DOMAIN.socket`
On CentOS7 that gives all entries in cn=plugins,cn=config
On CentOS 8 that does not work.

Indeed when I use bind cn=directory manager I'm seeing 409 entries. Great.

Now back to my original problem, the nameservers are not updated.
I'm suspecting that it is caused setting nsslapd-changelogmaxage to -1
We changed that value because of a deadlock problem a while ago.
-- Kees


On 29-06-2021 10:09, Florence Renaud wrote:
Hi Kees,
How are you looking for the plugins? If you are performing a ldapsearch, make sure to bind as cn=directory manager, otherwise the returned entries may be filtered by ACIs.
You can also look directly in /etc/dirsrv/slapd-DOMAIN/dse.ldif.

What are the exact versions installed on your centos 8 machine? rpm -q 389-ds-base ipa-server

flo

On Mon, Jun 28, 2021 at 8:38 PM Kees Bakker via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hey,

We have three masters. One is CentOS 7, the other two are CentOS 8 Stream.

I'm seeing many plugins on the CentOS 7 in cn=plugins,cn=config (about 388
entries)
But on the CentOS 8 systems there are very few plugins (about 30 entries).

Is that normal?

BTW. I struggling with nameservers not being updated (see thread:
"dns of two out of three masters not up to date"). I'm not making any
progress with that.
--
Kees
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure