Hi Harald,
I wonder if error on ipa1 can not be part of the problem
[20/Jun/2018:12:16:31.885644563 +0200] - ERR - ldbm_back_modrdn -
SLAPI_PLUGIN_BE_TXN_POST_MODRDN_FN plugin returned error but did not set
SLAPI_RESULT_CODE
The MODRDN failed, that would explain why 'uid=bobs' remained in the
index (and findable via search)
But this does not explain how RDN and entry itself was changed.
Could you provide the access logs (ipa1) around that time ?
best regards
thierry
On 06/20/2018 04:34 PM, Harald Dunkel via FreeIPA-users wrote:
Hi Thierry,
On 6/20/18 3:31 PM, thierry bordaz via FreeIPA-users wrote:
> Hi Harald,
>
> anything noticeable in the error logs when the problem occurred ?
> (DB_DEADLOCK)
>
I found something in the slapd error log files on the bad replicas
(attached).
Other replicas show tons of lines like
:
[16/Jun/2018:20:48:14.959827920 +0200] - ERR - DSRetroclPlugin -
delete_changerecord: could not delete change record 4028228 (rc: 32)
[16/Jun/2018:20:48:14.962389856 +0200] - ERR - DSRetroclPlugin -
delete_changerecord: could not delete change record 4028229 (rc: 32)
[16/Jun/2018:20:48:14.971465364 +0200] - ERR - DSRetroclPlugin -
delete_changerecord: could not delete change record 4028230 (rc: 32)
[16/Jun/2018:20:48:14.979659148 +0200] - ERR - DSRetroclPlugin -
delete_changerecord: could not delete change record 4028231 (rc: 32)
[16/Jun/2018:20:48:14.988140501 +0200] - ERR - DSRetroclPlugin -
delete_changerecord: could not delete change record 4028232 (rc: 32)
[16/Jun/2018:20:48:14.992190747 +0200] - ERR - DSRetroclPlugin -
delete_changerecord: could not delete change record 4028233 (rc: 32)
[16/Jun/2018:20:48:15.000092668 +0200] - ERR - DSRetroclPlugin -
delete_changerecord: could not delete change record 4028234 (rc: 32)
[16/Jun/2018:20:48:15.008352154 +0200] - ERR - DSRetroclPlugin -
delete_changerecord: could not delete change record 4028235 (rc: 32)
:
some of them are months old, but we got "real" problems just today
(at about 12:20).
Any idea?
Regards
Harri
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorah...