I believe I found the root cause.There are replication conflicts.
ldapsearch -x -D "cn=directory manager" -w password -b
"dc=ipa,dc=domain,dc=com" "nsds5ReplConflict=*" \* nsds5ReplConflict
# extended LDIF
#
# LDAPv3
# base <dc=ipa,dc=domain,dc=com> with scope subtree
# filter: nsds5ReplConflict=*
# requesting: * nsds5ReplConflict
#
# oldipaserver + b4066f9e-cf0b11e7-9ad4d14c-07041c4f, ipa.domain.com., dns,
t
enant.domain.com
dn: idnsName=oldipaserver+nsuniqueid=b4066f9e-cf0b11e7-9ad4d14c-07041c4f,id
nsname=ipa.domain.com.,cn=dns,dc=ipa,dc=domain,dc=com
idnsName: oldipaserver
objectClass: idnsRecord
objectClass: top
aRecord: 10.28.247.230
sSHFPRecord: 1 1 D179038D4D2918411C32C2E6052CBB561050EA48
sSHFPRecord: 1 2 78E7197543306DDA840AFF07296F66CBDA5BCC35A06E7A2E5229FC43
F28A
E7EF
sSHFPRecord: 3 1 8C9BF123F46F8F65507059F1CE670589B8A7B84A
sSHFPRecord: 3 2 B60CE25FE4DB91975EB9055CADE6FF203F1154C6406B5DA6177659DF
B88F
0E46
sSHFPRecord: 4 1 2FF7427DE66D360644E2901930F9CA105D47C33F
sSHFPRecord: 4 2 98C424319EFF9D8EC8DFD12BB13286FC99F6006873D86739E2AA4A55
4C46
0E04
dNSTTL: 1200
nsds5ReplConflict: namingConflict idnsName=oldipaserver,idnsname=ipa.domain
.com.,cn=dns,dc=ipa,dc=domain,dc=com
# HTTP/oldipaserver.ipa.domain.com(a)ipa.domain.com +
aa37478f-cfb111e7-9ad4d14c
-07041c4f, services, accounts,
ipa.domain.com
dn: krbprincipalname=HTTP/oldipaserver.ipa.domain.com(a)ipa.domain.com
+nsunique
id=aa37478f-cfb111e7-9ad4d14c-07041c4f,cn=services,cn=accounts,dc=ipa,dc=y
cs,dc=com
ipaUniqueID: c0db959a-cfb1-11e7-8ca5-0050568cb5f0
krbPrincipalName: HTTP/oldipaserver.ipa.domain.com(a)ipa.domain.com
managedBy: fqdn=oldipaserver.ipa.domain.com,cn=computers,cn=accounts,dc=tena
nt,dc=domain,dc=com
krbCanonicalName: HTTP/oldipaserver.ipa.domain.com(a)ipa.domain.com
ipaKrbPrincipalAlias: HTTP/oldipaserver.ipa.domain.com(a)ipa.domain.com
objectClass: krbprincipal
objectClass: krbprincipalaux
objectClass: krbticketpolicyaux
objectClass: ipaobject
objectClass: ipaservice
objectClass: pkiuser
objectClass: ipakrbprincipal
objectClass: top
userCertificate::
MIIE4zCCA8ugAwIBAgIBFzANBgkqhkiG9w0BAQsFADA4MRYwFAYDVQQKEw1U
RU5BTlQuWUNTLklPMR4wHAYDVQQDExVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTcxMTIyMTgyM
DAxWhcNMTkxMTIzMTgyMDAxWjBAMRYwFAYDVQQKDA1URU5BTlQuWUNTLklPMSYwJAYDVQQDDB1tbz
ItdG50LWlwYS0wMDEudGVuYW50Lnljcy5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggE
BAO9EpY9mT/Z4aA4wWse7rak2/Mh0qcAJHK3u5+SEq5eu70b7XAz/ivSOfn4Q/DJW0jJS03GxLCIC
NUAMzNINnkhuboKceNL1QDz41Bo19tyujhEQlJcdQVa6K0OM7YuKtsXfhI8g8wrcj53YVJailfoSS
iDmvvg/xNJ9P/6WvmvSNZyf7UkXdEM/lAkjEakqM1FPQN1lk/PB10pV6lZzzXSpBCbAU1GuV+srj6
zimvOS/WAgv2cG+iE0mDlfBnW+kqTd/qe5vW914oI4i1x5aLncMkNHsCDzNOBL05UV+Ry/3Un4pdi
ZQCZU1BCKSy7hwhu0SgsI5hk5IPte6/aVG8ECAwEAAaOCAe4wggHqMB8GA1UdIwQYMBaAFNiWa54L
yD1nOFo3rjT6SNTGuZfgMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAYYjaHR0cDovL2lwYS1jY
S50ZW5hbnQueWNzLmlvL2NhL29jc3AwDgYDVR0PAQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBw
MBBggrBgEFBQcDAjB4BgNVHR8EcTBvMG2gNaAzhjFodHRwOi8vaXBhLWNhLnRlbmFudC55Y3MuaW8
vaXBhL2NybC9NYXN0ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2Vy
dGlmaWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBTsjF87tMtQQRowrXaotHV5vErhxjCBvQYDVR0RB
IG1MIGygh1tbzItdG50LWlwYS0wMDEudGVuYW50Lnljcy5pb6BABgorBgEEAYI3FAIDoDIMMEhUVF
AvbW8yLXRudC1pcGEtMDAxLnRlbmFudC55Y3MuaW9AVEVOQU5ULllDUy5JT6BPBgYrBgEFAgKgRTB
DoA8bDVRFTkFOVC5ZQ1MuSU+hMDAuoAMCAQGhJzAlGwRIVFRQGx1tbzItdG50LWlwYS0wMDEudGVu
YW50Lnljcy5pbzANBgkqhkiG9w0BAQsFAAOCAQEAmclabyeU4abixWIv6f6gCRgmXdwBzkvAjTxXP
jfE6ZMwQUFYaoD71j3AxrPJMHnqtYDvPKkr5vkp0qn8ErxjWEBkFH57q0a8z8bwp9enKL4wTALKrc
NoGr0jCLdzR3RWK3+71ITXmWxb1AUsHFq5nuxktKaJC/5QKNQu2REZSscFlbBvI8gema9cjUm0eQ0
iwmSRSPagBWpYowj5eYV6oZBxRR4gtY3QoUKzWelAqPdkqvbF0u96uKfxET/crEqGGwJdA7xqLm8g
S655zkM9b/++exlEFCp2cIxbP51Pinli+FRAQv9Bd75DxrXO6FzAU7UfjChzTSfk3LRwpWG8aA==
krbPwdPolicyReference: cn=Default Service Password
Policy,cn=services,cn=accou
nts,dc=ipa,dc=domain,dc=com
nsds5ReplConflict: namingConflict krbprincipalname=HTTP/oldipaserver.ipa
.domain.com(a)ipa.domain.com,cn=services,cn=accounts,dc=ipa,dc=domain,dc=com
# HTTP/ipaserver002.ipa.domain.com(a)ipa.domain.com +
691465b4-d08d11e7-9ad4d14c
-07041c4f, services, accounts,
ipa.domain.com
dn: krbprincipalname=HTTP/ipaserver002.ipa.domain.com(a)ipa.domain.com
+nsunique
id=691465b4-d08d11e7-9ad4d14c-07041c4f,cn=services,cn=accounts,dc=ipa,dc=y
cs,dc=com
ipaUniqueID: 8d595d9c-d08d-11e7-9954-0050568cb5f0
krbPrincipalName: HTTP/ipaserver002.ipa.domain.com(a)ipa.domain.com
managedBy: fqdn=ipaserver002.ipa.domain.com,cn=computers,cn=accounts,dc=tena
nt,dc=domain,dc=com
krbCanonicalName: HTTP/ipaserver002.ipa.domain.com(a)ipa.domain.com
ipaKrbPrincipalAlias: HTTP/ipaserver002.ipa.domain.com(a)ipa.domain.com
objectClass: krbprincipal
objectClass: krbprincipalaux
objectClass: krbticketpolicyaux
objectClass: ipaobject
objectClass: ipaservice
objectClass: pkiuser
objectClass: ipakrbprincipal
objectClass: top
userCertificate::
MIIE4zCCA8ugAwIBAgIBGjANBgkqhkiG9w0BAQsFADA4MRYwFAYDVQQKEw1U
RU5BTlQuWUNTLklPMR4wHAYDVQQDExVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTcxMTIzMjAzM
zI0WhcNMTkxMTI0MjAzMzI0WjBAMRYwFAYDVQQKDA1URU5BTlQuWUNTLklPMSYwJAYDVQQDDB1tbz
ItdG50LWlwYS0wMDIudGVuYW50Lnljcy5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggE
BALsH9D9LIvvzYThtahRAT3E8QvkZLe/SbMU0P52vC4BVoTCCOYDLo6jCTBd925u0zId20hJx71nC
9wchvP3BLA0JexS8bh7U64u5CSTfLK9EPgsHqJgVve0Jz35KFhgcnOP8GqXvdtu1efMJL0hR4/U50
lftEZdy5cm/TSrJL/DncZ1Srl7hHgYIjRIQ5R8S/Axw5zE3eGd8+WsAVB5gqq4fOLUUsQp88ImUES
oYtHHJ1O9s5N/Hz9AAy+TdcKRDj+EEIxoQNUsOms8H7dG6/wFRTb6mq2NBGT9sf2xBW+iUqoKGe0E
kd273xqUGbUyJKuhrGRgHnyrai9G27YqulSsCAwEAAaOCAe4wggHqMB8GA1UdIwQYMBaAFNiWa54L
yD1nOFo3rjT6SNTGuZfgMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAYYjaHR0cDovL2lwYS1jY
S50ZW5hbnQueWNzLmlvL2NhL29jc3AwDgYDVR0PAQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBw
MBBggrBgEFBQcDAjB4BgNVHR8EcTBvMG2gNaAzhjFodHRwOi8vaXBhLWNhLnRlbmFudC55Y3MuaW8
vaXBhL2NybC9NYXN0ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2Vy
dGlmaWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBSsrJU7LDvxTAIbOe1JFI7r6PAcbzCBvQYDVR0RB
IG1MIGygh1tbzItdG50LWlwYS0wMDIudGVuYW50Lnljcy5pb6BABgorBgEEAYI3FAIDoDIMMEhUVF
AvbW8yLXRudC1pcGEtMDAyLnRlbmFudC55Y3MuaW9AVEVOQU5ULllDUy5JT6BPBgYrBgEFAgKgRTB
DoA8bDVRFTkFOVC5ZQ1MuSU+hMDAuoAMCAQGhJzAlGwRIVFRQGx1tbzItdG50LWlwYS0wMDIudGVu
YW50Lnljcy5pbzANBgkqhkiG9w0BAQsFAAOCAQEAYcv6z2MlwgDOrcF9HHTpQ1e1Xo+aR1kUfyF53
mWTG5FYJ3BJZz00NhzRr16xfs83eFJ6comcJfujQweD2Ojy7d4oMMYDb85+Am132FgpT5V9rcuMenh
bmAxwXq/7rXZNJzlni+TcPPpHXKgAkdCep+IKrul6r1Ugykj8mWKl2K/+VJaXt9vCZVZUd5G911lu
kLbdFhNLWCkH8ye0WtibOstYi3blSkc3QGt4gCSf0uAe1OiTKMPqpz+uu8rGRpN8bMVmha5JlbE3F
2zEIbP5xjA2sztPeVOBN+YNn6yi7kmhJAgCpMISQ14G5os7ZIrPtNIs9o7BRIrgOuV6W62UuEw==
krbPwdPolicyReference: cn=Default Service Password
Policy,cn=services,cn=accou
nts,dc=ipa,dc=domain,dc=com
nsds5ReplConflict: namingConflict krbprincipalname=HTTP/ipaserver002.ipa
.domain.com(a)ipa.domain.com,cn=services,cn=accounts,dc=ipa,dc=domain,dc=com
# HTTP/ipaserver001.ipa.domain.com(a)ipa.domain.com +
f960b202-d14211e7-965fca1d
-506f74cb, services, accounts,
ipa.domain.com
dn: krbprincipalname=HTTP/ipaserver001.ipa.domain.com(a)ipa.domain.com
+nsunique
id=f960b202-d14211e7-965fca1d-506f74cb,cn=services,cn=accounts,dc=ipa,dc=y
cs,dc=com
ipaUniqueID: fe68c03a-d142-11e7-b3c2-0050569a7366
krbPrincipalName: HTTP/ipaserver001.ipa.domain.com(a)ipa.domain.com
managedBy: fqdn=ipaserver001.ipa.domain.com,cn=computers,cn=accounts,dc=tena
nt,dc=domain,dc=com
krbCanonicalName: HTTP/ipaserver001.ipa.domain.com(a)ipa.domain.com
ipaKrbPrincipalAlias: HTTP/ipaserver001.ipa.domain.com(a)ipa.domain.com
objectClass: krbprincipal
objectClass: krbprincipalaux
objectClass: krbticketpolicyaux
objectClass: ipaobject
objectClass: ipaservice
objectClass: pkiuser
objectClass: ipakrbprincipal
objectClass: top
userCertificate::
MIIE5jCCA86gAwIBAgIED/0ABTANBgkqhkiG9w0BAQsFADA4MRYwFAYDVQQK
Ew1URU5BTlQuWUNTLklPMR4wHAYDVQQDExVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTcxMTI0M
TgxMjEyWhcNMTkxMTI1MTgxMjEyWjBAMRYwFAYDVQQKDA1URU5BTlQuWUNTLklPMSYwJAYDVQQDDB
1ybzEtdG50LWlwYS0wMDEudGVuYW50Lnljcy5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQo
CggEBAOE+S90kJ+1zq0Ray0rOYZQn2Rve+Loi8Jy65UUR93CD8XrjHcptPOl3Nha7OM4vodABHgEH
2by8Qzza4FZkIvE+HbPqsHVATPcU9/WBsbXcCY5f1oD4vnu/Crzc9QYRJrMCoukELLVW7EntPVfZv
4/TXDIwE5BDiu4b623+JPjZ0sqHyUCKjcWiIexkp0c9TyeV3m1yYTzhA7TXxhCtgkhZCaPRnDFU8G
NBy3upl1ethbPv65e4zwWAniulmIzpZ8jlMLbzeErTXbxAP2vaxpANJHRepd3hexCNRBpO+nOIHAj
GSdiJhN/JpFS1g6ldTeI+rMxv0hqRQgUiC9CCxgkCAwEAAaOCAe4wggHqMB8GA1UdIwQYMBaAFNiW
a54LyD1nOFo3rjT6SNTGuZfgMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAYYjaHR0cDovL2lwY
S1jYS50ZW5hbnQueWNzLmlvL2NhL29jc3AwDgYDVR0PAQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQ
UFBwMBBggrBgEFBQcDAjB4BgNVHR8EcTBvMG2gNaAzhjFodHRwOi8vaXBhLWNhLnRlbmFudC55Y3M
uaW8vaXBhL2NybC9NYXN0ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwV
Q2VydGlmaWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBQW9TaRJG4IdTlAkGGOleOAqYIL3TCBvQYDV
R0RBIG1MIGygh1ybzEtdG50LWlwYS0wMDEudGVuYW50Lnljcy5pb6BABgorBgEEAYI3FAIDoDIMME
hUVFAvcm8xLXRudC1pcGEtMDAxLnRlbmFudC55Y3MuaW9AVEVOQU5ULllDUy5JT6BPBgYrBgEFAgK
gRTBDoA8bDVRFTkFOVC5ZQ1MuSU+hMDAuoAMCAQGhJzAlGwRIVFRQGx1ybzEtdG50LWlwYS0wMDEu
dGVuYW50Lnljcy5pbzANBgkqhkiG9w0BAQsFAAOCAQEAeEtevJdlJK/EkMeE4lUFk5eMX/uhu8Ewr
RZDpnpqMIp776QH64qiJTc4ZcA0ggrNePb1T92TLcOo4wW9N7Ih6/sgj7zhGS62EfzhRPsMoJayZh
ZhPHkqFEI9UsVKMayBZTnvAB8pgkrmumh7S2rgp4alUSGSPhRMQ2GWEvI8554F2bF4q0wAl0S/qNX
UdFtS76W2OATcZZyYL8ufQfYo6tcFyFTl6KiMPtP8jKi6v3pDjVCR1eHK0YKswBaHCsl9Wlzlnz9U
Xbt9a/d0x+c1RO9sRkD4RbCQVaWgdlTyllsH66/J9QtG1AbFFidPt8JtxkOXjZ3J9oi/tiLoMUN5i
A==
krbPwdPolicyReference: cn=Default Service Password
Policy,cn=services,cn=accou
nts,dc=ipa,dc=domain,dc=com
nsds5ReplConflict: namingConflict krbprincipalname=http/ipaserver001.ipa
.domain.com(a)ipa.domain.com,cn=services,cn=accounts,dc=ipa,dc=domain,dc=com
# HTTP/ipaserver003.ipa.domain.com(a)ipa.domain.com +
5fffd19d-d21011e7-9ad4d14c
-07041c4f, services, accounts,
ipa.domain.com
dn: krbprincipalname=HTTP/ipaserver003.ipa.domain.com(a)ipa.domain.com
+nsunique
id=5fffd19d-d21011e7-9ad4d14c-07041c4f,cn=services,cn=accounts,dc=ipa,dc=y
cs,dc=com
ipaUniqueID: 78d35f24-d210-11e7-b055-0050568cb5f0
krbPrincipalName: HTTP/ipaserver003.ipa.domain.com(a)ipa.domain.com
managedBy: fqdn=ipaserver003.ipa.domain.com,cn=computers,cn=accounts,dc=tena
nt,dc=domain,dc=com
krbCanonicalName: HTTP/ipaserver003.ipa.domain.com(a)ipa.domain.com
ipaKrbPrincipalAlias: HTTP/ipaserver003.ipa.domain.com(a)ipa.domain.com
objectClass: krbprincipal
objectClass: krbprincipalaux
objectClass: krbticketpolicyaux
objectClass: ipaobject
objectClass: ipaservice
objectClass: pkiuser
objectClass: ipakrbprincipal
objectClass: top
userCertificate::
MIIE4zCCA8ugAwIBAgIBHjANBgkqhkiG9w0BAQsFADA4MRYwFAYDVQQKEw1U
RU5BTlQuWUNTLklPMR4wHAYDVQQDExVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTcxMTI1MTg0M
zA0WhcNMTkxMTI2MTg0MzA0WjBAMRYwFAYDVQQKDA1URU5BTlQuWUNTLklPMSYwJAYDVQQDDB1ybz
EtdG50LWlwYS0wMDMudGVuYW50Lnljcy5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggE
BANFhBMKFTE4xsmcld+NTEDgr5RyeHiQoVi695Lxh7LmT9ccBNPtZG6/4sceGQpcyJpdoZTFMxrFp
97ZgfZwtT09uJxGtTIHVFctGRACm5E4+NlW2MCSwsod9OXH4P8QTCMdAapmMWynKnFx+B3v7TJfES
7WRP7GkcHofFSVtN3X1bUpfk4Co+1mDV85q7QFTmPaMzcREWmCr+DCwG3cy+YZDIbsih07FkJeaTy
lzIXvOEbQ7UaoZtMndH+8D/E4VboCV1x0Is0bjuCQqFcEiIQBgBHTPtXkMA5we+ZK4tsUgl1A0As7
Df1oFlISnj2JwrkX6Ox8y7acIPOgnD6ecxesCAwEAAaOCAe4wggHqMB8GA1UdIwQYMBaAFNiWa54L
yD1nOFo3rjT6SNTGuZfgMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAYYjaHR0cDovL2lwYS1jY
S50ZW5hbnQueWNzLmlvL2NhL29jc3AwDgYDVR0PAQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBw
MBBggrBgEFBQcDAjB4BgNVHR8EcTBvMG2gNaAzhjFodHRwOi8vaXBhLWNhLnRlbmFudC55Y3MuaW8
vaXBhL2NybC9NYXN0ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2Vy
dGlmaWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBSazpOqyaJc6zL8ZCqZLPIsmpT91jCBvQYDVR0RB
IG1MIGygh1ybzEtdG50LWlwYS0wMDMudGVuYW50Lnljcy5pb6BABgorBgEEAYI3FAIDoDIMMEhUVF
Avcm8xLXRudC1pcGEtMDAzLnRlbmFudC55Y3MuaW9AVEVOQU5ULllDUy5JT6BPBgYrBgEFAgKgRTB
DoA8bDVRFTkFOVC5ZQ1MuSU+hMDAuoAMCAQGhJzAlGwRIVFRQGx1ybzEtdG50LWlwYS0wMDMudGVu
YW50Lnljcy5pbzANBgkqhkiG9w0BAQsFAAOCAQEAVlKBrfmIUBVU129Dd96328+nBRAmQhEcs5//Y
C4uF5AQ7a54f9kUWhaRj504E8gXX/Ffen2q3YxXRAl0KKhZDrOCYjjyJE7RfBTv4oNMG48PzoymvX
RW/e7LWE1x2NtkyXt0MNKpEFFTWVYRq7Fz8KZqnasV48o6NW2js0ZRS3aR8F/SUqTT7hzSo8mTdFe
07L/MMtImQBFOB7qPZePZMABtkI4ot7sMMB9/tTgvX5bRkKrukGGa08qPBU9mM72V8BURnwKLzWcL
3EHcomjPmZ4Q83XhxeWBDhxC4dtLQ3LvQJEpxPAU/TFiBMxCEChnpWT+EG7tflVKft4nbdYFq3w==
krbPwdPolicyReference: cn=Default Service Password
Policy,cn=services,cn=accou
nts,dc=ipa,dc=domain,dc=com
nsds5ReplConflict: namingConflict krbprincipalname=HTTP/ipaserver003.ipa
.domain.com(a)ipa.domain.com,cn=services,cn=accounts,dc=ipa,dc=domain,dc=com
# search result
search: 2
result: 0 Success
# numResponses: 6
# numEntries: 5
I uninstalled "oldipaserver" but I still get the replication conflict.
I try to use ldapdelete but it keep on complaining about the syntax.
Any suggestions?
Thanks,
Alex
On Sat, Nov 25, 2017 at 11:57 AM, Sumit Bose via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
On Fri, Nov 24, 2017 at 07:04:10PM -0500, Alexandre Pitre via
FreeIPA-users wrote:
> Hi,
>
> I had two freeipa replica servers up and running in our german DC for
> nearly 2 months and this morning out of the blue they stopped working.
>
> Looking at ipactl status, both servers are reporting that their directory
> service is stopped. Trying to restart ipa only works from 2 minutes to an
> hour.
>
> Looking at the /var/log/dirsrv/slapd-DOMAIN-COM/errors there's no errors
> that show up before it crash.
>
> However, looking at /var/log/messages, this lovely segfault show up:
>
> XXXXXX kernel: ns-slapd[17507]: segfault at 8 ip 00007fb99e56149f sp
> 00007fb96bee83c0 error 4 in libslapd.s
> o.0.1.0[7fb99e483000+128000]
>
> Out of despair to get production back up and running quickly, I
reinstalled
> one replica...it worked for an hour and came back with the same issue.
>
> We have 6 other freeipa replica running accross 3 different site with
zero
> issues.
>
> We're running CentOS 7.4 with the latest packages, ipa-server-4.5.0-21 &
> 389-ds-base-1.3.6.1-21.
>
> Any clues why ?
sorry, no clue but on
http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-crashes you can
see how to get a core dump file. Inspecting this might help to
understand what is going wrong.
bye,
Sumit
>
> Thanks
>
> --
> Alexandre Pitre
> alexandre.pitre(a)gmail.com
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.
fedorahosted.org
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
--
Alexandre Pitre
alexandre.pitre(a)gmail.com