Thanks for your assistance Rob. We had an admin hit refresh on the users page and I tailed
all log files in /var/log/dirsrv/slapd-<domain>/. Other than anonymising the domain
the logs are a direct copy. Interestingly, nothing new appeared in the error log (last
entry was yesterday) though the access log appears to indicate errors (err=32/err=14):
==> /var/log/dirsrv/slapd-DOMAIN-NZ/access <==
[18/Jul/2019:10:21:32.743893901 +1200] conn=579 op=8 SRCH
base="cn=accounts,dc=domain,dc=nz" scope=2
filter="(&(uid=mailer-daemon)(objectClass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))"
attrs="objectClass uid userPassword uidNumber gidNumber gecos homeDirectory
loginShell krbPrincipalName cn memberOf ipaUniqueID ipaNTSecurityIdentifier
modifyTimestamp entryusn shadowLastChange shadowMin shadowMax shadowWarning shadowInactive
shadowExpire shadowFlag krbLastPwdChange krbPasswordExpiration pwdattribute
authorizedService accountexpires useraccountcontrol nsAccountLock host logindisabled
loginexpirationtime loginallowedtimemap ipaSshPubKey ipaUserAuthType
usercertificate;binary mail"
[18/Jul/2019:10:21:32.744157672 +1200] conn=579 op=8 RESULT err=0 tag=101 nentries=0
etime=0.0000454722
[18/Jul/2019:10:21:56.677736243 +1200] conn=583 fd=105 slot=105 connection from
172.30.2.21 to 172.30.2.21
[18/Jul/2019:10:21:56.679982423 +1200] conn=583 op=0 BIND dn="" method=sasl
version=3 mech=GSS-SPNEGO
[18/Jul/2019:10:21:56.682418635 +1200] conn=583 op=0 RESULT err=0 tag=97 nentries=0
etime=0.0002650664 dn="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz"
[18/Jul/2019:10:21:56.689593794 +1200] conn=583 op=1 SRCH
base="cn=ipaconfig,cn=etc,dc=domain,dc=nz" scope=0
filter="(objectClass=*)" attrs=ALL
[18/Jul/2019:10:21:56.690482586 +1200] conn=583 op=1 RESULT err=0 tag=101 nentries=1
etime=0.0000963835
[18/Jul/2019:10:21:56.691860968 +1200] conn=583 op=2 SRCH
base="cn=ipaconfig,cn=etc,dc=domain,dc=nz" scope=0
filter="(objectClass=*)" attrs="ipaDefaultLoginShell
ipaCertificateSubjectBase ipaUserSearchFields ipaSELinuxUserMapDefault ipaUserAuthType
ipaGroupSearchFields ipaDefaultPrimaryGroup ipaPwdExpAdvNotify ipaDomainResolutionOrder
ipaDefaultEmailDomain ipaHomesRootDir ipaSearchTimeLimit ipaKrbAuthzData
ipaMigrationEnabled ipaSearchRecordsLimit ipaConfigString ipaMaxUsernameLength
ipaSELinuxUserMapOrder"
[18/Jul/2019:10:21:56.692082704 +1200] conn=583 op=2 RESULT err=0 tag=101 nentries=1
etime=0.0000316244
[18/Jul/2019:10:21:56.693128113 +1200] conn=583 op=3 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(cn=CA)" attrs="ipaConfigString cn"
[18/Jul/2019:10:21:56.693610138 +1200] conn=583 op=3 RESULT err=0 tag=101 nentries=1
etime=0.0000542056
[18/Jul/2019:10:21:56.694663398 +1200] conn=583 op=4 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=1
filter="(objectClass=ipaConfigObject)" attrs="cn"
[18/Jul/2019:10:21:56.695124028 +1200] conn=583 op=4 RESULT err=0 tag=101 nentries=2
etime=0.0000526921
[18/Jul/2019:10:21:56.695909846 +1200] conn=583 op=5 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(&(cn=CA)(ipaConfigString=caRenewalMaster))" attrs=ALL
[18/Jul/2019:10:21:56.696468573 +1200] conn=583 op=5 RESULT err=0 tag=101 nentries=1
etime=0.0000620511
[18/Jul/2019:10:21:56.697116946 +1200] conn=583 op=6 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(cn=CA)" attrs="ipaConfigString cn"
[18/Jul/2019:10:21:56.697520000 +1200] conn=583 op=6 RESULT err=0 tag=101 nentries=1
etime=0.0000470211
[18/Jul/2019:10:21:56.698159853 +1200] conn=583 op=7 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=1
filter="(objectClass=ipaConfigObject)" attrs="cn"
[18/Jul/2019:10:21:56.698567839 +1200] conn=583 op=7 RESULT err=0 tag=101 nentries=2
etime=0.0000464594
[18/Jul/2019:10:21:56.699430708 +1200] conn=583 op=8 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(|(cn=HTTP)(cn=KDC)(cn=KPASSWD))" attrs="ipaConfigString cn"
[18/Jul/2019:10:21:56.700805669 +1200] conn=583 op=8 RESULT err=0 tag=101 nentries=6
etime=0.0001447294
[18/Jul/2019:10:21:56.702777108 +1200] conn=583 op=9 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=1
filter="(objectClass=ipaConfigObject)" attrs="cn"
[18/Jul/2019:10:21:56.703187156 +1200] conn=583 op=9 RESULT err=0 tag=101 nentries=2
etime=0.0000470000
[18/Jul/2019:10:21:56.703991617 +1200] conn=583 op=10 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(&(cn=KDC)(ipaConfigString=pkinitEnabled))" attrs=ALL
[18/Jul/2019:10:21:56.704608201 +1200] conn=583 op=10 RESULT err=0 tag=101 nentries=2
etime=0.0000683819
[18/Jul/2019:10:21:56.705498825 +1200] conn=583 op=11 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(|(cn=HTTP)(cn=KDC)(cn=KPASSWD))" attrs="ipaConfigString cn"
[18/Jul/2019:10:21:56.706796444 +1200] conn=583 op=11 RESULT err=0 tag=101 nentries=6
etime=0.0001368352
[18/Jul/2019:10:21:56.708749851 +1200] conn=583 op=12 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=1
filter="(objectClass=ipaConfigObject)" attrs="cn"
[18/Jul/2019:10:21:56.709139727 +1200] conn=583 op=12 RESULT err=0 tag=101 nentries=2
etime=0.0000448452
[18/Jul/2019:10:21:56.709984111 +1200] conn=583 op=13 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(cn=NTP)" attrs="ipaConfigString cn"
[18/Jul/2019:10:21:56.710416641 +1200] conn=583 op=13 RESULT err=0 tag=101 nentries=2
etime=0.0000488232
[18/Jul/2019:10:21:56.711367461 +1200] conn=583 op=14 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=1
filter="(objectClass=ipaConfigObject)" attrs="cn"
[18/Jul/2019:10:21:56.711833608 +1200] conn=583 op=14 RESULT err=0 tag=101 nentries=2
etime=0.0000524228
[18/Jul/2019:10:21:56.713643579 +1200] conn=583 op=15 EXT
oid="1.3.6.1.4.1.4203.1.11.3" name="whoami-plugin"
[18/Jul/2019:10:21:56.713690341 +1200] conn=583 op=15 RESULT err=0 tag=120 nentries=0
etime=0.0000101013
[18/Jul/2019:10:21:56.714058200 +1200] conn=583 op=16 SRCH
base="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz" scope=0
filter="(objectClass=*)" attrs=ALL
[18/Jul/2019:10:21:56.715729610 +1200] conn=583 op=16 RESULT err=0 tag=101 nentries=1
etime=0.0001727481
[18/Jul/2019:10:21:56.718868186 +1200] conn=583 op=17 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(&(objectClass=ipaConfigObject)(cn=DNS))" attrs=ALL
[18/Jul/2019:10:21:56.718989678 +1200] conn=583 op=17 RESULT err=0 tag=101 nentries=0
etime=0.0000188568
[18/Jul/2019:10:21:56.719877244 +1200] conn=583 op=18 SRCH
base="cn=domain.nz,cn=ad,cn=etc,dc=domain,dc=nz" scope=0
filter="(objectClass=*)" attrs="ipaNTFallbackPrimaryGroup ipaNTDomainGUID
ipaNTSecurityIdentifier ipaNTFlatName cn"
[18/Jul/2019:10:21:56.720092858 +1200] conn=583 op=18 RESULT err=32 tag=101 nentries=0
etime=0.0000273232
[18/Jul/2019:10:21:56.720879107 +1200] conn=583 op=19 SRCH base="cn=Domain
Level,cn=ipa,cn=etc,dc=domain,dc=nz" scope=0 filter="(objectClass=*)"
attrs="ipaDomainLevel"
[18/Jul/2019:10:21:56.721086262 +1200] conn=583 op=19 RESULT err=0 tag=101 nentries=1
etime=0.0000261847
[18/Jul/2019:10:21:56.722073309 +1200] conn=583 op=20 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(&(objectClass=ipaConfigObject)(cn=CA))" attrs=ALL
[18/Jul/2019:10:21:56.722563885 +1200] conn=583 op=20 RESULT err=0 tag=101 nentries=1
etime=0.0000563697
[18/Jul/2019:10:21:56.723796927 +1200] conn=583 op=21 SRCH
base="cn=masters,cn=ipa,cn=etc,dc=domain,dc=nz" scope=2
filter="(&(objectClass=ipaConfigObject)(cn=KRA))" attrs=ALL
[18/Jul/2019:10:21:56.723897525 +1200] conn=583 op=21 RESULT err=0 tag=101 nentries=0
etime=0.0000158808
[18/Jul/2019:10:21:56.728927145 +1200] conn=583 op=22 UNBIND
[18/Jul/2019:10:21:56.728942256 +1200] conn=583 op=22 fd=105 closed - U1
[18/Jul/2019:10:21:56.830427620 +1200] conn=584 fd=105 slot=105 connection from
172.30.2.21 to 172.30.2.21
[18/Jul/2019:10:21:56.832717397 +1200] conn=584 op=0 BIND dn="" method=sasl
version=3 mech=GSS-SPNEGO
[18/Jul/2019:10:21:56.834168014 +1200] conn=584 op=0 RESULT err=0 tag=97 nentries=0
etime=0.0001598537 dn="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz"
[18/Jul/2019:10:21:56.835656032 +1200] conn=584 op=1 SRCH
base="cn=ipaconfig,cn=etc,dc=domain,dc=nz" scope=0
filter="(objectClass=*)" attrs=ALL
[18/Jul/2019:10:21:56.836531899 +1200] conn=584 op=1 RESULT err=0 tag=101 nentries=1
etime=0.0000956733
[18/Jul/2019:10:21:56.837870697 +1200] conn=584 op=2 SRCH
base="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz" scope=0
filter="(objectClass=*)" attrs="distinguishedName"
[18/Jul/2019:10:21:56.838107132 +1200] conn=584 op=2 RESULT err=0 tag=101 nentries=1
etime=0.0000295050
[18/Jul/2019:10:21:56.838763396 +1200] conn=584 op=3 SRCH
base="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz" scope=0
filter="(objectClass=*)" attrs="telephoneNumber uid krbCanonicalName
ipatokenRadiusUserName ipaUserAuthType krbPrincipalExpiration homeDirectory nsAccountLock
usercertificate;binary title loginShell * uidNumber mail ipaCertMapData memberOf
memberofindirect krbPrincipalName givenName gidNumber sn ou userClass
ipatokenRadiusConfigLink aci"
[18/Jul/2019:10:21:56.840471566 +1200] conn=584 op=3 RESULT err=0 tag=101 nentries=1
etime=0.0001794160
[18/Jul/2019:10:21:56.841591391 +1200] conn=585 fd=115 slot=115 connection from
172.30.2.21 to 172.30.2.21
[18/Jul/2019:10:21:56.841875245 +1200] conn=584 op=4 SRCH base="dc=domain,dc=nz"
scope=2
filter="(|(member=uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz)(memberUser=uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz)(memberHost=uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz))"
attrs=""
[18/Jul/2019:10:21:56.842518705 +1200] conn=584 op=4 RESULT err=0 tag=101 nentries=3
etime=0.0000712599 notes=P pr_idx=0 pr_cookie=-1
[18/Jul/2019:10:21:56.843442959 +1200] conn=584 op=5 SRCH
base="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz" scope=0
filter="(userPassword=*)" attrs="userPassword"
[18/Jul/2019:10:21:56.843725735 +1200] conn=584 op=5 RESULT err=0 tag=101 nentries=1
etime=0.0000390450
[18/Jul/2019:10:21:56.844257371 +1200] conn=584 op=6 SRCH
base="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz" scope=0
filter="(krbPrincipalKey=*)" attrs="krbPrincipalKey"
[18/Jul/2019:10:21:56.844555395 +1200] conn=584 op=6 RESULT err=0 tag=101 nentries=1
etime=0.0000355189
[18/Jul/2019:10:21:56.846600138 +1200] conn=585 op=0 BIND dn="" method=sasl
version=3 mech=GSS-SPNEGO
[18/Jul/2019:10:21:56.847912921 +1200] conn=586 fd=116 slot=116 connection from
172.30.2.21 to 172.30.2.21
[18/Jul/2019:10:21:56.847999855 +1200] conn=585 op=0 RESULT err=0 tag=97 nentries=0
etime=0.0001535869 dn="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz"
[18/Jul/2019:10:21:56.849786211 +1200] conn=586 op=0 BIND dn="" method=sasl
version=3 mech=GSS-SPNEGO
[18/Jul/2019:10:21:56.851164107 +1200] conn=586 op=0 RESULT err=0 tag=97 nentries=0
etime=0.0001510374 dn="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz"
[18/Jul/2019:10:21:56.852626523 +1200] conn=584 op=7 UNBIND
[18/Jul/2019:10:21:56.852642659 +1200] conn=584 op=7 fd=105 closed - U1
[18/Jul/2019:10:21:56.941411799 +1200] conn=585 op=1 SRCH
base="cn=ipaconfig,cn=etc,dc=domain,dc=nz" scope=0
filter="(objectClass=*)" attrs=ALL
[18/Jul/2019:10:21:56.942275498 +1200] conn=585 op=1 RESULT err=0 tag=101 nentries=1
etime=0.0000956579
[18/Jul/2019:10:21:57.152672440 +1200] conn=585 op=2 UNBIND
[18/Jul/2019:10:21:57.152700335 +1200] conn=585 op=2 fd=115 closed - U1
[18/Jul/2019:10:21:58.398652311 +1200] conn=586 op=1 UNBIND
[18/Jul/2019:10:21:58.398679927 +1200] conn=586 op=1 fd=116 closed - U1
[18/Jul/2019:10:21:59.048701032 +1200] conn=587 fd=105 slot=105 connection from
172.30.2.21 to 172.30.2.21
[18/Jul/2019:10:21:59.050977127 +1200] conn=587 op=0 BIND dn="" method=sasl
version=3 mech=GSS-SPNEGO
[18/Jul/2019:10:21:59.052787349 +1200] conn=587 op=0 RESULT err=0 tag=97 nentries=0
etime=0.0002020278 dn="uid=yusuf,cn=users,cn=accounts,dc=domain,dc=nz"
[18/Jul/2019:10:21:59.055142264 +1200] conn=587 op=1 SRCH
base="cn=ipaconfig,cn=etc,dc=domain,dc=nz" scope=0
filter="(objectClass=*)" attrs=ALL
[18/Jul/2019:10:21:59.055997890 +1200] conn=587 op=1 RESULT err=0 tag=101 nentries=1
etime=0.0000923790
[18/Jul/2019:10:21:59.057469066 +1200] conn=587 op=2 SRCH
base="cn=users,cn=accounts,dc=domain,dc=nz" scope=1
filter="(objectClass=posixaccount)" attrs="ipaSshPubKey uid"
[18/Jul/2019:10:21:59.059974320 +1200] conn=587 op=2 RESULT err=0 tag=101 nentries=11
etime=0.0002589671
[18/Jul/2019:10:21:59.063797326 +1200] conn=587 op=3 UNBIND
[18/Jul/2019:10:21:59.063813734 +1200] conn=587 op=3 fd=105 closed - U1
[18/Jul/2019:10:22:09.973091530 +1200] conn=581 op=8 SRCH
base="cn=accounts,dc=domain,dc=nz" scope=2
filter="(&(uid=mailer-daemon)(objectClass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))"
attrs="objectClass uid userPassword uidNumber gidNumber gecos homeDirectory
loginShell krbPrincipalName cn memberOf ipaUniqueID ipaNTSecurityIdentifier
modifyTimestamp entryusn shadowLastChange shadowMin shadowMax shadowWarning shadowInactive
shadowExpire shadowFlag krbLastPwdChange krbPasswordExpiration pwdattribute
authorizedService accountexpires useraccountcontrol nsAccountLock host logindisabled
loginexpirationtime loginallowedtimemap ipaSshPubKey ipaUserAuthType
usercertificate;binary mail"
[18/Jul/2019:10:22:09.973358086 +1200] conn=581 op=8 RESULT err=0 tag=101 nentries=0
etime=0.0000443012
[18/Jul/2019:10:22:33.376536162 +1200] conn=12 op=689 MOD
dn="cn=MasterCRL,ou=crlIssuingPoints,ou=ca,o=ipaca"
[18/Jul/2019:10:22:33.377910138 +1200] conn=12 op=689 RESULT err=0 tag=103 nentries=0
etime=0.0001508058
[18/Jul/2019:10:22:33.740188105 +1200] conn=21 op=438 SRCH
base="ou=sessions,ou=Security Domain,o=ipaca" scope=2
filter="(objectClass=securityDomainSessionEntry)" attrs="cn"
[18/Jul/2019:10:22:33.740362398 +1200] conn=21 op=438 RESULT err=32 tag=101 nentries=0
etime=0.0000273265
[18/Jul/2019:10:22:33.806163157 +1200] conn=588 fd=105 slot=105 connection from
172.30.3.21 to 172.30.2.21
[18/Jul/2019:10:22:33.806692050 +1200] conn=588 op=0 BIND dn="" method=sasl
version=3 mech=GSSAPI
[18/Jul/2019:10:22:33.809154382 +1200] conn=588 op=0 RESULT err=14 tag=97 nentries=0
etime=0.0002637408, SASL bind in progress
[18/Jul/2019:10:22:33.809715142 +1200] conn=588 op=1 BIND dn="" method=sasl
version=3 mech=GSSAPI
[18/Jul/2019:10:22:33.810987188 +1200] conn=588 op=1 RESULT err=14 tag=97 nentries=0
etime=0.0001307738, SASL bind in progress
[18/Jul/2019:10:22:33.811419905 +1200] conn=588 op=2 BIND dn="" method=sasl
version=3 mech=GSSAPI
[18/Jul/2019:10:22:33.812018971 +1200] conn=588 op=2 RESULT err=0 tag=97 nentries=0
etime=0.0000635169
dn="krbprincipalname=ldap/intauth-w.domain.nz(a)domain.nz,cn=services,cn=accounts,dc=domain,dc=nz"
[18/Jul/2019:10:22:33.812506463 +1200] conn=588 op=3 SRCH base="" scope=0
filter="(objectClass=*)" attrs="supportedControl supportedExtension"
[18/Jul/2019:10:22:33.813700412 +1200] conn=588 op=3 RESULT err=0 tag=101 nentries=1
etime=0.0001272735
[18/Jul/2019:10:22:33.814259613 +1200] conn=588 op=4 SRCH base="" scope=0
filter="(objectClass=*)" attrs="supportedControl supportedExtension"
[18/Jul/2019:10:22:33.815425899 +1200] conn=588 op=4 RESULT err=0 tag=101 nentries=1
etime=0.0001220905
[18/Jul/2019:10:22:33.816031871 +1200] conn=588 op=5 EXT
oid="2.16.840.1.113730.3.5.12" name="replication-multimaster-extop"
[18/Jul/2019:10:22:33.816449793 +1200] conn=588 op=5 RESULT err=0 tag=120 nentries=0
etime=0.0000465534
[18/Jul/2019:10:22:33.818423321 +1200] conn=588 op=6 EXT
oid="2.16.840.1.113730.3.5.5" name="replication-multimaster-extop"
[18/Jul/2019:10:22:33.819035963 +1200] conn=588 op=6 RESULT err=0 tag=120 nentries=0
etime=0.0000648457