Hey,
We have three masters. One is CentOS 7, the other two are CentOS 8 Stream.
I'm seeing many plugins on the CentOS 7 in cn=plugins,cn=config (about 388 entries) But on the CentOS 8 systems there are very few plugins (about 30 entries).
Is that normal?
BTW. I struggling with nameservers not being updated (see thread: "dns of two out of three masters not up to date"). I'm not making any progress with that.
Hi Kees, How are you looking for the plugins? If you are performing a ldapsearch, make sure to bind as cn=directory manager, otherwise the returned entries may be filtered by ACIs. You can also look directly in /etc/dirsrv/slapd-DOMAIN/dse.ldif.
What are the exact versions installed on your centos 8 machine? rpm -q 389-ds-base ipa-server
flo
On Mon, Jun 28, 2021 at 8:38 PM Kees Bakker via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote:
Hey,
We have three masters. One is CentOS 7, the other two are CentOS 8 Stream.
I'm seeing many plugins on the CentOS 7 in cn=plugins,cn=config (about 388 entries) But on the CentOS 8 systems there are very few plugins (about 30 entries).
Is that normal?
BTW. I struggling with nameservers not being updated (see thread: "dns of two out of three masters not up to date"). I'm not making any progress with that. -- Kees _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Hi Flo,
Good point. I was using `ldapsearch -H ldapi://%2fvar%2frun%2f/slapd-DOMAIN.socket` On CentOS7 that gives all entries in cn=plugins,cn=config On CentOS 8 that does not work.
Indeed when I use bind cn=directory manager I'm seeing 409 entries. Great.
Now back to my original problem, the nameservers are not updated. I'm suspecting that it is caused setting nsslapd-changelogmaxage to -1 We changed that value because of a deadlock problem a while ago. -- Kees
On 29-06-2021 10:09, Florence Renaud wrote:
Hi Kees, How are you looking for the plugins? If you are performing a ldapsearch, make sure to bind as cn=directory manager, otherwise the returned entries may be filtered by ACIs. You can also look directly in /etc/dirsrv/slapd-DOMAIN/dse.ldif.
What are the exact versions installed on your centos 8 machine? rpm -q 389-ds-base ipa-server
flo
On Mon, Jun 28, 2021 at 8:38 PM Kees Bakker via FreeIPA-users <freeipa-users@lists.fedorahosted.org mailto:freeipa-users@lists.fedorahosted.org> wrote:
Hey, We have three masters. One is CentOS 7, the other two are CentOS 8 Stream. I'm seeing many plugins on the CentOS 7 in cn=plugins,cn=config (about 388 entries) But on the CentOS 8 systems there are very few plugins (about 30 entries). Is that normal? BTW. I struggling with nameservers not being updated (see thread: "dns of two out of three masters not up to date"). I'm not making any progress with that. -- Kees _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org <mailto:freeipa-users@lists.fedorahosted.org> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org <mailto:freeipa-users-leave@lists.fedorahosted.org> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ <https://docs.fedoraproject.org/en-US/project/code-of-conduct/> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines <https://fedoraproject.org/wiki/Mailing_list_guidelines> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org <https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure <https://pagure.io/fedora-infrastructure>
freeipa-users@lists.fedorahosted.org
-
Florence Renaud -
Kees Bakker