389-users September 2023

389-users@lists.fedoraproject.org

6 participants
6 discussions

ERR - slapi_ldap_bind - Could not send bind request for id [(anon)] authentication mechanism [EXTERNAL]: error -1 (Can't contact LDAP server), system error 0 (no error), network error 0
by Graham Leggett 11 Dec '23

11 Dec '23

Hi all, We have a long standing 389ds master LDAP server that was found to be unable to contact it’s slaves. Most specifically, the slaves show nothing in their logs about any kind of connection, while the master is logging this: [12/Nov/2019:21:39:47.212715697 +0000] - ERR - slapi_ldap_bind - Could not send bind request for id [(anon)] authentication mechanism [EXTERNAL]: error -1 (Can't contact LDAP server), system error 0 (no error), network error 0 (Unknown error, host “ldap01:636”) Key is "system error 0 (no error)”, which leaves us stumped. The error is obviously “success”. Has anyone seen this kind of thing before? This is 389ds running on CentOS7 as follows: 389-ds-base-1.3.9.1-10.el7.x86_64 Regards, Graham —

3 9

Setting "lock" time of an account in the future
by Cenk Y. 03 Oct '23

03 Oct '23

Hello, We are running 389-ds-base.2.2.7 . While creating accounts, sometimes we know until when they need to be active. Is there a way to manually set a "expiration date" for the account, so after that date nsAccount is set to true? Having gone through rhds and 389-ds pages, it seems it's only possible to create a policy to deactivate accounts after an inactivity limit. I can always create a mechanism myself (such as adding a new attribute and checking it by a cron job ...) , but I want to see if there is a native way to do this? Thanks Cenk

3 8

389 in Ubuntu 22.04
by morgan jones 02 Oct '23

02 Oct '23

Hello, We are moving to Ubuntu 22.04 across our servers: is there a recommended Ubuntu repo for 389 Directory? On a related note is there an official Docker image? We have about 250,000 users and currently have 6 replicas all running CentOS 7. thanks, -morgan

2 1

Migration: importing an OU to a new instance
by tdarby＠arizona.edu 15 Sep '23

15 Sep '23

I've read this doc: https://access.redhat.com/documentation/en-us/red_hat_directory_server/12/h… The export from server A to an LDIF file works and I've done some testing but it seems like the import feature always deletes existing OUs on server B that aren't in the exported LDIF file. Am I missing something? I'd like to simply get an LDIF of all the entries in Server A and populate only that OU in server B. Related, this bit is bewildering Optional: By default, Directory Server sets the entry update sequence numbers (USNs) of all imported entries to 0. To set an alternative initial USN value, set the nsslapd-entryusn-import-initval parameter. For example, to set USN for all imported values to 12345, enter: I don't understand what this means or the consequences of taking the default or not. Server B is already in multi-supplier replication with other servers, so I worry about screwing that up with any import choices I might make.

3 8

Migration: importing an OU to a new instance
by tdarby＠arizona.edu 13 Sep '23

13 Sep '23

1 0

389-ds freezes with deadlock
by Julian Kippels 13 Sep '23

13 Sep '23

Hi, I am using 389-ds Version 2.3.1 and have encountered the same error twice in three days now. There are some MOD operations and then I get a line like this in the errors-log: [23/Aug/2023:13:27:17.971884067 +0200] - ERR - ldbm_back_seq - deadlock retry BAD 1601, err=0 Unexpected dbimpl error code After this the server keeps running, systemctl status says everything is fine, but new incoming connections are failing with timeouts. Any advice would be welcome. Thanks in advance Julian Kippels -- --------------------------------------------------------- | | Julian Kippels | | M.Sc. Informatik | | | | Zentrum für Informations- und Medientechnologie | | Heinrich-Heine-Universität Düsseldorf | | Universitätsstr. 1 | | Raum 25.41.O1.32 | | 40225 Düsseldorf / Germany | | | | Tel: +49-211-81-14920 | | mail: kippels(a)hhu.de ---------------------------------------------------------

3 8

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users September 2023