Hi Flo,

Good point. I was using `ldapsearch -H ldapi://%2fvar%2frun%2f/slapd-DOMAIN.socket`
On CentOS7 that gives all entries in cn=plugins,cn=config
On CentOS 8 that does not work.

Indeed when I use bind cn=directory manager I'm seeing 409 entries. Great.

Now back to my original problem, the nameservers are not updated.
I'm suspecting that it is caused setting nsslapd-changelogmaxage to -1
We changed that value because of a deadlock problem a while ago.
-- Kees


On 29-06-2021 10:09, Florence Renaud wrote:
Hi Kees,
How are you looking for the plugins? If you are performing a ldapsearch, make sure to bind as cn=directory manager, otherwise the returned entries may be filtered by ACIs.
You can also look directly in /etc/dirsrv/slapd-DOMAIN/dse.ldif.

What are the exact versions installed on your centos 8 machine? rpm -q 389-ds-base ipa-server

flo

On Mon, Jun 28, 2021 at 8:38 PM Kees Bakker via FreeIPA-users <[email protected] <mailto:[email protected]>> wrote:

    Hey,

    We have three masters. One is CentOS 7, the other two are CentOS 8
    Stream.

    I'm seeing many plugins on the CentOS 7 in cn=plugins,cn=config
    (about 388
    entries)
    But on the CentOS 8 systems there are very few plugins (about 30
    entries).

    Is that normal?

    BTW. I struggling with nameservers not being updated (see thread:
    "dns of two out of three masters not up to date"). I'm not making any
    progress with that.
-- Kees
    _______________________________________________
    FreeIPA-users mailing list -- [email protected]
    <mailto:[email protected]>
    To unsubscribe send an email to
    [email protected]
    <mailto:[email protected]>
    Fedora Code of Conduct:
    https://docs.fedoraproject.org/en-US/project/code-of-conduct/
    <https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
    List Guidelines:
    https://fedoraproject.org/wiki/Mailing_list_guidelines
    <https://fedoraproject.org/wiki/Mailing_list_guidelines>
    List Archives:
    
https://lists.fedorahosted.org/archives/list/[email protected]
    
<https://lists.fedorahosted.org/archives/list/[email protected]>
    Do not reply to spam on the list, report it:
    https://pagure.io/fedora-infrastructure
    <https://pagure.io/fedora-infrastructure>


_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to