Re: [Freeipa-users] Kerberos hanging approx. once a day

Rich Megginson Wed, 22 Jul 2015 08:09:14 -0700

On 07/22/2015 03:39 AM, Torsten Harenberg wrote:

Dear Alexander, dear Sumit,


thank you very much indeed for the quick replies.

Am 22.07.15 um 11:21 schrieb Sumit Bose:

Looks like there are issues getting the needed data from the local LDAP
server. The message below about the master key points into the same
direction. Can you check the 389ds logs?

I have attached the
/var/log/dirsrv/slapd-PLEIADES-UNI-WUPPERTAL-DE/errors file to the end
of the mail, it's a bit larger.

There are some "ticket expired" messages, could that point to the source
of the problem?


Am 22.07.15 um 11:22 schrieb Alexander Bokovoy:

Do you have 389-ds actually operating? If you would install debuginfo
packages, what does 'pstack <pid of ns-slapd>' print?

here is the output:

It might be helpful to do a # debuginfo-install 389-ds-base ipa-serverslapi-nisand follow the directions athttp://www.port389.org/docs/389ds/FAQ/faq.html#debugging-hangs

to get a full stack trace

/lib64/libpthread.so.0
#1  0x00007fb8544f5440 in PR_WaitCondVar () from /lib64/libnspr4.so
#2  0x00007fb8565f19a5 in ps_send_results ()
#3  0x00007fb8544facab in _pt_root () from /lib64/libnspr4.so
#4  0x00007fb853e9b52a in start_thread () from /lib64/libpthread.so.0
#5  0x00007fb853bd722d in clone () from /lib64/libc.so.6

What is the client here that is doing a persistent search or syncrepl?Is it BIND?

Thread 1 (Thread 0x7fb856808800 (LWP 800)):
#0  0x00007fb853bcbc8d in poll () from /lib64/libc.so.6
#1  0x00007fb8544f6da8 in _pr_poll_with_poll () from /lib64/libnspr4.so
#2  0x00007fb8565e9b11 in slapd_daemon ()
#3  0x00007fb8565dc4f4 in main ()
[root@ipa log]#

Best regards and thanks again

   Torsten


/var/log/dirsrv/slapd-PLEIADES-UNI-WUPPERTAL-DE/errors:

[root@ipa slapd-PLEIADES-UNI-WUPPERTAL-DE]# cat errors
        389-Directory/1.3.3.8 B2015.036.047
        ipa.pleiades.uni-wuppertal.de:636
(/etc/dirsrv/slapd-PLEIADES-UNI-WUPPERTAL-DE)

[20/Jul/2015:16:48:26 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[20/Jul/2015:16:48:26 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[20/Jul/2015:16:48:26 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[20/Jul/2015:16:48:26 +0200] NSMMReplicationPlugin -
agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1):
generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may
provide more information (Ticket expired))
[20/Jul/2015:16:48:30 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[20/Jul/2015:16:48:30 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[20/Jul/2015:16:48:30 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[20/Jul/2015:16:48:36 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[20/Jul/2015:16:48:36 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[20/Jul/2015:16:48:36 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[20/Jul/2015:16:48:48 +0200] NSMMReplicationPlugin -
agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
bind with GSSAPI auth resumed
[21/Jul/2015:14:41:05 +0200] find_sid_for_ldap_entry - [file
ipa_sidgen_common.c, line 522]: Cannot convert Posix ID [50088] into an
unused SID.
[21/Jul/2015:14:41:05 +0200] ipa_sidgen_add_post_op - [file
ipa_sidgen.c, line 149]: Cannot add SID to new entry.
[21/Jul/2015:16:51:28 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:51:28 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:51:28 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:51:28 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:51:28 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:16:51:28 +0200] NSMMReplicationPlugin -
agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1):
generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may
provide more information (Ticket expired))
[21/Jul/2015:16:51:31 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:51:31 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:51:31 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:51:31 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:51:31 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:16:51:37 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:51:37 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:51:37 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:51:37 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:51:37 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:16:51:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:51:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:51:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:51:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:51:49 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:16:52:13 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:52:13 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:52:13 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:52:13 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:52:13 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:16:53:01 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:53:01 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:53:01 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:53:01 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:53:01 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:16:54:37 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:54:37 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:54:37 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:54:37 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:54:37 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:16:57:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:57:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:57:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:16:57:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:16:57:49 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:17:02:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:17:02:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:17:02:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:17:02:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:17:02:49 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:17:07:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:17:07:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:17:07:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:17:07:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:17:07:49 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:17:12:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:17:12:49 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:17:12:49 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:17:12:50 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (Ticket expired))
errno 2 (No such file or directory)
[21/Jul/2015:17:12:50 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:17:13:16 +0200] - slapd shutting down - signaling operation
threads - op stack size 0 max work q size 99 max work q stack size 5
[21/Jul/2015:17:13:16 +0200] - slapd shutting down - waiting for 30
threads to terminate
[21/Jul/2015:17:15:20 +0200] nis-plugin - error connecting rpcbind
client socket to the service
[21/Jul/2015:17:15:21 +0200] SSL Initialization - Configured SSL version
range: min: TLS1.0, max: TLS1.2
[21/Jul/2015:17:15:21 +0200] - SSL alert: Configured NSS Ciphers
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:       TLS_RSA_WITH_AES_128_CBC_SHA:
enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:       TLS_RSA_WITH_AES_256_CBC_SHA:
enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[21/Jul/2015:17:15:21 +0200] - SSL alert:       TLS_RSA_WITH_SEED_CBC_SHA:
enabled
[21/Jul/2015:17:15:21 +0200] - 389-Directory/1.3.3.8 B2015.036.047
starting up
[21/Jul/2015:17:15:21 +0200] - WARNING: cache too small, increasing to
500K bytes
[21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[21/Jul/2015:17:15:21 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[21/Jul/2015:17:15:21 +0200] - WARNING: userRoot: entry cache size
512000B is less than db size 4177920B; We recommend to increase the
entry cache size nsslapd-cachememsize.
[21/Jul/2015:17:15:21 +0200] - WARNING: changelog: entry cache size
512000B is less than db size 18096128B; We recommend to increase the
entry cache size nsslapd-cachememsize.
[21/Jul/2015:17:15:21 +0200] - Detected Disorderly Shutdown last time
Directory Server was running, recovering database.
[21/Jul/2015:17:15:21 +0200] nis-plugin - warning: no entries in
domain=pleiades.uni-wuppertal.de,map=ethers.byaddr
[21/Jul/2015:17:15:21 +0200] nis-plugin - warning: no entries in
domain=pleiades.uni-wuppertal.de,map=ethers.byname
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
portmap service
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
portmap service
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
portmap service
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
portmap service
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
portmap service
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
portmap service
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
portmap service
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[21/Jul/2015:17:15:24 +0200] nis-plugin - timeout registering with
portmap service
[21/Jul/2015:17:15:24 +0200] schema-compat-plugin - warning: no entries
set up under cn=computers, cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de
[21/Jul/2015:17:15:24 +0200] schema-compat-plugin - warning: no entries
set up under ou=sudoers,dc=pleiades,dc=uni-wuppertal,dc=de
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=keys,cn=sec,cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=groups,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=computers,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=ng,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
ou=sudoers,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=users,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=casigningcert
cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=pleiades,dc=uni-wuppertal,dc=de
does not exist
[21/Jul/2015:17:15:24 +0200] NSACLPlugin - The ACL target
cn=casigningcert
cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=pleiades,dc=uni-wuppertal,dc=de
does not exist
[21/Jul/2015:17:15:25 +0200] NSACLPlugin - The ACL target cn=automember
rebuild membership,cn=tasks,cn=config does not exist
[21/Jul/2015:17:15:25 +0200] - Skipping CoS Definition cn=Password
Policy,cn=accounts,dc=pleiades,dc=uni-wuppertal,dc=de--no CoS Templates
found, which should be added before the CoS Definition.
[21/Jul/2015:17:15:27 +0200] NSMMReplicationPlugin -
replica_check_for_data_reload: Warning: disordely shutdown for replica
dc=pleiades,dc=uni-wuppertal,dc=de. Check if DB RUV needs to be updated
[21/Jul/2015:17:15:27 +0200] NSMMReplicationPlugin - Force update of
database RUV (from CL RUV) ->  55ae7baf00a100040000
[21/Jul/2015:17:15:27 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[21/Jul/2015:17:15:27 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (No Kerberos
credentials available)) errno 0 (Success)
[21/Jul/2015:17:15:27 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[21/Jul/2015:17:15:27 +0200] NSMMReplicationPlugin -
agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1):
generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may
provide more information (No Kerberos credentials available))
[21/Jul/2015:17:15:27 +0200] - Skipping CoS Definition cn=Password
Policy,cn=accounts,dc=pleiades,dc=uni-wuppertal,dc=de--no CoS Templates
found, which should be added before the CoS Definition.
[21/Jul/2015:17:15:28 +0200] - slapd started.  Listening on All
Interfaces port 389 for LDAP requests
[21/Jul/2015:17:15:28 +0200] - Listening on All Interfaces port 636 for
LDAPS requests
[21/Jul/2015:17:15:28 +0200] - Listening on
/var/run/slapd-PLEIADES-UNI-WUPPERTAL-DE.socket for LDAPI requests
[21/Jul/2015:17:15:31 +0200] NSMMReplicationPlugin -
agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
bind with GSSAPI auth resumed
[22/Jul/2015:09:42:27 +0200] find_sid_for_ldap_entry - [file
ipa_sidgen_common.c, line 522]: Cannot convert Posix ID [50091] into an
unused SID.
[22/Jul/2015:09:42:27 +0200] ipa_sidgen_add_post_op - [file
ipa_sidgen.c, line 149]: Cannot add SID to new entry.
[22/Jul/2015:11:01:26 +0200] - slapd shutting down - signaling operation
threads - op stack size 1 max work q size 260 max work q stack size 97
[22/Jul/2015:11:01:26 +0200] - slapd shutting down - waiting for 30
threads to terminate
[22/Jul/2015:11:03:30 +0200] nis-plugin - error connecting rpcbind
client socket to the service
[22/Jul/2015:11:03:31 +0200] SSL Initialization - Configured SSL version
range: min: TLS1.0, max: TLS1.2
[22/Jul/2015:11:03:31 +0200] - SSL alert: Configured NSS Ciphers
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:       TLS_RSA_WITH_AES_128_CBC_SHA:
enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:       TLS_RSA_WITH_AES_256_CBC_SHA:
enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: enabled
[22/Jul/2015:11:03:31 +0200] - SSL alert:       TLS_RSA_WITH_SEED_CBC_SHA:
enabled
[22/Jul/2015:11:03:31 +0200] - 389-Directory/1.3.3.8 B2015.036.047
starting up
[22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[22/Jul/2015:11:03:31 +0200] - WARNING -- Minimum cache size is 512000
-- rounding up
[22/Jul/2015:11:03:31 +0200] - WARNING: userRoot: entry cache size
512000B is less than db size 4218880B; We recommend to increase the
entry cache size nsslapd-cachememsize.
[22/Jul/2015:11:03:31 +0200] - WARNING: changelog: entry cache size
512000B is less than db size 27992064B; We recommend to increase the
entry cache size nsslapd-cachememsize.
[22/Jul/2015:11:03:31 +0200] - Detected Disorderly Shutdown last time
Directory Server was running, recovering database.
[22/Jul/2015:11:03:32 +0200] nis-plugin - warning: no entries in
domain=pleiades.uni-wuppertal.de,map=ethers.byaddr
[22/Jul/2015:11:03:32 +0200] nis-plugin - warning: no entries in
domain=pleiades.uni-wuppertal.de,map=ethers.byname
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
portmap service
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
portmap service
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
portmap service
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
portmap service
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
portmap service
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
portmap service
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
portmap service
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - error sending request to
portmap or rpcbind on 9: Connection refused
[22/Jul/2015:11:03:34 +0200] nis-plugin - timeout registering with
portmap service
[22/Jul/2015:11:03:34 +0200] schema-compat-plugin - warning: no entries
set up under cn=computers, cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de
[22/Jul/2015:11:03:34 +0200] schema-compat-plugin - warning: no entries
set up under ou=sudoers,dc=pleiades,dc=uni-wuppertal,dc=de
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=keys,cn=sec,cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=dns,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=groups,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=computers,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=ng,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
ou=sudoers,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=users,cn=compat,dc=pleiades,dc=uni-wuppertal,dc=de does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=casigningcert
cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=pleiades,dc=uni-wuppertal,dc=de
does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target
cn=casigningcert
cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=pleiades,dc=uni-wuppertal,dc=de
does not exist
[22/Jul/2015:11:03:35 +0200] NSACLPlugin - The ACL target cn=automember
rebuild membership,cn=tasks,cn=config does not exist
[22/Jul/2015:11:03:35 +0200] - Skipping CoS Definition cn=Password
Policy,cn=accounts,dc=pleiades,dc=uni-wuppertal,dc=de--no CoS Templates
found, which should be added before the CoS Definition.
[22/Jul/2015:11:03:38 +0200] NSMMReplicationPlugin -
replica_check_for_data_reload: Warning: disordely shutdown for replica
dc=pleiades,dc=uni-wuppertal,dc=de. Check if DB RUV needs to be updated
[22/Jul/2015:11:03:38 +0200] NSMMReplicationPlugin - Force update of
database RUV (from CL RUV) ->  55af7af3000e00040000
[22/Jul/2015:11:03:39 +0200] set_krb5_creds - Could not get initial
credentials for principal
[ldap/ipa.pleiades.uni-wuppertal...@pleiades.uni-wuppertal.de] in keytab
[FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for
requested realm)
[22/Jul/2015:11:03:39 +0200] - Skipping CoS Definition cn=Password
Policy,cn=accounts,dc=pleiades,dc=uni-wuppertal,dc=de--no CoS Templates
found, which should be added before the CoS Definition.
[22/Jul/2015:11:03:39 +0200] slapd_ldap_sasl_interactive_bind - Error:
could not perform interactive bind for id [] mech [GSSAPI]: LDAP error
-2 (Local error) (SASL(-1): generic failure: GSSAPI Error: Unspecified
GSS failure.  Minor code may provide more information (No Kerberos
credentials available)) errno 0 (Success)
[22/Jul/2015:11:03:39 +0200] slapi_ldap_bind - Error: could not perform
interactive bind for id [] authentication mechanism [GSSAPI]: error -2
(Local error)
[22/Jul/2015:11:03:39 +0200] NSMMReplicationPlugin -
agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1):
generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may
provide more information (No Kerberos credentials available))
[22/Jul/2015:11:03:39 +0200] - slapd started.  Listening on All
Interfaces port 389 for LDAP requests
[22/Jul/2015:11:03:39 +0200] - Listening on All Interfaces port 636 for
LDAPS requests
[22/Jul/2015:11:03:39 +0200] - Listening on
/var/run/slapd-PLEIADES-UNI-WUPPERTAL-DE.socket for LDAPI requests
[22/Jul/2015:11:03:43 +0200] NSMMReplicationPlugin -
agmt="cn=meToipa2.pleiades.uni-wuppertal.de" (ipa2:389): Replication
bind with GSSAPI auth resumed


--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Kerberos hanging approx. once a day

Reply via email to