Il 28/11/2016 19:22, Mark Reynolds ha scritto:

On 11/28/2016 10:22 AM, Giulio Casella wrote:
Il 28/11/2016 15:25, Lukas Slebodnik ha scritto:
On (28/11/16 12:39), Giulio Casella wrote:

I have a setup with two ipa server in replica, based on CentOS 7.
On one server (since a couple of days) ipa cannot start, the failing
is dirsrv@<REALM-NAME>.service.
In journal I have:

ns-slapd[4617]: segfault at 7fb53b1ce515 ip 00007fb50126e1a6sp
00007ffc0b80d6c8 error 4 in[7fb501124000+1b7000]

(just after a lot of SSL alerts complaining about some enabled
cypher suite,
but I cannot say if this could be related).

I'm using ipa 4.2.0, and 389-ds-base 1.3.4.

It would be good to know the exact version.
rpm -q 389-ds-base

Installed version is:


Please provide backtrace or coredump; other developers will know
wheter it's know bug or a new bug.

Ok, you can find attached full stacktrace.
It's crashing trying to read updates from the replication changelog.

Are you using attribute encryption?
Any chance you have a way to reproduce this?

Since this is happening on only one server then I think recreating the
replication changelog will "fix" the issue.  Just re-initializing that
replica should do it.  Does this server start - so it can be reinited?
If not, you need to manually remove the changelog and start the
directory server, and reinit it.  Or perform a manual ldif
initialization.  (I can help with either one if needed)

No, directory server can't start, so I think I have to manually remove the changelog.
Any help is obviously welcome.
BTW: Do you confirm I won't lose data on second (working) server doing removal of changelog?

Thanks in advance,

Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to