Re: [389-users] Some bind DNs sporadically can't search users

2014-03-06 Thread Morgan Jones
On Mar 6, 2014, at 11:32 AM, Ludwig Krispenz lkris...@redhat.com wrote: On 03/04/2014 11:10 PM, Morgan Jones wrote: On Mar 4, 2014, at 3:20 AM, Ludwig Krispenz lkris...@redhat.com wrote: Are groups involved in the acis and do these groups during these runs ? Yes, most of our ACIs use

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-06 Thread Morgan Jones
On Mar 6, 2014, at 11:51 AM, Ludwig Krispenz lkris...@redhat.com wrote: One more question. Do the searches always match only one entry or one they should see and some they shouldn't ? In every case where we've seen this problem it's a search for one entry (uid=username) that the bind dn is

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-04 Thread Ludwig Krispenz
On 03/03/2014 08:08 PM, Morgan Jones wrote: On Mar 3, 2014, at 11:07 AM, Ludwig Krispenz lkris...@redhat.com wrote: Hi, so you say that a search with a specific bind user sometimes succeeds and sometimes doesn't ? Correct. If so, could you run this withe aci logging enabled ? Sure

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-04 Thread Morgan Jones
On Mar 4, 2014, at 3:20 AM, Ludwig Krispenz lkris...@redhat.com wrote: Are groups involved in the acis and do these groups during these runs ? Yes, most of our ACIs use groups to determine access. I'm not sure I understand the second part of your question though. you can't, it was

[389-users] Some bind DNs sporadically can't search users

2014-03-03 Thread Morgan Jones
We're pulling our hair out over this issue and wondering if it rings a bell for anyone or perhaps there's a bug fix in a later version of 389 that might resolve it. I've looked and not found anything but it's also not the easiest issue to search for. We are on CentOS DS now but can move to

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-03 Thread Rich Megginson
On 03/03/2014 08:56 AM, Morgan Jones wrote: We're pulling our hair out over this issue and wondering if it rings a bell for anyone or perhaps there's a bug fix in a later version of 389 that might resolve it. I've looked and not found anything but it's also not the easiest issue to search

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-03 Thread Ludwig Krispenz
Hi, so you say that a search with a specific bind user sometimes succeeds and sometimes doesn't ? If so, could you run this withe aci logging enabled ? Are groups involved in the acis and do these groups during these runs ? Could you post your acis ? Ludwig On 03/03/2014 04:56 PM, Morgan

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-03 Thread Morgan Jones
On Mar 3, 2014, at 11:24 AM, Rich Megginson rmegg...@redhat.com wrote: On 03/03/2014 08:56 AM, Morgan Jones wrote: We're pulling our hair out over this issue and wondering if it rings a bell for anyone or perhaps there's a bug fix in a later version of 389 that might resolve it. I've

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-03 Thread Morgan Jones
On Mar 3, 2014, at 11:07 AM, Ludwig Krispenz lkris...@redhat.com wrote: Hi, so you say that a search with a specific bind user sometimes succeeds and sometimes doesn't ? Correct. If so, could you run this withe aci logging enabled ? Sure though we are still unable to repeat the problem

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-03 Thread Rich Megginson
On 03/03/2014 12:05 PM, Morgan Jones wrote: On Mar 3, 2014, at 11:24 AM, Rich Megginson rmegg...@redhat.com wrote: On 03/03/2014 08:56 AM, Morgan Jones wrote: We're pulling our hair out over this issue and wondering if it rings a bell for anyone or perhaps there's a bug fix in a later