Re: [Freeipa-users] dirsrv password incorrect on replicas?

2015-01-05 Thread Rich Megginson
On 12/19/2014 09:59 AM, Janelle wrote: I am the only one who has access to these systems, so unless I did it in my sleep.. :-) Ok. Please file a ticket and provide steps to reproduce the issue. ~J On 12/19/14 12:14 AM, Ludwig Krispenz wrote: On 12/18/2014 08:16 PM, Rich Megginson wrote:

Re: [Freeipa-users] dirsrv password incorrect on replicas?

2014-12-19 Thread Ludwig Krispenz
On 12/18/2014 08:16 PM, Rich Megginson wrote: On 12/18/2014 11:59 AM, Janelle wrote: I am looking at the 2 entries in dse.ldif - and indeed they are different. If I replace the one in question with the one from the working system, it works again. I'm assuming by entry you are referring to

Re: [Freeipa-users] dirsrv password incorrect on replicas?

2014-12-19 Thread Janelle
I am the only one who has access to these systems, so unless I did it in my sleep.. :-) ~J On 12/19/14 12:14 AM, Ludwig Krispenz wrote: On 12/18/2014 08:16 PM, Rich Megginson wrote: On 12/18/2014 11:59 AM, Janelle wrote: I am looking at the 2 entries in dse.ldif - and indeed they are

[Freeipa-users] dirsrv password incorrect on replicas?

2014-12-18 Thread Janelle
Good morning/evening All, So, another strange thing I see with 4.1.2 running on FC21 (server). On some replicas if I attempt to modify the 389-ds backend, I get credential errors. Even ldapsearch fails - which as me baffled. I am trying to tune the servers but this has me confused as to

Re: [Freeipa-users] dirsrv password incorrect on replicas?

2014-12-18 Thread Rich Megginson
On 12/18/2014 09:49 AM, Janelle wrote: Good morning/evening All, So, another strange thing I see with 4.1.2 running on FC21 (server). On some replicas if I attempt to modify the 389-ds backend, I get credential errors. Even ldapsearch fails - which as me baffled. I am trying to tune the

Re: [Freeipa-users] dirsrv password incorrect on replicas?

2014-12-18 Thread Janelle
I am looking at the 2 entries in dse.ldif - and indeed they are different. If I replace the one in question with the one from the working system, it works again. I did find - replica was created on Dec 11 at noon -- and the dse.ldif file CHANGED a day later?!? Going to have OSSEC monitor

Re: [Freeipa-users] dirsrv password incorrect on replicas?

2014-12-18 Thread Rich Megginson
On 12/18/2014 11:59 AM, Janelle wrote: I am looking at the 2 entries in dse.ldif - and indeed they are different. If I replace the one in question with the one from the working system, it works again. I'm assuming by entry you are referring to nsslapd-rootpw in cn=config. I did find -