Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-09 Thread thierry bordaz
a-users@redhat.com Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/2015 02:19 PM, Alexander Frolushkin wrote: On one of accidently upgraded server I have following error in dirsrv logs: [08/Apr/2015:13:24:12 +0300] connection - conn=1095 fd=131 Incoming BER Element was too lo

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-09 Thread thierry bordaz
eipa-users@redhat.com Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/2015 02:19 PM, Alexander Frolushkin wrote: On one of accidently upgraded server I have following error in dirsrv logs: [08/Apr/2015:13:24:12 +0300] connection - conn=1095 fd=131 Incoming BER Element was too

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: Martin Kosek [mailto:mko...@redhat.com] Sent: Thursday, April 09, 2015 11:51 AM To: Alexander Frolushkin (SIB); 'thierry bordaz' Cc: 'Ludwig Krispenz'; freeipa-users@redhat.com Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Martin Kosek
m > Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 > > On 04/08/2015 02:19 PM, Alexander Frolushkin wrote: >>>>> On one of accidently upgraded server I have following error in dirsrv >>>>> logs: >>>>> >>>>> [08/Apr/20

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: thierry bordaz [mailto:tbor...@redhat.com] Sent: Wednesday, April 08, 2015 6:36 PM To: Alexander Frolushkin (SIB) Cc: 'Ludwig Krispenz'; Martin Kosek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/201

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread thierry bordaz
On 04/08/2015 02:19 PM, Alexander Frolushkin wrote: On one of accidently upgraded server I have following error in dirsrv logs: [08/Apr/2015:13:24:12 +0300] connection - conn=1095 fd=131 Incoming BER Element was too long, max allowable is 209715200 bytes. Change the nsslapd-maxbersize attribut

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
>> On one of accidently upgraded server I have following error in dirsrv logs: >> >> [08/Apr/2015:13:24:12 +0300] connection - conn=1095 fd=131 Incoming BER >> Element was too long, max allowable is 209715200 bytes. Change the >> nsslapd-maxbersize attribute in cn=config to increase. >> [08/Apr/2

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread thierry bordaz
] Accident upgrade 3.3 to 4.1 On 04/08/2015 12:04 PM, Martin Kosek wrote: On 04/08/2015 11:52 AM, Alexander Frolushkin wrote: Hello! We used have a geo-replicated IPA with RHEL 7.0, and on one site ipa servers was upgraded by mistake to RHEL 7.1 (ipa-server-4.1.0-18.el7_1.3.x86_64). Now it is broken

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Jakub Hrozek
On Wed, Apr 08, 2015 at 11:40:08AM +, Alexander Frolushkin wrote: > After that, client are able to login via ssh on servers connected to 7.1 > servers, but still no login on client servers connected to 7.0 IPA servers... There we might be a problem with ACIs, can you check the logs on the cli

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Martin Kosek
nz; Thierry Bordaz > Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 > > On Wed, Apr 08, 2015 at 11:07:25AM +, Alexander Frolushkin wrote: >> -Original Message- >> From: Martin Kosek [mailto:mko...@redhat.com] >> Sent: Wednesday, April 08, 2015 4

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: Jakub Hrozek [mailto:jhro...@redhat.com] Sent: Wednesday, April 08, 2015 5:12 PM To: Alexander Frolushkin (SIB) Cc: 'Martin Kosek'; freeipa-users@redhat.com; Ludwig Krispenz; Thierry Bordaz Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On W

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Jakub Hrozek
z; Jakub Hrozek > Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 > > >> In any case, upgrade from 3.3 to 4.1 should just work, you just need to > >> have a recent enough RHEL-6 servers - at least RHEL-6.6+z-streams. > >> > >> Please note,

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: Martin Kosek [mailto:mko...@redhat.com] Sent: Wednesday, April 08, 2015 4:47 PM To: Alexander Frolushkin (SIB); freeipa-users@redhat.com; Ludwig Krispenz; Thierry Bordaz; Jakub Hrozek Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 >> In an

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Martin Kosek
t: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 > > On 04/08/2015 11:52 AM, Alexander Frolushkin wrote: >>> Hello! >>> We used have a geo-replicated IPA with RHEL 7.0, and on one site ipa >>> servers was upgraded by mistake to RHEL 7.1 >>> (ipa-ser

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: Ludwig Krispenz [mailto:lkris...@redhat.com] Sent: Wednesday, April 08, 2015 4:18 PM To: Martin Kosek Cc: Alexander Frolushkin (SIB); freeipa-users@redhat.com; Thierry Bordaz Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/2015 12:04 PM, Martin

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Ludwig Krispenz
On 04/08/2015 12:04 PM, Martin Kosek wrote: On 04/08/2015 11:52 AM, Alexander Frolushkin wrote: Hello! We used have a geo-replicated IPA with RHEL 7.0, and on one site ipa servers was upgraded by mistake to RHEL 7.1 (ipa-server-4.1.0-18.el7_1.3.x86_64). Now it is broken globally, in logs I see

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Alexander Frolushkin
-Original Message- From: Martin Kosek [mailto:mko...@redhat.com] Sent: Wednesday, April 08, 2015 4:04 PM To: Alexander Frolushkin (SIB); freeipa-users@redhat.com; Ludwig Krispenz; Thierry Bordaz Subject: Re: [Freeipa-users] Accident upgrade 3.3 to 4.1 On 04/08/2015 11:52 AM, Alexander

Re: [Freeipa-users] Accident upgrade 3.3 to 4.1

2015-04-08 Thread Martin Kosek
On 04/08/2015 11:52 AM, Alexander Frolushkin wrote: > Hello! > We used have a geo-replicated IPA with RHEL 7.0, and on one site ipa servers > was upgraded by mistake to RHEL 7.1 (ipa-server-4.1.0-18.el7_1.3.x86_64). > Now it is broken globally, in logs I see these: > > [08/Apr/2015:13:06:47 +0600