389-Directory/1.3.7.10 B2018.065.204 ipa-server.ipa.test.demo.cc:636 (/etc/dirsrv/slapd-IPA-TEST-DEMO-CC) [07/May/2018:14:05:38.661250519 +0200] - INFO - slapd_extract_cert - CA CERT NAME: IPA.TEST.DEMO.CC IPA CA [07/May/2018:14:05:38.663748417 +0200] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. [07/May/2018:14:05:38.666841563 +0200] - INFO - slapd_extract_cert - SERVER CERT NAME: Server-Cert [07/May/2018:14:05:38.674984312 +0200] - INFO - Security Initialization - SSL info: Enabling default cipher set. [07/May/2018:14:05:38.677328032 +0200] - INFO - Security Initialization - SSL info: Configured NSS Ciphers [07/May/2018:14:05:38.679736257 +0200] - INFO - Security Initialization - SSL info: TLS_AES_128_GCM_SHA256: enabled [07/May/2018:14:05:38.681963294 +0200] - INFO - Security Initialization - SSL info: TLS_CHACHA20_POLY1305_SHA256: enabled [07/May/2018:14:05:38.684245143 +0200] - INFO - Security Initialization - SSL info: TLS_AES_256_GCM_SHA384: enabled [07/May/2018:14:05:38.686462676 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled [07/May/2018:14:05:38.688876866 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled [07/May/2018:14:05:38.691163587 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled [07/May/2018:14:05:38.693159473 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled [07/May/2018:14:05:38.695426439 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled [07/May/2018:14:05:38.697392629 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled [07/May/2018:14:05:38.699344365 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled [07/May/2018:14:05:38.701229939 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled [07/May/2018:14:05:38.703382290 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled [07/May/2018:14:05:38.705520670 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled [07/May/2018:14:05:38.707609169 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled [07/May/2018:14:05:38.709586897 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled [07/May/2018:14:05:38.711750790 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled [07/May/2018:14:05:38.713899954 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled [07/May/2018:14:05:38.715950011 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled [07/May/2018:14:05:38.717871154 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled [07/May/2018:14:05:38.719753456 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled [07/May/2018:14:05:38.721728445 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled [07/May/2018:14:05:38.723736662 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled [07/May/2018:14:05:38.725733015 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_128_CBC_SHA: enabled [07/May/2018:14:05:38.727710685 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled [07/May/2018:14:05:38.729779589 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_256_CBC_SHA: enabled [07/May/2018:14:05:38.732004233 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled [07/May/2018:14:05:38.742035698 +0200] - INFO - Security Initialization - slapd_ssl_init2 - Configured SSL version range: min: TLS1.0, max: TLS1.3 [07/May/2018:14:05:38.744903248 +0200] - INFO - main - 389-Directory/1.3.7.10 B2018.065.204 starting up [07/May/2018:14:05:42.953765411 +0200] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [07/May/2018:14:05:42.961687492 +0200] - WARN - default_mr_indexer_create - Plugin [caseIgnoreIA5Match] does not handle caseExactIA5Match [07/May/2018:14:05:42.966610970 +0200] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [07/May/2018:14:05:42.976228726 +0200] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [07/May/2018:14:05:42.985441805 +0200] - NOTICE - ldbm_back_start - found 8165572k physical memory [07/May/2018:14:05:42.987531254 +0200] - NOTICE - ldbm_back_start - found 7665992k available [07/May/2018:14:05:42.989552272 +0200] - NOTICE - ldbm_back_start - cache autosizing: db cache: 204139k [07/May/2018:14:05:42.991616811 +0200] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (3 total): 196608k [07/May/2018:14:05:42.994764261 +0200] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (3 total): 65536k [07/May/2018:14:05:42.997154090 +0200] - NOTICE - ldbm_back_start - cache autosizing: ipaca entry cache (3 total): 196608k [07/May/2018:14:05:43.000504978 +0200] - NOTICE - ldbm_back_start - cache autosizing: ipaca dn cache (3 total): 65536k [07/May/2018:14:05:43.002866058 +0200] - NOTICE - ldbm_back_start - cache autosizing: changelog entry cache (3 total): 196608k [07/May/2018:14:05:43.005926785 +0200] - NOTICE - ldbm_back_start - cache autosizing: changelog dn cache (3 total): 65536k [07/May/2018:14:05:43.008174760 +0200] - NOTICE - ldbm_back_start - total cache size: 972537282 B; [07/May/2018:14:05:43.036657910 +0200] - ERR - schema-compat-plugin - scheduled schema-compat-plugin tree scan in about 5 seconds after the server startup! [07/May/2018:14:05:43.049465464 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.051593375 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.053660846 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=keys,cn=sec,cn=dns,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.055689083 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.058016292 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.060290260 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=groups,cn=compat,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.062904952 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=computers,cn=compat,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.065006395 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=ng,cn=compat,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.067246475 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target ou=sudoers,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.069421136 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=users,cn=compat,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.071847189 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.073895955 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.075846549 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.077926372 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.079956735 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.082218350 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.084434653 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.086648257 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.088845922 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.090977448 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.093288596 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.100152281 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.102396845 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=ipa,dc=test,dc=demo,dc=cc does not exist [07/May/2018:14:05:43.193708342 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist [07/May/2018:14:05:43.199366062 +0200] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=ipa,dc=test,dc=demo,dc=cc--no CoS Templates found, which should be added before the CoS Definition. [07/May/2018:14:05:43.230140141 +0200] - ERR - set_krb5_creds - Could not get initial credentials for principal [ldap/ipa-server.ipa.test.demo.cc@IPA.TEST.DEMO.CC] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm) [07/May/2018:14:05:43.233606750 +0200] - ERR - NSMMReplicationPlugin - bind_and_check_pwp - agmt="cn=meToipa-server-2.ipa.test.demo.cc" (ipa-server-2:389) - Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) () [07/May/2018:14:05:43.238471570 +0200] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests [07/May/2018:14:05:43.240763751 +0200] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests [07/May/2018:14:05:43.243343057 +0200] - INFO - slapd_daemon - Listening on /var/run/slapd-IPA-TEST-DEMO-CC.socket for LDAPI requests [07/May/2018:14:05:43.305860550 +0200] - ERR - schema-compat-plugin - schema-compat-plugin tree scan will start in about 5 seconds! [07/May/2018:14:05:48.313044642 +0200] - ERR - schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=ipa,dc=test,dc=demo,dc=cc [07/May/2018:14:05:48.317346496 +0200] - ERR - schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=ipa,dc=test,dc=demo,dc=cc [07/May/2018:14:05:48.319423685 +0200] - ERR - schema-compat-plugin - Finished plugin initialization. [07/May/2018:14:05:52.414792106 +0200] - INFO - NSMMReplicationPlugin - bind_and_check_pwp - agmt="cn=meToipa-server-2.ipa.test.demo.cc" (ipa-server-2:389): Replication bind with GSSAPI auth resumed