Re: [389-users] Error using db2ldif to backup NetscapeRoot

[Noriko Hosoi <nhosoi@xxxxxxxxxx>]

On 04/25/2011 09:43 AM, Diego Woitasen wrote:

2011/4/25 Noriko Hosoi <nhosoi@xxxxxxxxxx>

On 04/25/2011 09:27 AM, Diego Woitasen wrote:

On Mon, Apr 25, 2011 at 1:26 PM, Diego Woitasen <diego@xxxxxxxxxxxxxxx> wrote:

On Mon, Apr 25, 2011 at 1:19 PM, Rich Megginson <rmeggins@xxxxxxxxxx> wrote:

On 04/25/2011 10:13 AM, Diego Woitasen wrote:

Hi,

 [...]

Shall I worry about that lines?

389-ds-base version?  If not 1.2.8.2, can you try with 1.2.8.2?

Regards,

 Diego

--
Diego Woitasen

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

/opt/dirsrv/sbin/ns-slapd --version

389 Project

389-Directory/1.2.8.2 B2011.105.012

--
Diego Woitasen

I don't know if this is important or not but database was created with a previus version, 1.2.7.5 I think. I don't remember exactly, but is 1.2.5.7 or newer.

Could you share the output of this command line with us?
# dbscan -f /var/lib/dirsrv/slapd-YOURID/db/NetscapeRoot/id2entry.db4

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

The output is in http://www.woitasen.com.ar/dbscan.out (430K). Let me know if you forget to rename important information.

I haven't ran "db-setup.pl -u" yet. I have an error with a Perl module that I'm trying to fix now. (Can't locate auto/Mozilla/LDAP/API/prldap_inst.al).

Regards,

 Diego

--
Diego Woitasen

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

Unfortunately, your NetscapeRoot has some issues.  This is a snippet of your dbscan output.  Entry 170 does not exist, but Entry 171 is pointing Entry 170 as a parent.  It looks you are replicating NetscapeRoot.  Is it intentional?

id 169
    rdn: cn=SearchResultTable
    modifyTimestamp;adcsn-4d6ea07a000300010000;vucsn-4d6ea07a000300010000: 2011030
     2195432Z
    modifiersName;adcsn-4d6ea07a000300010000;vucsn-4d6ea07a000300010000: uid=admin
     ,ou=administrators,ou=topologymanagement,o=netscaperoot
    nsPreference;adcsn-4d6ea07a000300010000;vucsn-4d6ea07a000300010000:: IwojV2Vk
     IE1hciAwMiAxNjo1NDozMyBBUlQgMjAxMQpBdHRyaWJ1dGUzPXRlbGVwaG9uZW51bWJlcgpDb2x1
     bW5Db3VudD00CkF0dHJpYnV0ZTI9bWFpbApBdHRyaWJ1dGUxPXVpZApBdHRyaWJ1dGUwPWNuCkxh
     YmVsMz1QaG9uZQpMYWJlbDI9RS1NYWlsCkxhYmVsMT1Vc2VyIElECkxhYmVsMD1OYW1lCg==
    nsUniqueId: e7764201-42d111e0-bcdebcde-bd679a5a
    cn;vucsn-4d6aecc9000000010000;mdcsn-4d6aecc9000000010000: SearchResultTable
    objectClass;vucsn-4d6aecc9000000010000: top
    objectClass;vucsn-4d6aecc9000000010000: nsAdminConsoleUser
    creatorsName;vucsn-4d6aecc9000000010000: uid=admin,ou=administrators,ou=topolo
     gymanagement,o=netscaperoot
    createTimestamp;vucsn-4d6aecc9000000010000: 20110228003104Z
    parentid: 97
    entryid: 169
   
id 171
    rdn: nsuniqueid=7df93202-42d711e0-bcdebcde-bd679a5a,cn=Server Group
    nsUniqueId: 7df93202-42d711e0-bcdebcde-bd679a5a
    modifyTimestamp;adcsn-4d6af609000000010000;vucsn-4d6af609000000010000: 2011022
     8011032Z
    modifiersName;adcsn-4d6af609000000010000;vucsn-4d6af609000000010000: uid=admin
     ,ou=administrators,ou=topologymanagement,o=netscaperoot
    aci;adcsn-4d6af609000000010000;vucsn-4d6af609000000010000: (targetattr=*)(vers
     ion 3.0; acl "Enable delegated access"; allow (read, search, compare) userdn
     ="ldap:///cn=admin-serv-cpmon,cn=389 Administration Server,cn=Server Group,c
     n=cpmon.example.ar,ou=example-ldap.ar,o=NetscapeRoot";)
    objectClass;vucsn-4d6af607000000010000: nsAdminGroup
    objectClass;vucsn-4d6af607000000010000: groupOfUniqueNames
    objectClass;vucsn-4d6af607000000010000: nsDirectoryInfo
    objectClass;vucsn-4d6af607000000010000: top
    objectClass;vucsn-4d8d272d000400010000: nsTombstone
    nsAdminGroupName;vucsn-4d6af607000000010000: Server Group
    cn;vucsn-4d6af607000000010000;mdcsn-4d6af607000000010000: Server Group
    nsDirectoryInfoRef;vucsn-4d6af607000000010000: cn=UserDirectory,ou=Global Pref
     erences,ou=example-ldap.ar,o=NetscapeRoot
    nsAdminSIEDN;vucsn-4d6af607000000010000: cn=admin-serv-cpmon,cn=389 Administra
     tion Server,cn=Server Group,cn=cpmon.example.ar,ou=example-ldap.ar,o=NetscapeRoot
    uniqueMember;vucsn-4d6af607000000010000: cn=389 Directory Server,cn=Server Gro
     up,cn=cpmon.example.ar,ou=example-ldap.ar,o=NetscapeRoot
    uniqueMember;vucsn-4d6af609000000010000: cn=389 Administration Server,cn=Serve
     r Group,cn=cpmon.example.ar,ou=example-ldap.ar,o=NetscapeRoot
    creatorsName;vucsn-4d6af607000000010000: uid=admin,ou=administrators,ou=topolo
     gymanagement,o=netscaperoot
    createTimestamp;vucsn-4d6af607000000010000: 20110228011030Z
    parentid: 170
    entryid: 171
    nsParentUniqueId: 7df93201-42d711e0-bcdebcde-bd679a5a
    nscpEntryDN: cn=server group,cn=cpmon.example.ar,ou=example-ldap.ar,o=netscaperoot

You might have exported and imported NetscapeRoot before and hit this bug, I guess.

https://bugzilla.redhat.com/show_bug.cgi?id=684996

Is it possible to take these steps to fix the missing parent?  (but please aware this cleans up tombstones and replication state info.)
1. check your exported ldif (exported without -r option) with the output of dbscan and make sure all non-tombstone entries are in the exported ldif file.
2. import the ldif file to the server.
3. initialize replicas.

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users