Re: DNA Plugin Causes 389-DS to Crash if Large Number of Candidates

["Fong, Trevor" <trevor.fong@xxxxxx>]

Hi Rich,

Thanks for your reply.  Nsslapd-idlistscanlimit is set to the default of 4000.

I’ll see if we can upgrade our install and see how that goes.  In the meantime, any further suggestions would be most welcome.

Thanks,

Trev

From: <389-users-bounces@xxxxxxxxxxxxxxxxxxxxxxx> on behalf of Rich Megginson <rmeggins@xxxxxxxxxx>
Reply-To: "389-users@xxxxxxxxxxxxxxxxxxxxxxx" <389-users@xxxxxxxxxxxxxxxxxxxxxxx>
Date: Thursday, July 16, 2015 at 5:19 PM
To: "389-users@xxxxxxxxxxxxxxxxxxxxxxx" <389-users@xxxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: DNA Plugin Causes 389-DS to Crash if Large Number of Candidates

On 07/16/2015 05:47 PM, Fong, Trevor wrote:

Hi Guys,

We’re running 389-ds 1.2.11.29-1.el6

Can you upgrade to a newer version?  There have been several releases since then.

and are experimenting with the DNA plugin.  When trying to set an existing account’s  uidNumber to the magic regen number of 99999, we get the error message in the errors log:

    Allocation of a new value for range cn=uid numbers,cn=distributed numeric assignment plugin,cn=plugins,cn=config failed! Unable to proceed.

And then DS becomes unresponsive.

If the server is crashed: http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-crashes

If the server is hung: http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-hangs

Looking at the debug error logs, it seems that the number of candidates defined by the combination of dnaScope and dnaFilter is too large (1389387 ids) for the sort function?

Looks like it.

Is there a fix?  Or is there some error in our setup?

Looks like you are hitting the idlistscanlimit:

[16/Jul/2015:15:31:06 -0700] - => index_read( "employeeNumber" + "" )
[16/Jul/2015:15:31:06 -0700] -    indextype: "pres" indexmask: 0x3
[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=207
...
[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=4075
[16/Jul/2015:15:31:06 -0700] - idl_new_fetch + returns allids
[16/Jul/2015:15:31:06 -0700] - <= index_read 1389387 candidates
...
[16/Jul/2015:15:31:06 -0700] - => index_read( "objectClass" = "posixaccount" )
[16/Jul/2015:15:31:06 -0700] -    indextype: "eq" indexmask: 0x2
[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=207
...
[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=4075
[16/Jul/2015:15:31:06 -0700] - idl_new_fetch =posixaccount returns allids
[16/Jul/2015:15:31:06 -0700] - <= index_read 1389387 candidates
[16/Jul/2015:15:31:06 -0700] -    ival[0] = "posixaccount" => 1389387 IDs
...

[16/Jul/2015:15:31:06 -0700] - Asked to sort ALLIDS candidate list, refusing

[16/Jul/2015:15:31:06 -0700] - => send_ldap_result 12::Sort Response Control

You might try raising the nsslapd-idlistscanlimit to be greater than 1389387

Thanks,

Trev

 

Our setup is thus:

dn: cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config

objectClass: extensibleObject

objectClass: nsContainer

objectClass: nsSlapdPlugin

objectClass: top

cn: Distributed Numeric Assignment Plugin

nsslapd-pluginDescription: Distributed Numeric Assignment plugin

nsslapd-pluginEnabled: on

nsslapd-pluginId: Distributed Numeric Assignment

nsslapd-pluginInitfunc: dna_init

nsslapd-pluginPath: libdna-plugin

nsslapd-pluginType: bepreoperation

nsslapd-pluginVendor: 389 Project

nsslapd-pluginVersion: 1.2.11.29

nsslapd-plugin-depends-on-type: database

dn: cn=UID numbers,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=co

 nfig

objectClass: extensibleObject

objectClass: top

cn: UID numbers

dnaFilter: (&(employeeNumber=*)(objectclass=posixAccount))

dnaMagicRegen: 99999

dnaNextValue: 10000002

dnaScope: ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com

dnaType: uidNumber

Error log:

[16/Jul/2015:15:31:05 -0700] - add_pb 

[16/Jul/2015:15:31:05 -0700] - => slapi_reslimit_get_integer_limit() conn=0x2907e68, handle=8

[16/Jul/2015:15:31:05 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:05 -0700] - => slapi_reslimit_get_integer_limit() conn=0x2907d30, handle=8

[16/Jul/2015:15:31:05 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:05 -0700] - --> pagedresults_is_timedout

[16/Jul/2015:15:31:05 -0700] - <-- pagedresults_is_timedout: -

[16/Jul/2015:15:31:05 -0700] - --> pagedresults_is_timedout

[16/Jul/2015:15:31:05 -0700] - <-- pagedresults_is_timedout: -

[16/Jul/2015:15:31:05 -0700] - get_pb 

[16/Jul/2015:15:31:05 -0700] - --> pagedresults_in_use

[16/Jul/2015:15:31:05 -0700] - <-- pagedresults_in_use: 0

[16/Jul/2015:15:31:05 -0700] - do_modify

[16/Jul/2015:15:31:05 -0700] - do_modify: dn (uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com)

[16/Jul/2015:15:31:05 -0700] - => get_ldapmessage_controls

[16/Jul/2015:15:31:05 -0700] - <= get_ldapmessage_controls no controls

[16/Jul/2015:15:31:05 -0700] - modifications:

[16/Jul/2015:15:31:05 -0700] - 

replace: uidNumber

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NO CONTROLS)

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NO CONTROLS)

[16/Jul/2015:15:31:05 -0700] - mapping tree selected backend : userRoot

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NO CONTROLS)

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NO CONTROLS)

[16/Jul/2015:15:31:05 -0700] - mapping tree selected backend : userRoot

[16/Jul/2015:15:31:05 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=6

[16/Jul/2015:15:31:05 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:05 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=5

[16/Jul/2015:15:31:05 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:05 -0700] - => compute_limits: sizelimit=-1, timelimit=-1

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Account Usability Plugin' #1 type 403

[16/Jul/2015:15:31:05 -0700] account-usability-plugin - --> auc_pre_search

[16/Jul/2015:15:31:05 -0700] account-usability-plugin - <-- auc_pre_op

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'ACL preoperation' #2 type 403

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'deref' #4 type 403

[16/Jul/2015:15:31:05 -0700] deref-plugin - --> deref_pre_search

[16/Jul/2015:15:31:05 -0700] deref-plugin - <-- deref_pre_op

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Legacy replication preoperation plugin' #6 type 403

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Multimaster replication preoperation plugin' #9 type 403

[16/Jul/2015:15:31:05 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=0

[16/Jul/2015:15:31:05 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:05 -0700] - => find_entry_internal (dn=uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com) lock 0

[16/Jul/2015:15:31:05 -0700] - => dn2entry_ext "uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com"

[16/Jul/2015:15:31:05 -0700] - <= dn2entry_ext 7f451805aca0

[16/Jul/2015:15:31:05 -0700] - <= find_entry_internal_dn found (uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com)

[16/Jul/2015:15:31:05 -0700] - <= find_entry_internal

[16/Jul/2015:15:31:05 -0700] - candidate list has 1 ids

[16/Jul/2015:15:31:05 -0700] id2entry - => id2entry(1323368)

[16/Jul/2015:15:31:05 -0700] id2entry - <= id2entry 7f451805aca0, dn "uid=myacct,ou=people,ou=idm,dc=dev,dc=example,dc=com" (cache)

[16/Jul/2015:15:31:05 -0700] id2entry - <= id2entry( 1323368 ) 7f451805aca0 (disk)

[16/Jul/2015:15:31:05 -0700] - => send_ldap_search_entry (uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com)

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Account Usability Plugin' #1 type 410

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'deref' #4 type 410

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Legacy replication preoperation plugin' #6 type 410

[16/Jul/2015:15:31:05 -0700] - <= send_ldap_search_entry

[16/Jul/2015:15:31:05 -0700] - => send_ldap_result 0::

[16/Jul/2015:15:31:05 -0700] - <= send_ldap_result

[16/Jul/2015:15:31:05 -0700] - mapping tree release backend : userRoot

[16/Jul/2015:15:31:05 -0700] - modify_update_last_modified_attr

[16/Jul/2015:15:31:05 -0700] - Calling plugin '7-bit check' #0 type 405

[16/Jul/2015:15:31:05 -0700] NS7bitAttr - MODIFY begin

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'ACL preoperation' #2 type 405

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NO CONTROLS)

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NO CONTROLS)

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Auto Membership Plugin' #3 type 405

[16/Jul/2015:15:31:05 -0700] auto-membership-plugin - --> automember_pre_op

[16/Jul/2015:15:31:05 -0700] auto-membership-plugin - --> automember_get_sdn

[16/Jul/2015:15:31:05 -0700] auto-membership-plugin - <-- automember_get_sdn

[16/Jul/2015:15:31:05 -0700] auto-membership-plugin - --> automember_dn_is_config

[16/Jul/2015:15:31:05 -0700] auto-membership-plugin - <-- automember_dn_is_config

[16/Jul/2015:15:31:05 -0700] auto-membership-plugin - <-- automember_pre_op

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Legacy replication preoperation plugin' #6 type 405

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Linked Attributes' #7 type 405

[16/Jul/2015:15:31:05 -0700] linkedattrs-plugin - --> linked_attrs_pre_op

[16/Jul/2015:15:31:05 -0700] linkedattrs-plugin - --> linked_attrs_get_dn

[16/Jul/2015:15:31:05 -0700] linkedattrs-plugin - <-- linked_attrs_get_dn

[16/Jul/2015:15:31:05 -0700] linkedattrs-plugin - --> linked_attrs_dn_is_config

[16/Jul/2015:15:31:05 -0700] linkedattrs-plugin - <-- linked_attrs_dn_is_config

[16/Jul/2015:15:31:05 -0700] linkedattrs-plugin - <-- linked_attrs_pre_op

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Managed Entries' #8 type 405

[16/Jul/2015:15:31:05 -0700] managed-entries-plugin - --> mep_pre_op

[16/Jul/2015:15:31:05 -0700] managed-entries-plugin - --> mep_get_sdn

[16/Jul/2015:15:31:05 -0700] managed-entries-plugin - <-- mep_get_sdn

[16/Jul/2015:15:31:05 -0700] managed-entries-plugin - --> mep_dn_is_config

[16/Jul/2015:15:31:05 -0700] managed-entries-plugin - <-- mep_dn_is_config

[16/Jul/2015:15:31:05 -0700] managed-entries-plugin - --> mep_isrepl

[16/Jul/2015:15:31:05 -0700] managed-entries-plugin - <-- mep_isrepl

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NO CONTROLS)

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NO CONTROLS)

[16/Jul/2015:15:31:05 -0700] - mapping tree selected backend : userRoot

[16/Jul/2015:15:31:05 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=6

[16/Jul/2015:15:31:05 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:05 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=5

[16/Jul/2015:15:31:05 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:05 -0700] - => compute_limits: sizelimit=-1, timelimit=-1

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Account Usability Plugin' #1 type 403

[16/Jul/2015:15:31:05 -0700] account-usability-plugin - --> auc_pre_search

[16/Jul/2015:15:31:05 -0700] account-usability-plugin - <-- auc_pre_op

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'ACL preoperation' #2 type 403

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'deref' #4 type 403

[16/Jul/2015:15:31:05 -0700] deref-plugin - --> deref_pre_search

[16/Jul/2015:15:31:05 -0700] deref-plugin - <-- deref_pre_op

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Legacy replication preoperation plugin' #6 type 403

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Multimaster replication preoperation plugin' #9 type 403

[16/Jul/2015:15:31:05 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=0

[16/Jul/2015:15:31:05 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:05 -0700] - => find_entry_internal (dn=uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com) lock 0

[16/Jul/2015:15:31:05 -0700] - => dn2entry_ext "uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com"

[16/Jul/2015:15:31:05 -0700] - <= dn2entry_ext 7f451805aca0

[16/Jul/2015:15:31:05 -0700] - <= find_entry_internal_dn found (uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com)

[16/Jul/2015:15:31:05 -0700] - <= find_entry_internal

[16/Jul/2015:15:31:05 -0700] - candidate list has 1 ids

[16/Jul/2015:15:31:05 -0700] id2entry - => id2entry(1323368)

[16/Jul/2015:15:31:05 -0700] id2entry - <= id2entry 7f451805aca0, dn "uid=myacct,ou=people,ou=idm,dc=dev,dc=example,dc=com" (cache)

[16/Jul/2015:15:31:05 -0700] id2entry - <= id2entry( 1323368 ) 7f451805aca0 (disk)

[16/Jul/2015:15:31:05 -0700] - => send_ldap_search_entry (uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com)

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Account Usability Plugin' #1 type 410

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'deref' #4 type 410

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Legacy replication preoperation plugin' #6 type 410

[16/Jul/2015:15:31:05 -0700] - <= send_ldap_search_entry

[16/Jul/2015:15:31:05 -0700] - => send_ldap_result 0::

[16/Jul/2015:15:31:05 -0700] - <= send_ldap_result

[16/Jul/2015:15:31:05 -0700] - mapping tree release backend : userRoot

[16/Jul/2015:15:31:05 -0700] managed-entries-plugin - <-- mep_pre_op

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Multimaster replication preoperation plugin' #9 type 405

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'PAM Pass Through Auth' #10 type 405

[16/Jul/2015:15:31:05 -0700] pam_passthru-plugin - => pam_passthru_preop

[16/Jul/2015:15:31:05 -0700] pam_passthru-plugin - <= pam_passthru_preop

[16/Jul/2015:15:31:05 -0700] - => find_entry_internal (dn=uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com) lock 1

[16/Jul/2015:15:31:05 -0700] - => dn2entry_ext "uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com"

[16/Jul/2015:15:31:05 -0700] - <= dn2entry_ext 7f451805aca0

[16/Jul/2015:15:31:05 -0700] - <= find_entry_internal_dn found (uid=myacct,ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com)

[16/Jul/2015:15:31:05 -0700] - <= find_entry_internal

[16/Jul/2015:15:31:05 -0700] - Calling plugin 'Distributed Numeric Assignment Plugin' #0 type 451

[16/Jul/2015:15:31:05 -0700] dna-plugin - --> dna_pre_op

[16/Jul/2015:15:31:05 -0700] dna-plugin - --> dna_get_dn

[16/Jul/2015:15:31:05 -0700] dna-plugin - <-- dna_get_dn

[16/Jul/2015:15:31:05 -0700] - => entry_apply_mods

[16/Jul/2015:15:31:05 -0700] -    uidNumber: 99999

[16/Jul/2015:15:31:05 -0700] -    replace: uidNumber

[16/Jul/2015:15:31:05 -0700] -    -

[16/Jul/2015:15:31:05 -0700] -    modifiersname: cn=directory manager

[16/Jul/2015:15:31:05 -0700] -    replace: modifiersname

[16/Jul/2015:15:31:05 -0700] -    -

[16/Jul/2015:15:31:05 -0700] -    modifytimestamp: 20150716223105Z

[16/Jul/2015:15:31:05 -0700] -    replace: modifytimestamp

[16/Jul/2015:15:31:05 -0700] -    -

[16/Jul/2015:15:31:05 -0700] - <= entry_apply_mods 0

[16/Jul/2015:15:31:05 -0700] dna-plugin - --> dna_is_config

[16/Jul/2015:15:31:05 -0700] dna-plugin - <-- dna_is_config

[16/Jul/2015:15:31:05 -0700] dna-plugin - --> dna_get_dn

[16/Jul/2015:15:31:05 -0700] dna-plugin - <-- dna_get_dn

[16/Jul/2015:15:31:05 -0700] - modify_update_last_modified_attr

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.2)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NOT FOUND)

[16/Jul/2015:15:31:05 -0700] - => slapi_control_present (looking for 1.3.6.1.4.1.42.2.27.8.5.1)

[16/Jul/2015:15:31:05 -0700] - <= slapi_control_present 0 (NOT FOUND)

[16/Jul/2015:15:31:06 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)

[16/Jul/2015:15:31:06 -0700] - <= slapi_control_present 0 (NOT FOUND)

[16/Jul/2015:15:31:06 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)

[16/Jul/2015:15:31:06 -0700] - <= slapi_control_present 0 (NOT FOUND)

[16/Jul/2015:15:31:06 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.20)

[16/Jul/2015:15:31:06 -0700] - <= slapi_control_present 0 (NOT FOUND)

[16/Jul/2015:15:31:06 -0700] - --> pagedresults_is_timedout

[16/Jul/2015:15:31:06 -0700] - <-- pagedresults_is_timedout: -

[16/Jul/2015:15:31:06 -0700] - --> pagedresults_is_timedout

[16/Jul/2015:15:31:06 -0700] - <-- pagedresults_is_timedout: -

[16/Jul/2015:15:31:06 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.14)

[16/Jul/2015:15:31:06 -0700] - <= slapi_control_present 0 (NOT FOUND)

[16/Jul/2015:15:31:06 -0700] - => slapi_control_present (looking for 1.3.6.1.4.1.42.2.27.9.5.2)

[16/Jul/2015:15:31:06 -0700] - <= slapi_control_present 0 (NOT FOUND)

[16/Jul/2015:15:31:06 -0700] - => slapi_control_present (looking for 1.2.840.113556.1.4.319)

[16/Jul/2015:15:31:06 -0700] - <= slapi_control_present 0 (NOT FOUND)

[16/Jul/2015:15:31:06 -0700] - mapping tree selected backend : userRoot

[16/Jul/2015:15:31:06 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=6

[16/Jul/2015:15:31:06 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:06 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=5

[16/Jul/2015:15:31:06 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:06 -0700] - => compute_limits: sizelimit=-1, timelimit=-1

[16/Jul/2015:15:31:06 -0700] - Calling plugin 'Account Usability Plugin' #1 type 403

[16/Jul/2015:15:31:06 -0700] account-usability-plugin - --> auc_pre_search

[16/Jul/2015:15:31:06 -0700] account-usability-plugin - <-- auc_pre_op

[16/Jul/2015:15:31:06 -0700] - Calling plugin 'ACL preoperation' #2 type 403

[16/Jul/2015:15:31:06 -0700] - Calling plugin 'deref' #4 type 403

[16/Jul/2015:15:31:06 -0700] deref-plugin - --> deref_pre_search

[16/Jul/2015:15:31:06 -0700] deref-plugin - <-- deref_pre_op

[16/Jul/2015:15:31:06 -0700] - Calling plugin 'Legacy replication preoperation plugin' #6 type 403

[16/Jul/2015:15:31:06 -0700] - Calling plugin 'Multimaster replication preoperation plugin' #9 type 403

[16/Jul/2015:15:31:06 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=0

[16/Jul/2015:15:31:06 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:06 -0700] - => slapi_control_present (looking for 1.2.840.113556.1.4.473)

[16/Jul/2015:15:31:06 -0700] - <= slapi_control_present 1 (FOUND)

[16/Jul/2015:15:31:06 -0700] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.9)

[16/Jul/2015:15:31:06 -0700] - <= slapi_control_present 0 (NOT FOUND)

[16/Jul/2015:15:31:06 -0700] - => find_entry_internal (dn=ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com) lock 0

[16/Jul/2015:15:31:06 -0700] - => dn2entry_ext "ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com"

[16/Jul/2015:15:31:06 -0700] - <= dn2entry_ext 283fc90

[16/Jul/2015:15:31:06 -0700] - <= find_entry_internal_dn found (ou=PEOPLE,ou=IDM,dc=dev,dc=example,dc=com)

[16/Jul/2015:15:31:06 -0700] - <= find_entry_internal

[16/Jul/2015:15:31:06 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=1

[16/Jul/2015:15:31:06 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:06 -0700] - => filter_candidates

[16/Jul/2015:15:31:06 -0700] - => list_candidates 0xa1

[16/Jul/2015:15:31:06 -0700] - => filter_candidates

[16/Jul/2015:15:31:06 -0700] - => list_candidates 0xa0

[16/Jul/2015:15:31:06 -0700] - => filter_candidates

[16/Jul/2015:15:31:06 -0700] - => presence_candidates

[16/Jul/2015:15:31:06 -0700] - => index_read( "employeeNumber" + "" )

[16/Jul/2015:15:31:06 -0700] -    indextype: "pres" indexmask: 0x3

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=207

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=414

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=621

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=815

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1022

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1229

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1436

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1630

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1837

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2044

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2251

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2445

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2652

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2859

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3066

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3260

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3467

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3674

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3881

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=4075

[16/Jul/2015:15:31:06 -0700] - idl_new_fetch + returns allids

[16/Jul/2015:15:31:06 -0700] - <= index_read 1389387 candidates

[16/Jul/2015:15:31:06 -0700] - <= presence_candidates 1389387

[16/Jul/2015:15:31:06 -0700] - <= filter_candidates 1389387

[16/Jul/2015:15:31:06 -0700] - => filter_candidates

[16/Jul/2015:15:31:06 -0700] - => ava_candidates

[16/Jul/2015:15:31:06 -0700] -    objectClass=posixAccount

[16/Jul/2015:15:31:06 -0700] - => keys2idl type objectClass indextype eq

[16/Jul/2015:15:31:06 -0700] - => index_read( "objectClass" = "posixaccount" )

[16/Jul/2015:15:31:06 -0700] -    indextype: "eq" indexmask: 0x2

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=207

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=414

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=621

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=815

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1022

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1229

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1436

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1630

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1837

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2044

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2251

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2445

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2652

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2859

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3066

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3260

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3467

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3674

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3881

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=4075

[16/Jul/2015:15:31:06 -0700] - idl_new_fetch =posixaccount returns allids

[16/Jul/2015:15:31:06 -0700] - <= index_read 1389387 candidates

[16/Jul/2015:15:31:06 -0700] -    ival[0] = "posixaccount" => 1389387 IDs

[16/Jul/2015:15:31:06 -0700] - <= filter_candidates 1389387

[16/Jul/2015:15:31:06 -0700] - => range_candidates attr=uidNumber

[16/Jul/2015:15:31:06 -0700] - index_range_read lookthrough_limit=-1

[16/Jul/2015:15:31:06 -0700] -    indextype: "eq" indexmask: 0x1000

[16/Jul/2015:15:31:06 -0700] - <= index_range_read(uidNumber,=) 1389387 candidates (allids)

[16/Jul/2015:15:31:06 -0700] - <= range_candidates 1389387

[16/Jul/2015:15:31:06 -0700] - <= list_candidates 1389387

[16/Jul/2015:15:31:06 -0700] - <= filter_candidates 1389387

[16/Jul/2015:15:31:06 -0700] - => filter_candidates

[16/Jul/2015:15:31:06 -0700] - => ava_candidates

[16/Jul/2015:15:31:06 -0700] -    objectclass=referral

[16/Jul/2015:15:31:06 -0700] - => keys2idl type objectclass indextype eq

[16/Jul/2015:15:31:06 -0700] - => index_read( "objectclass" = "referral" )

[16/Jul/2015:15:31:06 -0700] -    indextype: "eq" indexmask: 0x2

[16/Jul/2015:15:31:06 -0700] - <= index_read 0 candidates

[16/Jul/2015:15:31:06 -0700] -    ival[0] = "referral" => 0 IDs

[16/Jul/2015:15:31:06 -0700] - <= filter_candidates 0

[16/Jul/2015:15:31:06 -0700] - <= list_candidates 1389387

[16/Jul/2015:15:31:06 -0700] - <= filter_candidates 1389387

[16/Jul/2015:15:31:06 -0700] - => index_read( "ancestorid" = "709968" )

[16/Jul/2015:15:31:06 -0700] -    indextype: "eq" indexmask: 0x2

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=208

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=416

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=624

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=814

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1021

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1228

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1435

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1629

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=1836

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2043

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2250

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2444

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2651

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=2858

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3065

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3259

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3466

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3673

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=3880

[16/Jul/2015:15:31:06 -0700] - bulk fetch buffer nids=4074

[16/Jul/2015:15:31:06 -0700] - idl_new_fetch =709968 returns allids

[16/Jul/2015:15:31:06 -0700] - <= index_read 1389387 candidates

[16/Jul/2015:15:31:06 -0700] - candidate list has 1389387 ids

[16/Jul/2015:15:31:06 -0700] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=0

[16/Jul/2015:15:31:06 -0700] - <= slapi_reslimit_get_integer_limit() returning NO VALUE

[16/Jul/2015:15:31:06 -0700] - Asked to sort ALLIDS candidate list, refusing

[16/Jul/2015:15:31:06 -0700] - => send_ldap_result 12::Sort Response Control

[16/Jul/2015:15:31:06 -0700] - <= send_ldap_result

[16/Jul/2015:15:31:06 -0700] - mapping tree release backend : userRoot

[16/Jul/2015:15:31:06 -0700] dna-plugin - dna_pre_op: failed to allocate a new ID!!

[16/Jul/2015:15:31:06 -0700] dna-plugin - dna_pre_op: operation failure [1]

[16/Jul/2015:15:31:06 -0700] - => send_ldap_result 1::Allocation of a new value for range cn=uid numbers,cn=distributed numeric assignment plugin,cn=plugins,cn=config failed! Unable to proceed.

[16/Jul/2015:15:31:06 -0700] - <= send_ldap_result

[16/Jul/2015:15:31:06 -0700] dna-plugin - <-- dna_pre_op

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxxhttps://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users