Attachment 704259 Details for Bug 903343 – error log after 6.4 upgrade

error log after 6.4 upgrade

debug-error-post-6.4-upgrade.txt (text/plain), 50.89 KB, created by Matthew Davis on 2013-03-01 17:37:54 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matthew Davis

Created: 2013-03-01 17:37:54 UTC

Size: 50.89 KB

patch

obsolete

>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - #### conn=121 op=2 binddn=""
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - conn=121 op=2 (main): Allow read on entry().attr(objectClass) to anonymous: allowed by aci(1): aciname= "rootdse anon read access", acidn=""
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - conn=121 op=2 (main): Allow read on entry().attr(defaultnamingcontext) to anonymous: cached allow by aci(1)
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - conn=121 op=2 (main): Allow read on entry().attr(namingContexts) to anonymous: cached allow by aci(1)
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - #### conn=121 op=3 binddn=""
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - conn=121 op=3 (main): Allow search on entry(dc=salab,dc=redhat,dc=com).attr(info) to anonymous: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - conn=121 op=3 (main): Allow read on entry(dc=salab,dc=redhat,dc=com).attr(nsUniqueId) to anonymous: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - conn=121 op=3 (main): Allow read on entry(dc=salab,dc=redhat,dc=com).attr(associatedDomain) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - conn=121 op=3 (main): Allow read on entry(dc=salab,dc=redhat,dc=com).attr(nisDomain) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - conn=121 op=3 (main): Allow read on entry(dc=salab,dc=redhat,dc=com).attr(info) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:54 -0500] NSACLPlugin - conn=121 op=3 (main): Allow read on entry(dc=salab,dc=redhat,dc=com).attr(dc) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=3 (main): Allow read on entry(dc=salab,dc=redhat,dc=com).attr(objectClass) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - #### conn=121 op=4 binddn=""
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(objectClass) to anonymous: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(nsUniqueId) to anonymous: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Deny read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(krbMKey) to anonymous: no aci matched the resource
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(krbDefaultEncSaltTypes) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(krbMaxRenewableAge) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(krbMaxTicketLife) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(krbSupportedEncSaltTypes) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(krbSearchScope) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(krbSubTrees) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(objectClass) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=121 op=4 (main): Allow read on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com).attr(cn) to anonymous: cached allow by aci(88)
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=6 op=158 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=6 op=158 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=6 op=159 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:55 -0500] NSACLPlugin - conn=6 op=160 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=6 op=160 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=6 op=161 (main): Allow search on entry(cn=global_policy,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=132 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=132 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=133 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=134 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=134 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=135 (main): Allow search on entry(cn=global_policy,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=ipausers,cn=groups,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=ipausers,cn=groups,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:56 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(ipauniqueid=1017fe38-4a0a-11e2-844a-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=6 op=163 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(ipauniqueid=1017fe38-4a0a-11e2-844a-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=6 op=163 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(ipauniqueid=8b712636-4a23-11e2-aa70-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=6 op=164 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(ipauniqueid=8b712636-4a23-11e2-aa70-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=6 op=165 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=build administrator,cn=roles,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=6 op=165 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=build administrator,cn=roles,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=6 op=166 (main): Allow search on entry(cn=global_policy,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=host administrators,cn=privileges,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=host administrators,cn=privileges,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=add hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=ipausers,cn=groups,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:57 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=add hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=ipausers,cn=groups,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=remove hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(ipauniqueid=1017fe38-4a0a-11e2-844a-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=remove hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(ipauniqueid=1017fe38-4a0a-11e2-844a-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=modify hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(ipauniqueid=8b712636-4a23-11e2-aa70-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=modify hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(ipauniqueid=8b712636-4a23-11e2-aa70-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=manage host ssh public keys,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=build administrator,cn=roles,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=manage host ssh public keys,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=build administrator,cn=roles,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=manage host keytab,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=host administrators,cn=privileges,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=manage host keytab,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=host administrators,cn=privileges,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=enroll a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=add hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:58 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=enroll a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=add hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=add krbprincipalname to a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=remove hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=136 (main): Allow search on entry(cn=add krbprincipalname to a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=remove hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=modify hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=modify hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=ipausers,cn=groups,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=manage host ssh public keys,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=ipausers,cn=groups,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=manage host ssh public keys,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(ipauniqueid=1017fe38-4a0a-11e2-844a-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=manage host keytab,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(ipauniqueid=1017fe38-4a0a-11e2-844a-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=manage host keytab,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(ipauniqueid=8b712636-4a23-11e2-aa70-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=enroll a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(ipauniqueid=8b712636-4a23-11e2-aa70-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=enroll a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:34:59 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=build administrator,cn=roles,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=add krbprincipalname to a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=build administrator,cn=roles,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=167 (main): Allow search on entry(cn=add krbprincipalname to a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=host administrators,cn=privileges,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=host administrators,cn=privileges,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=add hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=ipausers,cn=groups,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=add hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=ipausers,cn=groups,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=remove hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(ipauniqueid=1017fe38-4a0a-11e2-844a-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=remove hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(ipauniqueid=1017fe38-4a0a-11e2-844a-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=modify hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(ipauniqueid=8b712636-4a23-11e2-aa70-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=modify hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(ipauniqueid=8b712636-4a23-11e2-aa70-0015175640d8,cn=hbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=manage host ssh public keys,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=build administrator,cn=roles,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:00 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=manage host ssh public keys,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=build administrator,cn=roles,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=manage host keytab,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=host administrators,cn=privileges,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=manage host keytab,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=host administrators,cn=privileges,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=enroll a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=add hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=enroll a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=add hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=add krbprincipalname to a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=remove hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=5 op=137 (main): Allow search on entry(cn=add krbprincipalname to a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=remove hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=5 op=138 (main): Allow write on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=modify hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=5 op=138 (main): Allow write on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=modify hosts,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:01 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=manage host ssh public keys,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=manage host ssh public keys,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=manage host keytab,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=5 op=139 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=manage host keytab,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=5 op=139 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=enroll a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=5 op=140 (main): Allow search on entry(krbprincipalname=ldap/idm1.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=enroll a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=5 op=140 (main): Allow search on entry(krbprincipalname=ldap/idm1.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=add krbprincipalname to a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=6 op=168 (main): Allow search on entry(cn=add krbprincipalname to a host,cn=permissions,cn=pbac,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=5 op=141 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=6 op=169 (main): Allow write on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=6 op=169 (main): Allow write on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=5 op=142 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=5 op=142 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:02 -0500] NSACLPlugin - conn=5 op=143 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - #### conn=122 op=3 binddn="uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=122 op=3 (main): Allow search on entry(cn=cacert,cn=ipa,cn=etc,dc=salab,dc=redhat,dc=com).attr(objectClass) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=122 op=3 (main): Allow read on entry(cn=cacert,cn=ipa,cn=etc,dc=salab,dc=redhat,dc=com).attr(nsUniqueId) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=122 op=3 (main): Allow read on entry(cn=cacert,cn=ipa,cn=etc,dc=salab,dc=redhat,dc=com).attr(cacertificate;binary) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=5 op=144 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=5 op=144 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=5 op=145 (main): Allow search on entry(krbprincipalname=http/idm1.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=5 op=145 (main): Allow search on entry(krbprincipalname=http/idm1.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=5 op=146 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=5 op=147 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=5 op=147 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=5 op=148 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=6 op=170 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=6 op=170 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=6 op=171 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=6 op=171 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:03 -0500] NSACLPlugin - conn=6 op=172 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=6 op=172 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=6 op=173 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=5 op=149 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=5 op=149 (main): Allow search on entry(krbprincipalname=krbtgt/salab.redhat.com@salab.redhat.com,cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=5 op=150 (main): Allow search on entry(krbprincipalname=ldap/idm1.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=5 op=150 (main): Allow search on entry(krbprincipalname=ldap/idm1.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=5 op=151 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=5 op=152 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=5 op=152 (main): Allow search on entry(uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=5 op=153 (main): Allow search on entry(cn=salab.redhat.com,cn=kerberos,dc=salab,dc=redhat,dc=com): root user
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - #### conn=123 op=3 binddn="uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=123 op=3 (main): Allow search on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(objectClass) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(nsUniqueId) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaSELinuxUserMapOrder) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaKrbAuthzData) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaSELinuxUserMapDefault) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:04 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaDefaultLoginShell) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaCertificateSubjectBase) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(cn) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaConfigString) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaMigrationEnabled) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaDefaultEmailDomain) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaUserObjectClasses) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaGroupObjectClasses) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaPwdExpAdvNotify) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaMaxUsernameLength) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaDefaultPrimaryGroup) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaHomesRootDir) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaSearchRecordsLimit) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaSearchTimeLimit) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaGroupSearchFields) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaUserSearchFields) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=3 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(objectClass) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - #### conn=123 op=9 binddn="uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=9 (main): Allow add on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(NULL) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(13): aciname= "permission:Add Hosts", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - #### conn=123 op=10 binddn="uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:05 -0500] NSACLPlugin - conn=123 op=10 (main): Allow search on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(objectClass) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=123 op=10 (main): Allow read on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(cn) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=123 op=10 (main): Allow read on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(objectClass) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=123 op=10 (main): Allow read on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(fqdn) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=123 op=10 (main): Allow read on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(managedBy) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - #### conn=124 op=3 binddn="krbprincipalname=ldap/idm2.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=123 op=10 (main): Allow read on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(ipaUniqueID) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=124 op=3 (main): Allow read on entry().attr(objectClass) to krbprincipalname=ldap/idm2.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(1): aciname= "rootdse anon read access", acidn=""
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=123 op=10 (main): Allow read on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(krbPrincipalName) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=124 op=3 (main): Allow read on entry().attr(supportedControl) to krbprincipalname=ldap/idm2.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(1)
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - #### conn=123 op=12 binddn="uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=124 op=3 (main): Allow read on entry().attr(supportedExtension) to krbprincipalname=ldap/idm2.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(1)
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=123 op=12 (main): Allow search on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(userPassword) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(91): aciname= "Search existence of password and kerberos keys", acidn="cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - #### conn=124 op=4 binddn="krbprincipalname=ldap/idm2.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - #### conn=123 op=13 binddn="uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=124 op=4 (main): Allow read on entry().attr(objectClass) to krbprincipalname=ldap/idm2.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(1): aciname= "rootdse anon read access", acidn=""
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - conn=123 op=13 (main): Allow search on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(krbPrincipalKey) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(91): aciname= "Search existence of password and kerberos keys", acidn="cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:06 -0500] NSACLPlugin - #### conn=125 op=3 binddn="krbprincipalname=ldap/idm1.phx.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=124 op=4 (main): Allow read on entry().attr(supportedControl) to krbprincipalname=ldap/idm2.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(1)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - #### conn=123 op=14 binddn="uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=125 op=3 (main): Allow read on entry().attr(objectClass) to krbprincipalname=ldap/idm1.phx.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(1): aciname= "rootdse anon read access", acidn=""
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=124 op=4 (main): Allow read on entry().attr(supportedExtension) to krbprincipalname=ldap/idm2.rdu.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(1)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=14 (main): Allow search on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(objectClass) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=125 op=3 (main): Allow read on entry().attr(supportedControl) to krbprincipalname=ldap/idm1.phx.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(1)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=14 (main): Allow read on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(cn) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=125 op=3 (main): Allow read on entry().attr(supportedExtension) to krbprincipalname=ldap/idm1.phx.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(1)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - #### conn=123 op=15 binddn="uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=15 (main): Allow search on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(objectClass) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - #### conn=125 op=4 binddn="krbprincipalname=ldap/idm1.phx.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(nsUniqueId) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(88): aciname= "Enable Anonymous access", acidn="dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=125 op=4 (main): Allow read on entry().attr(objectClass) to krbprincipalname=ldap/idm1.phx.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: allowed by aci(1): aciname= "rootdse anon read access", acidn=""
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaDefaultLoginShell) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=125 op=4 (main): Allow read on entry().attr(supportedControl) to krbprincipalname=ldap/idm1.phx.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(1)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaCertificateSubjectBase) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=125 op=4 (main): Allow read on entry().attr(supportedExtension) to krbprincipalname=ldap/idm1.phx.salab.redhat.com@salab.redhat.com,cn=services,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(1)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaUserSearchFields) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaSELinuxUserMapDefault) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaDefaultPrimaryGroup) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaPwdExpAdvNotify) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:07 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaGroupSearchFields) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaDefaultEmailDomain) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaHomesRootDir) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaSearchTimeLimit) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaKrbAuthzData) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaMigrationEnabled) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaSearchRecordsLimit) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaConfigString) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaMaxUsernameLength) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=123 op=15 (main): Allow read on entry(cn=ipaconfig,cn=etc,dc=salab,dc=redhat,dc=com).attr(ipaSELinuxUserMapOrder) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: cached allow by aci(88)
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - #### conn=126 op=3 binddn="uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com"
>[01/Mar/2013:12:35:08 -0500] NSACLPlugin - conn=126 op=3 (main): Deny write on entry(fqdn=host237.rdu.salab.redhat.com,cn=computers,cn=accounts,dc=salab,dc=redhat,dc=com).attr(krbPrincipalKey) to uid=builduser,cn=users,cn=accounts,dc=salab,dc=redhat,dc=com: no aci matched the subject by aci(87): aciname= "Password change service can read/write passwords", acidn="dc=salab,dc=redhat,dc=com"
>^C
>[root@idm1.rdu slapd-SALAB-REDHAT-COM]$

Actions: View

Attachments on bug 903343: 686168 | 686169 | 686170 | 704259 | 862767