This bug is created as a clone of upstream ticket: https://fedorahosted.org/389/ticket/47457 IPA migrate easily runs into the default 64KB limit - we should increase the limit to 2MB to match the sasl and ber size limit.
There are no simple verification steps for this bug, as it involves setting up IPA and run it under a lot of load.
Verified. Version :: 389-ds-base-1.3.3.1-11.el7.x86_64 ipa-server-4.1.0-15.el7.x86_64 Results :: Quick check: [root@rhel7-1 ~]# ldapsearch -x -D "cn=Directory Manager" -w Secret123 -b cn=config |grep nsslapd-sasl-max-buffer-size nsslapd-sasl-max-buffer-size: 2097152 Since there is no easy test for this, I think we can check above from IPA install and also results from tests where I saw the errors before. :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: irm_list_pos_0001: list, no name :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ BEGIN ] :: Running 'ipa-replica-manage -p Secret123 list > /tmp/test_irm_list_pos_0001.out 2>&1' :: [ PASS ] :: Command 'ipa-replica-manage -p Secret123 list > /tmp/test_irm_list_pos_0001.out 2>&1' (Expected 0, got 0) :: [ BEGIN ] :: Running 'cat /tmp/test_irm_list_pos_0001.out' cloud-qe-1-vm-2.testrelm.test: master beast.testrelm.test: master spider.testrelm.test: master ipaqavme.testrelm.test: master cloud-qe-4.testrelm.test: master :: [ PASS ] :: Command 'cat /tmp/test_irm_list_pos_0001.out' (Expected 0, got 0) :: [ PASS ] :: File '/tmp/test_irm_list_pos_0001.out' should contain 'cloud-qe-4.testrelm.test' :: [ PASS ] :: File '/tmp/test_irm_list_pos_0001.out' should contain 'cloud-qe-1-vm-2.testrelm.test' :: [ PASS ] :: File '/tmp/test_irm_list_pos_0001.out' should contain 'spider.testrelm.test' :: [ PASS ] :: File '/tmp/test_irm_list_pos_0001.out' should contain 'beast.testrelm.test' :: [ PASS ] :: File '/tmp/test_irm_list_pos_0001.out' should contain 'ipaqavme.testrelm.test' :: [ BEGIN ] :: Running 'remotehost-sync-set -s '1.irm_list_pos_0001.0' -m cloud-qe-4.idmqe.lab.eng.bos.redhat.com' remotehost-sync-set -s 1.irm_list_pos_0001.0 -m cloud-qe-4.idmqe.lab.eng.bos.redhat.com
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0416.html