Hide Forgot
Description of problem: The attributes nsds5ReplicaBackoffMin and nsds5ReplicaBackoffMax are refused by the directory server. Version-Release number of selected component (if applicable): 389-ds-base-1.3.1.6-18.el7 How reproducible: Always Steps to Reproduce: 1. Set up a replica on a server. 2. Try to add either of the attributes. Actual results: Each of the attributes is refused with return code 53 - unwilling to perform. NSMMReplicationPlugin - replica_config_modify: modification of attribute nsds5ReplicaBackoffMin is not allowed in replica entry NSMMReplicationPlugin - replica_config_modify: modification of attribute nsds5ReplicaBackoffMax is not allowed in replica entry Expected results: Directory server accepts the attribute values.
Fixed upstream.
Upstream ticket: https://fedorahosted.org/389/ticket/525
*** Bug 1081251 has been marked as a duplicate of this bug. ***
[root@vm-idm-035 MMR_WINSYNC]# ldapmodify -x -p 1189 -h localhost -D "cn=Directory Manager" -w Secret123 << EOF dn: cn=1189_to_1289_on_vm-idm-035.lab.eng.pnq.redhat.com,cn=replica,cn="dc=passsync,dc=com",cn=mapping tree,cn=config changetype: modify replace: nsds5ReplicaBackoffMin nsds5ReplicaBackoffMin: 30 EOF modifying entry "cn=1189_to_1289_on_vm-idm-035.lab.eng.pnq.redhat.com,cn=replica,cn="dc=passsync,dc=com",cn=mapping tree,cn=config" ldap_modify: Server is unwilling to perform (53) [root@vm-idm-035 MMR_WINSYNC]# ldapmodify -x -p 1189 -h localhost -D "cn=Directory Manager" -w Secret123 << EOF dn: cn=1189_to_1289_on_vm-idm-035.lab.eng.pnq.redhat.com,cn=replica,cn="dc=passsync,dc=com",cn=mapping tree,cn=config changetype: modify replace: nsds5ReplicaBackoffMax nsds5ReplicaBackoffMax: 30 EOF modifying entry "cn=1189_to_1289_on_vm-idm-035.lab.eng.pnq.redhat.com,cn=replica,cn="dc=passsync,dc=com",cn=mapping tree,cn=config" ldap_modify: Server is unwilling to perform (53) Seems like the issue is not fixed. I am still unable to add this attribute to the replica entry. Marking it as Assigned.
Build tested: [root@vm-idm-035 ~]# rpm -qa 389-ds-base 389-ds-base-1.3.3.1-9.el7.x86_64
I am able to add attributes to cn=replica master entry. [root@vm-idm-035 MMR_WINSYNC]# ldapmodify -x -p 1189 -h localhost -D "cn=Directory Manager" -w Secret123 << EOF dn: cn=replica,cn="dc=passsync,dc=com",cn=mapping tree,cn=config changetype: modify add: nsds5ReplicaBackoffMin nsds5ReplicaBackoffMin: 30 EOF modifying entry "cn=replica,cn="dc=passsync,dc=com",cn=mapping tree,cn=config" [root@vm-idm-035 MMR_WINSYNC]# ldapmodify -x -p 1189 -h localhost -D "cn=Directory Manager" -w Secret123 << EOF dn: cn=replica,cn="dc=passsync,dc=com",cn=mapping tree,cn=config changetype: modify add: nsds5ReplicaBackoffMax nsds5ReplicaBackoffMax: 30 EOF modifying entry "cn=replica,cn="dc=passsync,dc=com",cn=mapping tree,cn=config"
The setting only applies to the replica config entry, not replication agreements. So this looks correct.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0416.html