RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1353549 - Running ipa-install with permissive fails with Update failed: cannot connect to 'ldapi://%2fvar%2frun%2fslapd-EXAMPLE-TEST.socket'
Summary: Running ipa-install with permissive fails with Update failed: cannot connect ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: slapi-nis
Version: 7.3
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Pavel Picka
QA Contact: Kaleem
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-07-07 12:32 UTC by Tibor Dudlák
Modified: 2016-11-04 07:06 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-11-04 07:06:04 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)
Use of slapi_free_search_results_internal to free the retrieved entries (1.39 KB, patch)
2016-07-12 15:07 UTC, thierry bordaz 		no flags Details | Diff
evidence (875 bytes, text/plain)
2016-09-16 07:54 UTC, Pavel Picka 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:2471 0 normal SHIPPED_LIVE slapi-nis bug fix and enhancement update 2016-11-03 14:07:19 UTC

Description Tibor Dudlák 2016-07-07 12:32:21 UTC 
Description of problem:

When running ipa-server-install with selinux set to permissive it fails on Upgrading IPA step   
[6/9]: upgrading server


Version-Release number of selected component (if applicable):

ipa-server-4.4.0-1.el7.x86_64


How reproducible:
Deterministic

Steps to Reproduce:
1.setenforce 0
2.ipa-server-install

Actual results:

Upgrading IPA:
  [1/9]: stopping directory server
  [2/9]: saving configuration
  [3/9]: disabling listeners
  [4/9]: enabling DS global lock
  [5/9]: starting directory server
  [6/9]: upgrading server
ipa         : ERROR    Upgrade failed with cannot connect to 'ldapi://%2fvar%2frun%2fslapd-EXAMPLE-TEST.socket': 
  [error] RuntimeError: cannot connect to 'ldapi://%2fvar%2frun%2fslapd-EXAMPLE-TEST.socket': 
  [cleanup]: stopping directory server
  [cleanup]: restoring configuration
ipa.ipapython.install.cli.install_tool(Server): ERROR    Update failed: cannot connect to 'ldapi://%2fvar%2frun%2fslapd-EXAMPLE-TEST.socket': 
ipa.ipapython.install.cli.install_tool(Server): ERROR    The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information

Expected results:

No errors, ipa-server-install passes.

Additional info:

What's interesting, with enforcing install did not fail.
Comment 2 Martin Bašti 2016-07-07 12:39:08 UTC 
Hello, can you please provide log /var/log/dirsrv/slapd-*/errors? And recorded AVC if there are any?
Comment 4 Jan Pazdziora 2016-07-07 15:23:31 UTC 
	389-Directory/1.3.5.10 B2016.182.29
	ipa.example.test:389 (/etc/dirsrv/slapd-EXAMPLE-TEST)

[07/Jul/2016:08:15:10.460405156 -0400] WARNING: Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[07/Jul/2016:08:15:10.461820894 -0400] check_and_set_import_cache: pagesize: 4096, pages: 970519, procpages: 2911
[07/Jul/2016:08:15:10.463242628 -0400] Import allocates 1350032KB import cache.
[07/Jul/2016:08:15:10.537538740 -0400] import userRoot: Beginning import job...
[07/Jul/2016:08:15:10.538921575 -0400] import userRoot: Index buffering enabled with bucket size 100
[07/Jul/2016:08:15:10.739704607 -0400] import userRoot: Processing file "/var/lib/dirsrv/boot.ldif"
[07/Jul/2016:08:15:10.744593209 -0400] import userRoot: Finished scanning file "/var/lib/dirsrv/boot.ldif" (1 entries)
[07/Jul/2016:08:15:11.242493790 -0400] import userRoot: Workers finished; cleaning up...
[07/Jul/2016:08:15:11.444277236 -0400] import userRoot: Workers cleaned up.
[07/Jul/2016:08:15:11.445601759 -0400] import userRoot: Cleaning up producer thread...
[07/Jul/2016:08:15:11.446977294 -0400] import userRoot: Indexing complete.  Post-processing...
[07/Jul/2016:08:15:11.448288679 -0400] import userRoot: Generating numsubordinates (this may take several minutes to complete)...
[07/Jul/2016:08:15:11.451757787 -0400] import userRoot: Generating numSubordinates complete.
[07/Jul/2016:08:15:11.452890883 -0400] import userRoot: Gathering ancestorid non-leaf IDs...
[07/Jul/2016:08:15:11.454316962 -0400] import userRoot: Finished gathering ancestorid non-leaf IDs.
[07/Jul/2016:08:15:11.456786021 -0400] Nothing to do to build ancestorid index
[07/Jul/2016:08:15:11.458033891 -0400] import userRoot: Created ancestorid index (new idl).
[07/Jul/2016:08:15:11.459221456 -0400] import userRoot: Flushing caches...
[07/Jul/2016:08:15:11.460388210 -0400] import userRoot: Closing files...
[07/Jul/2016:08:15:11.474063672 -0400] All database threads now stopped
[07/Jul/2016:08:15:11.475653961 -0400] import userRoot: Import complete.  Processed 1 entries in 1 seconds. (1.00 entries/sec)
[07/Jul/2016:08:15:11.851327480 -0400] 389-Directory/1.3.5.10 B2016.182.29 starting up
[07/Jul/2016:08:15:11.869499953 -0400] Db home directory is not set. Possibly nsslapd-directory (optionally nsslapd-db-home-directory) is missing in the config file.
[07/Jul/2016:08:15:11.871510611 -0400] resizing db cache size: 1382432768 -> 10000000
[07/Jul/2016:08:15:11.987783714 -0400] slapd started.  Listening on All Interfaces port 389 for LDAP requests
[07/Jul/2016:08:15:12.241452672 -0400] slapd shutting down - signaling operation threads - op stack size 0 max work q size 0 max work q stack size 0
[07/Jul/2016:08:15:12.246791231 -0400] slapd shutting down - closing down internal subsystems and plugins
[07/Jul/2016:08:15:12.253364746 -0400] Waiting for 4 database threads to stop
[07/Jul/2016:08:15:12.887457947 -0400] All database threads now stopped
[07/Jul/2016:08:15:12.900309888 -0400] slapd shutting down - freed 0 work q stack objects - freed 0 op stack objects
[07/Jul/2016:08:15:12.988421155 -0400] slapd stopped.
[07/Jul/2016:08:15:13.246511354 -0400] 389-Directory/1.3.5.10 B2016.182.29 starting up
[07/Jul/2016:08:15:13.261900963 -0400] resizing max db lock count: 10000 -> 50000
[07/Jul/2016:08:15:13.397515788 -0400] slapd started.  Listening on All Interfaces port 389 for LDAP requests
[07/Jul/2016:08:15:13.484174372 -0400] The change of nsslapd-ldapilisten will not take effect until the server is restarted
[07/Jul/2016:08:15:13.619843607 -0400] default_mr_indexer_create: warning - plugin [caseIgnoreIA5Match] does not handle caseExactIA5Match
[07/Jul/2016:08:15:14.073033766 -0400] slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
[07/Jul/2016:08:15:14.076854792 -0400] slapd shutting down - closing down internal subsystems and plugins
[07/Jul/2016:08:15:14.086556267 -0400] Waiting for 4 database threads to stop
[07/Jul/2016:08:15:14.320899323 -0400] All database threads now stopped
[07/Jul/2016:08:15:14.328675726 -0400] slapd shutting down - freed 1 work q stack objects - freed 1 op stack objects
[07/Jul/2016:08:15:14.398058597 -0400] slapd stopped.
[07/Jul/2016:08:15:14.561234304 -0400] 389-Directory/1.3.5.10 B2016.182.29 starting up
[07/Jul/2016:08:15:14.574421118 -0400] default_mr_indexer_create: warning - plugin [caseIgnoreIA5Match] does not handle caseExactIA5Match
[07/Jul/2016:08:15:14.697751541 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[07/Jul/2016:08:15:14.701103206 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 408]: Failed to get default realm?!
[07/Jul/2016:08:15:14.717194019 -0400] slapd started.  Listening on All Interfaces port 389 for LDAP requests
[07/Jul/2016:08:15:14.718737666 -0400] Listening on /var/run/slapd-EXAMPLE-TEST.socket for LDAPI requests
[07/Jul/2016:08:15:15.151436516 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.
[07/Jul/2016:08:15:15.258827035 -0400] NSACLPlugin - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:15.266108096 -0400] NSACLPlugin - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:15.272392540 -0400] NSACLPlugin - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:15.278914804 -0400] NSACLPlugin - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:15.285221937 -0400] NSACLPlugin - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:15.292084883 -0400] NSACLPlugin - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:15.426693746 -0400] memberof-plugin - Memberof task starts (arg: (objectclass=*)) ...
[07/Jul/2016:08:15:15.537239462 -0400] memberof-plugin - Memberof task finished (arg: (objectclass=*)) ...
[07/Jul/2016:08:15:16.716394196 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing
[07/Jul/2016:08:15:16.719498173 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica
[07/Jul/2016:08:15:20.762244095 -0400] slapd shutting down - signaling operation threads - op stack size 2 max work q size 2 max work q stack size 2
[07/Jul/2016:08:15:20.768377683 -0400] slapd shutting down - waiting for 28 threads to terminate
[07/Jul/2016:08:15:20.770314265 -0400] slapd shutting down - closing down internal subsystems and plugins
[07/Jul/2016:08:15:20.784172990 -0400] Waiting for 4 database threads to stop
[07/Jul/2016:08:15:21.598787631 -0400] All database threads now stopped
[07/Jul/2016:08:15:21.613793811 -0400] slapd shutting down - freed 2 work q stack objects - freed 2 op stack objects
[07/Jul/2016:08:15:21.724065176 -0400] slapd stopped.
[07/Jul/2016:08:15:21.885212182 -0400] 389-Directory/1.3.5.10 B2016.182.29 starting up
[07/Jul/2016:08:15:21.897577222 -0400] default_mr_indexer_create: warning - plugin [caseIgnoreIA5Match] does not handle caseExactIA5Match
[07/Jul/2016:08:15:21.912839605 -0400] schema-compat-plugin - scheduled schema-compat-plugin tree scan in about 5 seconds after the server startup!
[07/Jul/2016:08:15:21.921990960 -0400] NSACLPlugin - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:21.924076239 -0400] NSACLPlugin - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:21.926268255 -0400] NSACLPlugin - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:21.927637316 -0400] NSACLPlugin - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:21.929132738 -0400] NSACLPlugin - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:21.930404092 -0400] NSACLPlugin - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:15:22.021612353 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.
[07/Jul/2016:08:15:22.028507575 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[07/Jul/2016:08:15:22.031041951 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 408]: Failed to get default realm?!
[07/Jul/2016:08:15:22.038841209 -0400] schema-compat-plugin - schema-compat-plugin tree scan will start in about 5 seconds!
[07/Jul/2016:08:15:22.041900312 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.
[07/Jul/2016:08:15:22.047284510 -0400] slapd started.  Listening on All Interfaces port 389 for LDAP requests
[07/Jul/2016:08:15:22.048561660 -0400] Listening on /var/run/slapd-EXAMPLE-TEST.socket for LDAPI requests
[07/Jul/2016:08:15:22.093834911 -0400] The change of nsslapd-maxdescriptors will not take effect until the server is restarted
[07/Jul/2016:08:15:27.047442948 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=example,dc=test
[07/Jul/2016:08:15:27.081493129 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=example,dc=test
[07/Jul/2016:08:15:27.170863773 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=example,dc=test
[07/Jul/2016:08:15:27.196171189 -0400] schema-compat-plugin - Finished plugin initialization.
[07/Jul/2016:08:15:32.116294116 -0400] ipa-topology-plugin - ipa_topo_be_state_change - backend ipaca is coming online; checking domain level and init shared topology
[07/Jul/2016:08:15:32.129293613 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.
[07/Jul/2016:08:15:42.125588737 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing
[07/Jul/2016:08:15:42.148836065 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica
[07/Jul/2016:08:15:52.159583225 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: replica already exists
[07/Jul/2016:08:15:52.169024069 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing
[07/Jul/2016:08:15:52.178504605 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica
[07/Jul/2016:08:16:26.146286957 -0400] ipaca: Indexing VLV: allCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.151951456 -0400] ipaca: Indexing VLV: allExpiredCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.154418664 -0400] ipaca: Indexing VLV: allInvalidCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.156725013 -0400] ipaca: Indexing VLV: allInValidCertsNotBefore-pki-tomcatIndex
[07/Jul/2016:08:16:26.159107397 -0400] ipaca: Indexing VLV: allNonRevokedCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.161781677 -0400] ipaca: Indexing VLV: allRevokedCaCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.164052832 -0400] ipaca: Indexing VLV: allRevokedCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.166255039 -0400] ipaca: Indexing VLV: allRevokedCertsNotAfter-pki-tomcatIndex
[07/Jul/2016:08:16:26.168437323 -0400] ipaca: Indexing VLV: allRevokedExpiredCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.170381059 -0400] ipaca: Indexing VLV: allRevokedOrRevokedExpiredCaCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.172388490 -0400] ipaca: Indexing VLV: allRevokedOrRevokedExpiredCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.174442605 -0400] ipaca: Indexing VLV: allValidCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.176413138 -0400] ipaca: Indexing VLV: allValidCertsNotAfter-pki-tomcatIndex
[07/Jul/2016:08:16:26.178595865 -0400] ipaca: Indexing VLV: allValidOrRevokedCerts-pki-tomcatIndex
[07/Jul/2016:08:16:26.180687650 -0400] ipaca: Indexing VLV: caAll-pki-tomcatIndex
[07/Jul/2016:08:16:26.182761739 -0400] ipaca: Indexing VLV: caCanceled-pki-tomcatIndex
[07/Jul/2016:08:16:26.184783348 -0400] ipaca: Indexing VLV: caCanceledEnrollment-pki-tomcatIndex
[07/Jul/2016:08:16:26.186799696 -0400] ipaca: Indexing VLV: caCanceledRenewal-pki-tomcatIndex
[07/Jul/2016:08:16:26.188780077 -0400] ipaca: Indexing VLV: caCanceledRevocation-pki-tomcatIndex
[07/Jul/2016:08:16:26.190694504 -0400] ipaca: Indexing VLV: caComplete-pki-tomcatIndex
[07/Jul/2016:08:16:26.192810980 -0400] ipaca: Indexing VLV: caCompleteEnrollment-pki-tomcatIndex
[07/Jul/2016:08:16:26.194851874 -0400] ipaca: Indexing VLV: caCompleteRenewal-pki-tomcatIndex
[07/Jul/2016:08:16:26.196843634 -0400] ipaca: Indexing VLV: caCompleteRevocation-pki-tomcatIndex
[07/Jul/2016:08:16:26.198866187 -0400] ipaca: Indexing VLV: caEnrollment-pki-tomcatIndex
[07/Jul/2016:08:16:26.200875496 -0400] ipaca: Indexing VLV: caPending-pki-tomcatIndex
[07/Jul/2016:08:16:26.202869099 -0400] ipaca: Indexing VLV: caPendingEnrollment-pki-tomcatIndex
[07/Jul/2016:08:16:26.205022663 -0400] ipaca: Indexing VLV: caPendingRenewal-pki-tomcatIndex
[07/Jul/2016:08:16:26.206919163 -0400] ipaca: Indexing VLV: caPendingRevocation-pki-tomcatIndex
[07/Jul/2016:08:16:26.208788726 -0400] ipaca: Indexing VLV: caRejected-pki-tomcatIndex
[07/Jul/2016:08:16:26.210746628 -0400] ipaca: Indexing VLV: caRejectedEnrollment-pki-tomcatIndex
[07/Jul/2016:08:16:26.212972107 -0400] ipaca: Indexing VLV: caRejectedRenewal-pki-tomcatIndex
[07/Jul/2016:08:16:26.214894986 -0400] ipaca: Indexing VLV: caRejectedRevocation-pki-tomcatIndex
[07/Jul/2016:08:16:26.216871297 -0400] ipaca: Indexing VLV: caRenewal-pki-tomcatIndex
[07/Jul/2016:08:16:26.218726719 -0400] ipaca: Indexing VLV: caRevocation-pki-tomcatIndex
[07/Jul/2016:08:16:26.220289107 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.221560940 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.222815444 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.224124943 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.225297876 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.226526881 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.227797291 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.229049075 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.230298652 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.231531709 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.232794374 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.233979235 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.235244943 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.236521117 -0400] warning: ancestorid not indexed on 21; possibly, the entry id 21 has no descendants yet.
[07/Jul/2016:08:16:26.237806708 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.239058904 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.240296667 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.241530802 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.242811130 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.244064107 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.245268497 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.246519021 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.249838396 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.251176784 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.252439895 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.253747778 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.255059845 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.256320669 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.257516146 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.258800774 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.260069797 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.261272336 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.262518110 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.263759896 -0400] warning: ancestorid not indexed on 23; possibly, the entry id 23 has no descendants yet.
[07/Jul/2016:08:16:26.271935657 -0400] ipaca: Finished indexing.
[07/Jul/2016:08:16:45.537304887 -0400] connection - conn=41 fd=72 Attempt to release connection that is not acquired
[07/Jul/2016:08:17:30.639444170 -0400] Warning: Adding configuration attribute "nsslapd-security"
[07/Jul/2016:08:17:31.164510015 -0400] slapd shutting down - signaling operation threads - op stack size 15 max work q size 18 max work q stack size 18
[07/Jul/2016:08:17:31.167809380 -0400] slapd shutting down - waiting for 27 threads to terminate
[07/Jul/2016:08:17:31.169413796 -0400] slapd shutting down - closing down internal subsystems and plugins
[07/Jul/2016:08:17:31.186432060 -0400] Waiting for 4 database threads to stop
[07/Jul/2016:08:17:31.448391523 -0400] All database threads now stopped
[07/Jul/2016:08:17:31.469923316 -0400] slapd shutting down - freed 18 work q stack objects - freed 18 op stack objects
[07/Jul/2016:08:17:32.362640114 -0400] slapd stopped.
[07/Jul/2016:08:17:32.559664013 -0400] SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password.
[07/Jul/2016:08:17:32.565241795 -0400] SSL alert: Security Initialization: Enabling default cipher set.
[07/Jul/2016:08:17:32.567206006 -0400] SSL alert: Configured NSS Ciphers
[07/Jul/2016:08:17:32.568722852 -0400] SSL alert: 	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled
[07/Jul/2016:08:17:32.570109086 -0400] SSL alert: 	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[07/Jul/2016:08:17:32.571655967 -0400] SSL alert: 	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[07/Jul/2016:08:17:32.573059117 -0400] SSL alert: 	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[07/Jul/2016:08:17:32.574247167 -0400] SSL alert: 	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled
[07/Jul/2016:08:17:32.575417480 -0400] SSL alert: 	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[07/Jul/2016:08:17:32.577102065 -0400] SSL alert: 	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[07/Jul/2016:08:17:32.578375486 -0400] SSL alert: 	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[07/Jul/2016:08:17:32.579637962 -0400] SSL alert: 	TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled
[07/Jul/2016:08:17:32.580809479 -0400] SSL alert: 	TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[07/Jul/2016:08:17:32.582000987 -0400] SSL alert: 	TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[07/Jul/2016:08:17:32.583101788 -0400] SSL alert: 	TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[07/Jul/2016:08:17:32.584225010 -0400] SSL alert: 	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[07/Jul/2016:08:17:32.585322942 -0400] SSL alert: 	TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[07/Jul/2016:08:17:32.586431270 -0400] SSL alert: 	TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[07/Jul/2016:08:17:32.587590207 -0400] SSL alert: 	TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[07/Jul/2016:08:17:32.588658938 -0400] SSL alert: 	TLS_RSA_WITH_AES_256_GCM_SHA384: enabled
[07/Jul/2016:08:17:32.589750303 -0400] SSL alert: 	TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[07/Jul/2016:08:17:32.591014450 -0400] SSL alert: 	TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[07/Jul/2016:08:17:32.592093534 -0400] SSL alert: 	TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[07/Jul/2016:08:17:32.593197916 -0400] SSL alert: 	TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[07/Jul/2016:08:17:32.594415010 -0400] SSL alert: 	TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[07/Jul/2016:08:17:32.614922280 -0400] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2
[07/Jul/2016:08:17:32.616783493 -0400] 389-Directory/1.3.5.10 B2016.182.29 starting up
[07/Jul/2016:08:17:32.631733578 -0400] default_mr_indexer_create: warning - plugin [caseIgnoreIA5Match] does not handle caseExactIA5Match
[07/Jul/2016:08:17:32.649546373 -0400] attrcrypt - No symmetric key found for cipher AES in backend userRoot, attempting to create one...
[07/Jul/2016:08:17:32.657934395 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[07/Jul/2016:08:17:32.659497574 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one...
[07/Jul/2016:08:17:32.666667315 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[07/Jul/2016:08:17:32.668962948 -0400] attrcrypt - No symmetric key found for cipher AES in backend ipaca, attempting to create one...
[07/Jul/2016:08:17:32.675879945 -0400] attrcrypt - Key for cipher AES successfully generated and stored
[07/Jul/2016:08:17:32.676908038 -0400] attrcrypt - No symmetric key found for cipher 3DES in backend ipaca, attempting to create one...
[07/Jul/2016:08:17:32.683972093 -0400] attrcrypt - Key for cipher 3DES successfully generated and stored
[07/Jul/2016:08:17:32.693950374 -0400] schema-compat-plugin - scheduled schema-compat-plugin tree scan in about 5 seconds after the server startup!
[07/Jul/2016:08:17:32.702306525 -0400] NSACLPlugin - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:17:32.703638124 -0400] NSACLPlugin - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:17:32.704760003 -0400] NSACLPlugin - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:17:32.705997142 -0400] NSACLPlugin - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:17:32.707230437 -0400] NSACLPlugin - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:17:32.709573956 -0400] NSACLPlugin - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:17:32.809709200 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.
[07/Jul/2016:08:17:32.817037170 -0400] ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
[07/Jul/2016:08:17:32.819889717 -0400] ipaenrollment_start - [file ipa_enrollment.c, line 408]: Failed to get default realm?!
[07/Jul/2016:08:17:32.828254340 -0400] schema-compat-plugin - schema-compat-plugin tree scan will start in about 5 seconds!
[07/Jul/2016:08:17:32.830985692 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.
[07/Jul/2016:08:17:32.838852578 -0400] slapd started.  Listening on All Interfaces port 389 for LDAP requests
[07/Jul/2016:08:17:32.840243169 -0400] Listening on All Interfaces port 636 for LDAPS requests
[07/Jul/2016:08:17:32.841721103 -0400] Listening on /var/run/slapd-EXAMPLE-TEST.socket for LDAPI requests
[07/Jul/2016:08:17:37.836319687 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=example,dc=test
[07/Jul/2016:08:17:37.842008048 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=example,dc=test
[07/Jul/2016:08:17:37.845006964 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=example,dc=test
[07/Jul/2016:08:17:37.846550647 -0400] schema-compat-plugin - Finished plugin initialization.
[07/Jul/2016:08:17:53.833530698 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing
[07/Jul/2016:08:17:53.836957668 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica
[07/Jul/2016:08:23:01.828074214 -0400] slapd shutting down - signaling operation threads - op stack size 4 max work q size 4 max work q stack size 4
[07/Jul/2016:08:23:01.861188440 -0400] slapd shutting down - waiting for 24 threads to terminate
[07/Jul/2016:08:23:01.934165069 -0400] slapd shutting down - closing down internal subsystems and plugins
[07/Jul/2016:08:23:02.005567857 -0400] Waiting for 4 database threads to stop
[07/Jul/2016:08:23:02.975235766 -0400] All database threads now stopped
[07/Jul/2016:08:23:03.001462827 -0400] slapd shutting down - freed 4 work q stack objects - freed 7 op stack objects
[07/Jul/2016:08:23:03.224635557 -0400] slapd stopped.
[07/Jul/2016:08:23:03.554937106 -0400] Information: Non-Secure Port Disabled
[07/Jul/2016:08:23:03.634414804 -0400] 389-Directory/1.3.5.10 B2016.182.29 starting up
[07/Jul/2016:08:23:03.650481895 -0400] default_mr_indexer_create: warning - plugin [caseIgnoreIA5Match] does not handle caseExactIA5Match
[07/Jul/2016:08:23:03.678050636 -0400] schema-compat-plugin - scheduled schema-compat-plugin tree scan in about 5 seconds after the server startup!
[07/Jul/2016:08:23:03.688408043 -0400] NSACLPlugin - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:23:03.690452130 -0400] NSACLPlugin - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:23:03.691838808 -0400] NSACLPlugin - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:23:03.693351042 -0400] NSACLPlugin - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:23:03.694754771 -0400] NSACLPlugin - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:23:03.696160464 -0400] NSACLPlugin - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:23:03.806699777 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.
[07/Jul/2016:08:23:03.825618408 -0400] schema-compat-plugin - schema-compat-plugin tree scan will start in about 5 seconds!
[07/Jul/2016:08:23:03.828590920 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.
[07/Jul/2016:08:23:03.839121400 -0400] slapd started.  Listening on /var/run/slapd-EXAMPLE-TEST.socket for LDAPI requests
[07/Jul/2016:08:23:07.218188186 -0400] NSACLPlugin - The ACL target cn=replication managers,cn=sysaccounts,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:23:07.393917217 -0400] NSACLPlugin - The ACL target cn=replication managers,cn=sysaccounts,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:23:07.401368109 -0400] NSACLPlugin - The ACL target cn=replication,cn=etc,dc=example,dc=test does not exist
[07/Jul/2016:08:23:08.833305005 -0400] schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=example,dc=test
[07/Jul/2016:08:23:08.837693119 -0400] schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=example,dc=test
[07/Jul/2016:08:23:08.840536896 -0400] schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=example,dc=test
[07/Jul/2016:08:23:08.841746424 -0400] schema-compat-plugin - Finished plugin initialization.
[07/Jul/2016:08:23:12.492221920 -0400] userRoot: Indexing attribute: ipaOriginalUid
[07/Jul/2016:08:23:12.527157512 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:23:18.521855650 -0400] userRoot: Indexing attribute: ipaOriginalUid
[07/Jul/2016:08:23:18.543399336 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:23:24.547387810 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing
[07/Jul/2016:08:23:24.554668033 -0400] ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica
[07/Jul/2016:08:23:24.563020780 -0400] userRoot: Indexing attribute: memberuid
[07/Jul/2016:08:23:24.583091769 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:23:30.611048433 -0400] userRoot: Indexing attribute: member
[07/Jul/2016:08:23:30.660757501 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:23:36.643313650 -0400] userRoot: Indexing attribute: uniquemember
[07/Jul/2016:08:23:36.668495780 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:23:43.669040356 -0400] userRoot: Indexing attribute: owner
[07/Jul/2016:08:23:43.696259657 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:23:49.719355791 -0400] userRoot: Indexing attribute: seeAlso
[07/Jul/2016:08:23:49.739494225 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:23:55.799947957 -0400] userRoot: Indexing attribute: ipatokenradiusconfiglink
[07/Jul/2016:08:23:55.820630513 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:24:01.830137286 -0400] userRoot: Indexing attribute: ipaassignedidview
[07/Jul/2016:08:24:01.850736546 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:24:07.863626929 -0400] userRoot: Indexing attribute: ipaallowedtarget
[07/Jul/2016:08:24:07.890535464 -0400] userRoot: Finished indexing.
[07/Jul/2016:08:24:09.164321164 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.
[07/Jul/2016:08:24:09.172156597 -0400] Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=test--no CoS Templates found, which should be added before the CoS Definition.

As for AVC denials, there are just those

type=AVC msg=audit(1467893820.261:180): avc:  denied  { write } for  pid=13102 comm="dogtag-ipa-ca-r" name="log" dev="dm-0" ino=67239268 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=dir
type=AVC msg=audit(1467893820.261:180): avc:  denied  { add_name } for  pid=13102 comm="dogtag-ipa-ca-r" name="ipa" scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=dir
type=AVC msg=audit(1467893820.261:180): avc:  denied  { create } for  pid=13102 comm="dogtag-ipa-ca-r" name="ipa" scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=dir
type=AVC msg=audit(1467893820.261:181): avc:  denied  { create } for  pid=13102 comm="dogtag-ipa-ca-r" name="renew.log" scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file
type=AVC msg=audit(1467893820.261:181): avc:  denied  { open } for  pid=13102 comm="dogtag-ipa-ca-r" path="/var/log/ipa/renew.log" dev="dm-0" ino=1007813 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file

nothing which would seem related to directory server.
Comment 5 Jan Pazdziora 2016-07-07 15:40:11 UTC 
With comment 4, clearing the needinfo.
Comment 6 Petr Spacek 2016-07-11 08:37:46 UTC 
I was installing in permissive mode few days ago and it worked for me. Maybe it was just accidental directory server crash not related to the permissive mode?
Comment 7 Jan Pazdziora 2016-07-11 09:16:12 UTC 
I confirm that I see the bug in Enforcing as well.
Comment 9 thierry bordaz 2016-07-11 15:24:35 UTC 

Directory crashes because of a double free while priming the schema compat cache. So it crashes in the 5 sec. following startup.

==7161== Thread 35:
==7161== Invalid free() / delete / delete[] / realloc()
==7161==    at 0x4C28CDD: free (vg_replace_malloc.c:530)
==7161==    by 0x4E88215: slapi_ch_free (ch_malloc.c:292)
==7161==    by 0x16CED365: backend_set_config_read_config (back-sch.c:294)
==7161==    by 0x16CF2999: backend_shr_set_config_entry_add (back-shr.c:457)
==7161==    by 0x16CED86C: backend_set_config_entry_add_cb (back-sch.c:865)
==7161==    by 0x16CEE610: backend_shr_data_initialize_thread_cb (back-shr.c:755)
==7161==    by 0x16CFFE86: wrap_pthread_starter (wrap.c:99)
==7161==    by 0x6D0496A: _pt_root (ptthread.c:212)
==7161==    by 0x7344DC4: start_thread (pthread_create.c:308)
==7161==    by 0x76506EC: clone (clone.S:113)
==7161==  Address 0x102bd6a0 is 0 bytes inside a block of size 184 free'd
==7161==    at 0x4C28CDD: free (vg_replace_malloc.c:530)
==7161==    by 0x4E88215: slapi_ch_free (ch_malloc.c:292)
==7161==    by 0x4E971B3: slapi_entry_free (entry.c:2028)
==7161==    by 0x16CED34D: backend_set_config_read_config (back-sch.c:290)
==7161==    by 0x16CF2999: backend_shr_set_config_entry_add (back-shr.c:457)
==7161==    by 0x16CED86C: backend_set_config_entry_add_cb (back-sch.c:865)
==7161==    by 0x16CEE610: backend_shr_data_initialize_thread_cb (back-shr.c:755)
==7161==    by 0x16CFFE86: wrap_pthread_starter (wrap.c:99)
==7161==    by 0x6D0496A: _pt_root (ptthread.c:212)
==7161==    by 0x7344DC4: start_thread (pthread_create.c:308)
==7161==    by 0x76506EC: clone (clone.S:113)
==7161==  Block was alloc'd at
==7161==    at 0x4C29975: calloc (vg_replace_malloc.c:711)
==7161==    by 0x4E87F30: slapi_ch_calloc (ch_malloc.c:188)
==7161==    by 0x4E9707F: slapi_entry_alloc (entry.c:1957)
==7161==    by 0x4E974D1: slapi_entry_dup (entry.c:2107)
==7161==    by 0x4EDDD83: internal_plugin_search_entry_callback (plugin_internal_op.c:575)
==7161==    by 0x4EF029C: send_ldap_search_entry_ext (result.c:1519)
==7161==    by 0x4EF0B2B: send_ldap_search_entry (result.c:1056)
==7161==    by 0x4ECC938: iterate.isra.0.constprop.3 (opshared.c:1476)
==7161==    by 0x4ECCA89: send_results_ext.constprop.2 (opshared.c:1717)
==7161==    by 0x4ECE4F0: op_shared_search (opshared.c:867)
==7161==    by 0x4EDEBBD: search_internal_callback_pb (plugin_internal_op.c:783)
==7161==    by 0x4EDEE57: search_internal_pb (plugin_internal_op.c:636)
==7161==    by 0x16CED2A8: backend_set_config_read_config (back-sch.c:283)
==7161==    by 0x16CF2999: backend_shr_set_config_entry_add (back-shr.c:457)
==7161==    by 0x16CED86C: backend_set_config_entry_add_cb (back-sch.c:865)
==7161==    by 0x16CEE610: backend_shr_data_initialize_thread_cb (back-shr.c:755)
==7161==    by 0x16CFFE86: wrap_pthread_starter (wrap.c:99)
==7161==    by 0x6D0496A: _pt_root (ptthread.c:212)
==7161==    by 0x7344DC4: start_thread (pthread_create.c:308)
==7161==    by 0x76506EC: clone (clone.S:113)


Was able to reproduce with beaker job but not with freeipa build.

The component should be changed to slapi-nis
Comment 13 thierry bordaz 2016-07-12 15:07:03 UTC 
Created attachment 1178947 [details]
Use of slapi_free_search_results_internal to free the retrieved entries

The crash was systematic on beaker https://beaker.engineering.redhat.com/jobs/1400161 and then at each 'systemctl start dirsrv'

With the patch, install is successful and restart as well
Comment 14 Martin Kosek 2016-07-13 07:41:00 UTC 
Is Thierry's patch included in the fixed build?
Comment 15 Alexander Bokovoy 2016-07-13 07:48:30 UTC 
No. The fixed build includes updated original patch for SSSD 1.14 compatibility. Since that patch is committed upstream, we need Thierry's patch for upstream only.
Comment 16 Pavel Picka 2016-09-16 07:54:10 UTC 
Created attachment 1201553 [details]
evidence

Verified 

4.4.0-11
Comment 18 errata-xmlrpc 2016-11-04 07:06:04 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2471.html
Note You need to log in before you can comment on or make changes to this bug.