Apparently postop operation of the retrocl plugin are being called even though the plugin is not enabled in cn=config. See also bug #656392 for the context in which this was determined.
This is the actual retrocl plugin configuration in my dse.ldif file: dn: cn=Retro Changelog Plugin,cn=plugins,cn=config objectClass: top objectClass: nsSlapdPlugin objectClass: extensibleObject cn: Retro Changelog Plugin nsslapd-pluginPath: libretrocl-plugin nsslapd-pluginInitfunc: retrocl_plugin_init nsslapd-pluginType: object nsslapd-pluginEnabled: off nsslapd-pluginprecedence: 25 nsslapd-plugin-depends-on-type: database nsslapd-plugin-depends-on-named: Class of Service nsslapd-pluginId: retrocl nsslapd-pluginVersion: 1.2.7 nsslapd-pluginVendor: 389 Project nsslapd-pluginDescription: Retrocl Plugin
Upstream ticket: https://fedorahosted.org/389/ticket/75
Fixed. See https://fedorahosted.org/389/ticket/75#comment:7 for the steps to verify.
dn: cn=USN,cn=plugins,cn=config objectClass: top objectClass: nsSlapdPlugin objectClass: extensibleObject cn: USN nsslapd-pluginPath: libusn-plugin nsslapd-pluginInitfunc: usn_init nsslapd-pluginType: object nsslapd-pluginEnabled: off [root@dhcp201-174 ~]# ldapmodify -x -h localhost -p 13070 -D "cn=directory manager" -w Secret123 <<EOF > dn: cn=config > changetype: modify > replace: nsslapd-errorlog-level > nsslapd-errorlog-level: 1 > EOF modifying entry "cn=config" After add/delete [root@dhcp201-174 ~]# cat /var/log/dirsrv/slapd-M1/errors | grep -i usn [root@dhcp201-174 ~]# cat /var/log/dirsrv/slapd-M1/errors | grep -i "usn_" [root@dhcp201-174 ~]# Hence VERIFIED