Description
Issue Description
https://issues.redhat.com/browse/RHCS-5299
VLV search sometime fails with LDAP_OPERATION error
And error log contains
ERR - vlv_build_idl - Can't follow db cursor (err -12797)
Package Version and Platform:
- Platform: [e.g. Fedora] Fedora 40
- Package and version: [e.g. 389-ds-base-3.0.1.2
Steps to Reproduce
Steps to reproduce the behavior:
- Prepare a F40 test machine
1minutetip 1MT-Fedora-40 - . Install and launch the following script
#!/bin/bash
git clone https://github.com/freeipa/freeipa.git
cd freeipa/
dnf builddep -D "with_wheels 1" -D "with_lint 1" -D "with_doc 1" --spec freeipa.spec.in --best --allowerasing --setopt=install_weak_deps=False -y
bash makerpms.sh
dnf localinstall dist/rpms/* -y
ipa-server-install -a password -p dmpassword -r EXAMPLE.TEST -U --setup-dns --allow-zone-overlap --no-forwarders -N --auto-reverse --random-serial-numbers
mkdir ~/.ipa
cp /etc/ipa/default.conf ~/.ipa
cp /etc/ipa/ca.crt ~/.ipa
echo password | kinit admin
PYTHONPATH=. ipatests/ipa-run-tests -sv test_xmlrpc/test_cert_plugin.py
grep vlv_build_idl /var/log/dirsrv/slapd-EXAMPLE-TEST/errors
- See the errors:
- Some tests are FAIL
- Error log show message like:
[17/Sep/2024:18:54:05.250571209 +0000] - ERR - vlv_build_idl - Can't follow db cursor (err -12797) - Access log shows that a VLV operation fails with err=1
[26/Sep/2024:10:32:12.175793074 -0400] conn=17 op=315 SRCH base="ou=certificateRepository,ou=ca,o=ipaca" scope=1 filter="(certStatus=*)" attrs=ALL
[26/Sep/2024:10:32:12.179149635 -0400] conn=17 op=315 VLV 0:100:A None
[26/Sep/2024:10:32:12.179157931 -0400] conn=17 op=315 SORT serialno
[26/Sep/2024:10:32:12.179836172 -0400] conn=17 op=315 RESULT err=1 tag=101 nentries=0 wtime=0.000129631 optime=0.004046465 etime=0.004173324
Note: the VLV and SORT control may be missing becaise of #6328
Error lo
Expected result
All tests are PASS
Search should success
And no error should be logged.
***See Also ***
Triaged: https://issues.redhat.com/browse/IDMDS-4698