Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cloning fails on F33 #3379

Closed
edewata opened this issue Nov 13, 2020 · 0 comments · Fixed by #3380
Closed

Cloning fails on F33 #3379

edewata opened this issue Nov 13, 2020 · 0 comments · Fixed by #3380

Comments

@edewata
Copy link
Contributor

edewata commented Nov 13, 2020

As part of cloning process, PKI normally adds cn=changelog5,cn=config into DS. This operation works fine on F31 and F32, but fails on F33 due to changelog changes in DS:

Here's the log:
https://github.com/edewata/pki/runs/1393575646#step:21:522

SEVERE: Unable to add cn=changelog5,cn=config: error result
netscape.ldap.LDAPException: error result (53); Changelog configuration is part of the backend configuration; LDAP server is unwilling to perform
	at netscape.ldap.LDAPConnection.checkMsg(Unknown Source)
	at netscape.ldap.LDAPConnection.add(Unknown Source)
	at netscape.ldap.LDAPConnection.add(Unknown Source)
	at netscape.ldap.LDAPConnection.add(Unknown Source)
	at com.netscape.cms.servlet.csadmin.LDAPConfigurator.createChangeLog(LDAPConfigurator.java:720)
	at com.netscape.cms.servlet.csadmin.LDAPConfigurator.setupReplicationAgreement(LDAPConfigurator.java:873)
	at org.dogtagpki.server.cli.SubsystemDBInitCLI.setupReplicationAgreements(SubsystemDBInitCLI.java:329)
	at org.dogtagpki.server.cli.SubsystemDBInitCLI.setupReplication(SubsystemDBInitCLI.java:264)
	at org.dogtagpki.server.cli.SubsystemDBInitCLI.execute(SubsystemDBInitCLI.java:171)
	at org.dogtagpki.cli.CommandCLI.execute(CommandCLI.java:57)
	at org.dogtagpki.cli.CLI.execute(CLI.java:352)
	at org.dogtagpki.cli.CLI.execute(CLI.java:352)
	at org.dogtagpki.cli.CLI.execute(CLI.java:352)
	at org.dogtagpki.server.cli.PKIServerCLI.execute(PKIServerCLI.java:92)
	at org.dogtagpki.server.cli.PKIServerCLI.main(PKIServerCLI.java:122)
edewata added a commit to edewata/pki that referenced this issue Nov 13, 2020
Since Fedora 33 the DS changelog has moved and will be
created automatically when the replication is enabled. Also,
the operation to add the old changelog will fail with LDAP
error 53. However, in older DS versions the old changelog
still needs to be added manually. To support all DS versions
the code will now ignore LDAP error 53.

dogtagpki#3379
edewata added a commit to edewata/pki that referenced this issue Nov 14, 2020
Since Fedora 33 the DS changelog has moved and will be
created automatically when the replication is enabled. Also,
the operation to add the old changelog will fail with LDAP
error 53. However, in older DS versions the old changelog
still needs to be added manually. To support all DS versions
the code will now ignore LDAP error 53.

dogtagpki#3379
edewata added a commit that referenced this issue Nov 16, 2020
Since Fedora 33 the DS changelog has moved and will be
created automatically when the replication is enabled. Also,
the operation to add the old changelog will fail with LDAP
error 53. However, in older DS versions the old changelog
still needs to be added manually. To support all DS versions
the code will now ignore LDAP error 53.

#3379
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant