Thursday, July 4, 2024

[389-users] Re: Enable SSHA hashing scheme

[04/Jul/2024:12:41:42.027555149 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry()
[04/Jul/2024:12:41:42.031430884 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry()
[04/Jul/2024:12:41:42.039607070 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.042416637 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.044692905 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=monitor,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.046803034 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.049128551 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=bdb,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.051758457 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.054191408 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=database,cn=monitor,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.056441356 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=encrypted attribute keys,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.058700490 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=encrypted attributes,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.061406601 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.063812375 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=monitor,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.065987908 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=aci,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.068342124 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=cn,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.070688572 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=entryusn,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.073184717 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=givenname,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.075381523 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=mail,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.077583550 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=mailalternateaddress,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.079917714 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=mailhost,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.082211598 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=member,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.084350025 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=memberof,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.086681454 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=nstombstonecsn,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.089139969 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=nsuniqueid,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.091390711 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=ntuniqueid,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.094100050 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=ntuserdomainid,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.096978195 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=numsubordinates,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.099686406 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=objectclass,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.102539682 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=owner,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.105401332 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=parentid,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.108106296 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=seealso,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.111646110 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=sn,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.114483152 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=targetuniqueid,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.116487424 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=telephonenumber,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.118522528 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=uid,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.120569418 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=uniquemember,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.122588617 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=aci,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.124704468 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=cn,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.126983963 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=entryrdn,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.129022362 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=entryusn,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.131204221 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=givenname,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.133542544 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=mail,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.135843255 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=mailalternateaddress,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.137977340 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=mailhost,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.140181729 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=member,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.142329041 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=memberof,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.144778622 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=nscpentrydn,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.147396890 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=nsds5replconflict,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.150105534 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=nstombstonecsn,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.152761277 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=nsuniqueid,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.155508873 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=ntuniqueid,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.158046889 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=ntuserdomainid,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.160585960 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=numsubordinates,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.163212736 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=objectclass,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.165484727 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=owner,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.167665182 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=parentid,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.169753282 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=seealso,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.172103393 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=sn,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.174421479 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=targetuniqueid,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.176694950 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=telephonenumber,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.179189781 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=uid,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.181373350 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=2 (main): Allow search on entry(cn=uniquemember,cn=index,cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.183736267 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config)
[04/Jul/2024:12:41:42.187111971 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=3 (main): Allow search on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.189475504 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config)
[04/Jul/2024:12:41:42.192023558 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config)
[04/Jul/2024:12:41:42.194964734 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=4 (main): Allow search on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.197372796 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config)
[04/Jul/2024:12:41:42.199479076 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config)
[04/Jul/2024:12:41:42.202460764 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=5 (main): Allow search on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config): root user
[04/Jul/2024:12:41:42.204740092 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config)
[04/Jul/2024:12:41:42.206940792 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config)
[04/Jul/2024:12:41:42.210253081 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=6 (main): Allow add on entry(cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:42.212791991 +0200] - INFO - bdb_ldif2db - Bringing spenneberg_net offline...
[04/Jul/2024:12:41:42.215401615 +0200] - DEBUG - NSACLPlugin - acl_be_state_change_fnc - Backend spenneberg_net is no longer STARTED--deactivating it's acis
[04/Jul/2024:12:41:42.217949884 +0200] - DEBUG - NSACLPlugin - __aclinit_handler - Removing acis
[04/Jul/2024:12:41:42.220188761 +0200] - DEBUG - NSACLPlugin - acllist_remove_aci_needsLock - Removing container[1]=dc=spenneberg,dc=net
[04/Jul/2024:12:41:42.222667485 +0200] - DEBUG - NSACLPlugin - __aclinit_handler - Removing acis
[04/Jul/2024:12:41:42.225491733 +0200] - DEBUG - NSACLPlugin - acllist_remove_aci_needsLock - Removing container[2]=ou=people,dc=spenneberg,dc=net
[04/Jul/2024:12:41:42.228145605 +0200] - DEBUG - NSACLPlugin - __aclinit_handler - Removing acis
[04/Jul/2024:12:41:42.230875409 +0200] - DEBUG - NSACLPlugin - acllist_remove_aci_needsLock - No acis to remove in this entry
[04/Jul/2024:12:41:42.241495061 +0200] - INFO - bdb_instance_start - Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[04/Jul/2024:12:41:42.258358379 +0200] - INFO - bdb_public_bdb_import_main - import spenneberg_net: Beginning import job...
[04/Jul/2024:12:41:42.262034239 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=7 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:42.264696177 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.267283416 +0200] - INFO - bdb_public_bdb_import_main - import spenneberg_net: Index buffering enabled with bucket size 17
[04/Jul/2024:12:41:42.269500245 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=8 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:42.274115010 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.276600433 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.279460707 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=9 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:42.281592197 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.284305944 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.287355276 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=10 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:42.289484010 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.291981331 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.295340092 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.298382088 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.301551955 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.304713230 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.307791017 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.310920535 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.313922256 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.316953452 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:42.464391358 +0200] - INFO - bdb_import_producer - import spenneberg_net: Processing file "/userRoot.ldif"
[04/Jul/2024:12:41:42.475709911 +0200] - INFO - bdb_import_producer - import spenneberg_net: Finished scanning file "/userRoot.ldif" (36 entries)
[04/Jul/2024:12:41:42.773465593 +0200] - INFO - bdb_import_monitor_threads - import spenneberg_net: Workers finished; cleaning up...
[04/Jul/2024:12:41:42.978181882 +0200] - INFO - bdb_import_monitor_threads - import spenneberg_net: Workers cleaned up.
[04/Jul/2024:12:41:42.982231566 +0200] - INFO - bdb_public_bdb_import_main - import spenneberg_net: Cleaning up producer thread...
[04/Jul/2024:12:41:42.985401051 +0200] - INFO - bdb_public_bdb_import_main - import spenneberg_net: Indexing complete. Post-processing...
[04/Jul/2024:12:41:42.988873941 +0200] - INFO - bdb_public_bdb_import_main - import spenneberg_net: Generating numsubordinates (this may take several minutes to complete)...
[04/Jul/2024:12:41:42.996621297 +0200] - INFO - bdb_public_bdb_import_main - import spenneberg_net: Generating numSubordinates complete.
[04/Jul/2024:12:41:42.999939181 +0200] - INFO - bdb_get_nonleaf_ids - import spenneberg_net: Gathering ancestorid non-leaf IDs...
[04/Jul/2024:12:41:43.003356201 +0200] - INFO - bdb_get_nonleaf_ids - import spenneberg_net: Finished gathering ancestorid non-leaf IDs.
[04/Jul/2024:12:41:43.006569862 +0200] - INFO - ldbm_get_nonleaf_ids - import spenneberg_net: Starting sort of ancestorid non-leaf IDs...
[04/Jul/2024:12:41:43.010073599 +0200] - INFO - ldbm_get_nonleaf_ids - import spenneberg_net: Finished sort of ancestorid non-leaf IDs.
[04/Jul/2024:12:41:43.017396447 +0200] - INFO - bdb_ancestorid_new_idl_create_index - import spenneberg_net: Creating ancestorid index (new idl)...
[04/Jul/2024:12:41:43.021440371 +0200] - INFO - bdb_ancestorid_new_idl_create_index - import spenneberg_net: Created ancestorid index (new idl).
[04/Jul/2024:12:41:43.024438265 +0200] - INFO - bdb_public_bdb_import_main - import spenneberg_net: Flushing caches...
[04/Jul/2024:12:41:43.028652276 +0200] - INFO - bdb_public_bdb_import_main - import spenneberg_net: Closing files...
[04/Jul/2024:12:41:43.055541712 +0200] - INFO - bdb_public_bdb_import_main - import spenneberg_net: Import complete. Processed 36 entries in 1 seconds. (36.00 entries/sec)
[04/Jul/2024:12:41:43.068571620 +0200] - DEBUG - NSACLPlugin - acl_be_state_change_fnc - Backend spenneberg_net is now STARTED--activating it's acis
[04/Jul/2024:12:41:43.071669732 +0200] - DEBUG - NSACLPlugin - Adding acis for entry 'dc=spenneberg,dc=net'
[04/Jul/2024:12:41:43.074736601 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0; acl "Enable self write for common attributes";allow (read,compare,search,write)(userdn = "ldap:///self");
[04/Jul/2024:12:41:43.077666769 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added dc=spenneberg,dc=net to container:1
[04/Jul/2024:12:41:43.080661931 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0;acl "Directory Administrators Group";allow (all)(groupdn = "ldap:///cn=Directory Administrators,dc=spenneberg,dc=net" or roledn = "ldap:///cn=kolab-admin,dc=spenneberg,dc=net");
[04/Jul/2024:12:41:43.083572072 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added the ACL: "Directory Administrators Group" to existing container:[1]dc=spenneberg,dc=net
[04/Jul/2024:12:41:43.086264465 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0; acl "Configuration Administrators Group";allow (all) groupdn="ldap:///cn=Configuration Administrators,ou=Groups,ou=TopologyManagement,o=NetscapeRoot";
[04/Jul/2024:12:41:43.088553103 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added the ACL: "Configuration Administrators Group" to existing container:[1]dc=spenneberg,dc=net
[04/Jul/2024:12:41:43.091102108 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0; acl "Configuration Administrator";allow (all) userdn="ldap:///uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot";
[04/Jul/2024:12:41:43.093343287 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added the ACL: "Configuration Administrator" to existing container:[1]dc=spenneberg,dc=net
[04/Jul/2024:12:41:43.095824805 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0; acl "SIE Group";allow (all) groupdn = "ldap:///cn=slapd-xchg,cn=389 Directory Server,cn=Server Group,cn=xchg.spenneberg.net,ou=spenneberg.net,o=NetscapeRoot";
[04/Jul/2024:12:41:43.098410429 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added the ACL: "SIE Group" to existing container:[1]dc=spenneberg,dc=net
[04/Jul/2024:12:41:43.100994509 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0;acl "Search Access";allow (read,compare,search)(userdn = "ldap:///all");
[04/Jul/2024:12:41:43.103705300 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added the ACL: "Search Access" to existing container:[1]dc=spenneberg,dc=net
[04/Jul/2024:12:41:43.106164816 +0200] - DEBUG - NSACLPlugin - Adding acis for entry 'ou=People,dc=spenneberg,dc=net'
[04/Jul/2024:12:41:43.108556423 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0;acl "Allow self entry modification";allow (write)(userdn = "ldap:///self");
[04/Jul/2024:12:41:43.110942310 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added ou=people,dc=spenneberg,dc=net to container:2
[04/Jul/2024:12:41:43.113405895 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0;acl "Accounting Managers Group Permissions";allow (write)(groupdn = "ldap:///cn=Accounting Managers,ou=groups,dc=spenneberg,dc=net");
[04/Jul/2024:12:41:43.115795479 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added the ACL: "Accounting Managers Group Permissions" to existing container:[2]ou=people,dc=spenneberg,dc=net
[04/Jul/2024:12:41:43.118289789 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0;acl "HR Group Permissions";allow (write)(groupdn = "ldap:///cn=HR Managers,ou=groups,dc=spenneberg,dc=net");
[04/Jul/2024:12:41:43.120590048 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added the ACL: "HR Group Permissions" to existing container:[2]ou=people,dc=spenneberg,dc=net
[04/Jul/2024:12:41:43.123013072 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0;acl "QA Group Permissions";allow (write)(groupdn = "ldap:///cn=QA Managers,ou=groups,dc=spenneberg,dc=net");
[04/Jul/2024:12:41:43.125424542 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added the ACL: "QA Group Permissions" to existing container:[2]ou=people,dc=spenneberg,dc=net
[04/Jul/2024:12:41:43.127984585 +0200] - DEBUG - NSACLPlugin - __aclp__sanity_check_acltxt - Normalized String:version 3.0;acl "Engineering Group Permissions";allow (write)(groupdn = "ldap:///cn=PD Managers,ou=groups,dc=spenneberg,dc=net");
[04/Jul/2024:12:41:43.130520980 +0200] - DEBUG - NSACLPlugin - __acllist_add_aci - Added the ACL: "Engineering Group Permissions" to existing container:[2]ou=people,dc=spenneberg,dc=net
[04/Jul/2024:12:41:43.133000602 +0200] - DEBUG - NSACLPlugin - Adding acis for entry 'cn=kolab-admin,dc=spenneberg,dc=net'
[04/Jul/2024:12:41:44.323500027 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=11 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.327918374 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.331569517 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.335589463 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=12 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.338717635 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.341806831 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.345538541 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=13 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.348850284 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.351905663 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.355027699 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=14 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.357512719 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.359795911 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.362061919 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.364410303 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.366486401 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.368618618 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.370928686 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.373294305 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.375409601 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.377648446 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.379959145 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.383298658 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=15 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.385586533 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.388554486 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=16 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.390576979 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.392548161 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.395176161 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=17 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.397210381 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.399171646 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.401480055 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=18 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.403899328 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.406418248 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.409652147 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=19 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.412159640 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.414845889 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.417442189 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.420143828 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.422774649 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.425670655 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.428685616 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.431350464 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.433671527 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.435205465 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.437112311 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.438996941 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=20 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.440520103 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.443108575 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=21 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.445385880 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.447724835 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.450531967 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=22 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.452665153 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.454683551 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.457065169 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=23 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.459215278 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.461102257 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.464025261 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=24 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.466275177 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.468438848 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.470594697 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.472693175 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.474739709 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.476981311 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.479332487 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.481745822 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.484512374 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.487128528 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.489732266 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.493350000 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=25 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.496050571 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.499485699 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=26 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.502359117 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.505183402 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.508266658 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=27 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.510746958 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.513279300 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.516444190 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=28 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.518989391 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.521613400 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.525073951 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=29 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.527737205 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.530504925 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.533042903 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.535610430 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.538113423 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.540711133 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.543359906 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.545913854 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.548370523 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.550708422 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.553155476 +0200] - DEBUG - NSACLPlugin - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)
[04/Jul/2024:12:41:44.556718081 +0200] - DEBUG - NSACLPlugin - acl_access_allowed - conn=311 op=30 (main): Allow search on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config): root user
[04/Jul/2024:12:41:44.559132140 +0200] - DEBUG - NSACLPlugin - acl_read_access_allowed_on_entry - Root access (read) allowed on entry(cn=import_2024-07-04t12:41:42.209300,cn=import,cn=tasks,cn=config)

I will recreate the instance. Meanwhile here is the log

Kind regards,
Ralf


Am Do., 4. Juli 2024 um 13:24 Uhr schrieb Viktor Ashirov <vashirov@redhat.com>:
Hi Ralf,

On Thu, Jul 4, 2024 at 12:54 PM Ralf Spenneberg <rspenneberg@gmail.com> wrote:
Hi Viktor,

I do not see any errors. I attached the log but nothing stands out to me.
I don't see the log attached, could you please send it again? 

It was not a fresh instance but the migrated instance.

Then I removed the database:
dsconf -D "cn=Directory Manager" -W ldap://localhost backend delete spenneberg_net --do-it
Deleting Backend cn=spenneberg_net,cn=ldbm database,cn=plugins,cn=config :
Type 'Yes I am sure' to continue: Yes I am sure
The database, and any sub-suffixes, were successfully deleted
Please try on a fresh instance, not just the database. In the documentation we warn that the old dse.ldif should not be used. 
Thanks.

Recreated it:
dsconf -D "cn=Directory Manager" -W ldap://localhost backend create --suffix="dc=spenneberg,dc=net" --be-name=spenneberg_net
The database was sucessfully created

Did the import again:
dsconf -D "cn=Directory Manager" -Wi ldap://localhost backend import dc=spenneberg,dc=net /userRoot.ldif
The import task has finished successfully

If I try to authenticate again, it does not work:
ldapsearch -h localhost -x -b dc=spenneberg,dc=net -D "uid=kolab-service,ou=Special Users,dc=spenneberg,dc=net" -W
ldap_bind: Invalid credentials (49)

The user has a SSHA password:
{SSHA}+4ZcRhy2/7h5Du5x/1MO....

If I check the password, pwdhash states OK:
pwdhash -c {SSHA}+4ZcRhy2/7h5Du5x/1MO... qcG...
pwdhash: password ok.

If I reset the password using ldapmodify
dn: uid=kolab-service,ou=Special Users,dc=spenneberg,dc=net
changetype: modify
replace: userPassword
userPassword: qcG...

Now the user may access the tree again. I do not know, why the SSHA passwords are not honored.
Any ideas?

KInd regards,
Ralf


Am Do., 4. Juli 2024 um 12:37 Uhr schrieb Viktor Ashirov <vashirov@redhat.com>:
Hi Ralf,


On Thu, Jul 4, 2024 at 11:29 AM Ralf Spenneberg <rspenneberg@gmail.com> wrote:
Hi Viktor,
thanks a lot for the suggestion.
So I did an export of the old tree running on 1.3.11 using db2dif:
db2ldif -s "dc=xxx,dc=net" -a /tmp/userRoot.ldif
And I did an import in the new tree running on 2.4:
Is it a fresh instance or migrated from the old install? 

dsconf -D "cn=Directory Manager" -W ldap://localhost backend import dc=...,dc=net /userRoot.ldif
The import task has finished successfully
Do you see any errors in the errors log in /var/log/dirsrv/slapd-your_instance/errors related to import or NSS? 

Directly afterwards the passwords stopped working again. I had to reset them again. Is there any additional step required?
It should work, I did a quick test with export/import and SSHA passwords and the migrated users are able to bind with the old password. 

Please check the documentation:

Thanks.
 

Kind regards,
Ralf

Am Mi., 3. Juli 2024 um 18:26 Uhr schrieb Viktor Ashirov <vashirov@redhat.com>:


On Wed, Jul 3, 2024 at 3:48 PM Ralf Spenneberg <rspenneberg@gmail.com> wrote:
Actually I just upgrade the system from centos7 to almalinux9 using elevate. Essentially this is similar to a copy of the /etc/dirsrv and /var/lib/dirsrv directories and started the new ldapserver. 
We don't support or test in-place upgrades (leapp/elevate) and recommend using export/import or replication methods.

Directly afterwards I was not able to login using the cn=Directory Manager. I checked the hashed password in the dse.ldif  file (cn=config) using pwdhash. It was ok. 
Once I changed the password of the directory manager in the dse.ldif file after stopping the 389ds using PBKDF2-SHA512 hash, the Directory Manager was able to login. Other users required a reset of their password as well for successful login. But since I do not have access to all passwords I would rather reuse the old tree.
The nsslapd-allow-hashed-passwords is set to on.
Therefore I doubt that I have double hashed passwords. For the case of the Directory Manager I am positive.
And yes, dsconf lists SSHA in my case as well. Any ideas why this is not working?
Do you see any errors regarding NSS in the errors log?
NSS in EL7 was using an old datbase format, and if you just copied it to EL9, it's very likely to fail initialization. 


My passwordpolicy is quite open:
Global Password Policy: cn=config
------------------------------------
nsslapd-pwpolicy-local: off
passwordstoragescheme: SSHA512
passwordchange: on
passwordmustchange: off
passwordhistory: off
passwordinhistory: 6
passwordadmindn:
passwordtrackupdatetime: off
passwordwarning: 86400
passwordisglobalpolicy: off
passwordexp: off
passwordmaxage: 8640000
passwordminage: 0
passwordgracelimit: 0
passwordsendexpiringtime: off
passwordlockout: off
passwordunlock: on
passwordlockoutduration: 3600
passwordmaxfailure: 3
passwordresetfailurecount: 600
passwordchecksyntax: off
passwordminlength: 8
passwordmindigits: 0
passwordminalphas: 0
passwordminuppers: 0
passwordminlowers: 0
passwordminspecials: 0
passwordmin8bit: 0
passwordmaxrepeats: 0
passwordmincategories: 3
passwordmintokenlength: 3
nsslapd-allow-hashed-passwords: on
nsslapd-pwpolicy-inherit-global: off

Kind regards,
Ralf


Am Mi., 3. Juli 2024 um 10:42 Uhr schrieb Viktor Ashirov <vashirov@redhat.com>:
Hi Ralf,


On Tue, Jul 2, 2024 at 2:29 PM Ralf Spenneberg <rspenneberg@gmail.com> wrote:
Hi there,
I am trying to update a ldap tree from 389ds 1.3.11 (centos7) to 2.4.5 (almalinux9). After migrating the tree all passwords stop working including the Directory Manager. The old tree used SSHA. Setting the rootpwstoragescheme does not help for the Directory Manager. Only manually resetting the passwords using pwdhash in the dse.ldif file and using a PBKDF2-SHA512 password works. Is there a way to enable the old SSHA scheme?
SSHA is still supported in the latest 389-DS:
# dsconf localhost pwpolicy list-schemes | grep SSHA
SSHA
SSHA256
SSHA384
SSHA512

How did you perform the migration? Via replication or export/import?
What is the value of nsslapd-allow-hashed-passwords in cn=config?
I suspect that your passwords after the migration might be doubly hashed instead of imported as is.
 
Kind regards,
Ralf
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue


--
Viktor
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue


--
Viktor
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue


--
Viktor
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue


--
Viktor
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)