[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-directory-users
Subject:    [Fedora-directory-users] Constraint Violation at Logon
From:       "Aaron Cline" <aaron.cline () gmail ! com>
Date:       2007-06-20 17:20:43
Message-ID: 2f8a29cb0706201020m13bc9fdmc530603b0b4b3767 () mail ! gmail ! com
[Download RAW message or body]

Hello:

I've emailed this to the list before but I didn't get an answer so I'm
bringing this up again with a little bit more information.  This problem
seems to happen sporadically.  I'm using Fedora DS 1.0.3 on the server.  My
client system in this case is a RHEL 3 WS box.  When the user tries to
login, the system will not accept his password.  This doesn't happen all the
time though and I haven't yet figured out how to "make" it happen.  Here are
the log messages on the client:

Jun 20 17:12:57 low-tcw-104 sshd[14328]: pam_ldap: error trying to bind as
user "uid=fallonma,ou=ISG,ou=Lowell,ou=People,dc=pii-dmz,dc=ext" (Constraint
violation)


I found some messages on the server side in the "errors" file that coincide
with this user but the login attempt happens about 12 minutes after the
error messages.  The error messages on the server are:

[20/Jun/2007:17:00:07 +0000] NSMMReplicationPlugin - agmt="cn=PII-DMZ
TechOps" (low-mgt-100:389): windows_replay_update: failed to fetch local
entry for modify operation
dn="uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext"
[20/Jun/2007:17:00:07 +0000] NSMMReplicationPlugin - agmt="cn=PII-DMZ IVRS"
(low-mgt-100:389): windows_replay_update: failed to fetch local entry for
modify operation
dn="uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext"
[20/Jun/2007:17:00:13 +0000] NSMMReplicationPlugin - agmt="cn=PII-DMZ IVRS"
(low-mgt-100:389): windows_replay_update: failed to fetch local entry for
modify operation
dn="uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext"
[20/Jun/2007:17:00:13 +0000] NSMMReplicationPlugin - agmt="cn=PII-DMZ
TechOps" (low-mgt-100:389): windows_replay_update: failed to fetch local
entry for modify operation
dn="uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext"
[20/Jun/2007:17:00:22 +0000] NSMMReplicationPlugin - agmt="cn=PII-DMZ IVRS"
(low-mgt-100:389): windows_replay_update: failed to fetch local entry for
modify operation
dn="uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext"
[20/Jun/2007:17:00:22 +0000] NSMMReplicationPlugin - agmt="cn=PII-DMZ
TechOps" (low-mgt-100:389): windows_replay_update: failed to fetch local
entry for modify operation
dn="uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext"

Is access to this user's information somehow locked at this point?  Is the
replication doing something to the account?

Thanks for any info.

Aaron

[Attachment #3 (text/html)]

Hello:<br><br>I&#39;ve emailed this to the list before but I didn&#39;t get an answer \
so I&#39;m bringing this up again with a little bit more information.&nbsp; This \
problem seems to happen sporadically.&nbsp; I&#39;m using Fedora DS  1.0.3 on the \
server.&nbsp; My client system in this case is a RHEL 3 WS box.&nbsp; When the user \
tries to login, the system will not accept his password.&nbsp; This doesn&#39;t \
happen all the time though and I haven&#39;t yet figured out how to &quot;make&quot; \
it happen.&nbsp; Here are the log messages on the client: <br><br>Jun 20 17:12:57 \
low-tcw-104 sshd[14328]: pam_ldap: error trying to bind as user \
&quot;uid=fallonma,ou=ISG,ou=Lowell,ou=People,dc=pii-dmz,dc=ext&quot; (Constraint \
violation)<br><br><br>I found some messages on the server side in the \
&quot;errors&quot; file that coincide with this user but the login attempt happens \
about 12 minutes after the error messages.&nbsp; The error messages on the server \
are: <br><br>[20/Jun/2007:17:00:07 +0000] NSMMReplicationPlugin - \
agmt=&quot;cn=PII-DMZ TechOps&quot; (low-mgt-100:389): windows_replay_update: failed \
to fetch local entry for modify operation \
dn=&quot;uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext&quot; \
<br>[20/Jun/2007:17:00:07 +0000] NSMMReplicationPlugin - agmt=&quot;cn=PII-DMZ \
IVRS&quot; (low-mgt-100:389): windows_replay_update: failed to fetch local entry for \
modify operation dn=&quot;uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext&quot;
 <br>[20/Jun/2007:17:00:13 +0000] NSMMReplicationPlugin - agmt=&quot;cn=PII-DMZ \
IVRS&quot; (low-mgt-100:389): windows_replay_update: failed to fetch local entry for \
modify operation dn=&quot;uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext&quot;
 <br>[20/Jun/2007:17:00:13 +0000] NSMMReplicationPlugin - agmt=&quot;cn=PII-DMZ \
TechOps&quot; (low-mgt-100:389): windows_replay_update: failed to fetch local entry \
for modify operation \
dn=&quot;uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext&quot; \
<br>[20/Jun/2007:17:00:22 +0000] NSMMReplicationPlugin - agmt=&quot;cn=PII-DMZ \
IVRS&quot; (low-mgt-100:389): windows_replay_update: failed to fetch local entry for \
modify operation dn=&quot;uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext&quot;
 <br>[20/Jun/2007:17:00:22 +0000] NSMMReplicationPlugin - agmt=&quot;cn=PII-DMZ \
TechOps&quot; (low-mgt-100:389): windows_replay_update: failed to fetch local entry \
for modify operation \
dn=&quot;uid=fallonma,ou=isg,ou=lowell,ou=people,dc=pii-dmz,dc=ext&quot; <br><br>Is \
access to this user&#39;s information somehow locked at this point?&nbsp; Is the \
replication doing something to the account?<br><br>Thanks for any \
info.<br><br>Aaron<br>



[prev in list] [next in list] [prev in thread] [next in thread]