dogtagpki

#1605 possible indexing problem in ca setup
Closed: migrated by dmoluguw. Opened by vakwetu.

Closed: migrated
Reopen Issue

Issue reported by Ludwig:

I noticed that for the original CA installation there is also an
indexing problem. It is the standard install before of installing a
replica. The operations are done in this order

[10/Sep/2015:07:59:15 +0200] conn=7 op=141 MOD dn="cn=schema"
[10/Sep/2015:07:59:15 +0200] conn=7 op=141 RESULT err=0 tag=103 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=142 MOD dn="cn=config"
[10/Sep/2015:07:59:15 +0200] conn=7 op=142 RESULT err=0 tag=103 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=143 ADD dn="ou=people,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=143 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=144 ADD dn="ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=144 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=145 ADD dn="cn=Certificate 
Manager Agents,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=145 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=146 ADD dn="cn=Registration 
Manager Agents,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=146 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=147 ADD dn="cn=Subsystem 
Group,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=147 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=148 ADD dn="cn=Trusted 
Managers,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=148 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=149 ADD 
dn="cn=Administrators,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=149 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=150 ADD 
dn="cn=Auditors,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=150 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=151 ADD 
dn="cn=ClonedSubsystems,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=151 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=152 ADD dn="cn=Security Domain 
Administrators,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=152 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=153 ADD dn="cn=Enterprise CA 
Administrators,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=153 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=154 ADD dn="cn=Enterprise KRA 
Administrators,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=154 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=155 ADD dn="cn=Enterprise OCSP 
Administrators,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=155 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=156 ADD dn="cn=Enterprise TKS 
Administrators,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=156 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=157 ADD dn="cn=Enterprise RA 
Administrators,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=157 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=158 ADD dn="cn=Enterprise TPS 
Administrators,ou=groups,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=158 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=159 ADD dn="ou=requests,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=159 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=160 ADD dn="cn=crossCerts,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=160 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=161 ADD dn="ou=ca,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=161 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=162 ADD 
dn="ou=certificateRepository,ou=ca,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=162 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=163 ADD 
dn="ou=crlIssuingPoints,ou=ca,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=163 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=164 ADD 
dn="ou=ca,ou=requests,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=164 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=165 ADD dn="ou=replica,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=165 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=166 ADD dn="ou=ranges,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=166 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=167 ADD 
dn="ou=replica,ou=ranges,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=167 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=168 ADD 
dn="ou=requests,ou=ranges,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=168 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=169 ADD 
dn="ou=certificateRepository,ou=ranges,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=169 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=170 ADD 
dn="ou=certificateProfiles,ou=ca,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=170 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=171 ADD dn="cn=aclResources,o=ipaca"
[10/Sep/2015:07:59:15 +0200] conn=7 op=171 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=172 ADD 
dn="cn=revokedby,cn=index,cn=ipaca,cn=ldbm database,cn=plugins,cn=config"
[10/Sep/2015:07:59:15 +0200] conn=7 op=172 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=173 ADD 
dn="cn=issuedby,cn=index,cn=ipaca,cn=ldbm database,cn=plugins,cn=config"
[10/Sep/2015:07:59:15 +0200] conn=7 op=173 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:15 +0200] conn=7 op=174 ADD 
dn="cn=publicKeyData,cn=index,cn=ipaca,cn=ldbm 
database,cn=plugins,cn=config"
[10/Sep/2015:07:59:16 +0200] conn=7 op=174 RESULT err=0 tag=105 
nentries=0 etime=1
[10/Sep/2015:07:59:16 +0200] conn=7 op=175 ADD 
dn="cn=clientId,cn=index,cn=ipaca,cn=ldbm database,cn=plugins,cn=config"
[10/Sep/2015:07:59:16 +0200] conn=7 op=175 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:16 +0200] conn=7 op=176 ADD 
dn="cn=dataType,cn=index,cn=ipaca,cn=ldbm database,cn=plugins,cn=config"
[10/Sep/2015:07:59:16 +0200] conn=7 op=176 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:16 +0200] conn=7 op=177 ADD 
dn="cn=status,cn=index,cn=ipaca,cn=ldbm database,cn=plugins,cn=config"
[10/Sep/2015:07:59:16 +0200] conn=7 op=177 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:16 +0200] conn=7 op=178 ADD 
dn="cn=description,cn=index,cn=ipaca,cn=ldbm database,cn=plugins,cn=config"
[10/Sep/2015:07:59:16 +0200] conn=7 op=178 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:16 +0200] conn=7 op=179 ADD 
dn="cn=serialno,cn=index,cn=ipaca,cn=ldbm database,cn=plugins,cn=config"
[10/Sep/2015:07:59:16 +0200] conn=7 op=179 RESULT err=0 tag=105 
nentries=0 etime=0
[10/Sep/2015:07:59:16 +0200] conn=7 op=180 ADD 
dn="cn=metaInfo,cn=index,cn=ipaca,cn=ldbm database,cn=plugins,cn=config"

so eg the description index is added in op=178, but the entry
""cn=Certificate Manager Agents,ou=groups,o=ipaca" was added before in
op=145, so without reindexing it is not indexed, I didn't run inot any
problem with this, but while investigating another indexing problem I
noticed that the index was different after reindexing.
Either the order of the ops should be changed or a reindexing should be
done on the first install.

Per CS/DS Meeting of 09/14/2015 - 10.3

Metadata Update from @vakwetu:
- Issue set to the milestone: UNTRIAGED

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/2164

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.

Metadata Update from @dmoluguw:
- Issue close_status updated to: migrated
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Normal
defect
Installation/Configuration
Community
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.