IPA: ldapmodify operation failing with error "Detected large jump in CSN time"
Issue
- IPA: ldapmodify operation on ldap entry
uid=pkidbuser,ou=people,o=ipacais failing with error
# ldapmodify -h 127.0.0.1 -D "cn=Directory Manager" -W -x <<EOF
> dn: uid=pkidbuser,ou=people,o=ipaca
> changetype: modify
> replace: description
> description: 2;536674323;CN=Certificate Authority,O=EXAMPLE.TEST;CN=CA Subsystem,O=EXAMPLE.TEST
> EOF
Enter LDAP Password:
modifying entry "uid=pkidbuser,ou=people,o=ipaca"
ldap_modify: Operations error (1)
[17/Oct/2023:11:18:11.252242528 -0700] conn=15616 op=1 MOD dn="uid=pkidbuser,ou=people,o=ipaca"
[17/Oct/2023:11:20:22.810459575 -0700] conn=15641 op=1 MOD dn="uid=pkidbuser,ou=people,o=ipaca"
[17/Oct/2023:11:18:11.253843393 -0700] - INFO - csngen_new_csn - Detected large jump in CSN time. Delta: -6954398 (current time: 1697566691 vs previous time: 1704521089)
[17/Oct/2023:11:18:11.255221457 -0700] - ERR - _csngen_adjust_local_time - Adjustment limit exceeded; value - 6954398, limit - 86400
[17/Oct/2023:11:18:11.256089222 -0700] - ERR - ldbm_back_modify - failed to generate modify CSN for entry (uid=pkidbuser,ou=people,o=ipaca), aborting operation
[17/Oct/2023:11:20:22.811773661 -0700] - INFO - csngen_new_csn - Detected large jump in CSN time. Delta: -6954267 (current time: 1697566822 vs previous time: 1704521089)
[17/Oct/2023:11:20:22.814275394 -0700] - ERR - _csngen_adjust_local_time - Adjustment limit exceeded; value - 6954267, limit - 86400
[17/Oct/2023:11:20:22.815187194 -0700] - ERR - ldbm_back_modify - failed to generate modify CSN for entry (uid=pkidbuser,ou=people,o=ipaca), aborting operation
Environment
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- IPA 4.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.