IPA: ldapmodify operation failing with error "Detected large jump in CSN time"

Solution Verified - Updated -

Issue

  • IPA: ldapmodify operation on ldap entry uid=pkidbuser,ou=people,o=ipaca is failing with error
# ldapmodify -h 127.0.0.1 -D "cn=Directory Manager" -W  -x <<EOF
> dn: uid=pkidbuser,ou=people,o=ipaca
> changetype: modify
> replace: description
> description: 2;536674323;CN=Certificate Authority,O=EXAMPLE.TEST;CN=CA Subsystem,O=EXAMPLE.TEST
> EOF
Enter LDAP Password: 
modifying entry "uid=pkidbuser,ou=people,o=ipaca"
ldap_modify: Operations error (1)
[17/Oct/2023:11:18:11.252242528 -0700] conn=15616 op=1 MOD dn="uid=pkidbuser,ou=people,o=ipaca"

[17/Oct/2023:11:20:22.810459575 -0700] conn=15641 op=1 MOD dn="uid=pkidbuser,ou=people,o=ipaca"
[17/Oct/2023:11:18:11.253843393 -0700] - INFO - csngen_new_csn - Detected large jump in CSN time.  Delta: -6954398 (current time: 1697566691  vs  previous time: 1704521089)
[17/Oct/2023:11:18:11.255221457 -0700] - ERR - _csngen_adjust_local_time - Adjustment limit exceeded; value - 6954398, limit - 86400
[17/Oct/2023:11:18:11.256089222 -0700] - ERR - ldbm_back_modify - failed to generate modify CSN for entry (uid=pkidbuser,ou=people,o=ipaca), aborting operation

[17/Oct/2023:11:20:22.811773661 -0700] - INFO - csngen_new_csn - Detected large jump in CSN time.  Delta: -6954267 (current time: 1697566822  vs  previous time: 1704521089)
[17/Oct/2023:11:20:22.814275394 -0700] - ERR - _csngen_adjust_local_time - Adjustment limit exceeded; value - 6954267, limit - 86400
[17/Oct/2023:11:20:22.815187194 -0700] - ERR - ldbm_back_modify - failed to generate modify CSN for entry (uid=pkidbuser,ou=people,o=ipaca), aborting operation

Environment

  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • IPA 4.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content