Security Software

Ok this has to be something stupid I'm doing, but I can't get any clues from the directory logs...

# ldapdelete -v -h host -D 'cn=Directory Manager' -w <redacted>' -c -f /tmp/del.lst

ldapdelete: started Fri May 22 14:24:48 2009

ldap_init( nokomis.itc.griffith.edu.au, 389 )
deleting entry uid=s1087734,ou=People,o=student.griffith.edu.au,o=isp

ldap_delete: Operations error
.
.
.
Until ldapdelete returns to the prompt.

/tmp/del.lst is:
uid=s1087734,ou=People,o=student.griffith.edu.au,o=isp
uid=s109808,ou=People,o=student.griffith.edu.au,o=isp
uid=s12263,ou=People,o=student.griffith.edu.au,o=isp
uid=s1244520,ou=People,o=student.griffith.edu.au,o=isp
uid=s1309199,ou=People,o=student.griffith.edu.au,o=isp
uid=s138943,ou=People,o=student.griffith.edu.au,o=isp
uid=s1551693,ou=People,o=student.griffith.edu.au,o=isp
.
.
.
etc

I get the same if I use ldapmodify using a file like this:

dn: uid=s1087734,ou=People,o=student.griffith.edu.au,o=isp
changetype: delete

dn: uid=s109808,ou=People,o=student.griffith.edu.au,o=isp
changetype: delete

dn: uid=s12263,ou=People,o=student.griffith.edu.au,o=isp
changetype: delete

dn: uid=s1244520,ou=People,o=student.griffith.edu.au,o=isp
.
.
.
etc

Logging up on:

nsslapd-accesslog-level: 131844
nsslapd-errorlog-level: 131844

And I see the following in the error log
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - delete_core_pb: dn (uid=s2126595,ou=People,o=<organisation tree>,o=isp)
[22/May/2009:14:26:07 +1000] - INFORMATION - conn=-1 op=-1 msgId=-1 - mapping tree selected backend : isp
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - numsubordinates: 144535
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - replace: numsubordinates
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - -
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0xb
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0xb
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0xb
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0xb
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0x3
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0xf
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0xf
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0x2
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0x204b
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0x2
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0xf
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0xf
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0x2002
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0x2002
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0x2002
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0xb
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - be: 'o=isp' indextype: "eq" indexmask: 0x2002
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - be: 'o=isp' indextype: "eq" indexmask: 0x2002
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - be: 'o=isp' indextype: "eq" indexmask: 0x2002
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0x2001
[22/May/2009:14:26:07 +1000] - DEBUG - conn=-1 op=-1 msgId=-1 - index_addordel_values_ext_sv indexmask 0x2001

etc...

access log shows:

[22/May/2009:14:31:44 +1000] conn=567 op=0 msgId=1 - BIND dn="cn=Directory Manager" method=128 version=3
[22/May/2009:14:31:44 +1000] conn=567 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0.000470 dn="cn=directory manager"
[22/May/2009:14:31:44 +1000] conn=567 op=1 msgId=2 - DEL dn="uid=s1087734,ou=People,o=<organisation tree>,o=isp"
[22/May/2009:14:31:44 +1000] conn=567 op=1 msgId=2 - RESULT err=1 tag=107 nentries=0 etime=0.088680
.
.
.
.
[22/May/2009:14:31:46 +1000] conn=567 op=41 msgId=42 - DEL dn="uid=s2126595,ou=People,o=<organisation tree>,o=isp"
[22/May/2009:14:31:46 +1000] conn=567 op=41 msgId=42 - RESULT err=1 tag=107 nentries=0 etime=0.055360
[22/May/2009:14:31:46 +1000] conn=567 op=42 msgId=43 - UNBIND


audit log shows nothing.

Server is running as root, on a local ZFS filesystem (and is writeable).

Startup gives us the version as follows:

[20/May/2009:16:32:44 +1000] - Sun-Java(tm)-System-Directory/6.3.1 B2008.1121.0156 (64-bit) starting up
[20/May/2009:16:32:48 +1000] - INFORMATION - conn=-1 op=-1 msgId=-1 - normalize_ava_cb: no syntax definition for attribute: *o
[20/May/2009:16:32:48 +1000] - INFORMATION - conn=-1 op=-1 msgId=-1 - normalize_ava_cb: no syntax definition for attribute: *o
[20/May/2009:16:32:48 +1000] - Listening on all interfaces port 389 for LDAP requests
[20/May/2009:16:32:48 +1000] - Listening on all interfaces port 636 for LDAPS requests
[20/May/2009:16:32:48 +1000] - slapd started.
[20/May/2009:16:32:48 +1000] - INFO: 153102 entries in the directory database.
[20/May/2009:16:32:48 +1000] - INFO: add:0, modify:0, modrdn:0, search:0, delete:0, compare:0, bind:26 since startup.


Server has been restarted many times with no effect.

Server is a standalone server (ie no replication).

Pointers greatly appreciated.

Regards,

Michelle