What were you trying to do that didn't work?

IPA replication is failing below logs on RHEL 10(IPA Master is in RHEL 9)

Dirsrv errors logs from RHEL 10 show as below:

#0040-idm-rhel10-2025-12-01.tar/idm-rhel10/rhel10-dirsrv-errors
~~~
[01/Dec/2025:09:37:09.401161629 +0100] - ERR - ipa-topology-plugin - ipa_topo_be_state_changebackend userRoot is going offline; inactivate plugin [01/Dec/2025:09:37:09.405604247 +0100] - NOTICE - NSMMReplicationPlugin - multisupplier_be_state_change - Replica dc=idm,dc=example,dc=com is going offline; disabling replication [01/Dec/2025:09:37:10.066165424 +0100] - ERR - NSMMReplicationPlugin - acquire_replica - agmt="cn=meTolv4812256.idm.example.com" (lv4812256:389): Unable to acquire replica: permission denied. The bind dn "" does not have permission to supply replication updates to the replica. Will retry later. [01/Dec/2025:09:37:30.679213679 +0100] - INFO - dbmdb_import_monitor_threads - import userRoot: Processed 4067 entries – average rate 203.3/sec, recent rate 203.3/sec, [01/Dec/2025:09:37:50.715559509 +0100] - INFO - dbmdb_import_monitor_threads - import userRoot: Processed 7633 entries – average rate 190.8/sec, recent rate 190.8/sec, [01/Dec/2025:09:38:01.705183009 +0100] - ERR - dbmdb_import_writer - Failed to write in the database. Error is 0xffff87c3: MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED size. [01/Dec/2025:09:38:01.735852096 +0100] - ERR - dbmdb_import_monitor_threads - import userRoot: thread writer aborted ==> Aborting bulk import. [01/Dec/2025:09:38:01.929103741 +0100] - ERR - process_bulk_import_op - Failed; error = -1 [01/Dec/2025:09:38:01.930507689 +0100] - ERR - factory_destructor - ERROR bulk import abandoned: conn=5 was closed [01/Dec/2025:09:38:01.937549997 +0100] - INFO - dbmdb_import_monitor_threads - import userRoot: Workers finished; cleaning up... [01/Dec/2025:09:38:01.938822823 +0100] - INFO - dbmdb_import_monitor_threads - import userRoot: Workers cleaned up. [01/Dec/2025:09:38:01.939926335 +0100] - ERR - dbmdb_import_run_pass - import userRoot: Thread monitoring returned: -23 [01/Dec/2025:09:38:01.941046588 +0100] - ERR - dbmdb_public_dbmdb_import_main - import userRoot: Aborting all Import threads... [01/Dec/2025:09:38:01.942347124 +0100] - ERR - dbmdb_public_dbmdb_import_main - import userRoot: Import threads aborted. [01/Dec/2025:09:38:01.943343582 +0100] - INFO - dbmdb_public_dbmdb_import_main - import userRoot: Closing files... [01/Dec/2025:09:38:01.952361740 +0100] - ERR - dbmdb_public_dbmdb_import_main - import userRoot: Import failed. [01/Dec/2025:09:38:01.955575921 +0100] - INFO - dbmdb_task_finish - userRoot: Finished importing. Exit code is -23
~~~

dirsrv error logs from RHEL 9
~~~
[01/Dec/2025:01:30:07.280716167 +0100] - INFO - task_backup_thread - Backup finished. [01/Dec/2025:09:37:10.063230852 +0100] - ERR - NSMMReplicationPlugin - multisupplier_extop_StartNSDS50ReplicationRequest - conn=265392 op=5 replica="dc=idm,dc=example,dc=com": Unable to acquire replica: error: permission denied [01/Dec/2025:09:37:11.861276164 +0100] - INFO - NSMMReplicationPlugin - repl5_tot_run - Beginning total update of replica "agmt="cn=meTolv4812260.idm.example.com" (lv4812260:389)". [01/Dec/2025:09:37:12.012937994 +0100] - WARN - NSMMReplicationPlugin - check_flow_control_tot_init - agmt="cn=meTolv4812260.idm.example.com" (lv4812260:389) - Total update flow control gives time (2000 msec) to the consumer before sending more entries [ msgid sent: 1020, rcv: 19]) If total update fails you can try to increase nsds5ReplicaFlowControlPause and/or decrease nsds5ReplicaFlowControlWindow in the replica agreement configuration [01/Dec/2025:09:40:01.865368291 +0100] - ERR - NSMMReplicationPlugin - release_replica - agmt="cn=meTolv4812260.idm.example.com" (lv4812260:389): Unable to send endReplication extended operation (Timed out) [01/Dec/2025:09:40:01.866838121 +0100] - ERR - NSMMReplicationPlugin - repl5_tot_run - Total update failed for replica "agmt="cn=meTolv4812260.idm.example.com" (lv4812260:389)", error (-1) [01/Dec/2025:09:40:01.868434004 +0100] - ERR - NSMMReplicationPlugin - agmt="cn=meTolv4812260.idm.example.com" (lv4812260:389): Total update flow control triggered 83 times You may increase nsds5ReplicaFlowControlPause and/or decrease nsds5ReplicaFlowControlWindow in the replica agreement configuration
~~~

Please provide the package NVR for which the bug is seen:

389-ds-base-3.0.6-13.el10_0.x86_64
389-ds-base-libs-3.0.6-13.el10_0.x86_64

ipa-server-4.12.2-15.el10_0.4.x86_64

How reproducible is this bug?:

Install IPA replica RHEL 10 against the IPA Master RHEL 9 server.

Expected results

IPA Replica should install successfully

Actual results

IPA Replica installation is failing