Dear list, After upgrading my server I could not restart ipa (dirsrv): ################################################################################################### [root@hydrogen ~]# cat /etc/redhat-release Red Hat Enterprise Linux release 8.10 (Ootpa)
################################################################################################### [root@hydrogen ~]# ipactl status Directory Service: STOPPED Directory Service must be running in order to obtain status of other services ################################################################################################### [root@hydrogen ~]# systemctl status ipa ● ipa.service - Identity, Policy, Audit Loaded: loaded (/usr/lib/systemd/system/ipa.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Mon 2025-03-17 12:07:40 CET; 51s ago Process: 2151 ExecStart=/usr/sbin/ipactl start (code=exited, status=1/FAILURE) Main PID: 2151 (code=exited, status=1/FAILURE) Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Be patient, this may take a few minutes. Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Automatic upgrade failed: IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Unexpected error - see /var/log/ipaupgrade.log for details: Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', '[email protected]'] returned non-zero exit status 1: 'Job for [email protected] failed because the control process exited with error code.\nSee "systemctl status [email protected]> Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: See the upgrade log for more details and/or run /usr/sbin/ipa-server-upgrade again Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Aborting ipactl Mar 17 12:07:40 hydrogen.ccm.lit.fr systemd[1]: ipa.service: Main process exited, code=exited, status=1/FAILURE Mar 17 12:07:40 hydrogen.ccm.lit.fr systemd[1]: ipa.service: Failed with result 'exit-code'. Mar 17 12:07:40 hydrogen.ccm.lit.fr systemd[1]: Failed to start Identity, Policy, Audit. ################################################################################################### [root@hydrogen ~]# ipa-server-upgrade -v ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipapython.admintool: DEBUG: Logging to /var/log/ipaupgrade.log ipapython.admintool: DEBUG: ipa-server-upgrade was invoked with arguments [] and options: {'verbose': True, 'quiet': False, 'log_file': None, 'force': False, 'skip_version_check': False} ipapython.admintool: DEBUG: IPA version 4.9.13-14.module+el8.10.0+22574+12a10600 ipapython.admintool: DEBUG: IPA platform rhel ipapython.admintool: DEBUG: IPA os-release Red Hat Enterprise Linux 8.10 (Ootpa) ipalib.plugable: DEBUG: importing all plugin modules in ipaserver.plugins... ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.aci ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.automember ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.automount ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.baseldap ipalib.plugable: DEBUG: ipaserver.plugins.baseldap is not a valid plugin module ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.baseuser ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.batch ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.ca ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.caacl ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.cert ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.certmap ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.certprofile ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.config ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.delegation ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.dns ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.dnsserver ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.dogtag ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.domainlevel ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.group ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbac ipalib.plugable: DEBUG: ipaserver.plugins.hbac is not a valid plugin module ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbacrule ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbacsvc ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbacsvcgroup ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbactest ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.host ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hostgroup ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.idp ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.idrange ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.idviews ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.internal ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.join ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.krbtpolicy ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.ldap2 ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.location ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.migration ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.misc ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.netgroup ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.otp ipalib.plugable: DEBUG: ipaserver.plugins.otp is not a valid plugin module ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.otpconfig ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.otptoken ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.passwd ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.permission ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.ping ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.pkinit ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.privilege ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.pwpolicy ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.rabase ipalib.plugable: DEBUG: ipaserver.plugins.rabase is not a valid plugin module ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.radiusproxy ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.realmdomains ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.role ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.schema ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.selfservice ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.selinuxusermap ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.server ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.serverrole ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.serverroles ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.service ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.servicedelegation ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.session ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.stageuser ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.subid ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.sudo ipalib.plugable: DEBUG: ipaserver.plugins.sudo is not a valid plugin module ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.sudocmd ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.sudocmdgroup ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.sudorule ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.topology ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.trust ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.user ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.vault ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.virtual ipalib.plugable: DEBUG: ipaserver.plugins.virtual is not a valid plugin module ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.whoami ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.xmlserver ipalib.plugable: DEBUG: importing all plugin modules in ipaserver.install.plugins... ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.adtrust ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.ca_renewal_master ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.dns ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.fix_kra_people_entry ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.fix_replica_agreements ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.rename_managed ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_ca_topology ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_changelog_maxage ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_dna_shared_config ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_idranges ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_ldap_server_list ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_managed_permissions ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_nis ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_pacs ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_passsync ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_pwpolicy ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_ra_cert_store ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_referint ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_services ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_unhashed_password ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.update_uniqueness ipalib.plugable: DEBUG: importing plugin module ipaserver.install.plugins.upload_cacrt ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipapython.ipautil: DEBUG: Searching for an interface of IP address: ::1 ipapython.ipautil: DEBUG: Testing local IP address: ::1/128 (interface: lo) ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' ipapython.ipautil: DEBUG: Starting external process ipapython.ipautil: DEBUG: args=['/bin/systemctl', 'is-active', '[email protected]'] ipapython.ipautil: DEBUG: Process finished, return code=3 ipapython.ipautil: DEBUG: stdout=failed ipapython.ipautil: DEBUG: stderr= ipaserver.install.service: DEBUG: Upgrading IPA:. Estimated time: 1 minute 30 seconds Upgrading IPA:. Estimated time: 1 minute 30 seconds ipaserver.install.service: DEBUG: [1/9]: saving configuration [1/9]: saving configuration ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' ipaserver.install.service: DEBUG: step duration: dirsrv __save_config 0.09 sec ipaserver.install.service: DEBUG: [2/9]: disabling listeners [2/9]: disabling listeners ipaserver.install.service: DEBUG: step duration: dirsrv __disable_listeners 0.04 sec ipaserver.install.service: DEBUG: [3/9]: enabling DS global lock [3/9]: enabling DS global lock ipaserver.install.service: DEBUG: step duration: dirsrv __enable_ds_global_write_lock 0.04 sec ipaserver.install.service: DEBUG: [4/9]: disabling Schema Compat [4/9]: disabling Schema Compat ipaserver.install.service: DEBUG: step duration: dirsrv __disable_schema_compat 0.06 sec ipaserver.install.service: DEBUG: [5/9]: starting directory server [5/9]: starting directory server ipapython.ipautil: DEBUG: Starting external process ipapython.ipautil: DEBUG: args=['/bin/systemctl', 'start', '[email protected]'] ipapython.ipautil: DEBUG: Process finished, return code=1 ipapython.ipautil: DEBUG: stdout= ipapython.ipautil: DEBUG: stderr=Job for [email protected] failed because the control process exited with error code. See "systemctl status [email protected]" and "journalctl -xe" for details. ipaserver.install.service: DEBUG: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 635, in start_creation run_step(full_msg, method) File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 621, in run_step method() File "/usr/lib/python3.6/site-packages/ipaserver/install/upgradeinstance.py", line 104, in __start srv.start(self.serverid, ldapi=True) File "/usr/lib/python3.6/site-packages/ipaplatform/redhat/services.py", line 138, in start instance_name, capture_output=capture_output, wait=wait) File "/usr/lib/python3.6/site-packages/ipaplatform/base/services.py", line 306, in start skip_output=not capture_output) File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 600, in run p.returncode, arg_string, output_log, error_log ipapython.ipautil.CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', '[email protected]'] returned non-zero exit status 1: 'Job for [email protected] failed because the control process exited with error code.\nSee "systemctl status [email protected]" and "journalctl -xe" for details.\n') ipaserver.install.service: DEBUG: [error] CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', '[email protected]'] returned non-zero exit status 1: 'Job for [email protected] failed because the control process exited with error code.\nSee "systemctl status [email protected]" and "journalctl -xe" for details.\n') [error] CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', '[email protected]'] returned non-zero exit status 1: 'Job for [email protected] failed because the control process exited with error code.\nSee "systemctl status [email protected]" and "journalctl -xe" for details.\n') ipaserver.install.service: DEBUG: [cleanup]: stopping directory server [cleanup]: stopping directory server ipapython.ipautil: DEBUG: Starting external process ipapython.ipautil: DEBUG: args=['/bin/systemctl', 'stop', '[email protected]'] ipapython.ipautil: DEBUG: Process finished, return code=0 ipapython.ipautil: DEBUG: stdout= ipapython.ipautil: DEBUG: stderr= ipaplatform.base.services: DEBUG: Stop of [email protected] complete ipaserver.install.service: DEBUG: step duration: dirsrv __stop_instance 0.02 sec ipaserver.install.service: DEBUG: [cleanup]: restoring configuration [cleanup]: restoring configuration ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' ipalib.sysrestore: DEBUG: Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' ipaserver.install.service: DEBUG: step duration: dirsrv __restore_config 0.09 sec ipaserver.install.ipa_server_upgrade: ERROR: IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. ipapython.admintool: DEBUG: File "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 180, in execute return_value = self.run() File "/usr/lib/python3.6/site-packages/ipaserver/install/ipa_server_upgrade.py", line 54, in run server.upgrade() File "/usr/lib/python3.6/site-packages/ipaserver/install/server/upgrade.py", line 2059, in upgrade data_upgrade.create_instance() File "/usr/lib/python3.6/site-packages/ipaserver/install/upgradeinstance.py", line 134, in create_instance runtime=90) File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 635, in start_creation run_step(full_msg, method) File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 621, in run_step method() File "/usr/lib/python3.6/site-packages/ipaserver/install/upgradeinstance.py", line 104, in __start srv.start(self.serverid, ldapi=True) File "/usr/lib/python3.6/site-packages/ipaplatform/redhat/services.py", line 138, in start instance_name, capture_output=capture_output, wait=wait) File "/usr/lib/python3.6/site-packages/ipaplatform/base/services.py", line 306, in start skip_output=not capture_output) File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 600, in run p.returncode, arg_string, output_log, error_log ipapython.admintool: DEBUG: The ipa-server-upgrade command failed, exception: CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', '[email protected]'] returned non-zero exit status 1: 'Job for [email protected] failed because the control process exited with error code.\nSee "systemctl status [email protected]" and "journalctl -xe" for details.\n') ipapython.admintool: ERROR: Unexpected error - see /var/log/ipaupgrade.log for details: CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', '[email protected]'] returned non-zero exit status 1: 'Job for [email protected] failed because the control process exited with error code.\nSee "systemctl status [email protected]" and "journalctl -xe" for details.\n') ipapython.admintool: ERROR: The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information ################################################################################################### [root@hydrogen ~]# systemctl status [email protected] ● [email protected] - 389 Directory Server CCM-LIT-FR. Loaded: loaded (/usr/lib/systemd/system/[email protected]; enabled; vendor preset: disabled) Drop-In: /usr/lib/systemd/system/[email protected] └─custom.conf /etc/systemd/system/[email protected] └─ipa-env.conf Active: failed (Result: exit-code) since Mon 2025-03-17 12:11:01 CET; 2min 9s ago Process: 4422 ExecStart=/usr/sbin/ns-slapd -D /etc/dirsrv/slapd-CCM-LIT-FR -i /run/dirsrv/slapd-CCM-LIT-FR.pid (code=exited, status=1/FAILURE) Process: 4416 ExecStartPre=/usr/libexec/dirsrv/ds_selinux_restorecon.sh /etc/dirsrv/slapd-CCM-LIT-FR/dse.ldif (code=exited, status=0/SUCCESS) Process: 4410 ExecStartPre=/usr/libexec/dirsrv/ds_systemd_ask_password_acl /etc/dirsrv/slapd-CCM-LIT-FR/dse.ldif (code=exited, status=0/SUCCESS) Main PID: 4422 (code=exited, status=1/FAILURE) Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: [17/Mar/2025:12:11:00.411075271 +0100] - ERR - memberof-plugin - memberof_postop_start - Configuration failed (Bad parameter to an ldap routine) Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: [17/Mar/2025:12:11:00.425742157 +0100] - ERR - plugin_dependency_startall - Failed to start betxnpostoperation plugin MemberOf Plugin Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: [17/Mar/2025:12:11:00.442126169 +0100] - ERR - plugin_dependency_startall - Failed to resolve plugin dependencies Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: [17/Mar/2025:12:11:00.442829679 +0100] - ERR - plugin_dependency_startall - betxnpostoperation plugin MemberOf Plugin is not started Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: [17/Mar/2025:12:11:00.457409042 +0100] - ERR - NSMMReplicationPlugin - bind_and_check_pwp - agmt="cn=meTohelium.ccm.lit.fr" (helium:389) - Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) () Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: [17/Mar/2025:12:11:00.884605262 +0100] - INFO - bdb_pre_close - Waiting for 5 database threads to stop Mar 17 12:11:01 hydrogen.ccm.lit.fr ns-slapd[4422]: [17/Mar/2025:12:11:01.605017766 +0100] - INFO - bdb_pre_close - All database threads now stopped Mar 17 12:11:01 hydrogen.ccm.lit.fr systemd[1]: [email protected]: Main process exited, code=exited, status=1/FAILURE Mar 17 12:11:01 hydrogen.ccm.lit.fr systemd[1]: [email protected]: Failed with result 'exit-code'. Mar 17 12:11:01 hydrogen.ccm.lit.fr systemd[1]: Failed to start 389 Directory Server CCM-LIT-FR.. ################################################################################################### journalctl: Mar 17 12:07:33 hydrogen.ccm.lit.fr systemd[1]: Starting 389 Directory Server CCM-LIT-FR.... Mar 17 12:07:34 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:34.533540600 +0100] - NOTICE - config_set_port - Non-Secure Port Disabled Mar 17 12:07:34 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:34.888488876 +0100] - INFO - main - 389-Directory/ 1.4.3.39 B2025.023.1827 starting up Mar 17 12:07:34 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:34.889290027 +0100] - INFO - main - Setting the maximum file descriptor limit to: 262144 Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.821260400 +0100] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.824599070 +0100] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.854749269 +0100] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.862375899 +0100] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.879078329 +0100] - NOTICE - ldbm_back_start - found 32133360k physical memory Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.883822964 +0100] - NOTICE - ldbm_back_start - found 30924176k available Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.902343900 +0100] - NOTICE - ldbm_back_start - cache autosizing: db cache: 803334k Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.930960238 +0100] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (3 total): 786432k Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.936995532 +0100] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (3 total): 131072k Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.974880659 +0100] - NOTICE - ldbm_back_start - cache autosizing: ipaca entry cache (3 total): 786432k Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:35.975608265 +0100] - NOTICE - ldbm_back_start - cache autosizing: ipaca dn cache (3 total): 131072k Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:36.010454097 +0100] - NOTICE - ldbm_back_start - cache autosizing: changelog entry cache (3 total): 786432k Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:36.016885043 +0100] - NOTICE - ldbm_back_start - cache autosizing: changelog dn cache (3 total): 131072k Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:36.042832325 +0100] - NOTICE - ldbm_back_start - total cache size: 3641186304 B; Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:36.073032416 +0100] - INFO - bdb_start - Resizing db cache size: 822614323 -> 822614016 Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.297836176 +0100] - ERR - memberof-plugin - memberof_config - Error 53: The ipaOwner configuration attribute must be set to an attribute defined to use either the Distinguished Name or Name and Optional UI> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.299113064 +0100] - ERR - memberof-plugin - memberof_postop_start - Configuration failed (Server is unwilling to perform) Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.319984346 +0100] - ERR - plugin_dependency_startall - Failed to start betxnpostoperation plugin MemberOf Plugin Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.413061116 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=groups,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.414271102 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=computers,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.434882522 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=ng,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.446485874 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target ou=sudoers,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.469101711 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=users,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.480476831 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.484209273 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.503410363 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.514724493 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.518588881 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.537770784 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.554900831 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.571995191 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.589023452 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.594937194 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.604865064 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.623200151 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipapasskey" does not exist in schema. Please add attributeTypes "ipapasskey" to schema if necessary. Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.626792384 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "ipapasskey Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.657449987 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "ipapasskey")(targattrfilters="add=objectclass:(objectclass=ipapasskeyuser)")(version 3.0;acl "selfservice:Users can manage > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.664118049 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipapasskey" does not exist in schema. Please add attributeTypes "ipapasskey" to schema if necessary. Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.680345996 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "ipapasskey Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.680799097 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "ipapasskey || objectclass")(targetfilter = "(objectclass=posixaccount)")(version 3.0;acl "permission:System: Manage Passkey> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.696012693 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipapasskey" does not exist in schema. Please add attributeTypes "ipapasskey" to schema if necessary. Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.714632289 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "ipapasskey Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.715065461 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "ipapasskey || ipasshpubkey || ipauniqueid || ipauserauthtype || userclass")(targetfilter = "(objectclass=posixaccount)")(ve> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.793636996 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.795472203 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=ccm,dc=lit,dc=dc=fr does not exist Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.824588221 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipauserdefaultsubordinateid" does not exist in schema. Please add attributeTypes "ipauserdefaultsubordinateid" to schema if nec> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.826738960 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.846289441 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn || ipacertificatesubjectbase || ipaconfigstring || ipacustomfields || ipadefaultemaildoma> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.867823993 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipaautoprivategroups" does not exist in schema. Please add attributeTypes "ipaautoprivategroups" to schema if necessary. Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.874759390 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.886279753 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn || ipaautoprivategroups || ipabaseid || ipabaserid || ipaidrangesize || ipanttrusteddomai> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.897373981 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipacahsmconfiguration" does not exist in schema. Please add attributeTypes "ipacahsmconfiguration" to schema if necessary. Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.907318983 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.918742951 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "cn || createtimestamp || description || entryusn || ipacahsmconfiguration || ipacaid || ipacaissuerdn || ipacarandomserialn> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.933535895 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipapwddictcheck" does not exist in schema. Please add attributeTypes "ipapwddictcheck" to schema if necessary. Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.938088741 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "ipapwddictcheck Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.952984589 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "ipapwddictcheck || ipapwdmaxrepeat || ipapwdmaxsequence || ipapwdusercheck || krbmaxpwdlife || krbminpwdlife || krbpwdfailu> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.964472653 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipapwddictcheck" does not exist in schema. Please add attributeTypes "ipapwddictcheck" to schema if necessary. Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.975842475 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:37.987319098 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "cn || cospriority || createtimestamp || entryusn || ipapwddictcheck || ipapwdmaxrepeat || ipapwdmaxsequence || ipapwduserch> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.013649792 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipaidpauthendpoint" does not exist in schema. Please add attributeTypes "ipaidpauthendpoint" to schema if necessary. Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.016115954 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.033018572 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "cn || ipaidpauthendpoint || ipaidpclientid || ipaidpclientsecret || ipaidpdevauthendpoint || ipaidpissuerurl || ipaidpkeyse> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.052133408 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipaidpauthendpoint" does not exist in schema. Please add attributeTypes "ipaidpauthendpoint" to schema if necessary. Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.052585838 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.072866844 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn || ipaidpauthendpoint || ipaidpclientid || ipaidpdevauthendpoint || ipaidpissuerurl || ip> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.084339533 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipaidpauthendpoint" does not exist in schema. Please add attributeTypes "ipaidpauthendpoint" to schema if necessary. Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.095721051 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.107191399 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn || ipaidpauthendpoint || ipaidpclientid || ipaidpclientsecret || ipaidpdevauthendpoint ||> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.119005384 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. Please add attributeTypes "ipaowner" to schema if necessary. Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.130044439 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetfilter = "(objectclass=ipasubordinateidentry) Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.141481539 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetfilter = "(objectclass=ipasubordinateidentry)")(targetattr="description || ipaowner || ipauniqueid")(targattrfilters = "add=objectC> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.152939627 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. Please add attributeTypes "ipaowner" to schema if necessary. Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.164343183 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetfilter = "(objectclass=ipasubordinateidentry) Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.183620385 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetfilter = "(objectclass=ipasubordinateidentry)")(targetattr="description || ipaowner || ipauniqueid")(targattrfilters = "add=objectC> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.184153464 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. Please add attributeTypes "ipaowner" to schema if necessary. Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.204368823 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "description Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.215798949 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "description || ipaowner")(targetfilter = "(objectclass=ipasubordinateidentry)")(version 3.0;acl "permission:System: Manage > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.227256127 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. Please add attributeTypes "ipaowner" to schema if necessary. Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.238663340 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "createtimestamp Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.250083654 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "createtimestamp || description || entryusn || ipaowner || ipasubgidcount || ipasubgidnumber || ipasubuidcount || ipasubuidn> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.273123622 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "iparequireuserverification" does not exist in schema. Please add attributeTypes "iparequireuserverification" to schema if neces> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.275091623 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "iparequireuserverification Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.290184130 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "iparequireuserverification")(targetfilter = "(objectclass=ipapasskeyconfigobject)")(version 3.0;acl "permission:System: Mod> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.301637980 +0100] - ERR - NSACLPlugin - __aclp__init_targetattr - targetattr "iparequireuserverification" does not exist in schema. Please add attributeTypes "iparequireuserverification" to schema if neces> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.313057425 +0100] - ERR - NSACLPlugin - acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.324467605 +0100] - ERR - NSACLPlugin - __aclinit_handler - This ((targetattr = "cn || iparequireuserverification")(targetfilter = "(objectclass=ipapasskeyconfigobject)")(version 3.0;acl "permission:Syste> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.460650791 +0100] - WARN - NSACLPlugin - acl_parse - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.467047237 +0100] - INFO - slapi_vattrspi_regattr - Because krbPwdPolicyReference is a new registered virtual attribute , nsslapd-ignore-virtual-attrs was set to 'off' Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.479885106 +0100] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=ccm,dc=lit,dc=dc=fr--no CoS Templates found, which should be added before the CoS D> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.500880084 +0100] - ERR - dna-plugin - dna_parse_config_entry - dnaType (ipasubuidnumber) does not exist. Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.503715869 +0100] - ERR - dna-plugin - dna_parse_config_entry - Invalid config entry [cn=subordinate ids,cn=distributed numeric assignment plugin,cn=plugins,cn=config] skipped Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.595608568 +0100] - ERR - memberof-plugin - memberof_config - Only one memberOf plugin instance can be used Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.596314330 +0100] - ERR - memberof-plugin - memberof_postop_start - Configuration failed (Bad parameter to an ldap routine) Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.610217348 +0100] - ERR - plugin_dependency_startall - Failed to start betxnpostoperation plugin MemberOf Plugin Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.769383513 +0100] - ERR - set_krb5_creds - Could not get initial credentials for principal [ldap/[email protected]] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.779165925 +0100] - ERR - NSMMReplicationPlugin - bind_and_check_pwp - agmt="cn=meTohelium.ccm.lit.fr" (helium:389) - Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP ser> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.789910793 +0100] - ERR - memberof-plugin - memberof_config - Only one memberOf plugin instance can be used Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.804600264 +0100] - ERR - memberof-plugin - memberof_postop_start - Configuration failed (Bad parameter to an ldap routine) Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.816059578 +0100] - ERR - plugin_dependency_startall - Failed to start betxnpostoperation plugin MemberOf Plugin Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.827494087 +0100] - ERR - memberof-plugin - memberof_config - Only one memberOf plugin instance can be used Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.838888361 +0100] - ERR - memberof-plugin - memberof_postop_start - Configuration failed (Bad parameter to an ldap routine) Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.850354183 +0100] - ERR - plugin_dependency_startall - Failed to start betxnpostoperation plugin MemberOf Plugin Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.861757523 +0100] - ERR - plugin_dependency_startall - Failed to resolve plugin dependencies Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:38.873223941 +0100] - ERR - plugin_dependency_startall - betxnpostoperation plugin MemberOf Plugin is not started Mar 17 12:07:39 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:39.309510497 +0100] - INFO - bdb_pre_close - Waiting for 5 database threads to stop Mar 17 12:07:39 hydrogen.ccm.lit.fr ns-slapd[3381]: [17/Mar/2025:12:07:39.883471672 +0100] - INFO - bdb_pre_close - All database threads now stopped Mar 17 12:07:39 hydrogen.ccm.lit.fr systemd[1]: [email protected]: Main process exited, code=exited, status=1/FAILURE Mar 17 12:07:39 hydrogen.ccm.lit.fr systemd[1]: [email protected]: Failed with result 'exit-code'. Mar 17 12:07:39 hydrogen.ccm.lit.fr systemd[1]: Failed to start 389 Directory Server CCM-LIT-FR.. ################################################################################################### Do you have any clue on what to do to solve this problem ? Best regards
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
