Hi,
On Mon, Mar 17, 2025 at 3:25 PM Georges Lenoir via FreeIPA-users < [email protected]> wrote: > Dear list, > > After upgrading my server I could not restart ipa (dirsrv): > > ################################################################################################### > [root@hydrogen ~]# cat /etc/redhat-release > Red Hat Enterprise Linux release 8.10 (Ootpa) > > > ################################################################################################### > [root@hydrogen ~]# ipactl status > Directory Service: STOPPED > Directory Service must be running in order to obtain status of other > services > > > ################################################################################################### > [root@hydrogen ~]# systemctl status ipa > ● ipa.service - Identity, Policy, Audit > Loaded: loaded (/usr/lib/systemd/system/ipa.service; enabled; vendor > preset: disabled) > Active: failed (Result: exit-code) since Mon 2025-03-17 12:07:40 CET; > 51s ago > Process: 2151 ExecStart=/usr/sbin/ipactl start (code=exited, > status=1/FAILURE) > Main PID: 2151 (code=exited, status=1/FAILURE) > > Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Be patient, this may > take a few minutes. > Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Automatic upgrade > failed: IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run > command ipa-server-upgrade manually. > Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Unexpected error - see > /var/log/ipaupgrade.log for details: > Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: CalledProcessError: > CalledProcessError(Command ['/bin/systemctl', 'start', > '[email protected]'] returned non-zero exit status 1: 'Job for > [email protected] failed because the control process exited with > error code.\nSee "systemctl status [email protected]> > Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: The ipa-server-upgrade > command failed. See /var/log/ipaupgrade.log for more information > Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: See the upgrade log for > more details and/or run /usr/sbin/ipa-server-upgrade again > Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Aborting ipactl > Mar 17 12:07:40 hydrogen.ccm.lit.fr systemd[1]: ipa.service: Main process > exited, code=exited, status=1/FAILURE > Mar 17 12:07:40 hydrogen.ccm.lit.fr systemd[1]: ipa.service: Failed with > result 'exit-code'. > Mar 17 12:07:40 hydrogen.ccm.lit.fr systemd[1]: Failed to start Identity, > Policy, Audit. > > > ################################################################################################### > [root@hydrogen ~]# ipa-server-upgrade -v > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipapython.admintool: DEBUG: Logging to /var/log/ipaupgrade.log > ipapython.admintool: DEBUG: ipa-server-upgrade was invoked with arguments > [] and options: {'verbose': True, 'quiet': False, 'log_file': None, > 'force': False, 'skip_version_check': False} > ipapython.admintool: DEBUG: IPA version > 4.9.13-14.module+el8.10.0+22574+12a10600 > ipapython.admintool: DEBUG: IPA platform rhel > ipapython.admintool: DEBUG: IPA os-release Red Hat Enterprise Linux 8.10 > (Ootpa) > ipalib.plugable: DEBUG: importing all plugin modules in > ipaserver.plugins... > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.aci > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.automember > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.automount > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.baseldap > ipalib.plugable: DEBUG: ipaserver.plugins.baseldap is not a valid plugin > module > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.baseuser > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.batch > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.ca > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.caacl > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.cert > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.certmap > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.certprofile > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.config > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.delegation > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.dns > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.dnsserver > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.dogtag > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.domainlevel > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.group > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbac > ipalib.plugable: DEBUG: ipaserver.plugins.hbac is not a valid plugin module > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbacrule > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbacsvc > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.hbacsvcgroup > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbactest > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.host > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hostgroup > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.idp > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.idrange > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.idviews > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.internal > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.join > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.krbtpolicy > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.ldap2 > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.location > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.migration > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.misc > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.netgroup > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.otp > ipalib.plugable: DEBUG: ipaserver.plugins.otp is not a valid plugin module > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.otpconfig > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.otptoken > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.passwd > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.permission > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.ping > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.pkinit > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.privilege > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.pwpolicy > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.rabase > ipalib.plugable: DEBUG: ipaserver.plugins.rabase is not a valid plugin > module > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.radiusproxy > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.realmdomains > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.role > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.schema > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.selfservice > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.selinuxusermap > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.server > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.serverrole > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.serverroles > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.service > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.servicedelegation > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.session > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.stageuser > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.subid > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.sudo > ipalib.plugable: DEBUG: ipaserver.plugins.sudo is not a valid plugin module > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.sudocmd > ipalib.plugable: DEBUG: importing plugin module > ipaserver.plugins.sudocmdgroup > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.sudorule > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.topology > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.trust > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.user > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.vault > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.virtual > ipalib.plugable: DEBUG: ipaserver.plugins.virtual is not a valid plugin > module > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.whoami > ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.xmlserver > ipalib.plugable: DEBUG: importing all plugin modules in > ipaserver.install.plugins... > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.adtrust > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.ca_renewal_master > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.dns > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.fix_kra_people_entry > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.fix_replica_agreements > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.rename_managed > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_ca_topology > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_changelog_maxage > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_dna_shared_config > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_idranges > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_ldap_server_list > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_managed_permissions > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_nis > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_pacs > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_passsync > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_pwpolicy > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_ra_cert_store > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_referint > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_services > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_unhashed_password > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.update_uniqueness > ipalib.plugable: DEBUG: importing plugin module > ipaserver.install.plugins.upload_cacrt > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipapython.ipautil: DEBUG: Searching for an interface of IP address: ::1 > ipapython.ipautil: DEBUG: Testing local IP address: ::1/128 (interface: lo) > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysupgrade/sysupgrade.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysupgrade/sysupgrade.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysupgrade/sysupgrade.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading Index file from > '/var/lib/ipa/sysrestore/sysrestore.index' > ipapython.ipautil: DEBUG: Starting external process > ipapython.ipautil: DEBUG: args=['/bin/systemctl', 'is-active', > '[email protected]'] > ipapython.ipautil: DEBUG: Process finished, return code=3 > ipapython.ipautil: DEBUG: stdout=failed > > ipapython.ipautil: DEBUG: stderr= > ipaserver.install.service: DEBUG: Upgrading IPA:. Estimated time: 1 minute > 30 seconds > Upgrading IPA:. Estimated time: 1 minute 30 seconds > ipaserver.install.service: DEBUG: [1/9]: saving configuration > [1/9]: saving configuration > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Saving StateFile to > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Saving StateFile to > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Saving StateFile to > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Saving StateFile to > '/var/lib/ipa/sysrestore/sysrestore.state' > ipaserver.install.service: DEBUG: step duration: dirsrv __save_config 0.09 > sec > ipaserver.install.service: DEBUG: [2/9]: disabling listeners > [2/9]: disabling listeners > ipaserver.install.service: DEBUG: step duration: dirsrv > __disable_listeners 0.04 sec > ipaserver.install.service: DEBUG: [3/9]: enabling DS global lock > [3/9]: enabling DS global lock > ipaserver.install.service: DEBUG: step duration: dirsrv > __enable_ds_global_write_lock 0.04 sec > ipaserver.install.service: DEBUG: [4/9]: disabling Schema Compat > [4/9]: disabling Schema Compat > ipaserver.install.service: DEBUG: step duration: dirsrv > __disable_schema_compat 0.06 sec > ipaserver.install.service: DEBUG: [5/9]: starting directory server > [5/9]: starting directory server > ipapython.ipautil: DEBUG: Starting external process > ipapython.ipautil: DEBUG: args=['/bin/systemctl', 'start', > '[email protected]'] > ipapython.ipautil: DEBUG: Process finished, return code=1 > ipapython.ipautil: DEBUG: stdout= > ipapython.ipautil: DEBUG: stderr=Job for [email protected] failed > because the control process exited with error code. > See "systemctl status [email protected]" and "journalctl -xe" for > details. > > ipaserver.install.service: DEBUG: Traceback (most recent call last): > File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", > line 635, in start_creation > run_step(full_msg, method) > File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", > line 621, in run_step > method() > File > "/usr/lib/python3.6/site-packages/ipaserver/install/upgradeinstance.py", > line 104, in __start > srv.start(self.serverid, ldapi=True) > File "/usr/lib/python3.6/site-packages/ipaplatform/redhat/services.py", > line 138, in start > instance_name, capture_output=capture_output, wait=wait) > File "/usr/lib/python3.6/site-packages/ipaplatform/base/services.py", > line 306, in start > skip_output=not capture_output) > File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 600, > in run > p.returncode, arg_string, output_log, error_log > ipapython.ipautil.CalledProcessError: CalledProcessError(Command > ['/bin/systemctl', 'start', '[email protected]'] returned > non-zero exit status 1: 'Job for [email protected] failed because > the control process exited with error code.\nSee "systemctl status > [email protected]" and "journalctl -xe" for details.\n') > > ipaserver.install.service: DEBUG: [error] CalledProcessError: > CalledProcessError(Command ['/bin/systemctl', 'start', > '[email protected]'] returned non-zero exit status 1: 'Job for > [email protected] failed because the control process exited with > error code.\nSee "systemctl status [email protected]" and > "journalctl -xe" for details.\n') > [error] CalledProcessError: CalledProcessError(Command > ['/bin/systemctl', 'start', '[email protected]'] returned > non-zero exit status 1: 'Job for [email protected] failed because > the control process exited with error code.\nSee "systemctl status > [email protected]" and "journalctl -xe" for details.\n') > ipaserver.install.service: DEBUG: [cleanup]: stopping directory server > [cleanup]: stopping directory server > ipapython.ipautil: DEBUG: Starting external process > ipapython.ipautil: DEBUG: args=['/bin/systemctl', 'stop', > '[email protected]'] > ipapython.ipautil: DEBUG: Process finished, return code=0 > ipapython.ipautil: DEBUG: stdout= > ipapython.ipautil: DEBUG: stderr= > ipaplatform.base.services: DEBUG: Stop of [email protected] > complete > ipaserver.install.service: DEBUG: step duration: dirsrv __stop_instance > 0.02 sec > ipaserver.install.service: DEBUG: [cleanup]: restoring configuration > [cleanup]: restoring configuration > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Saving StateFile to > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Saving StateFile to > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Saving StateFile to > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Loading StateFile from > '/var/lib/ipa/sysrestore/sysrestore.state' > ipalib.sysrestore: DEBUG: Saving StateFile to > '/var/lib/ipa/sysrestore/sysrestore.state' > ipaserver.install.service: DEBUG: step duration: dirsrv __restore_config > 0.09 sec > ipaserver.install.ipa_server_upgrade: ERROR: IPA server upgrade failed: > Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. > ipapython.admintool: DEBUG: File > "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 180, in > execute > return_value = self.run() > File > "/usr/lib/python3.6/site-packages/ipaserver/install/ipa_server_upgrade.py", > line 54, in run > server.upgrade() > File > "/usr/lib/python3.6/site-packages/ipaserver/install/server/upgrade.py", > line 2059, in upgrade > data_upgrade.create_instance() > File > "/usr/lib/python3.6/site-packages/ipaserver/install/upgradeinstance.py", > line 134, in create_instance > runtime=90) > File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", > line 635, in start_creation > run_step(full_msg, method) > File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", > line 621, in run_step > method() > File > "/usr/lib/python3.6/site-packages/ipaserver/install/upgradeinstance.py", > line 104, in __start > srv.start(self.serverid, ldapi=True) > File "/usr/lib/python3.6/site-packages/ipaplatform/redhat/services.py", > line 138, in start > instance_name, capture_output=capture_output, wait=wait) > File "/usr/lib/python3.6/site-packages/ipaplatform/base/services.py", > line 306, in start > skip_output=not capture_output) > File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 600, > in run > p.returncode, arg_string, output_log, error_log > > ipapython.admintool: DEBUG: The ipa-server-upgrade command failed, > exception: CalledProcessError: CalledProcessError(Command > ['/bin/systemctl', 'start', '[email protected]'] returned > non-zero exit status 1: 'Job for [email protected] failed because > the control process exited with error code.\nSee "systemctl status > [email protected]" and "journalctl -xe" for details.\n') > ipapython.admintool: ERROR: Unexpected error - see /var/log/ipaupgrade.log > for details: > CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', > '[email protected]'] returned non-zero exit status 1: 'Job for > [email protected] failed because the control process exited with > error code.\nSee "systemctl status [email protected]" and > "journalctl -xe" for details.\n') > ipapython.admintool: ERROR: The ipa-server-upgrade command failed. See > /var/log/ipaupgrade.log for more information > > > ################################################################################################### > [root@hydrogen ~]# systemctl status [email protected] > ● [email protected] - 389 Directory Server CCM-LIT-FR. > Loaded: loaded (/usr/lib/systemd/system/[email protected]; enabled; > vendor preset: disabled) > Drop-In: /usr/lib/systemd/system/[email protected] > └─custom.conf > /etc/systemd/system/[email protected] > └─ipa-env.conf > Active: failed (Result: exit-code) since Mon 2025-03-17 12:11:01 CET; > 2min 9s ago > Process: 4422 ExecStart=/usr/sbin/ns-slapd -D > /etc/dirsrv/slapd-CCM-LIT-FR -i /run/dirsrv/slapd-CCM-LIT-FR.pid > (code=exited, status=1/FAILURE) > Process: 4416 ExecStartPre=/usr/libexec/dirsrv/ds_selinux_restorecon.sh > /etc/dirsrv/slapd-CCM-LIT-FR/dse.ldif (code=exited, status=0/SUCCESS) > Process: 4410 > ExecStartPre=/usr/libexec/dirsrv/ds_systemd_ask_password_acl > /etc/dirsrv/slapd-CCM-LIT-FR/dse.ldif (code=exited, status=0/SUCCESS) > Main PID: 4422 (code=exited, status=1/FAILURE) > > Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: > [17/Mar/2025:12:11:00.411075271 +0100] - ERR - memberof-plugin - > memberof_postop_start - Configuration failed (Bad parameter to an ldap > routine) > There is probably an invalid parameter/value in /etc/dirsrv/slapd-CCM-LIT-FRE/dse.ldif releated to the memberof-plugin. In the same directory, you can find a file named dse.ldif.startOK and compare with dse.ldif. The file ending with startOK contains a valid configuration. Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: > [17/Mar/2025:12:11:00.425742157 +0100] - ERR - plugin_dependency_startall - > Failed to start betxnpostoperation plugin MemberOf Plugin > Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: > [17/Mar/2025:12:11:00.442126169 +0100] - ERR - plugin_dependency_startall - > Failed to resolve plugin dependencies > Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: > [17/Mar/2025:12:11:00.442829679 +0100] - ERR - plugin_dependency_startall - > betxnpostoperation plugin MemberOf Plugin is not started > Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: > [17/Mar/2025:12:11:00.457409042 +0100] - ERR - NSMMReplicationPlugin - > bind_and_check_pwp - agmt="cn=meTohelium.ccm.lit.fr" (helium:389) - > Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP > server) () > Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: > [17/Mar/2025:12:11:00.884605262 +0100] - INFO - bdb_pre_close - Waiting for > 5 database threads to stop > Mar 17 12:11:01 hydrogen.ccm.lit.fr ns-slapd[4422]: > [17/Mar/2025:12:11:01.605017766 +0100] - INFO - bdb_pre_close - All > database threads now stopped > Mar 17 12:11:01 hydrogen.ccm.lit.fr systemd[1]: [email protected]: > Main process exited, code=exited, status=1/FAILURE > Mar 17 12:11:01 hydrogen.ccm.lit.fr systemd[1]: [email protected]: > Failed with result 'exit-code'. > Mar 17 12:11:01 hydrogen.ccm.lit.fr systemd[1]: Failed to start 389 > Directory Server CCM-LIT-FR.. > > > ################################################################################################### > journalctl: > Mar 17 12:07:33 hydrogen.ccm.lit.fr systemd[1]: Starting 389 Directory > Server CCM-LIT-FR.... > Mar 17 12:07:34 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:34.533540600 +0100] - NOTICE - config_set_port - > Non-Secure Port Disabled > Mar 17 12:07:34 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:34.888488876 +0100] - INFO - main - 389-Directory/ > 1.4.3.39 B2025.023.1827 starting up > Mar 17 12:07:34 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:34.889290027 +0100] - INFO - main - Setting the maximum > file descriptor limit to: 262144 > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.821260400 +0100] - INFO - PBKDF2_SHA256 - Based on > CPU performance, chose 2048 rounds > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.824599070 +0100] - INFO - > ldbm_instance_config_cachememsize_set - force a minimal value 512000 > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.854749269 +0100] - INFO - > ldbm_instance_config_cachememsize_set - force a minimal value 512000 > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.862375899 +0100] - INFO - > ldbm_instance_config_cachememsize_set - force a minimal value 512000 > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.879078329 +0100] - NOTICE - ldbm_back_start - found > 32133360k physical memory > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.883822964 +0100] - NOTICE - ldbm_back_start - found > 30924176k available > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.902343900 +0100] - NOTICE - ldbm_back_start - cache > autosizing: db cache: 803334k > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.930960238 +0100] - NOTICE - ldbm_back_start - cache > autosizing: userRoot entry cache (3 total): 786432k > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.936995532 +0100] - NOTICE - ldbm_back_start - cache > autosizing: userRoot dn cache (3 total): 131072k > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.974880659 +0100] - NOTICE - ldbm_back_start - cache > autosizing: ipaca entry cache (3 total): 786432k > Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:35.975608265 +0100] - NOTICE - ldbm_back_start - cache > autosizing: ipaca dn cache (3 total): 131072k > Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:36.010454097 +0100] - NOTICE - ldbm_back_start - cache > autosizing: changelog entry cache (3 total): 786432k > Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:36.016885043 +0100] - NOTICE - ldbm_back_start - cache > autosizing: changelog dn cache (3 total): 131072k > Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:36.042832325 +0100] - NOTICE - ldbm_back_start - total > cache size: 3641186304 B; > Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:36.073032416 +0100] - INFO - bdb_start - Resizing db > cache size: 822614323 -> 822614016 > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.297836176 +0100] - ERR - memberof-plugin - > memberof_config - Error 53: The ipaOwner configuration attribute must be > set to an attribute defined to use either the Distinguished Name or Name > and Optional UI> > On my working instance, I have the following configuration for MemberOf Plugin: dn: cn=MemberOf Plugin,cn=plugins,cn=config cn: MemberOf Plugin memberofattr: memberOf memberofentryscope: dc=ipa,dc=test memberofentryscopeexcludesubtree: cn=compat,dc=ipa,dc=test memberofentryscopeexcludesubtree: cn=provisioning,dc=ipa,dc=test memberofentryscopeexcludesubtree: cn=topology,cn=ipa,cn=etc,dc=ipa,dc=test memberofgroupattr: member memberofgroupattr: memberUser memberofgroupattr: memberHost memberofgroupattr: ipaOwner modifiersName: cn=Directory Manager modifyTimestamp: 20220121155754Z nsslapd-plugin-depends-on-type: database nsslapd-pluginDescription: memberof plugin nsslapd-pluginEnabled: on nsslapd-pluginId: memberof nsslapd-pluginInitfunc: memberof_postop_init nsslapd-pluginPath: libmemberof-plugin nsslapd-pluginType: betxnpostoperation nsslapd-pluginVendor: 389 Project nsslapd-pluginVersion: 2.0.16 objectClass: top objectClass: nsSlapdPlugin objectClass: extensibleObject and ipaowner attribute is defined in the schema as a Distinguished Name: # ldapsearch -D cn=directory\ manager -w Secret123 -LLL -o ldif-wrap=no -b cn=schema -s base attributetypes | grep -i ipaowner attributetypes: ( 2.16.840.1.113730.3.8.23.13 NAME 'ipaOwner' DESC 'Owner of an entry' SUP *distinguishedName* EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE X-ORIGIN 'IPA v4.9' ) Did you change the schema? flo Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.299113064 +0100] - ERR - memberof-plugin - > memberof_postop_start - Configuration failed (Server is unwilling to > perform) > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.319984346 +0100] - ERR - plugin_dependency_startall - > Failed to start betxnpostoperation plugin MemberOf Plugin > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.413061116 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=groups,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.414271102 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=computers,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.434882522 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=ng,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.446485874 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target ou=sudoers,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.469101711 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=users,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.480476831 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.484209273 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.503410363 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.514724493 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.518588881 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.537770784 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.554900831 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.571995191 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.589023452 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.594937194 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.604865064 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.623200151 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipapasskey" does not exist in schema. > Please add attributeTypes "ipapasskey" to schema if necessary. > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.626792384 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = > "ipapasskey > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.657449987 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = > "ipapasskey")(targattrfilters="add=objectclass:(objectclass=ipapasskeyuser)")(version > 3.0;acl "selfservice:Users can manage > > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.664118049 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipapasskey" does not exist in schema. > Please add attributeTypes "ipapasskey" to schema if necessary. > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.680345996 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = > "ipapasskey > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.680799097 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "ipapasskey || > objectclass")(targetfilter = "(objectclass=posixaccount)")(version 3.0;acl > "permission:System: Manage Passkey> > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.696012693 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipapasskey" does not exist in schema. > Please add attributeTypes "ipapasskey" to schema if necessary. > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.714632289 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = > "ipapasskey > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.715065461 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "ipapasskey || ipasshpubkey || > ipauniqueid || ipauserauthtype || userclass")(targetfilter = > "(objectclass=posixaccount)")(ve> > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.793636996 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=casigningcert > cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=ccm,dc=lit,dc=dc=fr does not > exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.795472203 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=casigningcert > cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=ccm,dc=lit,dc=dc=fr does not > exist > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.824588221 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipauserdefaultsubordinateid" does not > exist in schema. Please add attributeTypes "ipauserdefaultsubordinateid" to > schema if nec> > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.826738960 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.846289441 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn > || ipacertificatesubjectbase || ipaconfigstring || ipacustomfields || > ipadefaultemaildoma> > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.867823993 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipaautoprivategroups" does not exist > in schema. Please add attributeTypes "ipaautoprivategroups" to schema if > necessary. > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.874759390 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.886279753 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn > || ipaautoprivategroups || ipabaseid || ipabaserid || ipaidrangesize || > ipanttrusteddomai> > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.897373981 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipacahsmconfiguration" does not exist > in schema. Please add attributeTypes "ipacahsmconfiguration" to schema if > necessary. > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.907318983 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.918742951 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "cn || createtimestamp || > description || entryusn || ipacahsmconfiguration || ipacaid || > ipacaissuerdn || ipacarandomserialn> > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.933535895 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipapwddictcheck" does not exist in > schema. Please add attributeTypes "ipapwddictcheck" to schema if necessary. > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.938088741 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = > "ipapwddictcheck > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.952984589 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "ipapwddictcheck || > ipapwdmaxrepeat || ipapwdmaxsequence || ipapwdusercheck || krbmaxpwdlife || > krbminpwdlife || krbpwdfailu> > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.964472653 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipapwddictcheck" does not exist in > schema. Please add attributeTypes "ipapwddictcheck" to schema if necessary. > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.975842475 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn > Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:37.987319098 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "cn || cospriority || > createtimestamp || entryusn || ipapwddictcheck || ipapwdmaxrepeat || > ipapwdmaxsequence || ipapwduserch> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.013649792 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipaidpauthendpoint" does not exist in > schema. Please add attributeTypes "ipaidpauthendpoint" to schema if > necessary. > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.016115954 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.033018572 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "cn || ipaidpauthendpoint || > ipaidpclientid || ipaidpclientsecret || ipaidpdevauthendpoint || > ipaidpissuerurl || ipaidpkeyse> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.052133408 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipaidpauthendpoint" does not exist in > schema. Please add attributeTypes "ipaidpauthendpoint" to schema if > necessary. > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.052585838 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.072866844 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn > || ipaidpauthendpoint || ipaidpclientid || ipaidpdevauthendpoint || > ipaidpissuerurl || ip> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.084339533 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipaidpauthendpoint" does not exist in > schema. Please add attributeTypes "ipaidpauthendpoint" to schema if > necessary. > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.095721051 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.107191399 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn > || ipaidpauthendpoint || ipaidpclientid || ipaidpclientsecret || > ipaidpdevauthendpoint ||> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.119005384 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. > Please add attributeTypes "ipaowner" to schema if necessary. > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.130044439 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetfilter = > "(objectclass=ipasubordinateidentry) > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.141481539 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetfilter = > "(objectclass=ipasubordinateidentry)")(targetattr="description || ipaowner > || ipauniqueid")(targattrfilters = "add=objectC> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.152939627 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. > Please add attributeTypes "ipaowner" to schema if necessary. > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.164343183 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetfilter = > "(objectclass=ipasubordinateidentry) > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.183620385 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetfilter = > "(objectclass=ipasubordinateidentry)")(targetattr="description || ipaowner > || ipauniqueid")(targattrfilters = "add=objectC> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.184153464 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. > Please add attributeTypes "ipaowner" to schema if necessary. > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.204368823 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = > "description > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.215798949 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "description || > ipaowner")(targetfilter = "(objectclass=ipasubordinateidentry)")(version > 3.0;acl "permission:System: Manage > > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.227256127 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. > Please add attributeTypes "ipaowner" to schema if necessary. > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.238663340 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = > "createtimestamp > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.250083654 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "createtimestamp || description || > entryusn || ipaowner || ipasubgidcount || ipasubgidnumber || ipasubuidcount > || ipasubuidn> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.273123622 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "iparequireuserverification" does not > exist in schema. Please add attributeTypes "iparequireuserverification" to > schema if neces> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.275091623 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = > "iparequireuserverification > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.290184130 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = > "iparequireuserverification")(targetfilter = > "(objectclass=ipapasskeyconfigobject)")(version 3.0;acl "permission:System: > Mod> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.301637980 +0100] - ERR - NSACLPlugin - > __aclp__init_targetattr - targetattr "iparequireuserverification" does not > exist in schema. Please add attributeTypes "iparequireuserverification" to > schema if neces> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.313057425 +0100] - ERR - NSACLPlugin - > acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.324467605 +0100] - ERR - NSACLPlugin - > __aclinit_handler - This ((targetattr = "cn || > iparequireuserverification")(targetfilter = > "(objectclass=ipapasskeyconfigobject)")(version 3.0;acl "permission:Syste> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.460650791 +0100] - WARN - NSACLPlugin - acl_parse - > The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not > exist > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.467047237 +0100] - INFO - slapi_vattrspi_regattr - > Because krbPwdPolicyReference is a new registered virtual attribute , > nsslapd-ignore-virtual-attrs was set to 'off' > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.479885106 +0100] - ERR - cos-plugin - cos_dn_defs_cb > - Skipping CoS Definition cn=Password > Policy,cn=accounts,dc=ccm,dc=lit,dc=dc=fr--no CoS Templates found, which > should be added before the CoS D> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.500880084 +0100] - ERR - dna-plugin - > dna_parse_config_entry - dnaType (ipasubuidnumber) does not exist. > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.503715869 +0100] - ERR - dna-plugin - > dna_parse_config_entry - Invalid config entry [cn=subordinate > ids,cn=distributed numeric assignment plugin,cn=plugins,cn=config] skipped > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.595608568 +0100] - ERR - memberof-plugin - > memberof_config - Only one memberOf plugin instance can be used > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.596314330 +0100] - ERR - memberof-plugin - > memberof_postop_start - Configuration failed (Bad parameter to an ldap > routine) > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.610217348 +0100] - ERR - plugin_dependency_startall - > Failed to start betxnpostoperation plugin MemberOf Plugin > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.769383513 +0100] - ERR - set_krb5_creds - Could not > get initial credentials for principal [ldap/[email protected]] > in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot > > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.779165925 +0100] - ERR - NSMMReplicationPlugin - > bind_and_check_pwp - agmt="cn=meTohelium.ccm.lit.fr" (helium:389) - > Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP > ser> > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.789910793 +0100] - ERR - memberof-plugin - > memberof_config - Only one memberOf plugin instance can be used > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.804600264 +0100] - ERR - memberof-plugin - > memberof_postop_start - Configuration failed (Bad parameter to an ldap > routine) > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.816059578 +0100] - ERR - plugin_dependency_startall - > Failed to start betxnpostoperation plugin MemberOf Plugin > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.827494087 +0100] - ERR - memberof-plugin - > memberof_config - Only one memberOf plugin instance can be used > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.838888361 +0100] - ERR - memberof-plugin - > memberof_postop_start - Configuration failed (Bad parameter to an ldap > routine) > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.850354183 +0100] - ERR - plugin_dependency_startall - > Failed to start betxnpostoperation plugin MemberOf Plugin > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.861757523 +0100] - ERR - plugin_dependency_startall - > Failed to resolve plugin dependencies > Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:38.873223941 +0100] - ERR - plugin_dependency_startall - > betxnpostoperation plugin MemberOf Plugin is not started > Mar 17 12:07:39 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:39.309510497 +0100] - INFO - bdb_pre_close - Waiting for > 5 database threads to stop > Mar 17 12:07:39 hydrogen.ccm.lit.fr ns-slapd[3381]: > [17/Mar/2025:12:07:39.883471672 +0100] - INFO - bdb_pre_close - All > database threads now stopped > Mar 17 12:07:39 hydrogen.ccm.lit.fr systemd[1]: [email protected]: > Main process exited, code=exited, status=1/FAILURE > Mar 17 12:07:39 hydrogen.ccm.lit.fr systemd[1]: [email protected]: > Failed with result 'exit-code'. > Mar 17 12:07:39 hydrogen.ccm.lit.fr systemd[1]: Failed to start 389 > Directory Server CCM-LIT-FR.. > > ################################################################################################### > > Do you have any clue on what to do to solve this problem ? > Best regards > -- > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue >
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
