Hi, what is the output of ldapsearch -D cn=directory\ manager -w $DM_PWD -LLL -o ldif-wrap=no -b cn=schema -s base attributetypes | grep -i ipaowner on your machine (replace $DM_PWD with your directory manager password)?
flo On Tue, Mar 18, 2025 at 10:59 AM Georges Lenoir <[email protected]> wrote: > Dear Florence, > > Thanks a lot for your answer. > What I tried: > cp dse.ldif.startOK dse.ldif > systemctl restart [email protected] > But dirsrv still fails with the same error message. I tried with several > previous dse.ldif.ipa.xxxxx with no more luck. > I am gonna try the restore backup way. > Thanks so much for your time. > Best regards, > > Georges > > Le lun. 17 mars 2025 à 17:07, Florence Blanc-Renaud <[email protected]> a > écrit : > >> Hi, >> >> >> On Mon, Mar 17, 2025 at 3:25 PM Georges Lenoir via FreeIPA-users < >> [email protected]> wrote: >> >>> Dear list, >>> >>> After upgrading my server I could not restart ipa (dirsrv): >>> >>> ################################################################################################### >>> [root@hydrogen ~]# cat /etc/redhat-release >>> Red Hat Enterprise Linux release 8.10 (Ootpa) >>> >>> >>> ################################################################################################### >>> [root@hydrogen ~]# ipactl status >>> Directory Service: STOPPED >>> Directory Service must be running in order to obtain status of other >>> services >>> >>> >>> ################################################################################################### >>> [root@hydrogen ~]# systemctl status ipa >>> ● ipa.service - Identity, Policy, Audit >>> Loaded: loaded (/usr/lib/systemd/system/ipa.service; enabled; vendor >>> preset: disabled) >>> Active: failed (Result: exit-code) since Mon 2025-03-17 12:07:40 CET; >>> 51s ago >>> Process: 2151 ExecStart=/usr/sbin/ipactl start (code=exited, >>> status=1/FAILURE) >>> Main PID: 2151 (code=exited, status=1/FAILURE) >>> >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Be patient, this may >>> take a few minutes. >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Automatic upgrade >>> failed: IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run >>> command ipa-server-upgrade manually. >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Unexpected error - >>> see /var/log/ipaupgrade.log for details: >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: CalledProcessError: >>> CalledProcessError(Command ['/bin/systemctl', 'start', >>> '[email protected]'] returned non-zero exit status 1: 'Job for >>> [email protected] failed because the control process exited >>> with error code.\nSee "systemctl status [email protected]> >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: The >>> ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more >>> information >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: See the upgrade log >>> for more details and/or run /usr/sbin/ipa-server-upgrade again >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr ipactl[2151]: Aborting ipactl >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr systemd[1]: ipa.service: Main >>> process exited, code=exited, status=1/FAILURE >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr systemd[1]: ipa.service: Failed >>> with result 'exit-code'. >>> Mar 17 12:07:40 hydrogen.ccm.lit.fr systemd[1]: Failed to start >>> Identity, Policy, Audit. >>> >>> >>> ################################################################################################### >>> [root@hydrogen ~]# ipa-server-upgrade -v >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipapython.admintool: DEBUG: Logging to /var/log/ipaupgrade.log >>> ipapython.admintool: DEBUG: ipa-server-upgrade was invoked with >>> arguments [] and options: {'verbose': True, 'quiet': False, 'log_file': >>> None, 'force': False, 'skip_version_check': False} >>> ipapython.admintool: DEBUG: IPA version >>> 4.9.13-14.module+el8.10.0+22574+12a10600 >>> ipapython.admintool: DEBUG: IPA platform rhel >>> ipapython.admintool: DEBUG: IPA os-release Red Hat Enterprise Linux 8.10 >>> (Ootpa) >>> ipalib.plugable: DEBUG: importing all plugin modules in >>> ipaserver.plugins... >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.aci >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.automember >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.automount >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.baseldap >>> ipalib.plugable: DEBUG: ipaserver.plugins.baseldap is not a valid plugin >>> module >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.baseuser >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.batch >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.ca >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.caacl >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.cert >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.certmap >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.certprofile >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.config >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.delegation >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.dns >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.dnsserver >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.dogtag >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.domainlevel >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.group >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbac >>> ipalib.plugable: DEBUG: ipaserver.plugins.hbac is not a valid plugin >>> module >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.hbacrule >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.hbacsvc >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.hbacsvcgroup >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.hbactest >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.host >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.hostgroup >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.idp >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.idrange >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.idviews >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.internal >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.join >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.krbtpolicy >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.ldap2 >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.location >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.migration >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.misc >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.netgroup >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.otp >>> ipalib.plugable: DEBUG: ipaserver.plugins.otp is not a valid plugin >>> module >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.otpconfig >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.otptoken >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.passwd >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.permission >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.ping >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.pkinit >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.privilege >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.pwpolicy >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.rabase >>> ipalib.plugable: DEBUG: ipaserver.plugins.rabase is not a valid plugin >>> module >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.radiusproxy >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.realmdomains >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.role >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.schema >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.selfservice >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.selinuxusermap >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.server >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.serverrole >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.serverroles >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.service >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.servicedelegation >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.session >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.stageuser >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.subid >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.sudo >>> ipalib.plugable: DEBUG: ipaserver.plugins.sudo is not a valid plugin >>> module >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.sudocmd >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.sudocmdgroup >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.sudorule >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.topology >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.trust >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.user >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.vault >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.virtual >>> ipalib.plugable: DEBUG: ipaserver.plugins.virtual is not a valid plugin >>> module >>> ipalib.plugable: DEBUG: importing plugin module ipaserver.plugins.whoami >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.plugins.xmlserver >>> ipalib.plugable: DEBUG: importing all plugin modules in >>> ipaserver.install.plugins... >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.adtrust >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.ca_renewal_master >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.dns >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.fix_kra_people_entry >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.fix_replica_agreements >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.rename_managed >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_ca_topology >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_changelog_maxage >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_dna_shared_config >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_idranges >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_ldap_server_list >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_managed_permissions >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_nis >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_pacs >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_passsync >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_pwpolicy >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_ra_cert_store >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_referint >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_services >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_unhashed_password >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.update_uniqueness >>> ipalib.plugable: DEBUG: importing plugin module >>> ipaserver.install.plugins.upload_cacrt >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipapython.ipautil: DEBUG: Searching for an interface of IP address: ::1 >>> ipapython.ipautil: DEBUG: Testing local IP address: ::1/128 (interface: >>> lo) >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysupgrade/sysupgrade.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysupgrade/sysupgrade.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysupgrade/sysupgrade.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading Index file from >>> '/var/lib/ipa/sysrestore/sysrestore.index' >>> ipapython.ipautil: DEBUG: Starting external process >>> ipapython.ipautil: DEBUG: args=['/bin/systemctl', 'is-active', >>> '[email protected]'] >>> ipapython.ipautil: DEBUG: Process finished, return code=3 >>> ipapython.ipautil: DEBUG: stdout=failed >>> >>> ipapython.ipautil: DEBUG: stderr= >>> ipaserver.install.service: DEBUG: Upgrading IPA:. Estimated time: 1 >>> minute 30 seconds >>> Upgrading IPA:. Estimated time: 1 minute 30 seconds >>> ipaserver.install.service: DEBUG: [1/9]: saving configuration >>> [1/9]: saving configuration >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Saving StateFile to >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Saving StateFile to >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Saving StateFile to >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Saving StateFile to >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipaserver.install.service: DEBUG: step duration: dirsrv __save_config >>> 0.09 sec >>> ipaserver.install.service: DEBUG: [2/9]: disabling listeners >>> [2/9]: disabling listeners >>> ipaserver.install.service: DEBUG: step duration: dirsrv >>> __disable_listeners 0.04 sec >>> ipaserver.install.service: DEBUG: [3/9]: enabling DS global lock >>> [3/9]: enabling DS global lock >>> ipaserver.install.service: DEBUG: step duration: dirsrv >>> __enable_ds_global_write_lock 0.04 sec >>> ipaserver.install.service: DEBUG: [4/9]: disabling Schema Compat >>> [4/9]: disabling Schema Compat >>> ipaserver.install.service: DEBUG: step duration: dirsrv >>> __disable_schema_compat 0.06 sec >>> ipaserver.install.service: DEBUG: [5/9]: starting directory server >>> [5/9]: starting directory server >>> ipapython.ipautil: DEBUG: Starting external process >>> ipapython.ipautil: DEBUG: args=['/bin/systemctl', 'start', >>> '[email protected]'] >>> ipapython.ipautil: DEBUG: Process finished, return code=1 >>> ipapython.ipautil: DEBUG: stdout= >>> ipapython.ipautil: DEBUG: stderr=Job for [email protected] >>> failed because the control process exited with error code. >>> See "systemctl status [email protected]" and "journalctl -xe" >>> for details. >>> >>> ipaserver.install.service: DEBUG: Traceback (most recent call last): >>> File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", >>> line 635, in start_creation >>> run_step(full_msg, method) >>> File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", >>> line 621, in run_step >>> method() >>> File >>> "/usr/lib/python3.6/site-packages/ipaserver/install/upgradeinstance.py", >>> line 104, in __start >>> srv.start(self.serverid, ldapi=True) >>> File >>> "/usr/lib/python3.6/site-packages/ipaplatform/redhat/services.py", line >>> 138, in start >>> instance_name, capture_output=capture_output, wait=wait) >>> File "/usr/lib/python3.6/site-packages/ipaplatform/base/services.py", >>> line 306, in start >>> skip_output=not capture_output) >>> File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line >>> 600, in run >>> p.returncode, arg_string, output_log, error_log >>> ipapython.ipautil.CalledProcessError: CalledProcessError(Command >>> ['/bin/systemctl', 'start', '[email protected]'] returned >>> non-zero exit status 1: 'Job for [email protected] failed >>> because the control process exited with error code.\nSee "systemctl status >>> [email protected]" and "journalctl -xe" for details.\n') >>> >>> ipaserver.install.service: DEBUG: [error] CalledProcessError: >>> CalledProcessError(Command ['/bin/systemctl', 'start', >>> '[email protected]'] returned non-zero exit status 1: 'Job for >>> [email protected] failed because the control process exited >>> with error code.\nSee "systemctl status [email protected]" and >>> "journalctl -xe" for details.\n') >>> [error] CalledProcessError: CalledProcessError(Command >>> ['/bin/systemctl', 'start', '[email protected]'] returned >>> non-zero exit status 1: 'Job for [email protected] failed >>> because the control process exited with error code.\nSee "systemctl status >>> [email protected]" and "journalctl -xe" for details.\n') >>> ipaserver.install.service: DEBUG: [cleanup]: stopping directory server >>> [cleanup]: stopping directory server >>> ipapython.ipautil: DEBUG: Starting external process >>> ipapython.ipautil: DEBUG: args=['/bin/systemctl', 'stop', >>> '[email protected]'] >>> ipapython.ipautil: DEBUG: Process finished, return code=0 >>> ipapython.ipautil: DEBUG: stdout= >>> ipapython.ipautil: DEBUG: stderr= >>> ipaplatform.base.services: DEBUG: Stop of [email protected] >>> complete >>> ipaserver.install.service: DEBUG: step duration: dirsrv __stop_instance >>> 0.02 sec >>> ipaserver.install.service: DEBUG: [cleanup]: restoring configuration >>> [cleanup]: restoring configuration >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Saving StateFile to >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Saving StateFile to >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Saving StateFile to >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Loading StateFile from >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipalib.sysrestore: DEBUG: Saving StateFile to >>> '/var/lib/ipa/sysrestore/sysrestore.state' >>> ipaserver.install.service: DEBUG: step duration: dirsrv __restore_config >>> 0.09 sec >>> ipaserver.install.ipa_server_upgrade: ERROR: IPA server upgrade failed: >>> Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. >>> ipapython.admintool: DEBUG: File >>> "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 180, in >>> execute >>> return_value = self.run() >>> File >>> "/usr/lib/python3.6/site-packages/ipaserver/install/ipa_server_upgrade.py", >>> line 54, in run >>> server.upgrade() >>> File >>> "/usr/lib/python3.6/site-packages/ipaserver/install/server/upgrade.py", >>> line 2059, in upgrade >>> data_upgrade.create_instance() >>> File >>> "/usr/lib/python3.6/site-packages/ipaserver/install/upgradeinstance.py", >>> line 134, in create_instance >>> runtime=90) >>> File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", >>> line 635, in start_creation >>> run_step(full_msg, method) >>> File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", >>> line 621, in run_step >>> method() >>> File >>> "/usr/lib/python3.6/site-packages/ipaserver/install/upgradeinstance.py", >>> line 104, in __start >>> srv.start(self.serverid, ldapi=True) >>> File >>> "/usr/lib/python3.6/site-packages/ipaplatform/redhat/services.py", line >>> 138, in start >>> instance_name, capture_output=capture_output, wait=wait) >>> File "/usr/lib/python3.6/site-packages/ipaplatform/base/services.py", >>> line 306, in start >>> skip_output=not capture_output) >>> File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line >>> 600, in run >>> p.returncode, arg_string, output_log, error_log >>> >>> ipapython.admintool: DEBUG: The ipa-server-upgrade command failed, >>> exception: CalledProcessError: CalledProcessError(Command >>> ['/bin/systemctl', 'start', '[email protected]'] returned >>> non-zero exit status 1: 'Job for [email protected] failed >>> because the control process exited with error code.\nSee "systemctl status >>> [email protected]" and "journalctl -xe" for details.\n') >>> ipapython.admintool: ERROR: Unexpected error - see >>> /var/log/ipaupgrade.log for details: >>> CalledProcessError: CalledProcessError(Command ['/bin/systemctl', >>> 'start', '[email protected]'] returned non-zero exit status 1: >>> 'Job for [email protected] failed because the control process >>> exited with error code.\nSee "systemctl status [email protected]" >>> and "journalctl -xe" for details.\n') >>> ipapython.admintool: ERROR: The ipa-server-upgrade command failed. See >>> /var/log/ipaupgrade.log for more information >>> >>> >>> ################################################################################################### >>> [root@hydrogen ~]# systemctl status [email protected] >>> ● [email protected] - 389 Directory Server CCM-LIT-FR. >>> Loaded: loaded (/usr/lib/systemd/system/[email protected]; enabled; >>> vendor preset: disabled) >>> Drop-In: /usr/lib/systemd/system/[email protected] >>> └─custom.conf >>> /etc/systemd/system/[email protected] >>> └─ipa-env.conf >>> Active: failed (Result: exit-code) since Mon 2025-03-17 12:11:01 CET; >>> 2min 9s ago >>> Process: 4422 ExecStart=/usr/sbin/ns-slapd -D >>> /etc/dirsrv/slapd-CCM-LIT-FR -i /run/dirsrv/slapd-CCM-LIT-FR.pid >>> (code=exited, status=1/FAILURE) >>> Process: 4416 >>> ExecStartPre=/usr/libexec/dirsrv/ds_selinux_restorecon.sh >>> /etc/dirsrv/slapd-CCM-LIT-FR/dse.ldif (code=exited, status=0/SUCCESS) >>> Process: 4410 >>> ExecStartPre=/usr/libexec/dirsrv/ds_systemd_ask_password_acl >>> /etc/dirsrv/slapd-CCM-LIT-FR/dse.ldif (code=exited, status=0/SUCCESS) >>> Main PID: 4422 (code=exited, status=1/FAILURE) >>> >>> Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: >>> [17/Mar/2025:12:11:00.411075271 +0100] - ERR - memberof-plugin - >>> memberof_postop_start - Configuration failed (Bad parameter to an ldap >>> routine) >>> >> >> There is probably an invalid parameter/value in >> /etc/dirsrv/slapd-CCM-LIT-FRE/dse.ldif releated to the memberof-plugin. >> In the same directory, you can find a file named dse.ldif.startOK and >> compare with dse.ldif. The file ending with startOK contains a valid >> configuration. >> >> >> Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: >>> [17/Mar/2025:12:11:00.425742157 +0100] - ERR - plugin_dependency_startall - >>> Failed to start betxnpostoperation plugin MemberOf Plugin >>> Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: >>> [17/Mar/2025:12:11:00.442126169 +0100] - ERR - plugin_dependency_startall - >>> Failed to resolve plugin dependencies >>> Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: >>> [17/Mar/2025:12:11:00.442829679 +0100] - ERR - plugin_dependency_startall - >>> betxnpostoperation plugin MemberOf Plugin is not started >>> Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: >>> [17/Mar/2025:12:11:00.457409042 +0100] - ERR - NSMMReplicationPlugin - >>> bind_and_check_pwp - agmt="cn=meTohelium.ccm.lit.fr" (helium:389) - >>> Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP >>> server) () >>> Mar 17 12:11:00 hydrogen.ccm.lit.fr ns-slapd[4422]: >>> [17/Mar/2025:12:11:00.884605262 +0100] - INFO - bdb_pre_close - Waiting for >>> 5 database threads to stop >>> Mar 17 12:11:01 hydrogen.ccm.lit.fr ns-slapd[4422]: >>> [17/Mar/2025:12:11:01.605017766 +0100] - INFO - bdb_pre_close - All >>> database threads now stopped >>> Mar 17 12:11:01 hydrogen.ccm.lit.fr systemd[1]: >>> [email protected]: Main process exited, code=exited, >>> status=1/FAILURE >>> Mar 17 12:11:01 hydrogen.ccm.lit.fr systemd[1]: >>> [email protected]: Failed with result 'exit-code'. >>> Mar 17 12:11:01 hydrogen.ccm.lit.fr systemd[1]: Failed to start 389 >>> Directory Server CCM-LIT-FR.. >>> >>> >>> ################################################################################################### >>> journalctl: >>> Mar 17 12:07:33 hydrogen.ccm.lit.fr systemd[1]: Starting 389 Directory >>> Server CCM-LIT-FR.... >>> Mar 17 12:07:34 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:34.533540600 +0100] - NOTICE - config_set_port - >>> Non-Secure Port Disabled >>> Mar 17 12:07:34 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:34.888488876 +0100] - INFO - main - 389-Directory/ >>> 1.4.3.39 B2025.023.1827 starting up >>> Mar 17 12:07:34 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:34.889290027 +0100] - INFO - main - Setting the maximum >>> file descriptor limit to: 262144 >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.821260400 +0100] - INFO - PBKDF2_SHA256 - Based on >>> CPU performance, chose 2048 rounds >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.824599070 +0100] - INFO - >>> ldbm_instance_config_cachememsize_set - force a minimal value 512000 >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.854749269 +0100] - INFO - >>> ldbm_instance_config_cachememsize_set - force a minimal value 512000 >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.862375899 +0100] - INFO - >>> ldbm_instance_config_cachememsize_set - force a minimal value 512000 >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.879078329 +0100] - NOTICE - ldbm_back_start - found >>> 32133360k physical memory >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.883822964 +0100] - NOTICE - ldbm_back_start - found >>> 30924176k available >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.902343900 +0100] - NOTICE - ldbm_back_start - cache >>> autosizing: db cache: 803334k >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.930960238 +0100] - NOTICE - ldbm_back_start - cache >>> autosizing: userRoot entry cache (3 total): 786432k >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.936995532 +0100] - NOTICE - ldbm_back_start - cache >>> autosizing: userRoot dn cache (3 total): 131072k >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.974880659 +0100] - NOTICE - ldbm_back_start - cache >>> autosizing: ipaca entry cache (3 total): 786432k >>> Mar 17 12:07:35 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:35.975608265 +0100] - NOTICE - ldbm_back_start - cache >>> autosizing: ipaca dn cache (3 total): 131072k >>> Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:36.010454097 +0100] - NOTICE - ldbm_back_start - cache >>> autosizing: changelog entry cache (3 total): 786432k >>> Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:36.016885043 +0100] - NOTICE - ldbm_back_start - cache >>> autosizing: changelog dn cache (3 total): 131072k >>> Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:36.042832325 +0100] - NOTICE - ldbm_back_start - total >>> cache size: 3641186304 B; >>> Mar 17 12:07:36 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:36.073032416 +0100] - INFO - bdb_start - Resizing db >>> cache size: 822614323 -> 822614016 >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.297836176 +0100] - ERR - memberof-plugin - >>> memberof_config - Error 53: The ipaOwner configuration attribute must be >>> set to an attribute defined to use either the Distinguished Name or Name >>> and Optional UI> >>> >> >> On my working instance, I have the following configuration for MemberOf >> Plugin: >> >> dn: cn=MemberOf Plugin,cn=plugins,cn=config >> cn: MemberOf Plugin >> memberofattr: memberOf >> memberofentryscope: dc=ipa,dc=test >> memberofentryscopeexcludesubtree: cn=compat,dc=ipa,dc=test >> memberofentryscopeexcludesubtree: cn=provisioning,dc=ipa,dc=test >> memberofentryscopeexcludesubtree: cn=topology,cn=ipa,cn=etc,dc=ipa,dc=test >> memberofgroupattr: member >> memberofgroupattr: memberUser >> memberofgroupattr: memberHost >> memberofgroupattr: ipaOwner >> modifiersName: cn=Directory Manager >> modifyTimestamp: 20220121155754Z >> nsslapd-plugin-depends-on-type: database >> nsslapd-pluginDescription: memberof plugin >> nsslapd-pluginEnabled: on >> nsslapd-pluginId: memberof >> nsslapd-pluginInitfunc: memberof_postop_init >> nsslapd-pluginPath: libmemberof-plugin >> nsslapd-pluginType: betxnpostoperation >> nsslapd-pluginVendor: 389 Project >> nsslapd-pluginVersion: 2.0.16 >> objectClass: top >> objectClass: nsSlapdPlugin >> objectClass: extensibleObject >> >> >> and ipaowner attribute is defined in the schema as a Distinguished Name: >> # ldapsearch -D cn=directory\ manager -w Secret123 -LLL -o ldif-wrap=no >> -b cn=schema -s base attributetypes | grep -i ipaowner >> attributetypes: ( 2.16.840.1.113730.3.8.23.13 NAME 'ipaOwner' DESC 'Owner >> of an entry' SUP *distinguishedName* EQUALITY distinguishedNameMatch >> SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE X-ORIGIN 'IPA v4.9' ) >> >> Did you change the schema? >> >> flo >> >> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.299113064 +0100] - ERR - memberof-plugin - >>> memberof_postop_start - Configuration failed (Server is unwilling to >>> perform) >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.319984346 +0100] - ERR - plugin_dependency_startall - >>> Failed to start betxnpostoperation plugin MemberOf Plugin >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.413061116 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=groups,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.414271102 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=computers,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.434882522 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=ng,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.446485874 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target ou=sudoers,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.469101711 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=users,cn=compat,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.480476831 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.484209273 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.503410363 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.514724493 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.518588881 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.537770784 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.554900831 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.571995191 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.589023452 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.594937194 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.604865064 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=vaults,cn=kra,dc=ccm,dc=lit,dc=dc=fr does not exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.623200151 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipapasskey" does not exist in schema. >>> Please add attributeTypes "ipapasskey" to schema if necessary. >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.626792384 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = >>> "ipapasskey >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.657449987 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = >>> "ipapasskey")(targattrfilters="add=objectclass:(objectclass=ipapasskeyuser)")(version >>> 3.0;acl "selfservice:Users can manage > >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.664118049 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipapasskey" does not exist in schema. >>> Please add attributeTypes "ipapasskey" to schema if necessary. >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.680345996 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = >>> "ipapasskey >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.680799097 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "ipapasskey || >>> objectclass")(targetfilter = "(objectclass=posixaccount)")(version 3.0;acl >>> "permission:System: Manage Passkey> >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.696012693 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipapasskey" does not exist in schema. >>> Please add attributeTypes "ipapasskey" to schema if necessary. >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.714632289 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = >>> "ipapasskey >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.715065461 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "ipapasskey || ipasshpubkey || >>> ipauniqueid || ipauserauthtype || userclass")(targetfilter = >>> "(objectclass=posixaccount)")(ve> >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.793636996 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=casigningcert >>> cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=ccm,dc=lit,dc=dc=fr does not >>> exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.795472203 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=casigningcert >>> cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=ccm,dc=lit,dc=dc=fr does not >>> exist >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.824588221 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipauserdefaultsubordinateid" does not >>> exist in schema. Please add attributeTypes "ipauserdefaultsubordinateid" to >>> schema if nec> >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.826738960 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.846289441 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn >>> || ipacertificatesubjectbase || ipaconfigstring || ipacustomfields || >>> ipadefaultemaildoma> >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.867823993 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipaautoprivategroups" does not exist >>> in schema. Please add attributeTypes "ipaautoprivategroups" to schema if >>> necessary. >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.874759390 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.886279753 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn >>> || ipaautoprivategroups || ipabaseid || ipabaserid || ipaidrangesize || >>> ipanttrusteddomai> >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.897373981 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipacahsmconfiguration" does not exist >>> in schema. Please add attributeTypes "ipacahsmconfiguration" to schema if >>> necessary. >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.907318983 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.918742951 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "cn || createtimestamp || >>> description || entryusn || ipacahsmconfiguration || ipacaid || >>> ipacaissuerdn || ipacarandomserialn> >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.933535895 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipapwddictcheck" does not exist in >>> schema. Please add attributeTypes "ipapwddictcheck" to schema if necessary. >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.938088741 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = >>> "ipapwddictcheck >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.952984589 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "ipapwddictcheck || >>> ipapwdmaxrepeat || ipapwdmaxsequence || ipapwdusercheck || krbmaxpwdlife || >>> krbminpwdlife || krbpwdfailu> >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.964472653 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipapwddictcheck" does not exist in >>> schema. Please add attributeTypes "ipapwddictcheck" to schema if necessary. >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.975842475 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn >>> Mar 17 12:07:37 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:37.987319098 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "cn || cospriority || >>> createtimestamp || entryusn || ipapwddictcheck || ipapwdmaxrepeat || >>> ipapwdmaxsequence || ipapwduserch> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.013649792 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipaidpauthendpoint" does not exist in >>> schema. Please add attributeTypes "ipaidpauthendpoint" to schema if >>> necessary. >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.016115954 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.033018572 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "cn || ipaidpauthendpoint || >>> ipaidpclientid || ipaidpclientsecret || ipaidpdevauthendpoint || >>> ipaidpissuerurl || ipaidpkeyse> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.052133408 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipaidpauthendpoint" does not exist in >>> schema. Please add attributeTypes "ipaidpauthendpoint" to schema if >>> necessary. >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.052585838 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.072866844 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn >>> || ipaidpauthendpoint || ipaidpclientid || ipaidpdevauthendpoint || >>> ipaidpissuerurl || ip> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.084339533 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipaidpauthendpoint" does not exist in >>> schema. Please add attributeTypes "ipaidpauthendpoint" to schema if >>> necessary. >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.095721051 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.107191399 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "cn || createtimestamp || entryusn >>> || ipaidpauthendpoint || ipaidpclientid || ipaidpclientsecret || >>> ipaidpdevauthendpoint ||> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.119005384 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. >>> Please add attributeTypes "ipaowner" to schema if necessary. >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.130044439 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetfilter = >>> "(objectclass=ipasubordinateidentry) >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.141481539 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetfilter = >>> "(objectclass=ipasubordinateidentry)")(targetattr="description || ipaowner >>> || ipauniqueid")(targattrfilters = "add=objectC> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.152939627 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. >>> Please add attributeTypes "ipaowner" to schema if necessary. >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.164343183 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetfilter = >>> "(objectclass=ipasubordinateidentry) >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.183620385 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetfilter = >>> "(objectclass=ipasubordinateidentry)")(targetattr="description || ipaowner >>> || ipauniqueid")(targattrfilters = "add=objectC> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.184153464 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. >>> Please add attributeTypes "ipaowner" to schema if necessary. >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.204368823 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = >>> "description >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.215798949 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "description || >>> ipaowner")(targetfilter = "(objectclass=ipasubordinateidentry)")(version >>> 3.0;acl "permission:System: Manage > >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.227256127 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "ipaowner" does not exist in schema. >>> Please add attributeTypes "ipaowner" to schema if necessary. >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.238663340 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = >>> "createtimestamp >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.250083654 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "createtimestamp || description || >>> entryusn || ipaowner || ipasubgidcount || ipasubgidnumber || ipasubuidcount >>> || ipasubuidn> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.273123622 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "iparequireuserverification" does not >>> exist in schema. Please add attributeTypes "iparequireuserverification" to >>> schema if neces> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.275091623 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = >>> "iparequireuserverification >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.290184130 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = >>> "iparequireuserverification")(targetfilter = >>> "(objectclass=ipapasskeyconfigobject)")(version 3.0;acl "permission:System: >>> Mod> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.301637980 +0100] - ERR - NSACLPlugin - >>> __aclp__init_targetattr - targetattr "iparequireuserverification" does not >>> exist in schema. Please add attributeTypes "iparequireuserverification" to >>> schema if neces> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.313057425 +0100] - ERR - NSACLPlugin - >>> acllist_insert_aci_needsLock_ext - ACL PARSE ERR(rv=-5): (targetattr = "cn >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.324467605 +0100] - ERR - NSACLPlugin - >>> __aclinit_handler - This ((targetattr = "cn || >>> iparequireuserverification")(targetfilter = >>> "(objectclass=ipapasskeyconfigobject)")(version 3.0;acl "permission:Syste> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.460650791 +0100] - WARN - NSACLPlugin - acl_parse - >>> The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not >>> exist >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.467047237 +0100] - INFO - slapi_vattrspi_regattr - >>> Because krbPwdPolicyReference is a new registered virtual attribute , >>> nsslapd-ignore-virtual-attrs was set to 'off' >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.479885106 +0100] - ERR - cos-plugin - cos_dn_defs_cb >>> - Skipping CoS Definition cn=Password >>> Policy,cn=accounts,dc=ccm,dc=lit,dc=dc=fr--no CoS Templates found, which >>> should be added before the CoS D> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.500880084 +0100] - ERR - dna-plugin - >>> dna_parse_config_entry - dnaType (ipasubuidnumber) does not exist. >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.503715869 +0100] - ERR - dna-plugin - >>> dna_parse_config_entry - Invalid config entry [cn=subordinate >>> ids,cn=distributed numeric assignment plugin,cn=plugins,cn=config] skipped >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.595608568 +0100] - ERR - memberof-plugin - >>> memberof_config - Only one memberOf plugin instance can be used >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.596314330 +0100] - ERR - memberof-plugin - >>> memberof_postop_start - Configuration failed (Bad parameter to an ldap >>> routine) >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.610217348 +0100] - ERR - plugin_dependency_startall - >>> Failed to start betxnpostoperation plugin MemberOf Plugin >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.769383513 +0100] - ERR - set_krb5_creds - Could not >>> get initial credentials for principal [ldap/ >>> [email protected]] in keytab [FILE:/etc/dirsrv/ds.keytab]: >>> -1765328228 (Cannot > >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.779165925 +0100] - ERR - NSMMReplicationPlugin - >>> bind_and_check_pwp - agmt="cn=meTohelium.ccm.lit.fr" (helium:389) - >>> Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP >>> ser> >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.789910793 +0100] - ERR - memberof-plugin - >>> memberof_config - Only one memberOf plugin instance can be used >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.804600264 +0100] - ERR - memberof-plugin - >>> memberof_postop_start - Configuration failed (Bad parameter to an ldap >>> routine) >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.816059578 +0100] - ERR - plugin_dependency_startall - >>> Failed to start betxnpostoperation plugin MemberOf Plugin >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.827494087 +0100] - ERR - memberof-plugin - >>> memberof_config - Only one memberOf plugin instance can be used >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.838888361 +0100] - ERR - memberof-plugin - >>> memberof_postop_start - Configuration failed (Bad parameter to an ldap >>> routine) >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.850354183 +0100] - ERR - plugin_dependency_startall - >>> Failed to start betxnpostoperation plugin MemberOf Plugin >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.861757523 +0100] - ERR - plugin_dependency_startall - >>> Failed to resolve plugin dependencies >>> Mar 17 12:07:38 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:38.873223941 +0100] - ERR - plugin_dependency_startall - >>> betxnpostoperation plugin MemberOf Plugin is not started >>> Mar 17 12:07:39 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:39.309510497 +0100] - INFO - bdb_pre_close - Waiting for >>> 5 database threads to stop >>> Mar 17 12:07:39 hydrogen.ccm.lit.fr ns-slapd[3381]: >>> [17/Mar/2025:12:07:39.883471672 +0100] - INFO - bdb_pre_close - All >>> database threads now stopped >>> Mar 17 12:07:39 hydrogen.ccm.lit.fr systemd[1]: >>> [email protected]: Main process exited, code=exited, >>> status=1/FAILURE >>> Mar 17 12:07:39 hydrogen.ccm.lit.fr systemd[1]: >>> [email protected]: Failed with result 'exit-code'. >>> Mar 17 12:07:39 hydrogen.ccm.lit.fr systemd[1]: Failed to start 389 >>> Directory Server CCM-LIT-FR.. >>> >>> ################################################################################################### >>> >>> Do you have any clue on what to do to solve this problem ? >>> Best regards >>> -- >>> _______________________________________________ >>> FreeIPA-users mailing list -- [email protected] >>> To unsubscribe send an email to >>> [email protected] >>> Fedora Code of Conduct: >>> https://docs.fedoraproject.org/en-US/project/code-of-conduct/ >>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >>> List Archives: >>> https://lists.fedorahosted.org/archives/list/[email protected] >>> Do not reply to spam, report it: >>> https://pagure.io/fedora-infrastructure/new_issue >>> >>
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
