11:26 a.m.
Hi!
My dirsrv(a)IPA-MYDOMAIN-COM.service on IPA server fails to start due to missing
configuration. How can I re-create one ?
journalctl:
ds_systemd_ask_password_acl[10117]: grep: /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif: No
such file or directory
ns-slapd[10122]: INFO - dse_check_file - The config
/etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif can not be accessed. Attempting restore ...
(reason: 0)
ns-slapd[10122]: INFO - dse_check_file - The backup
/etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif.bak can not be accessed. Check it exists and
permissions.
ns-slapd[10122]: ERR - slapd_bootstrap_config - No valid configurations can be accessed!
You must restore /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif from ba>
ns-slapd[10122]: EMERG - main - The configuration files in directory
/etc/dirsrv/slapd-IPA-MYDOMAIN-COM could not be read or were not found. Please refer
to>
systemd[1]: dirsrv(a)IPA-MYDOMAIN-COM.service: Main process exited, code=exited,
status=1/FAILURE
systemd[1]: dirsrv(a)IPA-MYDOMAIN-COM.service: Failed with result 'exit-code'.
systemd[1]: Failed to start 389 Directory Server IPA-MYDOMAIN-COM..
-- Subject: Unit dirsrv(a)IPA-MYDOMAIN-COM.service has failed
$ ls /etc/dirsrv/
drwxr-xr-x 2 root root 82 Nov 13 2019 config
-rw------- 1 dirsrv dirsrv 570 Sep 18 2019 ds.keytab
drwxr-xr-x 2 root root 25 Nov 13 2019 schema
drwxr-x--- 4 dirsrv dirsrv 4096 Oct 7 21:26 slapd-HOME-MYDOMAIN-COM
drwxr-x--- 2 dirsrv dirsrv 37 Sep 18 2019 slapd-HOME-MYDOMAIN-COM.removed
drwxr-x--- 2 dirsrv dirsrv 37 Feb 18 2019 slapd-IPA-MYDOMAIN-COM.removed
There is one ".removed" - not sure why and if i can maybe re-use it ?
Cheers!
11:53 a.m.
On Thu, Oct 8, 2020 at 6:27 PM Albert Szostkiewicz via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
Hi!
My dirsrv(a)IPA-MYDOMAIN-COM.service on IPA server fails to start due to missing
configuration. How can I re-create one ?
journalctl:
ds_systemd_ask_password_acl[10117]: grep: /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif: No
such file or directory
ns-slapd[10122]: INFO - dse_check_file - The config
/etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif can not be accessed. Attempting restore ...
(reason: 0)
ns-slapd[10122]: INFO - dse_check_file - The backup
/etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif.bak can not be accessed. Check it exists and
permissions.
ns-slapd[10122]: ERR - slapd_bootstrap_config - No valid configurations can be accessed!
You must restore /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif from ba>
ns-slapd[10122]: EMERG - main - The configuration files in directory
/etc/dirsrv/slapd-IPA-MYDOMAIN-COM could not be read or were not found. Please refer
to>
systemd[1]: dirsrv(a)IPA-MYDOMAIN-COM.service: Main process exited, code=exited,
status=1/FAILURE
systemd[1]: dirsrv(a)IPA-MYDOMAIN-COM.service: Failed with result 'exit-code'.
systemd[1]: Failed to start 389 Directory Server IPA-MYDOMAIN-COM..
-- Subject: Unit dirsrv(a)IPA-MYDOMAIN-COM.service has failed
$ ls /etc/dirsrv/
drwxr-xr-x 2 root root 82 Nov 13 2019 config
-rw------- 1 dirsrv dirsrv 570 Sep 18 2019 ds.keytab
drwxr-xr-x 2 root root 25 Nov 13 2019 schema
drwxr-x--- 4 dirsrv dirsrv 4096 Oct 7 21:26 slapd-HOME-MYDOMAIN-COM
drwxr-x--- 2 dirsrv dirsrv 37 Sep 18 2019 slapd-HOME-MYDOMAIN-COM.removed
drwxr-x--- 2 dirsrv dirsrv 37 Feb 18 2019 slapd-IPA-MYDOMAIN-COM.removed
It looks like your Directory Server instances have been removed.
https://directory.fedoraproject.org/docs/389ds/legacy/install-guide.html
Do you know what happened on this machine?
Do you have a replica?
Do you have backups?
François
There is one ".removed" - not sure why and if i can maybe
re-use it ?
Cheers!
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
11:59 a.m.
Unfortunately I am unable to pinpoint what happened.
No replica, some backups, but not sure how far to look for yet.
dirsrv@HOME-MYDOMAIN-COM
works and it's active
but only
dirsrv@IPA-MYDOMAIN-COM
does not
I am little bit confused as my domain is 'home.mydomain.com' therefore i
wasn't sure if 'ipa-mydomain-com' should be even there on a first place ?
Cheers!
12:16 p.m.
On Thu, Oct 8, 2020 at 7:00 PM Albert Szostkiewicz via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
Unfortunately I am unable to pinpoint what happened.
No replica, some backups, but not sure how far to look for yet.
dirsrv@HOME-MYDOMAIN-COM
works and it's active
but only
dirsrv@IPA-MYDOMAIN-COM
does not
I am little bit confused as my domain is 'home.mydomain.com' therefore i
wasn't sure if 'ipa-mydomain-com' should be even there on a first place ?
I don't think it should.
You might want to dig a little deeper and understand how this was created.
It might be safe to move the IPA-MYDOMAIN-COM entries away (I would
not delete anything at this point) and see if you can start FreeIPA.
And.. I would do regular backups, and have a replica with the same
roles as your first server if at all possible.
François
Cheers!
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
1:41 p.m.
François Cami via FreeIPA-users wrote:
On Thu, Oct 8, 2020 at 7:00 PM Albert Szostkiewicz via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
>
> Unfortunately I am unable to pinpoint what happened.
> No replica, some backups, but not sure how far to look for yet.
>
> dirsrv@HOME-MYDOMAIN-COM
> works and it's active
>
> but only
> dirsrv@IPA-MYDOMAIN-COM
> does not
>
> I am little bit confused as my domain is 'home.mydomain.com' therefore i
wasn't sure if 'ipa-mydomain-com' should be even there on a first place ?
I don't think it should.
You might want to dig a little deeper and understand how this was created.
It might be safe to move the IPA-MYDOMAIN-COM entries away (I would
not delete anything at this point) and see if you can start FreeIPA.
And.. I would do regular backups, and have a replica with the same
roles as your first server if at all possible.
It's almost certainly a leftover from some previous installation.
I kept these directories around in case a user paid for a 3rd party
certificate. I didn't want an uninstallation to cost $$$.
rob
1301
days inactive
1301
days old
freeipa-users@lists.fedorahosted.org
5 comments
3 participants
participants (3)
-
Albert Szostkiewicz -
François Cami -
Rob Crittenden