Thanks for reply William, I believe I restored db with command "ipa-restore -d
--data /path/ipa-data-2018-12-30-20-12-00" but 389ds still fails to start .
Restore final logs are:
[03/Feb/2019:22:49:54.229404539 -0800] import ipaca: Closing files...
[03/Feb/2019:22:50:21.082241726 -0800] All database threads now stopped
[03/Feb/2019:22:50:21.091829357 -0800] import ipaca: Import complete. Processed 207184
entries in 148 seconds. (1399.89 entries/sec)
2019-02-04T06:50:21Z DEBUG stderr=
2019-02-04T06:50:21Z INFO Starting Directory Server
2019-02-04T06:50:21Z DEBUG Starting external process
2019-02-04T06:50:21Z DEBUG args=/bin/systemctl start dirsrv(a)X-COM.service
2019-02-04T06:51:52Z DEBUG Process finished, return code=1
2019-02-04T06:51:52Z DEBUG File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171, in execute
return_value = self.run()
File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_restore.py", line
398, in run
dirsrv.start(capture_output=False)
File "/usr/lib/python2.7/site-packages/ipaplatform/redhat/services.py", line
157, in start
instance_name, capture_output=capture_output, wait=wait)
File "/usr/lib/python2.7/site-packages/ipaplatform/base/services.py", line
285, in start
skip_output=not capture_output)
File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 494, in
run
raise CalledProcessError(p.returncode, arg_string, str(output))
2019-02-04T06:51:52Z DEBUG The ipa-restore command failed, exception: CalledProcessError:
Command '/bin/systemctl start dirsrv(a)X-COM.service' returned non-zero exit status
1
2019-02-04T06:51:52Z ERROR Command '/bin/systemctl start dirsrv(a)X-COM.service'
returned non-zero exit status 1
2019-02-04T06:51:52Z ERROR The ipa-restore command failed. See /var/log/iparestore.log for
more information
And 389ds status is
# systemctl status -l dirsrv(a)x-COM.service
dirsrv(a)x-COM.service - 389 Directory Server x-COM.
Loaded: loaded (/usr/lib/systemd/system/dirsrv@.service; enabled; vendor preset:
disabled)
Active: failed (Result: timeout) since Sun 2019-02-03 22:56:33 PST; 5min ago
Process: 3533 ExecStart=/usr/sbin/ns-slapd -D /etc/dirsrv/slapd-%i -i
/var/run/dirsrv/slapd-%i.pid (code=killed, signal=TERM)
Process: 3526 ExecStartPre=/usr/sbin/ds_systemd_ask_password_acl
/etc/dirsrv/slapd-%i/dse.ldif (code=exited, status=0/SUCCESS)
Main PID: 3533 (code=killed, signal=TERM)
ns-slapd[3533]: [03/Feb/2019:22:55:04.336762406 -0800] attrcrypt - All prepared ciphers
are not available. Please disable attribute encryption.
ns-slapd[3533]: [03/Feb/2019:22:55:04.346874658 -0800] attrcrypt - attrcrypt_unwrap_key:
failed to unwrap key for cipher AES
ns-slapd[3533]: [03/Feb/2019:22:55:04.347913178 -0800] attrcrypt - attrcrypt_cipher_init:
symmetric key failed to unwrap with the private key; Cert might have been renewed since
the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key
value.
ns-slapd[3533]: [03/Feb/2019:22:55:04.350743010 -0800] attrcrypt - attrcrypt_unwrap_key:
failed to unwrap key for cipher 3DES
ns-slapd[3533]: [03/Feb/2019:22:55:04.351680066 -0800] attrcrypt - attrcrypt_cipher_init:
symmetric key failed to unwrap with the private key; Cert might have been renewed since
the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key
value.
ns-slapd[3533]: [03/Feb/2019:22:55:04.352567754 -0800] attrcrypt - All prepared ciphers
are not available. Please disable attribute encryption.
systemd[1]: dirsrv(a)x-COM.service start operation timed out. Terminating.
systemd[1]: Failed to start 389 Directory Server x-COM..
systemd[1]: Unit dirsrv(a)x-COM.service entered failed state.
systemd[1]: dirsrv(a)x-COM.service failed.