Bret Wortman via FreeIPA-users wrote:
I've just finished setting up a new IPA server, planning to use
it and
some replicas to replace our existing servers. I did this by dumping all
the data from the old ones using a series of ipa commands and then used
custom parsers to re-create the entries on the new one (so as not to
propagate our lack of CA into the new servers).
When I went to set new passwords on all the migrated accounts, I get
this error in the web ui: "IPA Error 4031: EmptyResult no matching entry
found".
The CLI results in this:
# ipa user-mod homer --random
ipa: ERROR: Operations error: key encryption/encoding failed
Any idea what might cause this and how I should fix it?
Look in /var/log/dirsrv-YOURINSTANCE/errors for additional logging on this.
Looks like it is failing in generating the Kerberos principal key.
Any chance you could show a migrated entry?
rob
--
photo
*Bret Wortman*
Founder, Damascus Products LLC
855-644-2783 <tel:855-644-2783> | 303-523-8037 <tel:303-523-8037> |
bret(a)damascusproducts.com <mailto:bret@damascusproducts.com>
http://damascusproducts.com/
10332 Main St Suite 319 Fairfax, VA 22030
<
http://facebook.com/wrapbuddiesco>
<
http://www.linkedin.com/in/bretwortman>
<
http://twitter.com/wrapbuddiesco>
<
http://instagram.com/wrapbuddies>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org