On 2/2/22 08:22, Rob Crittenden wrote:
Harry G. Coin via FreeIPA-users wrote:
> When 'upgrading' using Rawhide, (instead of a fresh install), you might
> notice ns-slapd / dirsrv fails to start. Do this to work around it:
>
> #mkdir /dev/shm/slapd-<your kerberos domain with - instead of .>
>
> #chown dirsrv:dirsrv /dev/shm/slapd-<your kerberos domain with - instead
> of .>
>
> #systemctl restart ipa
Thanks for the report. Can you file a bug against 389-ds in rawhide?
This likely affects any type of DS instance on upgrades, not just IPA.
Note you may also need to set the SELinux context: restorecon
/dev/shm/slapd-<instance>
rob
Thanks Rob. I found the only way to get dnssec to almost, sort of work
in multi-domain situations was to set permissive. There just was no
hope of even 'understanding sandbox lab users' tolerating the downtime
otherwise. Upgrades usually broke something important and obscure.