running your LDAP search returns invalid search, missing a ) on the
end, (I think). Adding ) to the end returns a lot of data but nothing
with nsds5ReplConflict. this is the end statement
# search result
search: 2
result: 0 Success
# numResponses: 105
# numEntries: 104
Running this, search for conflicts, from the Redhat guides
ldapsearch -x -D "cn=directory manager" -W -b
"dc=IPA,dc=EXAMPLE,dc=net" "nsds5ReplConflict=*" \* nsds5ReplConflict
# search result
search: 2
result: 0 Success
# numResponses: 1
Doesn't look like there are conflicts, it is one of the first things I
suspected myself.
On Fri, Jan 11, 2019 at 2:01 PM Marco Rhodes via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
Jason,
I've seen this caused by a replication conflict that prevents the CA certificate
profiles from loading completely during start-up. Can you double-check that there are
really no conflicts in ou=certificateprofiles,ou=ca,o=ipaca, just to confirm?
Try this:
1. Check for replication conflicts in ou=certificateprofiles,ou=ca,o=ipaca:
# ldapsearch -xLLL -D "cn=Directory Manager" -W -b
ou=certificateprofiles,ou=ca,o=ipaca
'(|(objectclass=*)(&(objectclass=ldapsubentry)(nsds5ReplConflict=*))'
2. If any objects are found, remove them and then try starting IPA:
# ldapdelete -x -D "cn=Directory Manager" -W <dn of replication conflict
object>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
--
Jason Wood