On pe, 05 maalis 2021, iulian roman via FreeIPA-users wrote:
Hello,
When I run ipa-adtrust-install command in order to configure trust prerequisites , it
fails in step 4, with the following error:
Configuring CIFS
[1/24]: validate server hostname
[2/24]: stopping smbd
[3/24]: creating samba domain object
Samba domain object already exists
[4/24]: retrieve local idmap range
[error] ConversionError: invalid 'cn': must be Unicode text
Unexpected error - see /var/log/ipaserver-install.log for details:
ConversionError: invalid 'cn': must be Unicode text
The existing idrange is in the following format :
dn: cn=IPA.EXAMPLE.COM_id_range,cn=ranges,cn=etc,dc=ipa,dc=example,dc=com
Any hint/suggestion would be really appreciated .
What version of IPA is this and what distribution version?
If I remember correctly, this was fixed in 2019 with
https://pagure.io/freeipa/issue/6951 and should be at least in FreeIPA
4.6.8 or later. In was backported to RHEL in ipa-4.6.6-5.el7.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland