Hi!
My dirsrv@IPA-MYDOMAIN-COM.service on IPA server fails to start due to missing configuration. How can I re-create one ?
journalctl: ds_systemd_ask_password_acl[10117]: grep: /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif: No such file or directory ns-slapd[10122]: INFO - dse_check_file - The config /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif can not be accessed. Attempting restore ... (reason: 0) ns-slapd[10122]: INFO - dse_check_file - The backup /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif.bak can not be accessed. Check it exists and permissions. ns-slapd[10122]: ERR - slapd_bootstrap_config - No valid configurations can be accessed! You must restore /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif from ba> ns-slapd[10122]: EMERG - main - The configuration files in directory /etc/dirsrv/slapd-IPA-MYDOMAIN-COM could not be read or were not found. Please refer to> systemd[1]: dirsrv@IPA-MYDOMAIN-COM.service: Main process exited, code=exited, status=1/FAILURE systemd[1]: dirsrv@IPA-MYDOMAIN-COM.service: Failed with result 'exit-code'. systemd[1]: Failed to start 389 Directory Server IPA-MYDOMAIN-COM.. -- Subject: Unit dirsrv@IPA-MYDOMAIN-COM.service has failed
$ ls /etc/dirsrv/ drwxr-xr-x 2 root root 82 Nov 13 2019 config -rw------- 1 dirsrv dirsrv 570 Sep 18 2019 ds.keytab drwxr-xr-x 2 root root 25 Nov 13 2019 schema drwxr-x--- 4 dirsrv dirsrv 4096 Oct 7 21:26 slapd-HOME-MYDOMAIN-COM drwxr-x--- 2 dirsrv dirsrv 37 Sep 18 2019 slapd-HOME-MYDOMAIN-COM.removed drwxr-x--- 2 dirsrv dirsrv 37 Feb 18 2019 slapd-IPA-MYDOMAIN-COM.removed
There is one ".removed" - not sure why and if i can maybe re-use it ? Cheers!
Want to note that my domain is 'home.mydomain.com' not 'ipa.mydomain.com'
On Thu, Oct 8, 2020 at 6:27 PM Albert Szostkiewicz via FreeIPA-users freeipa-users@lists.fedorahosted.org wrote:
Hi!
My dirsrv@IPA-MYDOMAIN-COM.service on IPA server fails to start due to missing configuration. How can I re-create one ?
journalctl: ds_systemd_ask_password_acl[10117]: grep: /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif: No such file or directory ns-slapd[10122]: INFO - dse_check_file - The config /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif can not be accessed. Attempting restore ... (reason: 0) ns-slapd[10122]: INFO - dse_check_file - The backup /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif.bak can not be accessed. Check it exists and permissions. ns-slapd[10122]: ERR - slapd_bootstrap_config - No valid configurations can be accessed! You must restore /etc/dirsrv/slapd-IPA-MYDOMAIN-COM/dse.ldif from ba> ns-slapd[10122]: EMERG - main - The configuration files in directory /etc/dirsrv/slapd-IPA-MYDOMAIN-COM could not be read or were not found. Please refer to> systemd[1]: dirsrv@IPA-MYDOMAIN-COM.service: Main process exited, code=exited, status=1/FAILURE systemd[1]: dirsrv@IPA-MYDOMAIN-COM.service: Failed with result 'exit-code'. systemd[1]: Failed to start 389 Directory Server IPA-MYDOMAIN-COM.. -- Subject: Unit dirsrv@IPA-MYDOMAIN-COM.service has failed
$ ls /etc/dirsrv/ drwxr-xr-x 2 root root 82 Nov 13 2019 config -rw------- 1 dirsrv dirsrv 570 Sep 18 2019 ds.keytab drwxr-xr-x 2 root root 25 Nov 13 2019 schema drwxr-x--- 4 dirsrv dirsrv 4096 Oct 7 21:26 slapd-HOME-MYDOMAIN-COM drwxr-x--- 2 dirsrv dirsrv 37 Sep 18 2019 slapd-HOME-MYDOMAIN-COM.removed drwxr-x--- 2 dirsrv dirsrv 37 Feb 18 2019 slapd-IPA-MYDOMAIN-COM.removed
It looks like your Directory Server instances have been removed. https://directory.fedoraproject.org/docs/389ds/legacy/install-guide.html Do you know what happened on this machine? Do you have a replica? Do you have backups?
François
There is one ".removed" - not sure why and if i can maybe re-use it ? Cheers! _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...
Unfortunately I am unable to pinpoint what happened. No replica, some backups, but not sure how far to look for yet.
dirsrv@HOME-MYDOMAIN-COM works and it's active
but only dirsrv@IPA-MYDOMAIN-COM does not
I am little bit confused as my domain is 'home.mydomain.com' therefore i wasn't sure if 'ipa-mydomain-com' should be even there on a first place ?
Cheers!
On Thu, Oct 8, 2020 at 7:00 PM Albert Szostkiewicz via FreeIPA-users freeipa-users@lists.fedorahosted.org wrote:
Unfortunately I am unable to pinpoint what happened. No replica, some backups, but not sure how far to look for yet.
dirsrv@HOME-MYDOMAIN-COM works and it's active
but only dirsrv@IPA-MYDOMAIN-COM does not
I am little bit confused as my domain is 'home.mydomain.com' therefore i wasn't sure if 'ipa-mydomain-com' should be even there on a first place ?
I don't think it should.
You might want to dig a little deeper and understand how this was created.
It might be safe to move the IPA-MYDOMAIN-COM entries away (I would not delete anything at this point) and see if you can start FreeIPA.
And.. I would do regular backups, and have a replica with the same roles as your first server if at all possible.
François
Cheers! _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...
François Cami via FreeIPA-users wrote:
On Thu, Oct 8, 2020 at 7:00 PM Albert Szostkiewicz via FreeIPA-users freeipa-users@lists.fedorahosted.org wrote:
Unfortunately I am unable to pinpoint what happened. No replica, some backups, but not sure how far to look for yet.
dirsrv@HOME-MYDOMAIN-COM works and it's active
but only dirsrv@IPA-MYDOMAIN-COM does not
I am little bit confused as my domain is 'home.mydomain.com' therefore i wasn't sure if 'ipa-mydomain-com' should be even there on a first place ?
I don't think it should.
You might want to dig a little deeper and understand how this was created.
It might be safe to move the IPA-MYDOMAIN-COM entries away (I would not delete anything at this point) and see if you can start FreeIPA.
And.. I would do regular backups, and have a replica with the same roles as your first server if at all possible.
It's almost certainly a leftover from some previous installation.
I kept these directories around in case a user paid for a 3rd party certificate. I didn't want an uninstallation to cost $$$.
rob
freeipa-users@lists.fedorahosted.org
-
Albert Szostkiewicz -
François Cami -
Rob Crittenden