Thanks for reply William, I believe I restored db with command "ipa-restore -d
--data /path/ipa-data-2018-12-30-20-12-00" but 389ds still fails to start .
Restore final logs are:
[03/Feb/2019:22:49:54.229404539 -0800] import ipaca: Closing files...
[03/Feb/2019:22:50:21.082241726 -0800] All database threads now stopped
[03/Feb/2019:22:50:21.091829357 -0800] import ipaca: Import complete.
Processed 207184 entries in 148 seconds. (1399.89 entries/sec)
2019-02-04T06:50:21Z DEBUG stderr=
2019-02-04T06:50:21Z INFO Starting Directory Server
2019-02-04T06:50:21Z DEBUG Starting external process
2019-02-04T06:50:21Z DEBUG args=/bin/systemctl start dirsrv@X-COM.service
2019-02-04T06:51:52Z DEBUG Process finished, return code=1
2019-02-04T06:51:52Z DEBUG File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171, in execute
return_value = self.run()
File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_restore.py",
line 398, in run
dirsrv.start(capture_output=False)
File "/usr/lib/python2.7/site-packages/ipaplatform/redhat/services.py", line
157, in start
instance_name, capture_output=capture_output, wait=wait)
File "/usr/lib/python2.7/site-packages/ipaplatform/base/services.py", line
285, in start
skip_output=not capture_output)
File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 494, in run
raise CalledProcessError(p.returncode, arg_string, str(output))
2019-02-04T06:51:52Z DEBUG The ipa-restore command failed, exception:
CalledProcessError: Command '/bin/systemctl start dirsrv@X-COM.service'
returned non-zero exit status 1
2019-02-04T06:51:52Z ERROR Command '/bin/systemctl start dirsrv@X-COM.service'
returned non-zero exit status 1
2019-02-04T06:51:52Z ERROR The ipa-restore command failed. See
/var/log/iparestore.log for more information
And 389ds status is
# systemctl status -l dirsrv@x-COM.service
dirsrv@x-COM.service - 389 Directory Server x-COM.
Loaded: loaded (/usr/lib/systemd/system/dirsrv@.service; enabled; vendor
preset: disabled)
Active: failed (Result: timeout) since Sun 2019-02-03 22:56:33 PST; 5min ago
Process: 3533 ExecStart=/usr/sbin/ns-slapd -D /etc/dirsrv/slapd-%i -i
/var/run/dirsrv/slapd-%i.pid (code=killed, signal=TERM)
Process: 3526 ExecStartPre=/usr/sbin/ds_systemd_ask_password_acl
/etc/dirsrv/slapd-%i/dse.ldif (code=exited, status=0/SUCCESS)
Main PID: 3533 (code=killed, signal=TERM)
ns-slapd[3533]: [03/Feb/2019:22:55:04.336762406 -0800] attrcrypt - All prepared
ciphers are not available. Please disable attribute encryption.
ns-slapd[3533]: [03/Feb/2019:22:55:04.346874658 -0800] attrcrypt -
attrcrypt_unwrap_key: failed to unwrap key for cipher AES
ns-slapd[3533]: [03/Feb/2019:22:55:04.347913178 -0800] attrcrypt -
attrcrypt_cipher_init: symmetric key failed to unwrap with the private key;
Cert might have been renewed since the key is wrapped. To recover the
encrypted contents, keep the wrapped symmetric key value.
ns-slapd[3533]: [03/Feb/2019:22:55:04.350743010 -0800] attrcrypt -
attrcrypt_unwrap_key: failed to unwrap key for cipher 3DES
ns-slapd[3533]: [03/Feb/2019:22:55:04.351680066 -0800] attrcrypt -
attrcrypt_cipher_init: symmetric key failed to unwrap with the private key;
Cert might have been renewed since the key is wrapped. To recover the
encrypted contents, keep the wrapped symmetric key value.
ns-slapd[3533]: [03/Feb/2019:22:55:04.352567754 -0800] attrcrypt - All
prepared ciphers are not available. Please disable attribute encryption.
systemd[1]: dirsrv@x-COM.service start operation timed out. Terminating.
systemd[1]: Failed to start 389 Directory Server x-COM..
systemd[1]: Unit dirsrv@x-COM.service entered failed state.
systemd[1]: dirsrv@x-COM.service failed.
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
