Thanks for reply William, I believe I restored db with command "ipa-restore -d --data /path/ipa-data-2018-12-30-20-12-00" but 389ds still fails to start .
Restore final logs are: [03/Feb/2019:22:49:54.229404539 -0800] import ipaca: Closing files... [03/Feb/2019:22:50:21.082241726 -0800] All database threads now stopped [03/Feb/2019:22:50:21.091829357 -0800] import ipaca: Import complete. Processed 207184 entries in 148 seconds. (1399.89 entries/sec) 2019-02-04T06:50:21Z DEBUG stderr= 2019-02-04T06:50:21Z INFO Starting Directory Server 2019-02-04T06:50:21Z DEBUG Starting external process 2019-02-04T06:50:21Z DEBUG args=/bin/systemctl start dirsrv@X-COM.service 2019-02-04T06:51:52Z DEBUG Process finished, return code=1 2019-02-04T06:51:52Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171, in execute return_value = self.run() File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_restore.py", line 398, in run dirsrv.start(capture_output=False) File "/usr/lib/python2.7/site-packages/ipaplatform/redhat/services.py", line 157, in start instance_name, capture_output=capture_output, wait=wait) File "/usr/lib/python2.7/site-packages/ipaplatform/base/services.py", line 285, in start skip_output=not capture_output) File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 494, in run raise CalledProcessError(p.returncode, arg_string, str(output)) 2019-02-04T06:51:52Z DEBUG The ipa-restore command failed, exception: CalledProcessError: Command '/bin/systemctl start dirsrv@X-COM.service' returned non-zero exit status 1 2019-02-04T06:51:52Z ERROR Command '/bin/systemctl start dirsrv@X-COM.service' returned non-zero exit status 1 2019-02-04T06:51:52Z ERROR The ipa-restore command failed. See /var/log/iparestore.log for more information And 389ds status is # systemctl status -l dirsrv@x-COM.service dirsrv@x-COM.service - 389 Directory Server x-COM. Loaded: loaded (/usr/lib/systemd/system/dirsrv@.service; enabled; vendor preset: disabled) Active: failed (Result: timeout) since Sun 2019-02-03 22:56:33 PST; 5min ago Process: 3533 ExecStart=/usr/sbin/ns-slapd -D /etc/dirsrv/slapd-%i -i /var/run/dirsrv/slapd-%i.pid (code=killed, signal=TERM) Process: 3526 ExecStartPre=/usr/sbin/ds_systemd_ask_password_acl /etc/dirsrv/slapd-%i/dse.ldif (code=exited, status=0/SUCCESS) Main PID: 3533 (code=killed, signal=TERM) ns-slapd[3533]: [03/Feb/2019:22:55:04.336762406 -0800] attrcrypt - All prepared ciphers are not available. Please disable attribute encryption. ns-slapd[3533]: [03/Feb/2019:22:55:04.346874658 -0800] attrcrypt - attrcrypt_unwrap_key: failed to unwrap key for cipher AES ns-slapd[3533]: [03/Feb/2019:22:55:04.347913178 -0800] attrcrypt - attrcrypt_cipher_init: symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. ns-slapd[3533]: [03/Feb/2019:22:55:04.350743010 -0800] attrcrypt - attrcrypt_unwrap_key: failed to unwrap key for cipher 3DES ns-slapd[3533]: [03/Feb/2019:22:55:04.351680066 -0800] attrcrypt - attrcrypt_cipher_init: symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. ns-slapd[3533]: [03/Feb/2019:22:55:04.352567754 -0800] attrcrypt - All prepared ciphers are not available. Please disable attribute encryption. systemd[1]: dirsrv@x-COM.service start operation timed out. Terminating. systemd[1]: Failed to start 389 Directory Server x-COM.. systemd[1]: Unit dirsrv@x-COM.service entered failed state. systemd[1]: dirsrv@x-COM.service failed. _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org