I had a running docker container with "rocky-8-4.9.6", created one user with 
the web ui and used the (maybe broken) docker image "rocky-8-pfb-4.9.8" 
mentioned in my issue above. According to logs, the container logic did start 
with an upgrade but then failed at "[6/9]: updating schema   [error] 
DuplicateEntry: Type or value exists"

Uploaded a bit more of the "/data/var/log/ipaupgrade.log" on pastebin:
https://pastebin.com/vBjLFtj6

Some strange lines I spotted, especially as hbac is nothing I bring in via the 
plugin. It's a plugin coming with FreeIPA. What does this mean, is this plugin 
broken or just a false error message? But it is also saying to all my plugins 
-> not valid:
"
2022-05-28T19:48:22Z DEBUG importing plugin module ipaserver.plugins.hbac
2022-05-28T19:48:22Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
...
2022-05-28T19:48:22Z DEBUG importing plugin module ipaserver.plugins.mailalias
2022-05-28T19:48:22Z DEBUG ipaserver.plugins.mailalias is not a valid plugin 
module
2022-05-28T19:48:22Z DEBUG importing plugin module ipaserver.plugins.mailenabled
2022-05-28T19:48:22Z DEBUG ipaserver.plugins.mailenabled is not a valid plugin 
module
...
"

Another interesting part is here, as this error message does not make any sense 
to me. I checked on a clean "rocky-8-4.9.6" with ldapsearch for attributes and 
couldn't find anything with has the name "mailForwardingAddress" or the OID 
"1.3.6.1.4.1.29426.1.10.10".
"
ldap.TYPE_OR_VALUE_EXISTS: {'msgtype': 103, 'msgid': 17, 'result': 20, 'desc': 
'Type or value exists', 'ctrls': [], 'info': 'attribute type 
mailForwardingAddress: Does not match the OID "1.3.6.1.4.1.29426.1.10.10". 
Another attribute type is already using the name or OID.'}
...
2022-05-28T19:48:30Z DEBUG   [error] DuplicateEntry: Type or value exists
"

Any suggestions, is this maybe the "broken" image or anything else inside 
FreeIPA, I just found a kind of a similar issue here: 
https://pagure.io/freeipa/issue/5972
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to