On Sat, 01 Nov 2025, Ian Kumlien via FreeIPA-users wrote:
Hi,

After a recent update on fedora 42 i couldn't start freeipa anymore,
this is the second host this
has happened on. I reinstalled the other one, but this is the last
host with kra enabled, which can cause some issues... I dunno if there
is someway to just disable kra,

Either way, when dirsrv starts it complained and pointed me to dsctl,
but it kept failing so:
dsctl -v VIRT-DEMIUS-NET dblib bdb2mdb

pointed me at the command that fails which is:
/usr/bin/ns-slapd db2ldif -D /etc/dirsrv/slapd-VIRT-DEMIUS-NET -n
changelog -r -a
/var/lib/dirsrv/slapd-VIRT-DEMIUS-NET/ldif/__dblib-changelog.ldif
[01/Nov/2025:13:00:08.091958050 +0100] - WARN -
config_set_ldapi_root_dn - The "nsslapd-ldapimaprootdn" setting is
obsolete and kept for compatibility reasons. For LDAPI configuration,
"nsslapd-rootdn" is used instead.
Segmentation fault         (core dumped) /usr/bin/ns-slapd db2ldif -D
/etc/dirsrv/slapd-VIRT-DEMIUS-NET -n changelog -r -a
/var/lib/dirsrv/slapd-VIRT-DEMIUS-NET/ldif/__dblib-changelog.ldif

Now these machines has been running for a long time, and been updated
trough several iterations of fedora... one issue i had on the machine
that i reinstalled was that nss.conf was there =)
(Reinstated by ipa-server-install --uninstall ?? )

Please report an issue and provide the stack trace, if possible, to
389-ds-base upstream: https://github.com/389ds/389-ds-base/issues/


--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland

--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to