felipe@ipa:~$ sudo su [sudo] password for felipe: root@ipa:/home/felipe# export TOKEN_PASSWORD=password root@ipa:/home/felipe# export ADMIN_PASSWORD=password root@ipa:/home/felipe# export DM_PASSWORD=password root@ipa:/home/felipe# dnf install freeipa-server freeipa-server-dns softhsm -y Updating and loading repositories: Repositories loaded. Package "freeipa-server-4.12.1-1.fc41.x86_64" is already installed. Package "freeipa-server-dns-4.12.1-1.fc41.noarch" is already installed. Package "softhsm-2.6.1-9.fc40.x86_64" is already installed. Nothing to do. root@ipa:/home/felipe# hostnamectl hostname ipa.example.test root@ipa:/home/felipe# cat /etc/hosts # Loopback entries; do not change. # For historical reasons, localhost precedes localhost.localdomain: 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 # See hosts(5) for proper format and other examples: # 192.168.1.10 foo.example.org foo # 192.168.1.13 bar.example.org bar 185.103.150.13 ipa.example.test root@ipa:/home/felipe# runuser -u pkiuser -- /usr/bin/softhsm2-util --init-token --free --pin $TOKEN_PASSWORD --so-pin $TOKEN_PASSWORD --label ipa_token Slot 0 has a free/uninitialized token. The token has been initialized and is reassigned to slot 225349590 root@ipa:/home/felipe# ipa-server-install -a $ADMIN_PASSWORD -p $DM_PASSWORD -r EXAMPLE.TEST -U --random-serial-numbers --token-name=ipa_token --token-library-path=/usr/lib64/pkcs11/libsofthsm2.so --token-password=$TOKEN_PASSWORD Less than the minimum 1.2GB of RAM is available, 0.53GB available. Use --skip-mem-check to suppress this check. The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information root@ipa:/home/felipe# ipa-server-install -a $ADMIN_PASSWORD -p $DM_PASSWORD -r EXAMPLE.TEST -U --random-serial-numbers --token-name=ipa_token --token-library-path=/usr/lib64/pkcs11/libsofthsm2.so --token-password=$TOKEN_PASSWORD --skip-mem-check The log file for this installation can be found in /var/log/ipaserver-install.log ============================================================================== This program will set up the IPA Server. Version 4.12.1 This includes: * Configure a stand-alone CA (dogtag) for certificate management * Configure the NTP client (chronyd) * Create and configure an instance of Directory Server * Create and configure a Kerberos Key Distribution Center (KDC) * Configure Apache (httpd) * Configure SID generation * Configure the KDC to enable PKINIT The domain name has been determined based on the host name. No network interface matches the IP address 185.103.150.13 WARNING: No network interface matches the IP address 185.103.150.13 Trust is configured but no NetBIOS domain name found, setting it now. The IPA Master Server will be configured with: Hostname: ipa.example.test IP address(es): 185.103.150.13 Domain name: example.test Realm name: EXAMPLE.TEST The CA will be configured with: Subject DN: CN=Certificate Authority,O=EXAMPLE.TEST Subject base: O=EXAMPLE.TEST Chaining: self-signed Disabled p11-kit-proxy Synchronizing time No SRV records of NTP servers found and no NTP server or pool address was provided. Using default chrony configuration. Attempting to sync time with chronyc. Time synchronization was successful. Configuring directory server (dirsrv). Estimated time: 30 seconds [1/42]: creating directory server instance Validate installation settings ... Create file system structures ... Perform SELinux labeling ... Create database backend: dc=example,dc=test ... Perform post-installation tasks ... [2/42]: adding default schema [3/42]: enabling memberof plugin [4/42]: enabling winsync plugin [5/42]: configure password logging [6/42]: configuring replication version plugin [7/42]: enabling IPA enrollment plugin [8/42]: configuring uniqueness plugin [9/42]: configuring uuid plugin [10/42]: configuring modrdn plugin [11/42]: configuring DNS plugin [12/42]: enabling entryUSN plugin [13/42]: configuring lockout plugin [14/42]: configuring graceperiod plugin [15/42]: configuring topology plugin [16/42]: creating indices [17/42]: enabling referential integrity plugin [18/42]: configuring certmap.conf [19/42]: configure new location for managed entries [20/42]: configure dirsrv ccache and keytab [21/42]: enabling SASL mapping fallback [22/42]: restarting directory server [23/42]: adding sasl mappings to the directory [24/42]: adding default layout [25/42]: adding delegation layout [26/42]: creating container for managed entries [27/42]: configuring user private groups [28/42]: configuring netgroups from hostgroups [29/42]: creating default Sudo bind user [30/42]: creating default Auto Member layout [31/42]: adding range check plugin [32/42]: creating default HBAC rule allow_all [33/42]: adding entries for topology management [34/42]: initializing group membership [35/42]: adding master entry [36/42]: initializing domain level [37/42]: configuring Posix uid/gid generation [38/42]: adding replication acis [39/42]: activating sidgen plugin [40/42]: activating extdom plugin [41/42]: configuring directory to start on boot [42/42]: restarting directory server Done configuring directory server (dirsrv). Configuring Kerberos KDC (krb5kdc) [1/11]: adding kerberos container to the directory [2/11]: configuring KDC [3/11]: initialize kerberos container [4/11]: adding default ACIs [5/11]: creating a keytab for the directory [6/11]: creating a keytab for the machine [7/11]: adding the password extension to the directory [8/11]: creating anonymous principal [9/11]: starting the KDC [10/11]: configuring KDC to start on boot [11/11]: enable PAC ticket signature support Done configuring Kerberos KDC (krb5kdc). Configuring kadmin [1/2]: starting kadmin [2/2]: configuring kadmin to start on boot Done configuring kadmin. Configuring ipa-custodia [1/5]: Making sure custodia container exists [2/5]: Generating ipa-custodia config file [3/5]: Generating ipa-custodia keys [4/5]: starting ipa-custodia [5/5]: configuring ipa-custodia to start on boot Done configuring ipa-custodia. Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes [1/32]: configuring certificate server instance Failed to configure CA instance See the installation logs and the following files/directories for more information: /var/log/pki/pki-tomcat [error] RuntimeError: CA configuration failed. CA configuration failed. The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information root@ipa:/home/felipe# tail /var/log/ipaserver-install.log self.handle_setup_error(e) ~~~~~~~~~~~~~~~~~~~~~~~^^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/dogtaginstance.py", line 609, in handle_setup_error raise RuntimeError( "%s configuration failed." % self.subsystem ) from None 2024-07-09T14:27:12Z DEBUG The ipa-server-install command failed, exception: RuntimeError: CA configuration failed. 2024-07-09T14:27:12Z ERROR CA configuration failed. 2024-07-09T14:27:12Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information root@ipa:/home/felipe# uname -a Linux ipa.example.test 6.10.0-0.rc7.58.fc41.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jul 8 13:06:39 UTC 2024 x86_64 GNU/Linux root@ipa:/home/felipe# cat /var/log/ipaserver-install.log 2024-07-09T14:26:46Z DEBUG Logging to /var/log/ipaserver-install.log 2024-07-09T14:26:46Z DEBUG ipa-server-install was invoked with arguments [] and options: {'unattended': True, 'ip_addresses': None, 'domain_name': None, 'realm_name': 'EXAMPLE.TEST', 'host_name': None, 'ca_cert_files': None, 'domain_level': None, 'setup_adtrust': False, 'setup_kra': False, 'setup_dns': False, 'idstart': None, 'idmax': None, 'no_hbac_allow': False, 'no_pkinit': False, 'no_ui_redirect': False, 'dirsrv_config_file': None, 'skip_mem_check': True, 'dirsrv_cert_files': None, 'http_cert_files': None, 'pkinit_cert_files': None, 'dirsrv_cert_name': None, 'http_cert_name': None, 'pkinit_cert_name': None, 'token_name': 'ipa_token', 'token_library_path': '/usr/lib64/pkcs11/libsofthsm2.so', 'token_password_file': None, 'mkhomedir': False, 'ntp_servers': None, 'ntp_pool': None, 'no_ntp': False, 'force_ntpd': False, 'ssh_trust_dns': False, 'no_ssh': False, 'no_sshd': False, 'subid': False, 'no_dns_sshfp': False, 'external_ca': False, 'external_ca_type': None, 'external_ca_profile': None, 'external_cert_files': None, 'subject_base': None, 'ca_subject': None, 'ca_signing_algorithm': None, 'random_serial_numbers': True, 'pki_config_override': None, 'allow_zone_overlap': False, 'reverse_zones': None, 'no_reverse': False, 'auto_reverse': False, 'zonemgr': None, 'forwarders': None, 'no_forwarders': False, 'auto_forwarders': False, 'forward_policy': None, 'no_dnssec_validation': False, 'no_host_dns': False, 'enable_compat': False, 'no_msdcs': False, 'netbios_name': None, 'rid_base': None, 'secondary_rid_base': None, 'ignore_topology_disconnect': False, 'ignore_last_of_role': False, 'verbose': False, 'quiet': False, 'log_file': None, 'uninstall': False} 2024-07-09T14:26:46Z DEBUG IPA version 4.12.1-1.fc41 2024-07-09T14:26:46Z DEBUG IPA platform fedora 2024-07-09T14:26:46Z DEBUG IPA os-release Fedora Linux 41 (Server Edition Prerelease) 2024-07-09T14:26:46Z DEBUG Searching for an interface of IP address: ::1 2024-07-09T14:26:46Z DEBUG Testing local IP address: ::1/128 (interface: lo) 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/sbin/selinuxenabled'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:26:46Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2024-07-09T14:26:46Z DEBUG httpd is not configured 2024-07-09T14:26:46Z DEBUG kadmin is not configured 2024-07-09T14:26:46Z DEBUG dirsrv is not configured 2024-07-09T14:26:46Z DEBUG pki-tomcatd is not configured 2024-07-09T14:26:46Z DEBUG install is not configured 2024-07-09T14:26:46Z DEBUG krb5kdc is not configured 2024-07-09T14:26:46Z DEBUG named is not configured 2024-07-09T14:26:46Z DEBUG filestore is tracking no files 2024-07-09T14:26:46Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2024-07-09T14:26:46Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2024-07-09T14:26:46Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2024-07-09T14:26:46Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2024-07-09T14:26:46Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ntpd.service'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=4 2024-07-09T14:26:46Z DEBUG stdout=not-found 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'is-active', 'ntpd.service'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=4 2024-07-09T14:26:46Z DEBUG stdout=inactive 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'is-enabled', 'systemd-timesyncd.service'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=1 2024-07-09T14:26:46Z DEBUG stdout=disabled 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'is-active', 'systemd-timesyncd.service'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=3 2024-07-09T14:26:46Z DEBUG stdout=inactive 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Check if ipa.example.test is a primary hostname for localhost 2024-07-09T14:26:46Z DEBUG Primary hostname for localhost: ipa.example.test 2024-07-09T14:26:46Z DEBUG Search DNS for ipa.example.test 2024-07-09T14:26:46Z DEBUG Check if ipa.example.test is not a CNAME 2024-07-09T14:26:46Z DEBUG Check reverse address of 185.103.150.13 2024-07-09T14:26:46Z DEBUG Found reverse name: ipa.example.test 2024-07-09T14:26:46Z DEBUG will use host_name: ipa.example.test 2024-07-09T14:26:46Z DEBUG read domain_name: example.test 2024-07-09T14:26:46Z DEBUG Writing configuration file /etc/ipa/default.conf 2024-07-09T14:26:46Z DEBUG [global] host = ipa.example.test basedn = dc=example,dc=test realm = EXAMPLE.TEST domain = example.test xmlrpc_uri = https://ipa.example.test/ipa/xml ldap_uri = ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket mode = production enable_ra = True ra_plugin = dogtag dogtag_version = 10 2024-07-09T14:26:46Z DEBUG importing all plugin modules in ipaserver.plugins... 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.aci 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.automember 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.automount 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.baseldap 2024-07-09T14:26:46Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.baseuser 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.batch 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.ca 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.caacl 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.cert 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.certmap 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.certprofile 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.config 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.delegation 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.dns 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.dnsserver 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.dogtag 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.domainlevel 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.group 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.hbac 2024-07-09T14:26:46Z DEBUG ipaserver.plugins.hbac is not a valid plugin module 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.hbacrule 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.hbacsvc 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.hbactest 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.host 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.hostgroup 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.idp 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.idrange 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.idviews 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.internal 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.join 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.ldap2 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.location 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.migration 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.misc 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.netgroup 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.otp 2024-07-09T14:26:46Z DEBUG ipaserver.plugins.otp is not a valid plugin module 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.otpconfig 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.otptoken 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.passkeyconfig 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.passwd 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.permission 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.ping 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.pkinit 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.privilege 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.pwpolicy 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.rabase 2024-07-09T14:26:46Z DEBUG ipaserver.plugins.rabase is not a valid plugin module 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.radiusproxy 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.realmdomains 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.role 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.schema 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.selfservice 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.server 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.serverrole 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.serverroles 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.service 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.servicedelegation 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.session 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.stageuser 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.subid 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.sudo 2024-07-09T14:26:46Z DEBUG ipaserver.plugins.sudo is not a valid plugin module 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.sudocmd 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.sudorule 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.topology 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.trust 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.user 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.vault 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.virtual 2024-07-09T14:26:46Z DEBUG ipaserver.plugins.virtual is not a valid plugin module 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.whoami 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.plugins.xmlserver 2024-07-09T14:26:46Z DEBUG importing all plugin modules in ipaserver.install.plugins... 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.adtrust 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.dns 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.fix_kra_people_entry 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_changelog_maxage 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_nis 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_pwpolicy 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_referint 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_services 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_unhashed_password 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness 2024-07-09T14:26:46Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/bin/certutil', '-d', '/tmp/tmp_v57d4tw', '-N', '-f', '/tmp/tmp_v57d4tw/pwdfile.txt', '-@', '/tmp/tmp_v57d4tw/pwdfile.txt'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/sbin/selinuxenabled'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp_v57d4tw'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout=Warning no default label for /tmp/tmp_v57d4tw 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/sbin/selinuxenabled'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp_v57d4tw/cert9.db'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout=Warning no default label for /tmp/tmp_v57d4tw/cert9.db 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/sbin/selinuxenabled'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp_v57d4tw/key4.db'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout=Warning no default label for /tmp/tmp_v57d4tw/key4.db 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/sbin/selinuxenabled'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp_v57d4tw/pkcs11.txt'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout=Warning no default label for /tmp/tmp_v57d4tw/pkcs11.txt 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/sbin/selinuxenabled'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp_v57d4tw/pwdfile.txt'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout=Warning no default label for /tmp/tmp_v57d4tw/pwdfile.txt 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/bin/modutil', '-dbdir', 'sql:/tmp/tmp_v57d4tw', '-nocertdb', '-add', 'test', '-libfile', '/usr/lib64/pkcs11/libsofthsm2.so', '-force'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=22 2024-07-09T14:26:46Z DEBUG stdout= WARNING: Manually adding a module while p11-kit is enabled could cause duplicate module registration in your security database. It is suggested to configure the module through p11-kit configuration file instead. Type 'q ' to abort, or to continue: 2024-07-09T14:26:46Z DEBUG stderr=ERROR: Failed to add module "test". Probable cause : "Unknown PKCS #11 error.". 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/bin/modutil', '-dbdir', 'sql:/tmp/tmp_v57d4tw', '-list', '-force'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= Listing of PKCS #11 Modules ----------------------------------------------------------- 1. NSS Internal PKCS #11 Module uri: pkcs11:library-manufacturer=Mozilla%20Foundation;library-description=NSS%20Internal%20Crypto%20Services;library-version=3.101 slots: 2 slots attached status: loaded slot: NSS Internal Cryptographic Services token: NSS Generic Crypto Services uri: pkcs11:token=NSS%20Generic%20Crypto%20Services;manufacturer=Mozilla%20Foundation;serial=0000000000000000;model=NSS%203 slot: NSS User Private Key and Certificate Services token: NSS Certificate DB uri: pkcs11:token=NSS%20Certificate%20DB;manufacturer=Mozilla%20Foundation;serial=0000000000000000;model=NSS%203 2. p11-kit-proxy library name: p11-kit-proxy.so uri: pkcs11:library-manufacturer=PKCS%2311%20Kit;library-description=PKCS%2311%20Kit%20Proxy%20Module;library-version=1.1 slots: 3 slots attached status: loaded slot: SoftHSM slot ID 0xd6e8fd6 token: ipa_token uri: pkcs11:token=ipa_token;manufacturer=SoftHSM%20project;serial=29974bd98d6e8fd6;model=SoftHSM%20v2 slot: SoftHSM slot ID 0x25dda3b9 token: OpenDNSSEC uri: pkcs11:token=OpenDNSSEC;manufacturer=SoftHSM%20project;serial=66be732e25dda3b9;model=SoftHSM%20v2 slot: SoftHSM slot ID 0x2 token: uri: pkcs11:manufacturer=SoftHSM%20project;model=SoftHSM%20v2 ----------------------------------------------------------- 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/tmp/tmp_v57d4tw', '-K', '-h', 'ipa_token', '-f', '/tmp/tmp5ekt5he0'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=255 2024-07-09T14:26:46Z DEBUG stdout=certutil: Checking token "ipa_token" in slot "SoftHSM slot ID 0xd6e8fd6" certutil: no keys found 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG check_port_bindable: Checking IPv4/IPv6 dual stack and TCP 2024-07-09T14:26:46Z DEBUG check_port_bindable: bind success: 8443/TCP 2024-07-09T14:26:46Z DEBUG check_port_bindable: Checking IPv4/IPv6 dual stack and TCP 2024-07-09T14:26:46Z DEBUG check_port_bindable: bind success: 8080/TCP 2024-07-09T14:26:46Z DEBUG Name ipa.example.test resolved to {UnsafeIPAddress('185.103.150.13')} 2024-07-09T14:26:46Z DEBUG Searching for an interface of IP address: 185.103.150.13 2024-07-09T14:26:46Z DEBUG Testing local IP address: 127.0.0.1/8 (interface: lo) 2024-07-09T14:26:46Z DEBUG Testing local IP address: 192.168.122.110/24 (interface: enp1s0) 2024-07-09T14:26:46Z WARNING No network interface matches the IP address 185.103.150.13 2024-07-09T14:26:46Z DEBUG LDAP is not connected, can not retrieve NetBIOS name 2024-07-09T14:26:46Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:26:46Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/usr/sbin/selinuxenabled'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/sbin/restorecon', '/etc/pkcs11/modules/softhsm2.module'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Created PKCS#11 module config '/etc/pkcs11/modules/softhsm2.module'. 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ntpd.service'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=4 2024-07-09T14:26:46Z DEBUG stdout=not-found 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'is-active', 'ntpd.service'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=4 2024-07-09T14:26:46Z DEBUG stdout=inactive 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'is-enabled', 'systemd-timesyncd.service'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=1 2024-07-09T14:26:46Z DEBUG stdout=disabled 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'is-active', 'systemd-timesyncd.service'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=3 2024-07-09T14:26:46Z DEBUG stdout=inactive 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Search DNS for SRV record of _ntp._udp.None 2024-07-09T14:26:46Z DEBUG DNS record not found: NXDOMAIN 2024-07-09T14:26:46Z INFO Synchronizing time 2024-07-09T14:26:46Z WARNING No SRV records of NTP servers found and no NTP server or pool address was provided. 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'enable', 'chronyd.service'] 2024-07-09T14:26:46Z DEBUG Process finished, return code=0 2024-07-09T14:26:46Z DEBUG stdout= 2024-07-09T14:26:46Z DEBUG stderr= 2024-07-09T14:26:46Z DEBUG Starting external process 2024-07-09T14:26:46Z DEBUG args=['/bin/systemctl', 'restart', 'chronyd.service'] 2024-07-09T14:26:47Z DEBUG Process finished, return code=0 2024-07-09T14:26:47Z DEBUG stdout= 2024-07-09T14:26:47Z DEBUG stderr= 2024-07-09T14:26:47Z DEBUG Starting external process 2024-07-09T14:26:47Z DEBUG args=['/bin/systemctl', 'is-active', 'chronyd.service'] 2024-07-09T14:26:47Z DEBUG Process finished, return code=0 2024-07-09T14:26:47Z DEBUG stdout=active 2024-07-09T14:26:47Z DEBUG stderr= 2024-07-09T14:26:47Z DEBUG Restart of chronyd.service complete 2024-07-09T14:26:47Z INFO Attempting to sync time with chronyc. 2024-07-09T14:26:47Z DEBUG Starting external process 2024-07-09T14:26:47Z DEBUG args=['/usr/bin/chronyc', '-d', 'waitsync', '4', '0', '0', '3'] 2024-07-09T14:26:53Z DEBUG Process finished, return code=0 2024-07-09T14:26:53Z DEBUG stdout=try: 1, refid: 00000000, correction: 0.000000000, skew: 0.000 try: 2, refid: 00000000, correction: 0.000000000, skew: 0.000 try: 3, refid: 52DFCB9F, correction: 0.000000488, skew: 2.288 2024-07-09T14:26:53Z DEBUG stderr=Resolved 127.0.0.1 to 127.0.0.1 Resolved ::1 to ::1 Could not remove /run/chrony/chronyc.1436.sock : No such file or directory Opened Unix socket fd=3 remote=/run/chrony/chronyd.sock local=/run/chrony/chronyc.1436.sock Sent data fd=3 len=104 Timeout 1.000000 seconds Received data fd=3 len=104 Reply cmd=33 reply=5 stat=0 Sent data fd=3 len=104 Timeout 1.000000 seconds Received data fd=3 len=104 Reply cmd=33 reply=5 stat=0 Sent data fd=3 len=104 Timeout 1.000000 seconds Received data fd=3 len=104 Reply cmd=33 reply=5 stat=0 2024-07-09T14:26:53Z INFO Time synchronization was successful. 2024-07-09T14:26:53Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:26:53Z DEBUG Configuring directory server (dirsrv). Estimated time: 30 seconds 2024-07-09T14:26:53Z DEBUG [1/42]: creating directory server instance 2024-07-09T14:26:53Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:26:53Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:26:53Z DEBUG Running setup with verbose 2024-07-09T14:26:53Z DEBUG START: Starting installation ... 2024-07-09T14:26:53Z DEBUG READY: Preparing installation for EXAMPLE-TEST... 2024-07-09T14:26:53Z INFO Validate installation settings ... 2024-07-09T14:26:53Z DEBUG PASSED: using config settings 999999999 2024-07-09T14:26:53Z DEBUG PASSED: user / group checking 2024-07-09T14:26:53Z DEBUG PASSED: prefix checking 2024-07-09T14:26:53Z DEBUG list() EXAMPLE-TEST instance not found: missing /etc/dirsrv/slapd-EXAMPLE-TEST/dse.ldif 2024-07-09T14:26:53Z DEBUG PASSED: instance checking 2024-07-09T14:26:53Z DEBUG INFO: temp root password set to dLWvKSg6zB..J2weSlbGh8ybsugIPyLXatiZc7UbA8u3WSoYYT7vkFj71xUS9nmVr 2024-07-09T14:26:53Z DEBUG PASSED: root user checking 2024-07-09T14:26:53Z DEBUG PASSED: network avaliability checking 2024-07-09T14:26:53Z DEBUG READY: Beginning installation for EXAMPLE-TEST... 2024-07-09T14:26:53Z DEBUG ACTION: Creating dse.ldif 2024-07-09T14:26:53Z INFO Create file system structures ... 2024-07-09T14:26:53Z DEBUG ACTION: creating /var/lib/dirsrv/slapd-EXAMPLE-TEST/bak 2024-07-09T14:26:53Z DEBUG ACTION: creating /etc/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:53Z DEBUG ACTION: creating /var/lib/dirsrv/slapd-EXAMPLE-TEST/db 2024-07-09T14:26:53Z DEBUG ACTION: creating /dev/shm/slapd-EXAMPLE-TEST 2024-07-09T14:26:53Z DEBUG ACTION: creating /var/lib/dirsrv/slapd-EXAMPLE-TEST/ldif 2024-07-09T14:26:53Z DEBUG ACTION: creating /run/lock/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:53Z DEBUG ACTION: creating /var/log/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:53Z DEBUG ACTION: creating /run/dirsrv 2024-07-09T14:26:53Z DEBUG b"CMD: systemctl enable dirsrv@EXAMPLE-TEST ; STDOUT: ; STDERR: Created symlink '/etc/systemd/system/multi-user.target.wants/dirsrv@EXAMPLE-TEST.service' \xe2\x86\x92 '/usr/lib/systemd/system/dirsrv@.service'.\n" 2024-07-09T14:26:53Z DEBUG ACTION: Creating certificate database is /etc/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:53Z DEBUG Allocate with None 2024-07-09T14:26:53Z DEBUG Allocate with /run/slapd-EXAMPLE-TEST.socket 2024-07-09T14:26:53Z DEBUG Allocate with localhost:389 2024-07-09T14:26:53Z DEBUG Allocate with localhost:389 2024-07-09T14:26:53Z DEBUG nss cmd: /usr/bin/certutil -N -d /etc/dirsrv/slapd-EXAMPLE-TEST -f /etc/dirsrv/slapd-EXAMPLE-TEST/pwdfile.txt -@ /etc/dirsrv/slapd-EXAMPLE-TEST/pwdfile.txt 2024-07-09T14:26:53Z DEBUG nss output: 2024-07-09T14:26:53Z INFO Perform SELinux labeling ... 2024-07-09T14:26:53Z DEBUG port 389 already in [389, 636, 3268, 3269, 7389], skipping port relabel 2024-07-09T14:26:53Z DEBUG asan_enabled=False 2024-07-09T14:26:53Z DEBUG libfaketime installed =False 2024-07-09T14:26:53Z DEBUG systemd status -> True 2024-07-09T14:26:53Z DEBUG systemd status -> True 2024-07-09T14:26:53Z DEBUG open(): Connecting to uri ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket 2024-07-09T14:26:53Z DEBUG Using dirsrv ca certificate /etc/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:53Z DEBUG Using external ca certificate /etc/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:53Z DEBUG Using /etc/openldap/ldap.conf certificate policy 2024-07-09T14:26:53Z DEBUG ldap.OPT_X_TLS_REQUIRE_CERT = 2 2024-07-09T14:26:53Z DEBUG open(): Using root autobind ... 2024-07-09T14:26:54Z DEBUG open(): bound as cn=Directory Manager 2024-07-09T14:26:54Z DEBUG Retrieving entry with [('',)] 2024-07-09T14:26:54Z DEBUG Retrieved entry [dn: vendorVersion: 389-Directory/3.1.0 B2024.177.0000 ] 2024-07-09T14:26:54Z DEBUG open(): Connecting to uri ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket 2024-07-09T14:26:54Z DEBUG Using dirsrv ca certificate /etc/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:54Z DEBUG Using external ca certificate /etc/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:54Z DEBUG Using /etc/openldap/ldap.conf certificate policy 2024-07-09T14:26:54Z DEBUG ldap.OPT_X_TLS_REQUIRE_CERT = 2 2024-07-09T14:26:54Z DEBUG open(): Using root autobind ... 2024-07-09T14:26:54Z DEBUG open(): bound as cn=Directory Manager 2024-07-09T14:26:54Z DEBUG Retrieving entry with [('',)] 2024-07-09T14:26:54Z DEBUG Retrieved entry [dn: vendorVersion: 389-Directory/3.1.0 B2024.177.0000 ] 2024-07-09T14:26:54Z DEBUG cn=config set REPLACE: ('nsslapd-secureport', '636') 2024-07-09T14:26:54Z DEBUG cn=config,cn=ldbm database,cn=plugins,cn=config getVal('nsslapd-backend-implement') 2024-07-09T14:26:54Z DEBUG cn=mdb,cn=config,cn=ldbm database,cn=plugins,cn=config set REPLACE: ('nsslapd-mdb-max-size', '10450767053') 2024-07-09T14:26:54Z DEBUG Checking "None" under cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config : {'cn': 'entryUUID', 'nsSystemIndex': 'false', 'nsIndexType': ['eq', 'pres']} 2024-07-09T14:26:54Z DEBUG Using first property cn: entryUUID as rdn 2024-07-09T14:26:54Z DEBUG Validated dn cn=entryUUID,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:54Z DEBUG Creating cn=entryUUID,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:54Z DEBUG updating dn: cn=entryUUID,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=entryUUID,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config with {'objectclass': [b'top', b'nsIndex']} 2024-07-09T14:26:54Z DEBUG updating dn: cn=entryUUID,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=entryUUID,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config with {'cn': [b'entryUUID'], 'nsSystemIndex': [b'false'], 'nsIndexType': [b'eq', b'pres']} 2024-07-09T14:26:54Z DEBUG Created entry cn=entryUUID,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config : {'objectclass': [b'top', b'nsIndex'], 'cn': [b'entryUUID'], 'nsSystemIndex': [b'false'], 'nsIndexType': [b'eq', b'pres']} 2024-07-09T14:26:54Z INFO Create database backend: dc=example,dc=test ... 2024-07-09T14:26:54Z DEBUG Checking "None" under cn=ldbm database,cn=plugins,cn=config : {'cn': 'userRoot', 'nsslapd-suffix': 'dc=example,dc=test'} 2024-07-09T14:26:54Z DEBUG Using first property cn: userRoot as rdn 2024-07-09T14:26:54Z DEBUG _gen_selector filter = (&(&(objectclass=nsMappingTree))(|(cn=dc=example,dc=test)(nsslapd-backend=dc=example,dc=test))) 2024-07-09T14:26:54Z DEBUG _gen_selector filter = (&(&(objectclass=nsMappingTree))(|(cn=userRoot)(nsslapd-backend=userRoot))) 2024-07-09T14:26:54Z DEBUG Validated dn cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:54Z DEBUG Creating cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:54Z DEBUG updating dn: cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=userRoot,cn=ldbm database,cn=plugins,cn=config with {'objectclass': [b'top', b'extensibleObject', b'nsBackendInstance']} 2024-07-09T14:26:54Z DEBUG updating dn: cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=userRoot,cn=ldbm database,cn=plugins,cn=config with {'cn': [b'userRoot'], 'nsslapd-suffix': [b'dc=example,dc=test']} 2024-07-09T14:26:54Z DEBUG Created entry cn=userRoot,cn=ldbm database,cn=plugins,cn=config : {'objectclass': [b'top', b'extensibleObject', b'nsBackendInstance'], 'cn': [b'userRoot'], 'nsslapd-suffix': [b'dc=example,dc=test']} 2024-07-09T14:26:54Z DEBUG Checking "None" under cn=mapping tree,cn=config : {'cn': [b'dc=example,dc=test'], 'nsslapd-state': 'backend', 'nsslapd-backend': [b'userRoot']} 2024-07-09T14:26:54Z DEBUG Using first property cn: dc\=example\,dc\=test as rdn 2024-07-09T14:26:54Z DEBUG Validated dn cn=dc\=example\,dc\=test,cn=mapping tree,cn=config 2024-07-09T14:26:54Z DEBUG Creating cn=dc\=example\,dc\=test,cn=mapping tree,cn=config 2024-07-09T14:26:54Z DEBUG updating dn: cn=dc\=example\,dc\=test,cn=mapping tree,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=dc\=example\,dc\=test,cn=mapping tree,cn=config with {'objectclass': [b'top', b'extensibleObject', b'nsMappingTree']} 2024-07-09T14:26:54Z DEBUG updating dn: cn=dc\=example\,dc\=test,cn=mapping tree,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=dc\=example\,dc\=test,cn=mapping tree,cn=config with {'cn': [b'dc=example,dc=test', b'dc\\=example\\,dc\\=test'], 'nsslapd-state': [b'backend'], 'nsslapd-backend': [b'userRoot']} 2024-07-09T14:26:54Z DEBUG Created entry cn=dc\=example\,dc\=test,cn=mapping tree,cn=config : {'objectclass': [b'top', b'extensibleObject', b'nsMappingTree'], 'cn': [b'dc=example,dc=test', b'dc\\=example\\,dc\\=test'], 'nsslapd-state': [b'backend'], 'nsslapd-backend': [b'userRoot']} 2024-07-09T14:26:54Z DEBUG Adding sasl maps for suffix dc=example,dc=test 2024-07-09T14:26:54Z DEBUG Checking "None" under cn=mapping,cn=sasl,cn=config : {'cn': 'rfc 2829 u syntax', 'nsSaslMapRegexString': '^u:\\(.*\\)', 'nsSaslMapBaseDNTemplate': 'dc=example,dc=test', 'nsSaslMapFilterTemplate': '(uid=\\1)'} 2024-07-09T14:26:54Z DEBUG Using first property cn: rfc 2829 u syntax as rdn 2024-07-09T14:26:54Z DEBUG Validated dn cn=rfc 2829 u syntax,cn=mapping,cn=sasl,cn=config 2024-07-09T14:26:54Z DEBUG Creating cn=rfc 2829 u syntax,cn=mapping,cn=sasl,cn=config 2024-07-09T14:26:54Z DEBUG updating dn: cn=rfc 2829 u syntax,cn=mapping,cn=sasl,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=rfc 2829 u syntax,cn=mapping,cn=sasl,cn=config with {'objectclass': [b'top', b'nsSaslMapping']} 2024-07-09T14:26:54Z DEBUG updating dn: cn=rfc 2829 u syntax,cn=mapping,cn=sasl,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=rfc 2829 u syntax,cn=mapping,cn=sasl,cn=config with {'cn': [b'rfc 2829 u syntax'], 'nsSaslMapRegexString': [b'^u:\\(.*\\)'], 'nsSaslMapBaseDNTemplate': [b'dc=example,dc=test'], 'nsSaslMapFilterTemplate': [b'(uid=\\1)']} 2024-07-09T14:26:54Z DEBUG Created entry cn=rfc 2829 u syntax,cn=mapping,cn=sasl,cn=config : {'objectclass': [b'top', b'nsSaslMapping'], 'cn': [b'rfc 2829 u syntax'], 'nsSaslMapRegexString': [b'^u:\\(.*\\)'], 'nsSaslMapBaseDNTemplate': [b'dc=example,dc=test'], 'nsSaslMapFilterTemplate': [b'(uid=\\1)']} 2024-07-09T14:26:54Z DEBUG Checking "None" under cn=mapping,cn=sasl,cn=config : {'cn': 'uid mapping', 'nsSaslMapRegexString': '^[^:@]+$', 'nsSaslMapBaseDNTemplate': 'dc=example,dc=test', 'nsSaslMapFilterTemplate': '(uid=&)'} 2024-07-09T14:26:54Z DEBUG Using first property cn: uid mapping as rdn 2024-07-09T14:26:54Z DEBUG Validated dn cn=uid mapping,cn=mapping,cn=sasl,cn=config 2024-07-09T14:26:54Z DEBUG Creating cn=uid mapping,cn=mapping,cn=sasl,cn=config 2024-07-09T14:26:54Z DEBUG updating dn: cn=uid mapping,cn=mapping,cn=sasl,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=uid mapping,cn=mapping,cn=sasl,cn=config with {'objectclass': [b'top', b'nsSaslMapping']} 2024-07-09T14:26:54Z DEBUG updating dn: cn=uid mapping,cn=mapping,cn=sasl,cn=config 2024-07-09T14:26:54Z DEBUG updated dn: cn=uid mapping,cn=mapping,cn=sasl,cn=config with {'cn': [b'uid mapping'], 'nsSaslMapRegexString': [b'^[^:@]+$'], 'nsSaslMapBaseDNTemplate': [b'dc=example,dc=test'], 'nsSaslMapFilterTemplate': [b'(uid=&)']} 2024-07-09T14:26:54Z DEBUG Created entry cn=uid mapping,cn=mapping,cn=sasl,cn=config : {'objectclass': [b'top', b'nsSaslMapping'], 'cn': [b'uid mapping'], 'nsSaslMapRegexString': [b'^[^:@]+$'], 'nsSaslMapBaseDNTemplate': [b'dc=example,dc=test'], 'nsSaslMapFilterTemplate': [b'(uid=&)']} 2024-07-09T14:26:54Z INFO Perform post-installation tasks ... 2024-07-09T14:26:54Z DEBUG cn=config set REPLACE: ('nsslapd-rootpw', '********') 2024-07-09T14:26:54Z DEBUG systemd status -> True 2024-07-09T14:26:54Z DEBUG systemd status -> True 2024-07-09T14:26:55Z DEBUG systemd status -> True 2024-07-09T14:26:55Z DEBUG systemd status -> True 2024-07-09T14:26:55Z DEBUG 🎉 Instance setup complete 2024-07-09T14:26:55Z DEBUG FINISH: Completed installation for instance: slapd-EXAMPLE-TEST 2024-07-09T14:26:55Z DEBUG Allocate local instance with ldapi://%2fvar%2frun%2fslapd-EXAMPLE-TEST.socket 2024-07-09T14:26:55Z DEBUG open(): Connecting to uri ldapi://%2fvar%2frun%2fslapd-EXAMPLE-TEST.socket 2024-07-09T14:26:55Z DEBUG Using dirsrv ca certificate /etc/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:55Z DEBUG Using external ca certificate /etc/dirsrv/slapd-EXAMPLE-TEST 2024-07-09T14:26:55Z DEBUG Using /etc/openldap/ldap.conf certificate policy 2024-07-09T14:26:55Z DEBUG ldap.OPT_X_TLS_REQUIRE_CERT = 2 2024-07-09T14:26:55Z DEBUG open(): Using root autobind ... 2024-07-09T14:26:56Z DEBUG open(): bound as cn=Directory Manager 2024-07-09T14:26:56Z DEBUG Retrieving entry with [('',)] 2024-07-09T14:26:56Z DEBUG Retrieved entry [dn: vendorVersion: 389-Directory/3.1.0 B2024.177.0000 ] 2024-07-09T14:26:56Z DEBUG Retrieving entry with [('cn=Multisupplier Replication Plugin,cn=plugins,cn=config',)] 2024-07-09T14:26:56Z DEBUG Retrieved entry [dn: cn=Multisupplier Replication Plugin,cn=plugins,cn=config cn: Multisupplier Replication Plugin ] 2024-07-09T14:26:56Z DEBUG Checking "None" under None : {'dc': 'example', 'info': 'IPA V2.0'} 2024-07-09T14:26:56Z DEBUG Validated dn dc=example,dc=test 2024-07-09T14:26:56Z DEBUG Creating dc=example,dc=test 2024-07-09T14:26:56Z DEBUG updating dn: dc=example,dc=test 2024-07-09T14:26:56Z DEBUG updated dn: dc=example,dc=test with {'objectclass': [b'top', b'domain', b'pilotObject']} 2024-07-09T14:26:56Z DEBUG updating dn: dc=example,dc=test 2024-07-09T14:26:56Z DEBUG updated dn: dc=example,dc=test with {'dc': [b'example'], 'info': [b'IPA V2.0']} 2024-07-09T14:26:56Z DEBUG Created entry dc=example,dc=test : {'objectclass': [b'top', b'domain', b'pilotObject'], 'dc': [b'example'], 'info': [b'IPA V2.0']} 2024-07-09T14:26:56Z DEBUG completed creating DS instance 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __create_instance 3.40 sec 2024-07-09T14:26:56Z DEBUG [2/42]: adding default schema 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __add_default_schemas 0.00 sec 2024-07-09T14:26:56Z DEBUG [3/42]: enabling memberof plugin 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/memberof-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=replace nsslapd-pluginenabled: on add memberofgroupattr: memberUser add memberofgroupattr: memberHost add memberofgroupattr: ipaOwner modifying entry "cn=MemberOf Plugin,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __add_memberof_module 0.01 sec 2024-07-09T14:26:56Z DEBUG [4/42]: enabling winsync plugin 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/ipa-winsync-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: ipa-winsync add nsslapd-pluginpath: libipa_winsync add nsslapd-plugininitfunc: ipa_winsync_plugin_init add nsslapd-pluginDescription: Allows IPA to work with the DS windows sync feature add nsslapd-pluginid: ipa-winsync add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: Red Hat add nsslapd-plugintype: preoperation add nsslapd-pluginenabled: on add nsslapd-plugin-depends-on-type: database add ipaWinSyncRealmFilter: (objectclass=krbRealmContainer) add ipaWinSyncRealmAttr: cn add ipaWinSyncNewEntryFilter: (cn=ipaConfig) add ipaWinSyncNewUserOCAttr: ipauserobjectclasses add ipaWinSyncUserFlatten: true add ipaWinsyncHomeDirAttr: ipaHomesRootDir add ipaWinsyncLoginShellAttr: ipaDefaultLoginShell add ipaWinSyncDefaultGroupAttr: ipaDefaultPrimaryGroup add ipaWinSyncDefaultGroupFilter: (gidNumber=*)(objectclass=posixGroup)(objectclass=groupOfNames) add ipaWinSyncAcctDisable: both add ipaWinSyncForceSync: true add ipaWinSyncUserAttr: uidNumber -1 gidNumber -1 adding new entry "cn=ipa-winsync,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __add_winsync_module 0.01 sec 2024-07-09T14:26:56Z DEBUG [5/42]: configure password logging 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/pw-logging-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=replace nsslapd-unhashed-pw-switch: nolog modifying entry "cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __password_logging 0.01 sec 2024-07-09T14:26:56Z DEBUG [6/42]: configuring replication version plugin 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpeh2jfqu6', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: IPA Version Replication add nsslapd-pluginpath: libipa_repl_version add nsslapd-plugininitfunc: repl_version_plugin_init add nsslapd-plugintype: preoperation add nsslapd-pluginenabled: off add nsslapd-pluginid: ipa_repl_version add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: Red Hat, Inc. add nsslapd-plugindescription: IPA Replication version plugin add nsslapd-plugin-depends-on-type: database add nsslapd-plugin-depends-on-named: Multisupplier Replication Plugin adding new entry "cn=IPA Version Replication,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __config_version_module 0.01 sec 2024-07-09T14:26:56Z DEBUG [7/42]: enabling IPA enrollment plugin 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpg_npsfmo', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: ipa_enrollment_extop add nsslapd-pluginpath: libipa_enrollment_extop add nsslapd-plugininitfunc: ipaenrollment_init add nsslapd-plugintype: extendedop add nsslapd-pluginenabled: on add nsslapd-pluginid: ipa_enrollment_extop add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: RedHat add nsslapd-plugindescription: Enroll hosts into the IPA domain add nsslapd-plugin-depends-on-type: database add nsslapd-realmTree: dc=example,dc=test adding new entry "cn=ipa_enrollment_extop,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __add_enrollment_module 0.01 sec 2024-07-09T14:26:56Z DEBUG [8/42]: configuring uniqueness plugin 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpca6z_38d', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=add objectClass: top nsSlapdPlugin extensibleObject add cn: krbPrincipalName uniqueness add nsslapd-pluginPath: libattr-unique-plugin add nsslapd-pluginInitfunc: NSUniqueAttr_Init add nsslapd-pluginType: preoperation add nsslapd-pluginEnabled: on add uniqueness-attribute-name: krbPrincipalName add nsslapd-plugin-depends-on-type: database add nsslapd-pluginId: NSUniqueAttr add nsslapd-pluginVersion: 1.1.0 add nsslapd-pluginVendor: Fedora Project add nsslapd-pluginDescription: Enforce unique attribute values add uniqueness-subtrees: dc=example,dc=test add uniqueness-exclude-subtrees: cn=staged users,cn=accounts,cn=provisioning,dc=example,dc=test add uniqueness-across-all-subtrees: on adding new entry "cn=krbPrincipalName uniqueness,cn=plugins,cn=config" modify complete add objectClass: top nsSlapdPlugin extensibleObject add cn: krbCanonicalName uniqueness add nsslapd-pluginPath: libattr-unique-plugin add nsslapd-pluginInitfunc: NSUniqueAttr_Init add nsslapd-pluginType: preoperation add nsslapd-pluginEnabled: on add uniqueness-attribute-name: krbCanonicalName add nsslapd-plugin-depends-on-type: database add nsslapd-pluginId: NSUniqueAttr add nsslapd-pluginVersion: 1.1.0 add nsslapd-pluginVendor: Fedora Project add nsslapd-pluginDescription: Enforce unique attribute values add uniqueness-subtrees: dc=example,dc=test add uniqueness-exclude-subtrees: cn=staged users,cn=accounts,cn=provisioning,dc=example,dc=test add uniqueness-across-all-subtrees: on adding new entry "cn=krbCanonicalName uniqueness,cn=plugins,cn=config" modify complete add objectClass: top nsSlapdPlugin extensibleObject add cn: netgroup uniqueness add nsslapd-pluginPath: libattr-unique-plugin add nsslapd-pluginInitfunc: NSUniqueAttr_Init add nsslapd-pluginType: preoperation add nsslapd-pluginEnabled: on add uniqueness-attribute-name: cn add uniqueness-subtrees: cn=ng,cn=alt,dc=example,dc=test add nsslapd-plugin-depends-on-type: database add nsslapd-pluginId: NSUniqueAttr add nsslapd-pluginVersion: 1.1.0 add nsslapd-pluginVendor: Fedora Project add nsslapd-pluginDescription: Enforce unique attribute values adding new entry "cn=netgroup uniqueness,cn=plugins,cn=config" modify complete add objectClass: top nsSlapdPlugin extensibleObject add cn: ipaUniqueID uniqueness add nsslapd-pluginPath: libattr-unique-plugin add nsslapd-pluginInitfunc: NSUniqueAttr_Init add nsslapd-pluginType: preoperation add nsslapd-pluginEnabled: on add uniqueness-attribute-name: ipaUniqueID add nsslapd-plugin-depends-on-type: database add nsslapd-pluginId: NSUniqueAttr add nsslapd-pluginVersion: 1.1.0 add nsslapd-pluginVendor: Fedora Project add nsslapd-pluginDescription: Enforce unique attribute values add uniqueness-subtrees: dc=example,dc=test add uniqueness-exclude-subtrees: cn=staged users,cn=accounts,cn=provisioning,dc=example,dc=test add uniqueness-across-all-subtrees: on adding new entry "cn=ipaUniqueID uniqueness,cn=plugins,cn=config" modify complete add objectClass: top nsSlapdPlugin extensibleObject add cn: sudorule name uniqueness add nsslapd-pluginDescription: Enforce unique attribute values add nsslapd-pluginPath: libattr-unique-plugin add nsslapd-pluginInitfunc: NSUniqueAttr_Init add nsslapd-pluginType: preoperation add nsslapd-pluginEnabled: on add uniqueness-attribute-name: cn add uniqueness-subtrees: cn=sudorules,cn=sudo,dc=example,dc=test add nsslapd-plugin-depends-on-type: database add nsslapd-pluginId: NSUniqueAttr add nsslapd-pluginVersion: 1.1.0 add nsslapd-pluginVendor: Fedora Project adding new entry "cn=sudorule name uniqueness,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __set_unique_attrs 0.01 sec 2024-07-09T14:26:56Z DEBUG [9/42]: configuring uuid plugin 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/uuid-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: IPA UUID add nsslapd-pluginpath: libipa_uuid add nsslapd-plugininitfunc: ipauuid_init add nsslapd-plugintype: preoperation add nsslapd-pluginenabled: on add nsslapd-pluginid: ipauuid_version add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: Red Hat, Inc. add nsslapd-plugindescription: IPA UUID plugin add nsslapd-plugin-depends-on-type: database adding new entry "cn=IPA UUID,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpuz4vgcfw', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=add objectclass: top extensibleObject add cn: IPA Unique IDs add ipaUuidAttr: ipaUniqueID add ipaUuidMagicRegen: autogenerate add ipaUuidFilter: (|(objectclass=ipaObject)(objectclass=ipaAssociation)) add ipaUuidScope: dc=example,dc=test add ipaUuidEnforce: TRUE adding new entry "cn=IPA Unique IDs,cn=IPA UUID,cn=plugins,cn=config" modify complete add objectclass: top extensibleObject add cn: IPK11 Unique IDs add ipaUuidAttr: ipk11UniqueID add ipaUuidMagicRegen: autogenerate add ipaUuidFilter: (objectclass=ipk11Object) add ipaUuidScope: dc=example,dc=test add ipaUuidEnforce: FALSE adding new entry "cn=IPK11 Unique IDs,cn=IPA UUID,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __config_uuid_module 0.27 sec 2024-07-09T14:26:56Z DEBUG [10/42]: configuring modrdn plugin 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/modrdn-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: IPA MODRDN add nsslapd-pluginpath: libipa_modrdn add nsslapd-plugininitfunc: ipamodrdn_init add nsslapd-plugintype: betxnpostoperation add nsslapd-pluginenabled: on add nsslapd-pluginid: ipamodrdn_version add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: Red Hat, Inc. add nsslapd-plugindescription: IPA MODRDN plugin add nsslapd-plugin-depends-on-type: database add nsslapd-pluginPrecedence: 60 adding new entry "cn=IPA MODRDN,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpb3pdbcjo', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=add objectclass: top extensibleObject add cn: Kerberos Principal Name add ipaModRDNsourceAttr: uid add ipaModRDNtargetAttr: krbPrincipalName add ipaModRDNsuffix: @EXAMPLE.TEST add ipaModRDNfilter: (&(objectclass=posixaccount)(objectclass=krbPrincipalAux)) add ipaModRDNscope: dc=example,dc=test adding new entry "cn=Kerberos Principal Name,cn=IPA MODRDN,cn=plugins,cn=config" modify complete add objectclass: top extensibleObject add cn: Kerberos Canonical Name add ipaModRDNsourceAttr: uid add ipaModRDNtargetAttr: krbCanonicalName add ipaModRDNsuffix: @EXAMPLE.TEST add ipaModRDNfilter: (&(objectclass=posixaccount)(objectclass=krbPrincipalAux)) add ipaModRDNscope: dc=example,dc=test adding new entry "cn=Kerberos Canonical Name,cn=IPA MODRDN,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __config_modrdn_module 0.02 sec 2024-07-09T14:26:56Z DEBUG [11/42]: configuring DNS plugin 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/ipa-dns-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:56Z DEBUG Process finished, return code=0 2024-07-09T14:26:56Z DEBUG stdout=add objectclass: top nsslapdPlugin extensibleObject add cn: IPA DNS add nsslapd-plugindescription: IPA DNS support plugin add nsslapd-pluginenabled: on add nsslapd-pluginid: ipa_dns add nsslapd-plugininitfunc: ipadns_init add nsslapd-pluginpath: libipa_dns.so add nsslapd-plugintype: preoperation add nsslapd-pluginvendor: Red Hat, Inc. add nsslapd-pluginversion: 1.0 add nsslapd-plugin-depends-on-type: database adding new entry "cn=IPA DNS,cn=plugins,cn=config" modify complete 2024-07-09T14:26:56Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:56Z DEBUG step duration: dirsrv __config_dns_module 0.01 sec 2024-07-09T14:26:56Z DEBUG [12/42]: enabling entryUSN plugin 2024-07-09T14:26:56Z DEBUG Starting external process 2024-07-09T14:26:56Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/entryusn.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:57Z DEBUG Process finished, return code=0 2024-07-09T14:26:57Z DEBUG stdout=replace nsslapd-entryusn-global: on modifying entry "cn=config" modify complete replace nsslapd-entryusn-import-initval: next modifying entry "cn=config" modify complete replace nsslapd-pluginenabled: on modifying entry "cn=USN,cn=plugins,cn=config" modify complete 2024-07-09T14:26:57Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:57Z DEBUG step duration: dirsrv __enable_entryusn 0.28 sec 2024-07-09T14:26:57Z DEBUG [13/42]: configuring lockout plugin 2024-07-09T14:26:57Z DEBUG Starting external process 2024-07-09T14:26:57Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/lockout-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:57Z DEBUG Process finished, return code=0 2024-07-09T14:26:57Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: IPA Lockout add nsslapd-pluginpath: libipa_lockout add nsslapd-plugininitfunc: ipalockout_init add nsslapd-plugintype: object add nsslapd-pluginenabled: on add nsslapd-pluginid: ipalockout_version add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: Red Hat, Inc. add nsslapd-plugindescription: IPA Lockout plugin add nsslapd-plugin-depends-on-type: database adding new entry "cn=IPA Lockout,cn=plugins,cn=config" modify complete 2024-07-09T14:26:57Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:57Z DEBUG step duration: dirsrv __config_lockout_module 0.26 sec 2024-07-09T14:26:57Z DEBUG [14/42]: configuring graceperiod plugin 2024-07-09T14:26:57Z DEBUG Created connection context.ldap2_139943596805824 2024-07-09T14:26:57Z DEBUG Starting external process 2024-07-09T14:26:57Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/graceperiod-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:57Z DEBUG Process finished, return code=0 2024-07-09T14:26:57Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: IPA Graceperiod add nsslapd-pluginpath: libipa_graceperiod add nsslapd-plugininitfunc: ipagraceperiod_init add nsslapd-plugintype: object add nsslapd-pluginenabled: on add nsslapd-pluginid: ipagraceperiod_version add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: Red Hat, Inc. add nsslapd-plugindescription: IPA Graceperiod plugin add nsslapd-plugin-depends-on-type: database adding new entry "cn=IPA Graceperiod,cn=plugins,cn=config" modify complete 2024-07-09T14:26:57Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:57Z DEBUG step duration: dirsrv config_graceperiod_module 0.26 sec 2024-07-09T14:26:57Z DEBUG [15/42]: configuring topology plugin 2024-07-09T14:26:57Z DEBUG Starting external process 2024-07-09T14:26:57Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpq7cxqe61', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:57Z DEBUG Process finished, return code=0 2024-07-09T14:26:57Z DEBUG stdout=add objectClass: top nsSlapdPlugin extensibleObject add cn: IPA Topology Configuration add nsslapd-pluginPath: libtopology add nsslapd-pluginInitfunc: ipa_topo_init add nsslapd-pluginType: object add nsslapd-pluginEnabled: on add nsslapd-topo-plugin-shared-config-base: cn=ipa,cn=etc,dc=example,dc=test add nsslapd-topo-plugin-shared-replica-root: dc=example,dc=test o=ipaca add nsslapd-topo-plugin-shared-binddngroup: cn=replication managers,cn=sysaccounts,cn=etc,dc=example,dc=test add nsslapd-topo-plugin-startup-delay: 20 add nsslapd-pluginId: none add nsslapd-plugin-depends-on-named: ldbm database Multisupplier Replication Plugin add nsslapd-pluginVersion: 1.0 add nsslapd-pluginVendor: none add nsslapd-pluginDescription: none adding new entry "cn=IPA Topology Configuration,cn=plugins,cn=config" modify complete 2024-07-09T14:26:57Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:57Z DEBUG step duration: dirsrv __config_topology_module 0.26 sec 2024-07-09T14:26:57Z DEBUG [16/42]: creating indices 2024-07-09T14:26:57Z DEBUG importing all plugin modules in ipaserver.plugins... 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.aci 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.automember 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.automount 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.baseldap 2024-07-09T14:26:57Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.baseuser 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.batch 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.ca 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.caacl 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.cert 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.certmap 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.certprofile 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.config 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.delegation 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.dns 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.dnsserver 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.dogtag 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.domainlevel 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.group 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.hbac 2024-07-09T14:26:57Z DEBUG ipaserver.plugins.hbac is not a valid plugin module 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.hbacrule 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.hbacsvc 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.hbactest 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.host 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.hostgroup 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.idp 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.idrange 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.idviews 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.internal 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.join 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.ldap2 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.location 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.migration 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.misc 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.netgroup 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.otp 2024-07-09T14:26:57Z DEBUG ipaserver.plugins.otp is not a valid plugin module 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.otpconfig 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.otptoken 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.passkeyconfig 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.passwd 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.permission 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.ping 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.pkinit 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.privilege 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.pwpolicy 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.rabase 2024-07-09T14:26:57Z DEBUG ipaserver.plugins.rabase is not a valid plugin module 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.radiusproxy 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.realmdomains 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.role 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.schema 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.selfservice 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.server 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.serverrole 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.serverroles 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.service 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.servicedelegation 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.session 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.stageuser 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.subid 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.sudo 2024-07-09T14:26:57Z DEBUG ipaserver.plugins.sudo is not a valid plugin module 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.sudocmd 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.sudorule 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.topology 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.trust 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.user 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.vault 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.virtual 2024-07-09T14:26:57Z DEBUG ipaserver.plugins.virtual is not a valid plugin module 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.whoami 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.plugins.xmlserver 2024-07-09T14:26:57Z DEBUG importing all plugin modules in ipaserver.install.plugins... 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.adtrust 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.dns 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.fix_kra_people_entry 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_changelog_maxage 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_nis 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_pwpolicy 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_referint 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_services 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_unhashed_password 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness 2024-07-09T14:26:57Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt 2024-07-09T14:26:58Z DEBUG Created connection context.ldap2_139943584701712 2024-07-09T14:26:58Z DEBUG raw: idrange_show('EXAMPLE.TEST_id_range', version='2.254') 2024-07-09T14:26:58Z DEBUG idrange_show('EXAMPLE.TEST_id_range', rights=False, all=False, raw=False, version='2.254') 2024-07-09T14:26:58Z DEBUG flushing ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket from SchemaCache 2024-07-09T14:26:58Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket conn= 2024-07-09T14:26:58Z DEBUG Parsing update file '/usr/share/ipa/updates/20-indices.update' 2024-07-09T14:26:58Z DEBUG New entry: cn=accessRuleType,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=accessRuleType,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'accessRuleType', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['accessRuleType'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=accessRuleType,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG accessRuleType 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=altSecurityIdentities,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=altSecurityIdentities,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'altSecurityIdentities', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['altSecurityIdentities'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=altSecurityIdentities,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG altSecurityIdentities 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=automountkey,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=automountkey,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'automountkey', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['automountkey'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=automountkey,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG automountkey 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG New entry: cn=automountMapName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=automountMapName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'automountMapName', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['automountMapName'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=automountMapName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG automountMapName 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=carLicense,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=carLicense,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'carLicense', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['carLicense'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=carLicense,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG carLicense 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=description,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=description,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'description', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['description'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=description,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG description 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=displayname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=displayname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'displayname', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['displayname'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=displayname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG displayname 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=fqdn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=fqdn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'fqdn', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['fqdn'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=fqdn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG fqdn 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=gidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=gidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG gidnumber 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'gidnumber', current value ['gidnumber'] 2024-07-09T14:26:58Z DEBUG only: updated value ['gidnumber'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'integerOrderingMatch' to nsMatchingRule, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['integerOrderingMatch'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=gidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG gidnumber 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG nsMatchingRule: 2024-07-09T14:26:58Z DEBUG integerOrderingMatch 2024-07-09T14:26:58Z DEBUG [(2, 'nsMatchingRule', ['integerOrderingMatch'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(2, 'nsMatchingRule', [b'integerOrderingMatch'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG New entry: cn=hostCategory,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=hostCategory,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'hostCategory', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['hostCategory'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=hostCategory,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG hostCategory 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=idnsName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=idnsName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'idnsName', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['idnsName'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=idnsName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG idnsName 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaallowedtarget,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaallowedtarget,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaallowedtarget', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaallowedtarget'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaallowedtarget,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaallowedtarget 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaAnchorUUID,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaAnchorUUID,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaAnchorUUID', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaAnchorUUID'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaAnchorUUID,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaAnchorUUID 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaassignedidview,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaassignedidview,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaassignedidview', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaassignedidview'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaassignedidview,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaassignedidview 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaCASubjectDN,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaCASubjectDN,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaCASubjectDN', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaCASubjectDN'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaCASubjectDN,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaCASubjectDN 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaCertmapData,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaCertmapData,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaCertmapData', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaCertmapData'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaCertmapData,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaCertmapData 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaConfigString,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaConfigString,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaConfigString', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaConfigString'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaConfigString,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaConfigString 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaEnabledFlag,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaEnabledFlag,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaEnabledFlag', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaEnabledFlag'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaEnabledFlag,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaEnabledFlag 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaExternalMember,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaExternalMember,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaExternalMember', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaExternalMember'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaExternalMember,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaExternalMember 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaIdpDevAuthEndpoint,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaIdpDevAuthEndpoint,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaIdpDevAuthEndpoint', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaIdpDevAuthEndpoint'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaIdpDevAuthEndpoint,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaIdpDevAuthEndpoint 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaIdpAuthEndpoint,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaIdpAuthEndpoint,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaIdpAuthEndpoint', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaIdpAuthEndpoint'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaIdpAuthEndpoint,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaIdpAuthEndpoint 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaIdpScope,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaIdpScope,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaIdpScope', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaIdpScope'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaIdpScope,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaIdpScope 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaIdpTokenEndpoint,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaIdpTokenEndpoint,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaIdpTokenEndpoint', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaIdpTokenEndpoint'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaIdpTokenEndpoint,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaIdpTokenEndpoint 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaKrbAuthzData,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaKrbAuthzData,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaKrbAuthzData', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaKrbAuthzData'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaKrbAuthzData,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaKrbAuthzData 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipakrbprincipalalias,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipakrbprincipalalias,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipakrbprincipalalias', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipakrbprincipalalias'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipakrbprincipalalias,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipakrbprincipalalias 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=ipalocation,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipalocation,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipalocation', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipalocation'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipalocation,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipalocation 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaMemberCa,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaMemberCa,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaMemberCa', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaMemberCa'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaMemberCa,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaMemberCa 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaMemberCertProfile,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaMemberCertProfile,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaMemberCertProfile', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaMemberCertProfile'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaMemberCertProfile,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaMemberCertProfile 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaNTSecurityIdentifier,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaNTSecurityIdentifier,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaNTSecurityIdentifier', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaNTSecurityIdentifier'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaNTSecurityIdentifier,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaNTSecurityIdentifier 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaNTTrustPartner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaNTTrustPartner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaNTTrustPartner', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaNTTrustPartner'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaNTTrustPartner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaNTTrustPartner 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaOriginalUid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaOriginalUid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaOriginalUid', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaOriginalUid'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaOriginalUid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaOriginalUid 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaOwner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaOwner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaOwner', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaOwner'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaOwner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaOwner 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG New entry: cn=ipasudorunas,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipasudorunas,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipasudorunas', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipasudorunas'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipasudorunas,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipasudorunas 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaSubGidNumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaSubGidNumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaSubGidNumber', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaSubGidNumber'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'integerOrderingMatch' to nsMatchingRule, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['integerOrderingMatch'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaSubGidNumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaSubGidNumber 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG nsMatchingRule: 2024-07-09T14:26:58Z DEBUG integerOrderingMatch 2024-07-09T14:26:58Z DEBUG New entry: cn=ipaSubUidNumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipaSubUidNumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipaSubUidNumber', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipaSubUidNumber'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'integerOrderingMatch' to nsMatchingRule, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['integerOrderingMatch'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipaSubUidNumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipaSubUidNumber 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG nsMatchingRule: 2024-07-09T14:26:58Z DEBUG integerOrderingMatch 2024-07-09T14:26:58Z DEBUG New entry: cn=sudoorder,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=sudoorder,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'sudoorder', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['sudoorder'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'integerOrderingMatch' to nsMatchingRule, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['integerOrderingMatch'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=sudoorder,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG sudoorder 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG nsMatchingRule: 2024-07-09T14:26:58Z DEBUG integerOrderingMatch 2024-07-09T14:26:58Z DEBUG New entry: cn=ipasudorunasgroup,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipasudorunasgroup,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipasudorunasgroup', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipasudorunasgroup'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipasudorunasgroup,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipasudorunasgroup 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipatokenradiusconfiglink,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipatokenradiusconfiglink,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipatokenradiusconfiglink', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipatokenradiusconfiglink'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipatokenradiusconfiglink,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipatokenradiusconfiglink 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=ipauniqueid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipauniqueid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipauniqueid', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipauniqueid'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipauniqueid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipauniqueid 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=ipServicePort,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ipServicePort,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ipServicePort', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ipServicePort'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ipServicePort,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ipServicePort 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=krbCanonicalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=krbCanonicalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'krbCanonicalName', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['krbCanonicalName'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=krbCanonicalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG krbCanonicalName 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=krbPasswordExpiration,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=krbPasswordExpiration,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'krbPasswordExpiration', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['krbPasswordExpiration'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=krbPasswordExpiration,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG krbPasswordExpiration 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=krbPrincipalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=krbPrincipalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'krbPrincipalName', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['krbPrincipalName'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG add: 'caseIgnoreIA5Match' to nsMatchingRule, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['caseIgnoreIA5Match'] 2024-07-09T14:26:58Z DEBUG add: 'caseExactIA5Match' to nsMatchingRule, current value ['caseIgnoreIA5Match'] 2024-07-09T14:26:58Z DEBUG add: updated value ['caseIgnoreIA5Match', 'caseExactIA5Match'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=krbPrincipalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG krbPrincipalName 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG nsMatchingRule: 2024-07-09T14:26:58Z DEBUG caseIgnoreIA5Match 2024-07-09T14:26:58Z DEBUG caseExactIA5Match 2024-07-09T14:26:58Z DEBUG New entry: cn=l,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=l,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'l', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['l'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=l,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG l 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=macAddress,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=macAddress,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'macAddress', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['macAddress'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=macAddress,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG macAddress 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG New entry: cn=managedby,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=managedby,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'managedby', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['managedby'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=managedby,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG managedby 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=manager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=manager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'manager', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['manager'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=manager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG manager 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=member,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=member,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG member 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'member', current value ['member'] 2024-07-09T14:26:58Z DEBUG only: updated value ['member'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=member,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG member 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG [(0, 'nsIndexType', ['pres', 'sub'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(0, 'nsIndexType', [b'pres', b'sub'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG New entry: cn=memberallowcmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=memberallowcmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'memberallowcmd', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['memberallowcmd'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=memberallowcmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberallowcmd 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=memberdenycmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=memberdenycmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'memberdenycmd', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['memberdenycmd'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=memberdenycmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberdenycmd 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=memberHost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=memberHost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'memberHost', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['memberHost'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=memberHost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberHost 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=memberManager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=memberManager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'memberManager', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['memberManager'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=memberManager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberManager 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=memberOf,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=memberOf,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberOf 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'memberOf', current value ['memberOf'] 2024-07-09T14:26:58Z DEBUG only: updated value ['memberOf'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=memberOf,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberOf 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG [(0, 'nsIndexType', ['sub'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(0, 'nsIndexType', [b'sub'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG New entry: cn=memberPrincipal,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=memberPrincipal,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'memberPrincipal', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['memberPrincipal'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=memberPrincipal,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberPrincipal 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG New entry: cn=memberservice,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=memberservice,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'memberservice', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['memberservice'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=memberservice,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberservice 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=memberuid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=memberuid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberuid 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'memberuid', current value ['memberuid'] 2024-07-09T14:26:58Z DEBUG only: updated value ['memberuid'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=memberuid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberuid 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG [(0, 'nsIndexType', ['pres'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(0, 'nsIndexType', [b'pres'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG New entry: cn=memberUser,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=memberUser,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'memberUser', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['memberUser'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=memberUser,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG memberUser 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=nsHardwarePlatform,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=nsHardwarePlatform,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'nsHardwarePlatform', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['nsHardwarePlatform'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=nsHardwarePlatform,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG nsHardwarePlatform 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=nsHostLocation,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=nsHostLocation,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'nsHostLocation', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['nsHostLocation'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=nsHostLocation,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG nsHostLocation 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=nsOsVersion,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=nsOsVersion,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'nsOsVersion', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['nsOsVersion'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=nsOsVersion,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsindex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG nsOsVersion 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ntUniqueId 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'ntUniqueId', current value ['ntUniqueId'] 2024-07-09T14:26:58Z DEBUG only: updated value ['ntUniqueId'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ntUniqueId 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG [(0, 'nsIndexType', ['pres'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(0, 'nsIndexType', [b'pres'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=ntUserDomainId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ntUserDomainId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ntUserDomainId 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'ntUserDomainId', current value ['ntUserDomainId'] 2024-07-09T14:26:58Z DEBUG only: updated value ['ntUserDomainId'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ntUserDomainId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ntUserDomainId 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG [(0, 'nsIndexType', ['pres'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(0, 'nsIndexType', [b'pres'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG New entry: cn=ou,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=ou,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'ou', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['ou'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=ou,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG ou 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=owner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=owner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG owner 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'owner', current value ['owner'] 2024-07-09T14:26:58Z DEBUG only: updated value ['owner'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=owner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG owner 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG [(0, 'nsIndexType', ['sub'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(0, 'nsIndexType', [b'sub'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG New entry: cn=secretary,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=secretary,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'secretary', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['secretary'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=secretary,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG secretary 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=seeAlso,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=seeAlso,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG seeAlso 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'seealso', current value ['seeAlso'] 2024-07-09T14:26:58Z DEBUG only: updated value ['seealso'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=seeAlso,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG seealso 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG [(0, 'nsIndexType', ['sub']), (1, 'cn', ['seeAlso']), (0, 'cn', ['seealso'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(0, 'nsIndexType', [b'sub']), (1, 'cn', [b'seeAlso']), (0, 'cn', [b'seealso'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG New entry: cn=serverhostname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=serverhostname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'serverhostname', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['serverhostname'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=serverhostname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG serverhostname 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=sourcehost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=sourcehost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'sourcehost', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['sourcehost'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=sourcehost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG sourcehost 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG New entry: cn=title,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=title,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'title', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['title'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=title,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG title 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=uid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=uid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG uid 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'uid', current value ['uid'] 2024-07-09T14:26:58Z DEBUG only: updated value ['uid'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=uid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG uid 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG [(0, 'nsIndexType', ['sub'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(0, 'nsIndexType', [b'sub'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=uidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=uidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG uidnumber 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'uidnumber', current value ['uidnumber'] 2024-07-09T14:26:58Z DEBUG only: updated value ['uidnumber'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'integerOrderingMatch' to nsMatchingRule, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['integerOrderingMatch'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=uidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG uidnumber 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG nsMatchingRule: 2024-07-09T14:26:58Z DEBUG integerOrderingMatch 2024-07-09T14:26:58Z DEBUG [(2, 'nsMatchingRule', ['integerOrderingMatch'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(2, 'nsMatchingRule', [b'integerOrderingMatch'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG Updating existing entry: cn=uniquemember,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=uniquemember,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG uniquemember 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG only: set cn to 'uniquemember', current value ['uniquemember'] 2024-07-09T14:26:58Z DEBUG only: updated value ['uniquemember'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'sub' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'sub'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=uniquemember,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG uniquemember 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG sub 2024-07-09T14:26:58Z DEBUG [(0, 'nsIndexType', ['sub'])] 2024-07-09T14:26:58Z DEBUG Updated 1 2024-07-09T14:26:58Z DEBUG update_entry modlist [(0, 'nsIndexType', [b'sub'])] 2024-07-09T14:26:58Z DEBUG Done 2024-07-09T14:26:58Z DEBUG New entry: cn=userCertificate,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Initial value 2024-07-09T14:26:58Z DEBUG dn: cn=userCertificate,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG only: set cn to 'userCertificate', current value [] 2024-07-09T14:26:58Z DEBUG only: updated value ['userCertificate'] 2024-07-09T14:26:58Z DEBUG add: 'eq' to nsIndexType, current value [] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq'] 2024-07-09T14:26:58Z DEBUG add: 'pres' to nsIndexType, current value ['eq'] 2024-07-09T14:26:58Z DEBUG add: updated value ['eq', 'pres'] 2024-07-09T14:26:58Z DEBUG --------------------------------------------- 2024-07-09T14:26:58Z DEBUG Final value after applying updates 2024-07-09T14:26:58Z DEBUG dn: cn=userCertificate,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2024-07-09T14:26:58Z DEBUG objectClass: 2024-07-09T14:26:58Z DEBUG nsIndex 2024-07-09T14:26:58Z DEBUG top 2024-07-09T14:26:58Z DEBUG nsSystemIndex: 2024-07-09T14:26:58Z DEBUG false 2024-07-09T14:26:58Z DEBUG cn: 2024-07-09T14:26:58Z DEBUG userCertificate 2024-07-09T14:26:58Z DEBUG nsIndexType: 2024-07-09T14:26:58Z DEBUG eq 2024-07-09T14:26:58Z DEBUG pres 2024-07-09T14:26:58Z DEBUG Creating task cn=indextask_139398280185992830_13934,cn=index,cn=tasks,cn=config to index attributes: accessRuleType, altSecurityIdentities, automountMapName, automountkey, carLicense, description, displayname, fqdn, gidnumber, hostCategory, idnsName, ipServicePort, ipaAnchorUUID, ipaCASubjectDN, ipaCertmapData, ipaConfigString, ipaEnabledFlag, ipaExternalMember, ipaIdpAuthEndpoint, ipaIdpDevAuthEndpoint, ipaIdpScope, ipaIdpTokenEndpoint, ipaKrbAuthzData, ipaMemberCa, ipaMemberCertProfile, ipaNTSecurityIdentifier, ipaNTTrustPartner, ipaOriginalUid, ipaOwner, ipaSubGidNumber, ipaSubUidNumber, ipaallowedtarget, ipaassignedidview, ipakrbprincipalalias, ipalocation, ipasudorunas, ipasudorunasgroup, ipatokenradiusconfiglink, ipauniqueid, krbCanonicalName, krbPasswordExpiration, krbPrincipalName, l, macAddress, managedby, manager, member, memberHost, memberManager, memberOf, memberPrincipal, memberUser, memberallowcmd, memberdenycmd, memberservice, memberuid, nsHardwarePlatform, nsHostLocation, nsOsVersion, ntUniqueId, ntUserDomainId, ou, owner, secretary, seealso, serverhostname, sourcehost, sudoorder, title, uid, uidnumber, uniquemember, userCertificate 2024-07-09T14:26:59Z DEBUG Indexing finished 2024-07-09T14:26:59Z DEBUG LDAP update duration: /usr/share/ipa/updates/20-indices.update 1.272 sec 2024-07-09T14:26:59Z DEBUG Destroyed connection context.ldap2_139943584701712 2024-07-09T14:26:59Z DEBUG step duration: dirsrv __create_indices 1.76 sec 2024-07-09T14:26:59Z DEBUG [17/42]: enabling referential integrity plugin 2024-07-09T14:26:59Z DEBUG Starting external process 2024-07-09T14:26:59Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/referint-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:59Z DEBUG Process finished, return code=0 2024-07-09T14:26:59Z DEBUG stdout=replace nsslapd-pluginenabled: on modifying entry "cn=referential integrity postoperation,cn=plugins,cn=config" modify complete 2024-07-09T14:26:59Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:59Z DEBUG step duration: dirsrv __add_referint_module 0.27 sec 2024-07-09T14:26:59Z DEBUG [18/42]: configuring certmap.conf 2024-07-09T14:26:59Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' 2024-07-09T14:26:59Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' 2024-07-09T14:26:59Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state' 2024-07-09T14:26:59Z DEBUG step duration: dirsrv __certmap_conf 0.00 sec 2024-07-09T14:26:59Z DEBUG [19/42]: configure new location for managed entries 2024-07-09T14:26:59Z DEBUG Starting external process 2024-07-09T14:26:59Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpidswerut', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:26:59Z DEBUG Process finished, return code=0 2024-07-09T14:26:59Z DEBUG stdout=add nsslapd-pluginConfigArea: cn=Definitions,cn=Managed Entries,cn=etc,dc=example,dc=test modifying entry "cn=Managed Entries,cn=plugins,cn=config" modify complete 2024-07-09T14:26:59Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:26:59Z DEBUG step duration: dirsrv __repoint_managed_entries 0.01 sec 2024-07-09T14:26:59Z DEBUG [20/42]: configure dirsrv ccache and keytab 2024-07-09T14:26:59Z DEBUG Starting external process 2024-07-09T14:26:59Z DEBUG args=['/usr/sbin/selinuxenabled'] 2024-07-09T14:26:59Z DEBUG Process finished, return code=0 2024-07-09T14:26:59Z DEBUG stdout= 2024-07-09T14:26:59Z DEBUG stderr= 2024-07-09T14:26:59Z DEBUG Starting external process 2024-07-09T14:26:59Z DEBUG args=['/sbin/restorecon', '/etc/systemd/system/dirsrv@EXAMPLE-TEST.service.d/ipa-env.conf'] 2024-07-09T14:26:59Z DEBUG Process finished, return code=0 2024-07-09T14:26:59Z DEBUG stdout= 2024-07-09T14:26:59Z DEBUG stderr= 2024-07-09T14:26:59Z DEBUG Starting external process 2024-07-09T14:26:59Z DEBUG args=['/bin/systemctl', '--system', 'daemon-reload'] 2024-07-09T14:27:00Z DEBUG Process finished, return code=0 2024-07-09T14:27:00Z DEBUG stdout= 2024-07-09T14:27:00Z DEBUG stderr= 2024-07-09T14:27:00Z DEBUG step duration: dirsrv configure_systemd_ipa_env 0.26 sec 2024-07-09T14:27:00Z DEBUG [21/42]: enabling SASL mapping fallback 2024-07-09T14:27:00Z DEBUG Starting external process 2024-07-09T14:27:00Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp466stryi', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:00Z DEBUG Process finished, return code=0 2024-07-09T14:27:00Z DEBUG stdout=replace nsslapd-sasl-mapping-fallback: on modifying entry "cn=config" modify complete 2024-07-09T14:27:00Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:00Z DEBUG step duration: dirsrv __enable_sasl_mapping_fallback 0.01 sec 2024-07-09T14:27:00Z DEBUG [22/42]: restarting directory server 2024-07-09T14:27:00Z DEBUG Destroyed connection context.ldap2_139943596805824 2024-07-09T14:27:00Z DEBUG Starting external process 2024-07-09T14:27:00Z DEBUG args=['/bin/systemctl', '--system', 'daemon-reload'] 2024-07-09T14:27:00Z DEBUG Process finished, return code=0 2024-07-09T14:27:00Z DEBUG stdout= 2024-07-09T14:27:00Z DEBUG stderr= 2024-07-09T14:27:00Z DEBUG Starting external process 2024-07-09T14:27:00Z DEBUG args=['/bin/systemctl', 'restart', 'dirsrv@EXAMPLE-TEST.service'] 2024-07-09T14:27:00Z DEBUG Process finished, return code=0 2024-07-09T14:27:00Z DEBUG stdout= 2024-07-09T14:27:00Z DEBUG stderr= 2024-07-09T14:27:00Z DEBUG Starting external process 2024-07-09T14:27:00Z DEBUG args=['/bin/systemctl', 'is-active', 'dirsrv@EXAMPLE-TEST.service'] 2024-07-09T14:27:00Z DEBUG Process finished, return code=0 2024-07-09T14:27:00Z DEBUG stdout=active 2024-07-09T14:27:00Z DEBUG stderr= 2024-07-09T14:27:00Z DEBUG wait_for_open_ports: localhost [389] timeout 120 2024-07-09T14:27:00Z DEBUG waiting for port: 389 2024-07-09T14:27:00Z DEBUG SUCCESS: port: 389 2024-07-09T14:27:00Z DEBUG Restart of dirsrv@EXAMPLE-TEST.service complete 2024-07-09T14:27:00Z DEBUG Starting external process 2024-07-09T14:27:00Z DEBUG args=['/bin/systemctl', 'is-active', 'dirsrv@EXAMPLE-TEST.service'] 2024-07-09T14:27:00Z DEBUG Process finished, return code=0 2024-07-09T14:27:00Z DEBUG stdout=active 2024-07-09T14:27:00Z DEBUG stderr= 2024-07-09T14:27:01Z DEBUG Created connection context.ldap2_139943596805824 2024-07-09T14:27:01Z DEBUG step duration: dirsrv __restart_instance 1.03 sec 2024-07-09T14:27:01Z DEBUG [23/42]: adding sasl mappings to the directory 2024-07-09T14:27:01Z DEBUG flushing ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket from SchemaCache 2024-07-09T14:27:01Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket conn= 2024-07-09T14:27:01Z DEBUG step duration: dirsrv __configure_sasl_mappings 0.38 sec 2024-07-09T14:27:01Z DEBUG [24/42]: adding default layout 2024-07-09T14:27:01Z DEBUG Starting external process 2024-07-09T14:27:01Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpfz2ry5xn', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:01Z DEBUG Process finished, return code=0 2024-07-09T14:27:01Z DEBUG stdout=add objectClass: top nsContainer add cn: accounts adding new entry "cn=accounts,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: users adding new entry "cn=users,cn=accounts,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: groups adding new entry "cn=groups,cn=accounts,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: services adding new entry "cn=services,cn=accounts,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: computers adding new entry "cn=computers,cn=accounts,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: hostgroups adding new entry "cn=hostgroups,cn=accounts,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: ipservices adding new entry "cn=ipservices,cn=accounts,dc=example,dc=test" modify complete add objectClass: nsContainer add cn: alt adding new entry "cn=alt,dc=example,dc=test" modify complete add objectClass: nsContainer add cn: ng adding new entry "cn=ng,cn=alt,dc=example,dc=test" modify complete add objectClass: nsContainer add cn: automount adding new entry "cn=automount,dc=example,dc=test" modify complete add objectClass: nsContainer add cn: default adding new entry "cn=default,cn=automount,dc=example,dc=test" modify complete add objectClass: automountMap add automountMapName: auto.master adding new entry "automountmapname=auto.master,cn=default,cn=automount,dc=example,dc=test" modify complete add objectClass: automountMap add automountMapName: auto.direct adding new entry "automountmapname=auto.direct,cn=default,cn=automount,dc=example,dc=test" modify complete add objectClass: automount add automountKey: /- add automountInformation: auto.direct add description: /- auto.direct adding new entry "description=/- auto.direct,automountmapname=auto.master,cn=default,cn=automount,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: hbac adding new entry "cn=hbac,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: hbacservices adding new entry "cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: hbacservicegroups adding new entry "cn=hbacservicegroups,cn=hbac,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: sudo adding new entry "cn=sudo,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: sudocmds adding new entry "cn=sudocmds,cn=sudo,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: sudocmdgroups adding new entry "cn=sudocmdgroups,cn=sudo,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: sudorules adding new entry "cn=sudorules,cn=sudo,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: etc adding new entry "cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: locations adding new entry "cn=locations,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: sysaccounts adding new entry "cn=sysaccounts,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: ipa adding new entry "cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: masters adding new entry "cn=masters,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: replicas adding new entry "cn=replicas,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: dna adding new entry "cn=dna,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: posix-ids adding new entry "cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: subordinate-ids adding new entry "cn=subordinate-ids,cn=dna,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: ca_renewal adding new entry "cn=ca_renewal,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: certificates adding new entry "cn=certificates,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: custodia adding new entry "cn=custodia,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: dogtag adding new entry "cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: s4u2proxy adding new entry "cn=s4u2proxy,cn=etc,dc=example,dc=test" modify complete add objectClass: ipaKrb5DelegationACL groupOfPrincipals top add cn: ipa-http-delegation add memberPrincipal: HTTP/ipa.example.test@EXAMPLE.TEST add ipaAllowedTarget: cn=ipa-ldap-delegation-targets,cn=s4u2proxy,cn=etc,dc=example,dc=test cn=ipa-cifs-delegation-targets,cn=s4u2proxy,cn=etc,dc=example,dc=test adding new entry "cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,dc=example,dc=test" modify complete add objectClass: groupOfPrincipals top add cn: ipa-ldap-delegation-targets add memberPrincipal: ldap/ipa.example.test@EXAMPLE.TEST adding new entry "cn=ipa-ldap-delegation-targets,cn=s4u2proxy,cn=etc,dc=example,dc=test" modify complete add objectClass: groupOfPrincipals top add cn: ipa-cifs-delegation-targets adding new entry "cn=ipa-cifs-delegation-targets,cn=s4u2proxy,cn=etc,dc=example,dc=test" modify complete add objectClass: top person posixaccount krbprincipalaux krbticketpolicyaux inetuser ipaobject ipasshuser add uid: admin add krbPrincipalName: admin@EXAMPLE.TEST root@EXAMPLE.TEST add cn: Administrator add sn: Administrator add uidNumber: 1469600000 add gidNumber: 1469600000 add homeDirectory: /home/admin add loginShell: /bin/bash add gecos: Administrator add nsAccountLock: FALSE add ipaUniqueID: autogenerate adding new entry "uid=admin,cn=users,cn=accounts,dc=example,dc=test" modify complete add objectClass: top groupofnames posixgroup ipausergroup ipaobject add cn: admins add description: Account administrators group add gidNumber: 1469600000 add member: uid=admin,cn=users,cn=accounts,dc=example,dc=test add nsAccountLock: FALSE add ipaUniqueID: autogenerate adding new entry "cn=admins,cn=groups,cn=accounts,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup ipausergroup ipaobject add description: Default group for all users add cn: ipausers add ipaUniqueID: autogenerate adding new entry "cn=ipausers,cn=groups,cn=accounts,dc=example,dc=test" modify complete add objectClass: top groupofnames posixgroup ipausergroup ipaobject add gidNumber: 1469600002 add description: Limited admins who can edit other users add cn: editors add ipaUniqueID: autogenerate adding new entry "cn=editors,cn=groups,cn=accounts,dc=example,dc=test" modify complete add objectClass: top groupOfNames nestedGroup ipaobject ipahostgroup add description: IPA server hosts add cn: ipaservers add ipaUniqueID: autogenerate adding new entry "cn=ipaservers,cn=hostgroups,cn=accounts,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: sshd add description: sshd add ipauniqueid: autogenerate adding new entry "cn=sshd,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: ftp add description: ftp add ipauniqueid: autogenerate adding new entry "cn=ftp,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: su add description: su add ipauniqueid: autogenerate adding new entry "cn=su,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: login add description: login add ipauniqueid: autogenerate adding new entry "cn=login,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: su-l add description: su with login shell add ipauniqueid: autogenerate adding new entry "cn=su-l,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: sudo add description: sudo add ipauniqueid: autogenerate adding new entry "cn=sudo,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: sudo-i add description: sudo-i add ipauniqueid: autogenerate adding new entry "cn=sudo-i,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: systemd-user add description: pam_systemd and systemd user@.service add ipauniqueid: autogenerate adding new entry "cn=systemd-user,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: gdm add description: gdm add ipauniqueid: autogenerate adding new entry "cn=gdm,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: gdm-XXXXXXXX add description: gdm-XXXXXXXX add ipauniqueid: autogenerate adding new entry "cn=gdm-XXXXXXXX,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipahbacservice ipaobject add cn: kdm add description: kdm add ipauniqueid: autogenerate adding new entry "cn=kdm,cn=hbacservices,cn=hbac,dc=example,dc=test" modify complete add objectClass: ipaobject ipahbacservicegroup nestedGroup groupOfNames top add cn: Sudo add ipauniqueid: autogenerate add description: Default group of Sudo related services add member: cn=sudo,cn=hbacservices,cn=hbac,dc=example,dc=test cn=sudo-i,cn=hbacservices,cn=hbac,dc=example,dc=test adding new entry "cn=Sudo,cn=hbacservicegroups,cn=hbac,dc=example,dc=test" modify complete add objectClass: nsContainer top ipaGuiConfig ipaConfigObject add ipaUserSearchFields: uid,givenname,sn,telephonenumber,ou,title add ipaGroupSearchFields: cn,description add ipaSearchTimeLimit: 2 add ipaSearchRecordsLimit: 100 add ipaHomesRootDir: /home add ipaDefaultLoginShell: /bin/sh add ipaDefaultPrimaryGroup: ipausers add ipaMaxUsernameLength: 32 add ipaMaxHostnameLength: 64 add ipaPwdExpAdvNotify: 4 add ipaGroupObjectClasses: top groupofnames nestedgroup ipausergroup ipaobject add ipaUserObjectClasses: top person organizationalperson inetorgperson inetuser posixaccount krbprincipalaux krbticketpolicyaux ipaobject ipasshuser add ipaDefaultEmailDomain: example.test add ipaMigrationEnabled: FALSE add ipaConfigString: AllowNThash KDC:Disable Last Success add ipaSELinuxUserMapOrder: guest_u:s0$xguest_u:s0$user_u:s0$staff_u:s0-s0:c0.c1023$sysadm_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023 add ipaSELinuxUserMapDefault: unconfined_u:s0-s0:c0.c1023 adding new entry "cn=ipaConfig,cn=etc,dc=example,dc=test" modify complete add objectclass: top nsContainer add cn: cosTemplates adding new entry "cn=cosTemplates,cn=accounts,dc=example,dc=test" modify complete add description: Password Policy based on group membership add objectClass: top ldapsubentry cosSuperDefinition cosClassicDefinition add cosTemplateDn: cn=cosTemplates,cn=accounts,dc=example,dc=test add cosAttribute: krbPwdPolicyReference override add cosSpecifier: memberOf adding new entry "cn=Password Policy,cn=accounts,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: selinux adding new entry "cn=selinux,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: usermap adding new entry "cn=usermap,cn=selinux,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: ranges adding new entry "cn=ranges,cn=etc,dc=example,dc=test" modify complete add objectClass: top ipaIDrange ipaDomainIDRange add cn: EXAMPLE.TEST_id_range add ipaBaseID: 1469600000 add ipaIDRangeSize: 200000 add ipaRangeType: ipa-local adding new entry "cn=EXAMPLE.TEST_id_range,cn=ranges,cn=etc,dc=example,dc=test" modify complete add objectClass: top ipaIDrange ipaTrustedADDomainRange add cn: EXAMPLE.TEST_subid_range add ipaBaseID: 2147483648 add ipaIDRangeSize: 2147352576 add ipaBaseRID: 2147283648 add ipaNTTrustedDomainSID: S-1-5-21-738065-838566-1348261757 add ipaRangeType: ipa-ad-trust adding new entry "cn=EXAMPLE.TEST_subid_range,cn=ranges,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: ca adding new entry "cn=ca,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: certprofiles adding new entry "cn=certprofiles,cn=ca,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: caacls adding new entry "cn=caacls,cn=ca,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: cas adding new entry "cn=cas,cn=ca,dc=example,dc=test" modify complete 2024-07-09T14:27:01Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:02Z DEBUG step duration: dirsrv __add_default_layout 0.43 sec 2024-07-09T14:27:02Z DEBUG [25/42]: adding delegation layout 2024-07-09T14:27:02Z DEBUG Starting external process 2024-07-09T14:27:02Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpkdw66b67', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:02Z DEBUG Process finished, return code=0 2024-07-09T14:27:02Z DEBUG stdout=add objectClass: top nsContainer add cn: roles adding new entry "cn=roles,cn=accounts,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: pbac adding new entry "cn=pbac,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: privileges adding new entry "cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: permissions adding new entry "cn=permissions,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: helpdesk add description: Helpdesk adding new entry "cn=helpdesk,cn=roles,cn=accounts,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: User Administrators add description: User Administrators adding new entry "cn=User Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Group Administrators add description: Group Administrators adding new entry "cn=Group Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Host Administrators add description: Host Administrators adding new entry "cn=Host Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Host Group Administrators add description: Host Group Administrators adding new entry "cn=Host Group Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Delegation Administrator add description: Role administration adding new entry "cn=Delegation Administrator,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: DNS Administrators add description: DNS Administrators adding new entry "cn=DNS Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: DNS Servers add description: DNS Servers adding new entry "cn=DNS Servers,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Service Administrators add description: Service Administrators adding new entry "cn=Service Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Automount Administrators add description: Automount Administrators adding new entry "cn=Automount Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Netgroups Administrators add description: Netgroups Administrators adding new entry "cn=Netgroups Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Certificate Administrators add description: Certificate Administrators adding new entry "cn=Certificate Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Replication Administrators add description: Replication Administrators add member: cn=admins,cn=groups,cn=accounts,dc=example,dc=test adding new entry "cn=Replication Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Host Enrollment add description: Host Enrollment adding new entry "cn=Host Enrollment,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Stage User Administrators add description: Stage User Administrators adding new entry "cn=Stage User Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: Stage User Provisioning add description: Stage User Provisioning adding new entry "cn=Stage User Provisioning,cn=privileges,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Add Replication Agreements add ipapermissiontype: SYSTEM add member: cn=Replication Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Add Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Modify Replication Agreements add ipapermissiontype: SYSTEM add member: cn=Replication Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Modify Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Read Replication Agreements add ipapermissiontype: SYSTEM add member: cn=Replication Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Read Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Remove Replication Agreements add ipapermissiontype: SYSTEM add member: cn=Replication Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Remove Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Modify DNA Range add ipapermissiontype: SYSTEM add member: cn=Replication Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Modify DNA Range,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add objectClass: top nsContainer add cn: virtual operations adding new entry "cn=virtual operations,cn=etc,dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Retrieve Certificates from the CA add member: cn=Certificate Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Retrieve Certificates from the CA,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add aci: (targetattr = "objectclass")(target = "ldap:///cn=retrieve certificate,cn=virtual operations,cn=etc,dc=example,dc=test" )(version 3.0 ; acl "permission:Retrieve Certificates from the CA" ; allow (write) groupdn = "ldap:///cn=Retrieve Certificates from the CA,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Request Certificate add member: cn=Certificate Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Request Certificate,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add aci: (targetattr = "objectclass")(target = "ldap:///cn=request certificate,cn=virtual operations,cn=etc,dc=example,dc=test" )(version 3.0 ; acl "permission:Request Certificate" ; allow (write) groupdn = "ldap:///cn=Request Certificate,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Request Certificates from a different host add member: cn=Certificate Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Request Certificates from a different host,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add aci: (targetattr = "objectclass")(target = "ldap:///cn=request certificate different host,cn=virtual operations,cn=etc,dc=example,dc=test" )(version 3.0 ; acl "permission:Request Certificates from a different host" ; allow (write) groupdn = "ldap:///cn=Request Certificates from a different host,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Get Certificates status from the CA add member: cn=Certificate Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Get Certificates status from the CA,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add aci: (targetattr = "objectclass")(target = "ldap:///cn=certificate status,cn=virtual operations,cn=etc,dc=example,dc=test" )(version 3.0 ; acl "permission:Get Certificates status from the CA" ; allow (write) groupdn = "ldap:///cn=Get Certificates status from the CA,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Revoke Certificate add member: cn=Certificate Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Revoke Certificate,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add aci: (targetattr = "objectclass")(target = "ldap:///cn=revoke certificate,cn=virtual operations,cn=etc,dc=example,dc=test" )(version 3.0 ; acl "permission:Revoke Certificate"; allow (write) groupdn = "ldap:///cn=Revoke Certificate,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "dc=example,dc=test" modify complete add objectClass: top groupofnames ipapermission add cn: Certificate Remove Hold add member: cn=Certificate Administrators,cn=privileges,cn=pbac,dc=example,dc=test adding new entry "cn=Certificate Remove Hold,cn=permissions,cn=pbac,dc=example,dc=test" modify complete add aci: (targetattr = "objectclass")(target = "ldap:///cn=certificate remove hold,cn=virtual operations,cn=etc,dc=example,dc=test" )(version 3.0 ; acl "permission:Certificate Remove Hold"; allow (write) groupdn = "ldap:///cn=Certificate Remove Hold,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "dc=example,dc=test" modify complete add objectClass: top groupofnames nestedgroup add cn: External IdP server Administrators add description: External IdP server Administrators adding new entry "cn=External IdP server Administrators,cn=privileges,cn=pbac,dc=example,dc=test" modify complete 2024-07-09T14:27:02Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:02Z DEBUG step duration: dirsrv __add_delegation_layout 0.14 sec 2024-07-09T14:27:02Z DEBUG [26/42]: creating container for managed entries 2024-07-09T14:27:02Z DEBUG Starting external process 2024-07-09T14:27:02Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpce3b2oag', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:02Z DEBUG Process finished, return code=0 2024-07-09T14:27:02Z DEBUG stdout=add objectClass: nsContainer top add cn: Managed Entries adding new entry "cn=Managed Entries,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: Templates adding new entry "cn=Templates,cn=Managed Entries,cn=etc,dc=example,dc=test" modify complete add objectClass: nsContainer top add cn: Definitions adding new entry "cn=Definitions,cn=Managed Entries,cn=etc,dc=example,dc=test" modify complete 2024-07-09T14:27:02Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:02Z DEBUG step duration: dirsrv __managed_entries 0.01 sec 2024-07-09T14:27:02Z DEBUG [27/42]: configuring user private groups 2024-07-09T14:27:02Z DEBUG Starting external process 2024-07-09T14:27:02Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp45riekwv', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:02Z DEBUG Process finished, return code=0 2024-07-09T14:27:02Z DEBUG stdout=add objectclass: mepTemplateEntry add cn: UPG Template add mepRDNAttr: cn add mepStaticAttr: objectclass: posixgroup objectclass: ipaobject ipaUniqueId: autogenerate add mepMappedAttr: cn: $uid gidNumber: $uidNumber description: User private group for $uid adding new entry "cn=UPG Template,cn=Templates,cn=Managed Entries,cn=etc,dc=example,dc=test" modify complete add objectclass: extensibleObject add cn: UPG Definition add originScope: cn=users,cn=accounts,dc=example,dc=test add originFilter: (&(objectclass=posixAccount)(!(description=__no_upg__))) add managedBase: cn=groups,cn=accounts,dc=example,dc=test add managedTemplate: cn=UPG Template,cn=Templates,cn=Managed Entries,cn=etc,dc=example,dc=test adding new entry "cn=UPG Definition,cn=Definitions,cn=Managed Entries,cn=etc,dc=example,dc=test" modify complete 2024-07-09T14:27:02Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:02Z DEBUG step duration: dirsrv __user_private_groups 0.01 sec 2024-07-09T14:27:02Z DEBUG [28/42]: configuring netgroups from hostgroups 2024-07-09T14:27:02Z DEBUG Starting external process 2024-07-09T14:27:02Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp_u5yftam', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:02Z DEBUG Process finished, return code=0 2024-07-09T14:27:02Z DEBUG stdout=add objectclass: mepTemplateEntry add cn: NGP HGP Template add mepRDNAttr: cn add mepStaticAttr: ipaUniqueId: autogenerate objectclass: ipanisnetgroup objectclass: ipaobject nisDomainName: example.test add mepMappedAttr: cn: $cn memberHost: $dn description: ipaNetgroup $cn adding new entry "cn=NGP HGP Template,cn=Templates,cn=Managed Entries,cn=etc,dc=example,dc=test" modify complete add objectclass: extensibleObject add cn: NGP Definition add originScope: cn=hostgroups,cn=accounts,dc=example,dc=test add originFilter: objectclass=ipahostgroup add managedBase: cn=ng,cn=alt,dc=example,dc=test add managedTemplate: cn=NGP HGP Template,cn=Templates,cn=Managed Entries,cn=etc,dc=example,dc=test adding new entry "cn=NGP Definition,cn=Definitions,cn=Managed Entries,cn=etc,dc=example,dc=test" modify complete 2024-07-09T14:27:02Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:02Z DEBUG step duration: dirsrv __host_nis_groups 0.27 sec 2024-07-09T14:27:02Z DEBUG [29/42]: creating default Sudo bind user 2024-07-09T14:27:02Z DEBUG Starting external process 2024-07-09T14:27:02Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp5uo8nsij', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:02Z DEBUG Process finished, return code=0 2024-07-09T14:27:02Z DEBUG stdout=add objectclass: account simplesecurityobject add uid: sudo add userPassword: XXXXXXXX add XXXXXXXXExpirationTime: 20380119031407Z add nsIdleTimeout: 0 adding new entry "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=test" modify complete 2024-07-09T14:27:02Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:02Z DEBUG step duration: dirsrv __add_sudo_binduser 0.28 sec 2024-07-09T14:27:02Z DEBUG [30/42]: creating default Auto Member layout 2024-07-09T14:27:02Z DEBUG Starting external process 2024-07-09T14:27:02Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpx93b3ptf', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:02Z DEBUG Process finished, return code=0 2024-07-09T14:27:02Z DEBUG stdout=add nsslapd-pluginConfigArea: cn=automember,cn=etc,dc=example,dc=test modifying entry "cn=Auto Membership Plugin,cn=plugins,cn=config" modify complete add objectClass: top nsContainer add cn: automember adding new entry "cn=automember,cn=etc,dc=example,dc=test" modify complete add objectclass: autoMemberDefinition add cn: Hostgroup add autoMemberScope: cn=computers,cn=accounts,dc=example,dc=test add autoMemberFilter: objectclass=ipaHost add autoMemberGroupingAttr: member:dn adding new entry "cn=Hostgroup,cn=automember,cn=etc,dc=example,dc=test" modify complete add objectclass: autoMemberDefinition add cn: Group add autoMemberScope: cn=users,cn=accounts,dc=example,dc=test add autoMemberFilter: objectclass=posixAccount add autoMemberGroupingAttr: member:dn adding new entry "cn=Group,cn=automember,cn=etc,dc=example,dc=test" modify complete 2024-07-09T14:27:02Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:02Z DEBUG step duration: dirsrv __add_automember_config 0.02 sec 2024-07-09T14:27:02Z DEBUG [31/42]: adding range check plugin 2024-07-09T14:27:02Z DEBUG Starting external process 2024-07-09T14:27:02Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpgqr0a9ol', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:02Z DEBUG Process finished, return code=0 2024-07-09T14:27:02Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: IPA Range-Check add nsslapd-pluginpath: libipa_range_check add nsslapd-plugininitfunc: ipa_range_check_init add nsslapd-plugintype: preoperation add nsslapd-pluginenabled: on add nsslapd-pluginid: ipa_range_check_version add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: Red Hat, Inc. add nsslapd-plugindescription: IPA Range-Check plugin add nsslapd-plugin-depends-on-type: database add nsslapd-basedn: dc=example,dc=test adding new entry "cn=IPA Range-Check,cn=plugins,cn=config" modify complete 2024-07-09T14:27:02Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:02Z DEBUG step duration: dirsrv __add_range_check_plugin 0.26 sec 2024-07-09T14:27:02Z DEBUG [32/42]: creating default HBAC rule allow_all 2024-07-09T14:27:02Z DEBUG Starting external process 2024-07-09T14:27:02Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpocr9n__t', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:03Z DEBUG Process finished, return code=0 2024-07-09T14:27:03Z DEBUG stdout=add objectclass: ipaassociation ipahbacrule add cn: allow_all add accessruletype: allow add usercategory: all add hostcategory: all add servicecategory: all add ipaenabledflag: TRUE add description: Allow all users to access any host from any host add ipauniqueid: autogenerate adding new entry "ipauniqueid=autogenerate,cn=hbac,dc=example,dc=test" modify complete add objectclass: ipaassociation ipahbacrule add cn: allow_systemd-user add accessruletype: allow add usercategory: all add hostcategory: all add memberService: cn=systemd-user,cn=hbacservices,cn=hbac,dc=example,dc=test add ipaenabledflag: TRUE add description: Allow pam_systemd to run user@.service to create a system user session add ipauniqueid: autogenerate adding new entry "ipauniqueid=autogenerate,cn=hbac,dc=example,dc=test" modify complete 2024-07-09T14:27:03Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:03Z DEBUG step duration: dirsrv add_hbac 0.27 sec 2024-07-09T14:27:03Z DEBUG [33/42]: adding entries for topology management 2024-07-09T14:27:03Z DEBUG Starting external process 2024-07-09T14:27:03Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpgxtoy1o7', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:03Z DEBUG Process finished, return code=0 2024-07-09T14:27:03Z DEBUG stdout=add objectclass: top nsContainer add cn: topology adding new entry "cn=topology,cn=ipa,cn=etc,dc=example,dc=test" modify complete add objectclass: top iparepltopoconf add ipaReplTopoConfRoot: dc=example,dc=test add nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof idnssoaserial entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount XXXXXXXXgraceusertime add nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount XXXXXXXXgraceusertime add nsds5ReplicaStripAttrs: modifiersName modifyTimestamp internalModifiersName internalModifyTimestamp add cn: domain adding new entry "cn=domain,cn=topology,cn=ipa,cn=etc,dc=example,dc=test" modify complete 2024-07-09T14:27:03Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:03Z DEBUG step duration: dirsrv __add_topology_entries 0.27 sec 2024-07-09T14:27:03Z DEBUG [34/42]: initializing group membership 2024-07-09T14:27:03Z DEBUG Starting external process 2024-07-09T14:27:03Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpprqa9x4a', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:03Z DEBUG Process finished, return code=0 2024-07-09T14:27:03Z DEBUG stdout=add objectClass: top extensibleObject add cn: IPA install add basedn: dc=example,dc=test add filter: (objectclass=*) add ttl: 10 adding new entry "cn=IPA install 1720535213, cn=memberof task, cn=tasks, cn=config" modify complete 2024-07-09T14:27:03Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:03Z DEBUG Waiting for memberof task to complete. 2024-07-09T14:27:03Z DEBUG step duration: dirsrv init_memberof 0.26 sec 2024-07-09T14:27:03Z DEBUG [35/42]: adding master entry 2024-07-09T14:27:03Z DEBUG Starting external process 2024-07-09T14:27:03Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpe1377e_5', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:04Z DEBUG Process finished, return code=0 2024-07-09T14:27:04Z DEBUG stdout=add objectclass: top nsContainer ipaReplTopoManagedServer ipaConfigObject ipaSupportedDomainLevelConfig add cn: ipa.example.test add ipaReplTopoManagedSuffix: dc=example,dc=test add ipaMinDomainLevel: 1 add ipaMaxDomainLevel: 1 adding new entry "cn=ipa.example.test,cn=masters,cn=ipa,cn=etc,dc=example,dc=test" modify complete 2024-07-09T14:27:04Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:04Z DEBUG step duration: dirsrv __add_master_entry 0.27 sec 2024-07-09T14:27:04Z DEBUG [36/42]: initializing domain level 2024-07-09T14:27:04Z DEBUG Starting external process 2024-07-09T14:27:04Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp0uo18nqo', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:04Z DEBUG Process finished, return code=0 2024-07-09T14:27:04Z DEBUG stdout=add objectClass: top nsContainer ipaDomainLevelConfig add ipaDomainLevel: 1 adding new entry "cn=Domain Level,cn=ipa,cn=etc,dc=example,dc=test" modify complete 2024-07-09T14:27:04Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:04Z DEBUG step duration: dirsrv __set_domain_level 0.01 sec 2024-07-09T14:27:04Z DEBUG [37/42]: configuring Posix uid/gid generation 2024-07-09T14:27:04Z DEBUG Starting external process 2024-07-09T14:27:04Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmph5kfp418', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:04Z DEBUG Process finished, return code=0 2024-07-09T14:27:04Z DEBUG stdout=add objectclass: top extensibleObject add cn: Posix IDs add dnaType: uidNumber gidNumber add dnaNextValue: 1469600000 add dnaMaxValue: 1469799999 add dnaMagicRegen: -1 add dnaFilter: (|(objectClass=posixAccount)(objectClass=posixGroup)(objectClass=ipaIDobject)) add dnaScope: dc=example,dc=test add dnaThreshold: 500 add dnaSharedCfgDN: cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=example,dc=test add dnaExcludeScope: cn=provisioning,dc=example,dc=test adding new entry "cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config" modify complete add objectclass: top extensibleObject add cn: Subordinate IDs add dnaType: ipasubuidnumber ipasubgidnumber add dnaNextValue: 2147483648 add dnaMaxValue: 4294836224 add dnaMagicRegen: -1 add dnaFilter: (objectClass=ipaSubordinateId) add dnaScope: dc=example,dc=test add dnaThreshold: 500 add dnaSharedCfgDN: cn=subordinate-ids,cn=dna,cn=ipa,cn=etc,dc=example,dc=test add dnaExcludeScope: cn=provisioning,dc=example,dc=test add dnaInterval: 65536 adding new entry "cn=Subordinate IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config" modify complete replace nsslapd-pluginEnabled: on modifying entry "cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config" modify complete 2024-07-09T14:27:04Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:04Z DEBUG step duration: dirsrv __config_uidgid_gen 0.28 sec 2024-07-09T14:27:04Z DEBUG [38/42]: adding replication acis 2024-07-09T14:27:04Z DEBUG Starting external process 2024-07-09T14:27:04Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmplkqsk2zd', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:04Z DEBUG Process finished, return code=0 2024-07-09T14:27:04Z DEBUG stdout=add aci: (targetattr = "cn || createtimestamp || description || entryusn || modifytimestamp || nsds50ruv || nsds5beginreplicarefresh || nsds5debugreplicatimeout || nsds5flags || nsds5replicaabortcleanruv || nsds5replicaautoreferral || nsds5replicabackoffmax || nsds5replicabackoffmin || nsds5replicabinddn || nsds5replicabindmethod || nsds5replicabusywaittime || nsds5replicachangecount || nsds5replicachangessentsincestartup || nsds5replicacleanruv || nsds5replicacleanruvnotified || nsds5replicacredentials || nsds5replicaenabled || nsds5replicahost || nsds5replicaid || nsds5replicalastinitend || nsds5replicalastinitstart || nsds5replicalastinitstatus || nsds5replicalastupdateend || nsds5replicalastupdatestart || nsds5replicalastupdatestatus || nsds5replicalegacyconsumer || nsds5replicaname || nsds5replicaport || nsds5replicaprotocoltimeout || nsds5replicapurgedelay || nsds5replicareferral || nsds5replicaroot || nsds5replicasessionpausetime || nsds5replicastripattrs || nsds5replicatedattributelist || nsds5replicatedattributelisttotal || nsds5replicatimeout || nsds5replicatombstonepurgeinterval || nsds5replicatransportinfo || nsds5replicatype || nsds5replicaupdateinprogress || nsds5replicaupdateschedule || nsds5task || nsds7directoryreplicasubtree || nsds7dirsynccookie || nsds7newwingroupsyncenabled || nsds7newwinusersyncenabled || nsds7windowsdomain || nsds7windowsreplicasubtree || nsruvreplicalastmodified || nsstate || objectclass || onewaysync || winsyncdirectoryfilter || winsyncinterval || winsyncmoveaction || winsyncsubtreepair || winsyncwindowsfilter")(targetfilter = "(|(objectclass=nsds5Replica)(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement)(objectClass=nsMappingTree))")(version 3.0;acl "permission:Read Replication Agreements";allow (compare,read,search) groupdn = "ldap:///cn=Read Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "cn=mapping tree,cn=config" modify complete add aci: (targetattr = "*")(version 3.0;acl "permission:Add Replication Agreements";allow (add) groupdn = "ldap:///cn=Add Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "cn=mapping tree,cn=config" modify complete add aci: (targetattr = "*")(targetfilter="(|(objectclass=nsds5Replica)(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement)(objectClass=nsMappingTree))")(version 3.0; acl "permission:Modify Replication Agreements"; allow (read, write, search) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "cn=mapping tree,cn=config" modify complete add aci: (targetattr = "*")(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0;acl "permission:Remove Replication Agreements";allow (delete) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "cn=mapping tree,cn=config" modify complete add aci: (targetattr = "dnaNextRange || dnaNextValue || dnaMaxValue")(version 3.0;acl "permission:Modify DNA Range";allow (write) groupdn = "ldap:///cn=Modify DNA Range,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config" modify complete add aci: (targetattr = "nsslapd-readonly")(version 3.0; acl "Allow marking the database readonly"; allow (write) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "cn=userRoot,cn=ldbm database,cn=plugins,cn=config" modify complete add aci: (targetattr = "*")(version 3.0; acl "Run tasks after replica re-initialization"; allow (add) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,dc=example,dc=test";) modifying entry "cn=tasks,cn=config" modify complete 2024-07-09T14:27:04Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:04Z DEBUG step duration: dirsrv __add_replication_acis 0.28 sec 2024-07-09T14:27:04Z DEBUG [39/42]: activating sidgen plugin 2024-07-09T14:27:04Z DEBUG Starting external process 2024-07-09T14:27:04Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp5xhdz876', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:04Z DEBUG Process finished, return code=0 2024-07-09T14:27:04Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: IPA SIDGEN add nsslapd-pluginpath: libipa_sidgen add nsslapd-plugininitfunc: ipa_sidgen_init add nsslapd-plugintype: postoperation add nsslapd-pluginenabled: on add nsslapd-pluginid: ipa_sidgen_postop add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: Red Hat, Inc. add nsslapd-plugindescription: IPA SIDGEN post operation add nsslapd-plugin-depends-on-type: database add nsslapd-basedn: dc=example,dc=test adding new entry "cn=IPA SIDGEN,cn=plugins,cn=config" modify complete 2024-07-09T14:27:04Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:04Z DEBUG step duration: dirsrv _add_sidgen_plugin 0.01 sec 2024-07-09T14:27:04Z DEBUG [40/42]: activating extdom plugin 2024-07-09T14:27:04Z DEBUG Starting external process 2024-07-09T14:27:04Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmpc7v0hqjy', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:04Z DEBUG Process finished, return code=0 2024-07-09T14:27:04Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: ipa_extdom_extop add nsslapd-pluginpath: libipa_extdom_extop add nsslapd-plugininitfunc: ipa_extdom_init add nsslapd-plugintype: extendedop add nsslapd-pluginenabled: on add nsslapd-pluginid: ipa_extdom_extop add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: RedHat add nsslapd-plugindescription: Support resolving IDs in trusted domains to names and back add nsslapd-plugin-depends-on-type: database add nsslapd-basedn: dc=example,dc=test adding new entry "cn=ipa_extdom_extop,cn=plugins,cn=config" modify complete 2024-07-09T14:27:04Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:04Z DEBUG step duration: dirsrv _add_extdom_plugin 0.02 sec 2024-07-09T14:27:04Z DEBUG [41/42]: configuring directory to start on boot 2024-07-09T14:27:04Z DEBUG Starting external process 2024-07-09T14:27:04Z DEBUG args=['/bin/systemctl', 'is-enabled', 'dirsrv@EXAMPLE-TEST.service'] 2024-07-09T14:27:04Z DEBUG Process finished, return code=0 2024-07-09T14:27:04Z DEBUG stdout=enabled 2024-07-09T14:27:04Z DEBUG stderr= 2024-07-09T14:27:04Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:04Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:04Z DEBUG Starting external process 2024-07-09T14:27:04Z DEBUG args=['/bin/systemctl', 'disable', 'dirsrv@EXAMPLE-TEST.service'] 2024-07-09T14:27:04Z DEBUG Process finished, return code=0 2024-07-09T14:27:04Z DEBUG stdout= 2024-07-09T14:27:04Z DEBUG stderr=Removed '/etc/systemd/system/multi-user.target.wants/dirsrv@EXAMPLE-TEST.service'. Removed '/etc/systemd/system/dirsrv.target.wants/dirsrv@EXAMPLE-TEST.service'. 2024-07-09T14:27:04Z DEBUG step duration: dirsrv __enable 0.24 sec 2024-07-09T14:27:04Z DEBUG [42/42]: restarting directory server 2024-07-09T14:27:04Z DEBUG Destroyed connection context.ldap2_139943596805824 2024-07-09T14:27:04Z DEBUG Starting external process 2024-07-09T14:27:04Z DEBUG args=['/bin/systemctl', '--system', 'daemon-reload'] 2024-07-09T14:27:05Z DEBUG Process finished, return code=0 2024-07-09T14:27:05Z DEBUG stdout= 2024-07-09T14:27:05Z DEBUG stderr= 2024-07-09T14:27:05Z DEBUG Starting external process 2024-07-09T14:27:05Z DEBUG args=['/bin/systemctl', 'restart', 'dirsrv@EXAMPLE-TEST.service'] 2024-07-09T14:27:05Z DEBUG Process finished, return code=0 2024-07-09T14:27:05Z DEBUG stdout= 2024-07-09T14:27:05Z DEBUG stderr= 2024-07-09T14:27:05Z DEBUG Starting external process 2024-07-09T14:27:05Z DEBUG args=['/bin/systemctl', 'is-active', 'dirsrv@EXAMPLE-TEST.service'] 2024-07-09T14:27:05Z DEBUG Process finished, return code=0 2024-07-09T14:27:05Z DEBUG stdout=active 2024-07-09T14:27:05Z DEBUG stderr= 2024-07-09T14:27:05Z DEBUG wait_for_open_ports: localhost [389] timeout 120 2024-07-09T14:27:05Z DEBUG waiting for port: 389 2024-07-09T14:27:05Z DEBUG SUCCESS: port: 389 2024-07-09T14:27:05Z DEBUG Restart of dirsrv@EXAMPLE-TEST.service complete 2024-07-09T14:27:05Z DEBUG Starting external process 2024-07-09T14:27:05Z DEBUG args=['/bin/systemctl', 'is-active', 'dirsrv@EXAMPLE-TEST.service'] 2024-07-09T14:27:05Z DEBUG Process finished, return code=0 2024-07-09T14:27:05Z DEBUG stdout=active 2024-07-09T14:27:05Z DEBUG stderr= 2024-07-09T14:27:05Z DEBUG Created connection context.ldap2_139943596805824 2024-07-09T14:27:05Z DEBUG step duration: dirsrv __restart_instance 1.01 sec 2024-07-09T14:27:05Z DEBUG Done configuring directory server (dirsrv). 2024-07-09T14:27:05Z DEBUG service duration: dirsrv 12.88 sec 2024-07-09T14:27:05Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:05Z DEBUG Starting external process 2024-07-09T14:27:05Z DEBUG args=['/bin/keyctl', 'get_persistent', '@s', '0'] 2024-07-09T14:27:05Z DEBUG Process finished, return code=0 2024-07-09T14:27:05Z DEBUG stdout=451400197 2024-07-09T14:27:05Z DEBUG stderr= 2024-07-09T14:27:05Z DEBUG Enabling persistent keyring CCACHE 2024-07-09T14:27:05Z DEBUG Starting external process 2024-07-09T14:27:05Z DEBUG args=['/bin/systemctl', 'is-active', 'krb5kdc.service'] 2024-07-09T14:27:05Z DEBUG Process finished, return code=3 2024-07-09T14:27:05Z DEBUG stdout=inactive 2024-07-09T14:27:05Z DEBUG stderr= 2024-07-09T14:27:05Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:05Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:05Z DEBUG Starting external process 2024-07-09T14:27:05Z DEBUG args=['/bin/systemctl', 'stop', 'krb5kdc.service'] 2024-07-09T14:27:05Z DEBUG Process finished, return code=0 2024-07-09T14:27:05Z DEBUG stdout= 2024-07-09T14:27:05Z DEBUG stderr= 2024-07-09T14:27:05Z DEBUG Stop of krb5kdc.service complete 2024-07-09T14:27:05Z DEBUG Configuring Kerberos KDC (krb5kdc) 2024-07-09T14:27:05Z DEBUG [1/11]: adding kerberos container to the directory 2024-07-09T14:27:05Z DEBUG Starting external process 2024-07-09T14:27:05Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp7270g590', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:06Z DEBUG Process finished, return code=0 2024-07-09T14:27:06Z DEBUG stdout=add objectClass: krbContainer top add cn: kerberos adding new entry "cn=kerberos,dc=example,dc=test" modify complete add cn: EXAMPLE.TEST add objectClass: top krbrealmcontainer krbticketpolicyaux add krbSubTrees: dc=example,dc=test add krbSearchScope: 2 add krbSupportedEncSaltTypes: aes256-cts:normal aes256-cts:special aes128-cts:normal aes128-cts:special aes128-sha2:normal aes128-sha2:special aes256-sha2:normal aes256-sha2:special camellia128-cts-cmac:normal camellia128-cts-cmac:special camellia256-cts-cmac:normal camellia256-cts-cmac:special add krbMaxTicketLife: 86400 add krbMaxRenewableAge: 604800 add krbDefaultEncSaltTypes: aes256-sha2:special aes128-sha2:special aes256-cts:special aes128-cts:special adding new entry "cn=EXAMPLE.TEST,cn=kerberos,dc=example,dc=test" modify complete add objectClass: top nsContainer krbPwdPolicy ipaPwdPolicy add krbMinPwdLife: 3600 add krbPwdMinDiffChars: 0 add krbPwdMinLength: 8 add krbPwdHistoryLength: 0 add krbMaxPwdLife: 7776000 add krbPwdMaxFailure: 6 add krbPwdFailureCountInterval: 60 add krbPwdLockoutDuration: 600 add passwordGraceLimit: -1 adding new entry "cn=global_policy,cn=EXAMPLE.TEST,cn=kerberos,dc=example,dc=test" modify complete 2024-07-09T14:27:06Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:06Z DEBUG step duration: krb5kdc __add_krb_container 0.27 sec 2024-07-09T14:27:06Z DEBUG [2/11]: configuring KDC 2024-07-09T14:27:06Z DEBUG Backing up system configuration file '/var/kerberos/krb5kdc/kdc.conf' 2024-07-09T14:27:06Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2024-07-09T14:27:06Z DEBUG Backing up system configuration file '/etc/krb5.conf' 2024-07-09T14:27:06Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2024-07-09T14:27:06Z DEBUG Backing up system configuration file '/etc/krb5.conf.d/freeipa-server' 2024-07-09T14:27:06Z DEBUG -> Not backing up - '/etc/krb5.conf.d/freeipa-server' doesn't exist 2024-07-09T14:27:06Z DEBUG Backing up system configuration file '/etc/krb5.conf.d/freeipa' 2024-07-09T14:27:06Z DEBUG -> Not backing up - '/etc/krb5.conf.d/freeipa' doesn't exist 2024-07-09T14:27:06Z DEBUG Backing up system configuration file '/usr/share/ipa/html/krb5.ini' 2024-07-09T14:27:06Z DEBUG -> Not backing up - '/usr/share/ipa/html/krb5.ini' doesn't exist 2024-07-09T14:27:06Z DEBUG Backing up system configuration file '/usr/share/ipa/html/krb.con' 2024-07-09T14:27:06Z DEBUG -> Not backing up - '/usr/share/ipa/html/krb.con' doesn't exist 2024-07-09T14:27:06Z DEBUG Backing up system configuration file '/usr/share/ipa/html/krbrealm.con' 2024-07-09T14:27:06Z DEBUG -> Not backing up - '/usr/share/ipa/html/krbrealm.con' doesn't exist 2024-07-09T14:27:06Z DEBUG Starting external process 2024-07-09T14:27:06Z DEBUG args=['/usr/bin/klist', '-V'] 2024-07-09T14:27:06Z DEBUG Process finished, return code=0 2024-07-09T14:27:06Z DEBUG stdout=Kerberos 5 version 1.21.2 2024-07-09T14:27:06Z DEBUG stderr= 2024-07-09T14:27:06Z DEBUG Backing up system configuration file '/etc/sysconfig/krb5kdc' 2024-07-09T14:27:06Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2024-07-09T14:27:06Z DEBUG Starting external process 2024-07-09T14:27:06Z DEBUG args=['/usr/sbin/selinuxenabled'] 2024-07-09T14:27:06Z DEBUG Process finished, return code=0 2024-07-09T14:27:06Z DEBUG stdout= 2024-07-09T14:27:06Z DEBUG stderr= 2024-07-09T14:27:06Z DEBUG Starting external process 2024-07-09T14:27:06Z DEBUG args=['/sbin/restorecon', '/etc/sysconfig/krb5kdc'] 2024-07-09T14:27:06Z DEBUG Process finished, return code=0 2024-07-09T14:27:06Z DEBUG stdout= 2024-07-09T14:27:06Z DEBUG stderr= 2024-07-09T14:27:06Z DEBUG step duration: krb5kdc __configure_instance 0.02 sec 2024-07-09T14:27:06Z DEBUG [3/11]: initialize kerberos container 2024-07-09T14:27:06Z DEBUG Starting external process 2024-07-09T14:27:06Z DEBUG args=['kdb5_util', 'create', '-s', '-r', 'EXAMPLE.TEST', '-x', 'ipa-setup-override-restrictions'] 2024-07-09T14:27:06Z DEBUG Process finished, return code=0 2024-07-09T14:27:06Z DEBUG stdout=Initializing database '/var/kerberos/krb5kdc/principal' for realm 'EXAMPLE.TEST', master key name 'K/M@EXAMPLE.TEST' You will be prompted for the database Master Password. It is important that you NOT FORGET this password. Enter KDC database master key: Re-enter KDC database master key to verify: 2024-07-09T14:27:06Z DEBUG stderr= 2024-07-09T14:27:06Z DEBUG step duration: krb5kdc __init_ipa_kdb 0.40 sec 2024-07-09T14:27:06Z DEBUG [4/11]: adding default ACIs 2024-07-09T14:27:06Z DEBUG Starting external process 2024-07-09T14:27:06Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp3yc_j1ot', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:06Z DEBUG Process finished, return code=0 2024-07-09T14:27:06Z DEBUG stdout=add aci: (targetattr = "userpassword || krbprincipalkey || sambalmpassword || sambantpassword")(version 3.0; acl "selfservice:Self can write own password"; allow (write) userdn="ldap:///self";) modifying entry "dc=example,dc=test" modify complete add aci: (targetattr = "givenname || sn || cn || displayname || title || initials || loginshell || gecos || homephone || mobile || pager || facsimiletelephonenumber || telephonenumber || street || roomnumber || l || st || postalcode || manager || secretary || description || carlicense || labeleduri || inetuserhttpurl || seealso || employeetype || businesscategory || ou")(version 3.0;acl "selfservice:User Self service";allow (write) userdn = "ldap:///self";) (targetattr = "ipasshpubkey")(version 3.0;acl "selfservice:Users can manage their own SSH public keys";allow (write) userdn = "ldap:///self";) (targetattr = "usercertificate")(version 3.0;acl "selfservice:Users can manage their own X.509 certificates";allow (write) userdn = "ldap:///self";) modifying entry "dc=example,dc=test" modify complete add aci: (targetfilter = "(objectClass=ipaGuiConfig)")(targetattr != "aci")(version 3.0;acl "Admins can change GUI config"; allow (read, search, compare, write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=example,dc=test";) modifying entry "cn=etc,dc=example,dc=test" modify complete add aci: (targetfilter = "(|(objectClass=ipaConfigObject)(dnahostname=*))")(version 3.0;acl "Admins can change GUI config"; allow (delete) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=example,dc=test";) modifying entry "cn=ipa,cn=etc,dc=example,dc=test" modify complete add aci: (targetattr = "krbMaxPwdLife || krbMinPwdLife || krbPwdMinDiffChars || krbPwdMinLength || krbPwdHistoryLength")(version 3.0;acl "Admins can write password policy"; allow (write) groupdn="ldap:///cn=admins,cn=groups,cn=accounts,dc=example,dc=test";) (targetattr = "aci")(version 3.0;acl "Admins can manage delegations"; allow (write, delete) groupdn="ldap:///cn=admins,cn=groups,cn=accounts,dc=example,dc=test";) (targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Users allowed to retrieve keytab keys"; allow(read) userattr="ipaAllowedToPerform;read_keys#USERDN";) (targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Groups allowed to retrieve keytab keys"; allow(read) userattr="ipaAllowedToPerform;read_keys#GROUPDN";) (targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Users allowed to create keytab keys"; allow(write) userattr="ipaAllowedToPerform;write_keys#USERDN";) (targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Groups allowed to create keytab keys"; allow(write) userattr="ipaAllowedToPerform;write_keys#GROUPDN";) (targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Entities are allowed to rekey themselves"; allow(write) userdn="ldap:///self";) (targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Admins are allowed to rekey any entity"; allow(write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=example,dc=test";) (targetfilter="(|(objectclass=ipaHost)(objectclass=ipaService))")(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Entities are allowed to rekey managed entries"; allow(write) userattr="managedby#USERDN";) modifying entry "cn=accounts,dc=example,dc=test" modify complete add aci: (targetattr = "krbPrincipalKey || krbLastPwdChange")(target = "ldap:///krbprincipalname=*,cn=services,cn=accounts,dc=example,dc=test")(version 3.0;acl "Admins can manage service keytab";allow (write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=example,dc=test";) modifying entry "cn=services,cn=accounts,dc=example,dc=test" modify complete add aci: (targetattr="userCertificate || krbPrincipalKey")(version 3.0; acl "Hosts can manage service Certificates and kerberos keys"; allow(write) userattr = "parent[0,1].managedby#USERDN";) modifying entry "cn=services,cn=accounts,dc=example,dc=test" modify complete add aci: (targetattr="usercertificate || krblastpwdchange || description || l || nshostlocation || nshardwareplatform || nsosversion")(version 3.0; acl "Hosts can modify their own certs and keytabs"; allow(write) userdn = "ldap:///self";) (targetattr="ipasshpubkey")(version 3.0; acl "Hosts can modify their own SSH public keys"; allow(write) userdn = "ldap:///self";) modifying entry "cn=computers,cn=accounts,dc=example,dc=test" modify complete add aci: (targetattr="userCertificate || krbPrincipalKey")(version 3.0; acl "Hosts can manage other host Certificates and kerberos keys"; allow(write) userattr = "parent[0,1].managedby#USERDN";) (targetattr="ipasshpubkey")(version 3.0; acl "Hosts can manage other host SSH public keys"; allow(write) userattr = "parent[0,1].managedby#USERDN";) modifying entry "cn=computers,cn=accounts,dc=example,dc=test" modify complete add aci: (targetattr = "krbPrincipalKey || krbLastPwdChange")(target = "ldap:///fqdn=*,cn=computers,cn=accounts,dc=example,dc=test")(version 3.0;acl "Admins can manage host keytab";allow (write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=example,dc=test";) modifying entry "cn=computers,cn=accounts,dc=example,dc=test" modify complete add aci: (targetattr = "member")(targetfilter = "(objectclass=ipaUserGroup)")(version 3.0; acl "Allow member managers to modify members of user groups"; allow (write) userattr = "memberManager#USERDN" or userattr = "memberManager#GROUPDN";) modifying entry "cn=groups,cn=accounts,dc=example,dc=test" modify complete add aci: (targetattr = "member")(targetfilter = "(objectclass=ipaHostGroup)")(version 3.0; acl "Allow member managers to modify members of host groups"; allow (write) userattr = "memberManager#USERDN" or userattr = "memberManager#GROUPDN";) modifying entry "cn=hostgroups,cn=accounts,dc=example,dc=test" modify complete add aci: (targetattr="userPassword || krbPrincipalKey")(version 3.0; acl "Search existence of password and kerberos keys"; allow(search) userdn = "ldap:///all";) modifying entry "cn=accounts,dc=example,dc=test" modify complete add aci: (targetfilter = "(objectClass=ipaToken)")(targetattrs = "objectclass || description || managedBy || ipatokenUniqueID || ipatokenDisabled || ipatokenNotBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSerial || ipatokenOwner")(version 3.0; acl "Users/managers can read basic token info"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN" or userattr = "managedBy#USERDN";) (targetfilter = "(objectClass=ipatokenTOTP)")(targetattrs = "ipatokenOTPalgorithm || ipatokenOTPdigits || ipatokenTOTPtimeStep")(version 3.0; acl "Users/managers can see TOTP details"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN" or userattr = "managedBy#USERDN";) (targetfilter = "(objectClass=ipatokenHOTP)")(targetattrs = "ipatokenOTPalgorithm || ipatokenOTPdigits")(version 3.0; acl "Users/managers can see HOTP details"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN" or userattr = "managedBy#USERDN";) (targetfilter = "(objectClass=ipaToken)")(targetattrs = "description || ipatokenDisabled || ipatokenNotBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSerial")(version 3.0; acl "Managers can write basic token info"; allow (write) userattr = "managedBy#USERDN";) (targetfilter = "(objectClass=ipaToken)")(version 3.0; acl "Managers can delete tokens"; allow (delete) userattr = "managedBy#USERDN";) (target = "ldap:///ipatokenuniqueid=*,cn=otp,dc=example,dc=test")(targetfilter = "(objectClass=ipaToken)")(version 3.0; acl "Users can create self-managed tokens"; allow (add) userattr = "ipatokenOwner#SELFDN" and userattr = "managedBy#SELFDN";) modifying entry "dc=example,dc=test" modify complete 2024-07-09T14:27:06Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:06Z DEBUG step duration: krb5kdc __add_default_acis 0.04 sec 2024-07-09T14:27:06Z DEBUG [5/11]: creating a keytab for the directory 2024-07-09T14:27:06Z DEBUG Starting external process 2024-07-09T14:27:06Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey ldap/ipa.example.test@EXAMPLE.TEST', '-x', 'ipa-setup-override-restrictions'] 2024-07-09T14:27:07Z DEBUG Process finished, return code=0 2024-07-09T14:27:07Z DEBUG stdout=Authenticating as principal root/admin@EXAMPLE.TEST with password. Principal "ldap/ipa.example.test@EXAMPLE.TEST" created. 2024-07-09T14:27:07Z DEBUG stderr=No policy specified for ldap/ipa.example.test@EXAMPLE.TEST; defaulting to no policy 2024-07-09T14:27:07Z DEBUG flushing ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket from SchemaCache 2024-07-09T14:27:07Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket conn= 2024-07-09T14:27:07Z DEBUG Backing up system configuration file '/etc/dirsrv/ds.keytab' 2024-07-09T14:27:07Z DEBUG -> Not backing up - '/etc/dirsrv/ds.keytab' doesn't exist 2024-07-09T14:27:07Z DEBUG Starting external process 2024-07-09T14:27:07Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'ktadd -k /etc/dirsrv/ds.keytab ldap/ipa.example.test@EXAMPLE.TEST', '-x', 'ipa-setup-override-restrictions'] 2024-07-09T14:27:07Z DEBUG Process finished, return code=0 2024-07-09T14:27:07Z DEBUG stdout=Authenticating as principal root/admin@EXAMPLE.TEST with password. Entry for principal ldap/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/dirsrv/ds.keytab. Entry for principal ldap/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/dirsrv/ds.keytab. Entry for principal ldap/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type aes128-cts-hmac-sha256-128 added to keytab WRFILE:/etc/dirsrv/ds.keytab. Entry for principal ldap/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type aes256-cts-hmac-sha384-192 added to keytab WRFILE:/etc/dirsrv/ds.keytab. Entry for principal ldap/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/dirsrv/ds.keytab. Entry for principal ldap/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/dirsrv/ds.keytab. 2024-07-09T14:27:07Z DEBUG stderr= 2024-07-09T14:27:07Z DEBUG step duration: krb5kdc __create_ds_keytab 0.82 sec 2024-07-09T14:27:07Z DEBUG [6/11]: creating a keytab for the machine 2024-07-09T14:27:07Z DEBUG Starting external process 2024-07-09T14:27:07Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey host/ipa.example.test@EXAMPLE.TEST', '-x', 'ipa-setup-override-restrictions'] 2024-07-09T14:27:07Z DEBUG Process finished, return code=0 2024-07-09T14:27:07Z DEBUG stdout=Authenticating as principal root/admin@EXAMPLE.TEST with password. Principal "host/ipa.example.test@EXAMPLE.TEST" created. 2024-07-09T14:27:07Z DEBUG stderr=No policy specified for host/ipa.example.test@EXAMPLE.TEST; defaulting to no policy 2024-07-09T14:27:07Z DEBUG Backing up system configuration file '/etc/krb5.keytab' 2024-07-09T14:27:07Z DEBUG -> Not backing up - '/etc/krb5.keytab' doesn't exist 2024-07-09T14:27:07Z DEBUG Starting external process 2024-07-09T14:27:07Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'ktadd -k /etc/krb5.keytab host/ipa.example.test@EXAMPLE.TEST', '-x', 'ipa-setup-override-restrictions'] 2024-07-09T14:27:08Z DEBUG Process finished, return code=0 2024-07-09T14:27:08Z DEBUG stdout=Authenticating as principal root/admin@EXAMPLE.TEST with password. Entry for principal host/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab. Entry for principal host/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab. Entry for principal host/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type aes128-cts-hmac-sha256-128 added to keytab WRFILE:/etc/krb5.keytab. Entry for principal host/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type aes256-cts-hmac-sha384-192 added to keytab WRFILE:/etc/krb5.keytab. Entry for principal host/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/krb5.keytab. Entry for principal host/ipa.example.test@EXAMPLE.TEST with kvno 2, encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/krb5.keytab. 2024-07-09T14:27:08Z DEBUG stderr= 2024-07-09T14:27:08Z DEBUG importing all plugin modules in ipaserver.plugins... 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.aci 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.automember 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.automount 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.baseldap 2024-07-09T14:27:08Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.baseuser 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.batch 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.ca 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.caacl 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.cert 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.certmap 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.certprofile 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.config 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.delegation 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.dns 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.dnsserver 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.dogtag 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.domainlevel 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.group 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.hbac 2024-07-09T14:27:08Z DEBUG ipaserver.plugins.hbac is not a valid plugin module 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.hbacrule 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.hbacsvc 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.hbactest 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.host 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.hostgroup 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.idp 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.idrange 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.idviews 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.internal 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.join 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.ldap2 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.location 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.migration 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.misc 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.netgroup 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.otp 2024-07-09T14:27:08Z DEBUG ipaserver.plugins.otp is not a valid plugin module 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.otpconfig 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.otptoken 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.passkeyconfig 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.passwd 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.permission 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.ping 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.pkinit 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.privilege 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.pwpolicy 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.rabase 2024-07-09T14:27:08Z DEBUG ipaserver.plugins.rabase is not a valid plugin module 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.radiusproxy 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.realmdomains 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.role 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.schema 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.selfservice 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.server 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.serverrole 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.serverroles 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.service 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.servicedelegation 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.session 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.stageuser 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.subid 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.sudo 2024-07-09T14:27:08Z DEBUG ipaserver.plugins.sudo is not a valid plugin module 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.sudocmd 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.sudorule 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.topology 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.trust 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.user 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.vault 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.virtual 2024-07-09T14:27:08Z DEBUG ipaserver.plugins.virtual is not a valid plugin module 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.whoami 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.plugins.xmlserver 2024-07-09T14:27:08Z DEBUG importing all plugin modules in ipaserver.install.plugins... 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.adtrust 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.dns 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.fix_kra_people_entry 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_changelog_maxage 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_nis 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_pwpolicy 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_referint 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_services 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_unhashed_password 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness 2024-07-09T14:27:08Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt 2024-07-09T14:27:08Z DEBUG Created connection context.ldap2_139943565641040 2024-07-09T14:27:08Z DEBUG raw: idrange_show('EXAMPLE.TEST_id_range', version='2.254') 2024-07-09T14:27:08Z DEBUG idrange_show('EXAMPLE.TEST_id_range', rights=False, all=False, raw=False, version='2.254') 2024-07-09T14:27:08Z DEBUG flushing ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket from SchemaCache 2024-07-09T14:27:08Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket conn= 2024-07-09T14:27:08Z DEBUG Parsing update file '/usr/share/ipa/updates/20-ipaservers_hostgroup.update' 2024-07-09T14:27:08Z DEBUG Updating existing entry: cn=ipaservers,cn=hostgroups,cn=accounts,dc=example,dc=test 2024-07-09T14:27:08Z DEBUG --------------------------------------------- 2024-07-09T14:27:08Z DEBUG Initial value 2024-07-09T14:27:08Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=example,dc=test 2024-07-09T14:27:08Z DEBUG objectClass: 2024-07-09T14:27:08Z DEBUG top 2024-07-09T14:27:09Z DEBUG groupOfNames 2024-07-09T14:27:09Z DEBUG nestedGroup 2024-07-09T14:27:09Z DEBUG ipaobject 2024-07-09T14:27:09Z DEBUG ipahostgroup 2024-07-09T14:27:09Z DEBUG description: 2024-07-09T14:27:09Z DEBUG IPA server hosts 2024-07-09T14:27:09Z DEBUG cn: 2024-07-09T14:27:09Z DEBUG ipaservers 2024-07-09T14:27:09Z DEBUG ipaUniqueID: 2024-07-09T14:27:09Z DEBUG 4ec6e1bc-3dff-11ef-acbf-5254009adbd3 2024-07-09T14:27:09Z DEBUG --------------------------------------------- 2024-07-09T14:27:09Z DEBUG Final value after applying updates 2024-07-09T14:27:09Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=example,dc=test 2024-07-09T14:27:09Z DEBUG objectClass: 2024-07-09T14:27:09Z DEBUG top 2024-07-09T14:27:09Z DEBUG groupOfNames 2024-07-09T14:27:09Z DEBUG nestedGroup 2024-07-09T14:27:09Z DEBUG ipaobject 2024-07-09T14:27:09Z DEBUG ipahostgroup 2024-07-09T14:27:09Z DEBUG description: 2024-07-09T14:27:09Z DEBUG IPA server hosts 2024-07-09T14:27:09Z DEBUG cn: 2024-07-09T14:27:09Z DEBUG ipaservers 2024-07-09T14:27:09Z DEBUG ipaUniqueID: 2024-07-09T14:27:09Z DEBUG 4ec6e1bc-3dff-11ef-acbf-5254009adbd3 2024-07-09T14:27:09Z DEBUG [] 2024-07-09T14:27:09Z DEBUG Updated 0 2024-07-09T14:27:09Z DEBUG Done 2024-07-09T14:27:09Z DEBUG Updating existing entry: cn=ipaservers,cn=hostgroups,cn=accounts,dc=example,dc=test 2024-07-09T14:27:09Z DEBUG --------------------------------------------- 2024-07-09T14:27:09Z DEBUG Initial value 2024-07-09T14:27:09Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=example,dc=test 2024-07-09T14:27:09Z DEBUG objectClass: 2024-07-09T14:27:09Z DEBUG top 2024-07-09T14:27:09Z DEBUG groupOfNames 2024-07-09T14:27:09Z DEBUG nestedGroup 2024-07-09T14:27:09Z DEBUG ipaobject 2024-07-09T14:27:09Z DEBUG ipahostgroup 2024-07-09T14:27:09Z DEBUG description: 2024-07-09T14:27:09Z DEBUG IPA server hosts 2024-07-09T14:27:09Z DEBUG cn: 2024-07-09T14:27:09Z DEBUG ipaservers 2024-07-09T14:27:09Z DEBUG ipaUniqueID: 2024-07-09T14:27:09Z DEBUG 4ec6e1bc-3dff-11ef-acbf-5254009adbd3 2024-07-09T14:27:09Z DEBUG add: 'fqdn=ipa.example.test,cn=computers,cn=accounts,dc=example,dc=test' to member, current value [] 2024-07-09T14:27:09Z DEBUG add: updated value ['fqdn=ipa.example.test,cn=computers,cn=accounts,dc=example,dc=test'] 2024-07-09T14:27:09Z DEBUG --------------------------------------------- 2024-07-09T14:27:09Z DEBUG Final value after applying updates 2024-07-09T14:27:09Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=example,dc=test 2024-07-09T14:27:09Z DEBUG objectClass: 2024-07-09T14:27:09Z DEBUG top 2024-07-09T14:27:09Z DEBUG groupOfNames 2024-07-09T14:27:09Z DEBUG nestedGroup 2024-07-09T14:27:09Z DEBUG ipaobject 2024-07-09T14:27:09Z DEBUG ipahostgroup 2024-07-09T14:27:09Z DEBUG description: 2024-07-09T14:27:09Z DEBUG IPA server hosts 2024-07-09T14:27:09Z DEBUG cn: 2024-07-09T14:27:09Z DEBUG ipaservers 2024-07-09T14:27:09Z DEBUG ipaUniqueID: 2024-07-09T14:27:09Z DEBUG 4ec6e1bc-3dff-11ef-acbf-5254009adbd3 2024-07-09T14:27:09Z DEBUG member: 2024-07-09T14:27:09Z DEBUG fqdn=ipa.example.test,cn=computers,cn=accounts,dc=example,dc=test 2024-07-09T14:27:09Z DEBUG [(2, 'member', ['fqdn=ipa.example.test,cn=computers,cn=accounts,dc=example,dc=test'])] 2024-07-09T14:27:09Z DEBUG Updated 1 2024-07-09T14:27:09Z DEBUG update_entry modlist [(2, 'member', [b'fqdn=ipa.example.test,cn=computers,cn=accounts,dc=example,dc=test'])] 2024-07-09T14:27:09Z DEBUG Done 2024-07-09T14:27:09Z DEBUG LDAP update duration: /usr/share/ipa/updates/20-ipaservers_hostgroup.update 0.011 sec 2024-07-09T14:27:09Z DEBUG Destroyed connection context.ldap2_139943565641040 2024-07-09T14:27:09Z DEBUG step duration: krb5kdc __create_host_keytab 1.51 sec 2024-07-09T14:27:09Z DEBUG [7/11]: adding the password extension to the directory 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp_uep18uq', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=0 2024-07-09T14:27:09Z DEBUG stdout=add objectclass: top nsSlapdPlugin extensibleObject add cn: ipa_pwd_extop add nsslapd-pluginpath: libipa_pwd_extop add nsslapd-plugininitfunc: ipapwd_init add nsslapd-plugintype: extendedop add nsslapd-pluginbetxn: on add nsslapd-pluginenabled: on add nsslapd-pluginid: ipa_pwd_extop add nsslapd-pluginversion: 1.0 add nsslapd-pluginvendor: RedHat add nsslapd-plugindescription: Support saving passwords in multiple formats for different consumers (krb5, samba, freeradius, etc.) add nsslapd-plugin-depends-on-type: database add nsslapd-realmTree: dc=example,dc=test adding new entry "cn=ipa_pwd_extop,cn=plugins,cn=config" modify complete 2024-07-09T14:27:09Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:09Z DEBUG step duration: krb5kdc __add_pwd_extop_module 0.02 sec 2024-07-09T14:27:09Z DEBUG [8/11]: creating anonymous principal 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey WELLKNOWN/ANONYMOUS@EXAMPLE.TEST', '-x', 'ipa-setup-override-restrictions'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=0 2024-07-09T14:27:09Z DEBUG stdout=Authenticating as principal root/admin@EXAMPLE.TEST with password. Principal "WELLKNOWN/ANONYMOUS@EXAMPLE.TEST" created. 2024-07-09T14:27:09Z DEBUG stderr=No policy specified for WELLKNOWN/ANONYMOUS@EXAMPLE.TEST; defaulting to no policy 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp_umou_7f', '-H', 'ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket', '-Y', 'EXTERNAL'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=0 2024-07-09T14:27:09Z DEBUG stdout=add objectclass: ipaAllowedOperations add aci: (targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Allow to retrieve keytab keys of the anonymous user"; allow(read) userattr="ipaAllowedToPerform;read_keys#GROUPDN";) add ipaAllowedToPerform;read_keys: cn=ipaservers,cn=hostgroups,cn=accounts,dc=example,dc=test modifying entry "krbPrincipalName=WELLKNOWN/ANONYMOUS@EXAMPLE.TEST,cn=EXAMPLE.TEST,cn=kerberos,dc=example,dc=test" modify complete 2024-07-09T14:27:09Z DEBUG stderr=ldap_initialize( ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 2024-07-09T14:27:09Z DEBUG step duration: krb5kdc add_anonymous_principal 0.33 sec 2024-07-09T14:27:09Z DEBUG [9/11]: starting the KDC 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/bin/systemctl', 'start', 'krb5kdc.service'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=0 2024-07-09T14:27:09Z DEBUG stdout= 2024-07-09T14:27:09Z DEBUG stderr= 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/bin/systemctl', 'is-active', 'krb5kdc.service'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=0 2024-07-09T14:27:09Z DEBUG stdout=active 2024-07-09T14:27:09Z DEBUG stderr= 2024-07-09T14:27:09Z DEBUG Start of krb5kdc.service complete 2024-07-09T14:27:09Z DEBUG step duration: krb5kdc __start_instance 0.08 sec 2024-07-09T14:27:09Z DEBUG [10/11]: configuring KDC to start on boot 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/bin/systemctl', 'is-enabled', 'krb5kdc.service'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=1 2024-07-09T14:27:09Z DEBUG stdout=disabled 2024-07-09T14:27:09Z DEBUG stderr= 2024-07-09T14:27:09Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:09Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/bin/systemctl', 'unmask', 'krb5kdc.service'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=0 2024-07-09T14:27:09Z DEBUG stdout= 2024-07-09T14:27:09Z DEBUG stderr= 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/bin/systemctl', 'disable', 'krb5kdc.service'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=0 2024-07-09T14:27:09Z DEBUG stdout= 2024-07-09T14:27:09Z DEBUG stderr= 2024-07-09T14:27:09Z DEBUG step duration: krb5kdc __enable 0.44 sec 2024-07-09T14:27:09Z DEBUG [11/11]: enable PAC ticket signature support 2024-07-09T14:27:09Z DEBUG update_entry modlist [(0, 'ipaconfigstring', [b'pacTktSignSupported'])] 2024-07-09T14:27:09Z DEBUG service KDC has all config values set 2024-07-09T14:27:09Z DEBUG step duration: krb5kdc pac_tkt_sign_support_enable 0.00 sec 2024-07-09T14:27:09Z DEBUG Done configuring Kerberos KDC (krb5kdc). 2024-07-09T14:27:09Z DEBUG service duration: krb5kdc 3.93 sec 2024-07-09T14:27:09Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:09Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2024-07-09T14:27:09Z DEBUG Configuring kadmin 2024-07-09T14:27:09Z DEBUG [1/2]: starting kadmin 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/bin/systemctl', 'is-active', 'kadmin.service'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=3 2024-07-09T14:27:09Z DEBUG stdout=inactive 2024-07-09T14:27:09Z DEBUG stderr= 2024-07-09T14:27:09Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:09Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/bin/systemctl', 'restart', 'kadmin.service'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=0 2024-07-09T14:27:09Z DEBUG stdout= 2024-07-09T14:27:09Z DEBUG stderr= 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/bin/systemctl', 'is-active', 'kadmin.service'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=0 2024-07-09T14:27:09Z DEBUG stdout=active 2024-07-09T14:27:09Z DEBUG stderr= 2024-07-09T14:27:09Z DEBUG Restart of kadmin.service complete 2024-07-09T14:27:09Z DEBUG step duration: kadmin __start 0.11 sec 2024-07-09T14:27:09Z DEBUG [2/2]: configuring kadmin to start on boot 2024-07-09T14:27:09Z DEBUG Starting external process 2024-07-09T14:27:09Z DEBUG args=['/bin/systemctl', 'is-enabled', 'kadmin.service'] 2024-07-09T14:27:09Z DEBUG Process finished, return code=1 2024-07-09T14:27:09Z DEBUG stdout=disabled 2024-07-09T14:27:09Z DEBUG stderr= 2024-07-09T14:27:09Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:10Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:10Z DEBUG Starting external process 2024-07-09T14:27:10Z DEBUG args=['/bin/systemctl', 'unmask', 'kadmin.service'] 2024-07-09T14:27:10Z DEBUG Process finished, return code=0 2024-07-09T14:27:10Z DEBUG stdout= 2024-07-09T14:27:10Z DEBUG stderr= 2024-07-09T14:27:10Z DEBUG Starting external process 2024-07-09T14:27:10Z DEBUG args=['/bin/systemctl', 'disable', 'kadmin.service'] 2024-07-09T14:27:10Z DEBUG Process finished, return code=0 2024-07-09T14:27:10Z DEBUG stdout= 2024-07-09T14:27:10Z DEBUG stderr= 2024-07-09T14:27:10Z DEBUG step duration: kadmin __enable 0.44 sec 2024-07-09T14:27:10Z DEBUG Done configuring kadmin. 2024-07-09T14:27:10Z DEBUG service duration: kadmin 0.55 sec 2024-07-09T14:27:10Z DEBUG Custodia client for '' with promotion no. 2024-07-09T14:27:10Z DEBUG Custodia uses LDAPI. 2024-07-09T14:27:10Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:10Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2024-07-09T14:27:10Z DEBUG Configuring ipa-custodia 2024-07-09T14:27:10Z DEBUG [1/5]: Making sure custodia container exists 2024-07-09T14:27:10Z DEBUG importing all plugin modules in ipaserver.plugins... 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.aci 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.automember 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.automount 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.baseldap 2024-07-09T14:27:10Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.baseuser 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.batch 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.ca 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.caacl 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.cert 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.certmap 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.certprofile 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.config 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.delegation 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.dns 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.dnsserver 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.dogtag 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.domainlevel 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.group 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.hbac 2024-07-09T14:27:10Z DEBUG ipaserver.plugins.hbac is not a valid plugin module 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.hbacrule 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.hbacsvc 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.hbactest 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.host 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.hostgroup 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.idp 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.idrange 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.idviews 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.internal 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.join 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.ldap2 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.location 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.migration 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.misc 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.netgroup 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.otp 2024-07-09T14:27:10Z DEBUG ipaserver.plugins.otp is not a valid plugin module 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.otpconfig 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.otptoken 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.passkeyconfig 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.passwd 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.permission 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.ping 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.pkinit 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.privilege 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.pwpolicy 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.rabase 2024-07-09T14:27:10Z DEBUG ipaserver.plugins.rabase is not a valid plugin module 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.radiusproxy 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.realmdomains 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.role 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.schema 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.selfservice 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.server 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.serverrole 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.serverroles 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.service 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.servicedelegation 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.session 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.stageuser 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.subid 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.sudo 2024-07-09T14:27:10Z DEBUG ipaserver.plugins.sudo is not a valid plugin module 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.sudocmd 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.sudorule 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.topology 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.trust 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.user 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.vault 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.virtual 2024-07-09T14:27:10Z DEBUG ipaserver.plugins.virtual is not a valid plugin module 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.whoami 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.plugins.xmlserver 2024-07-09T14:27:10Z DEBUG importing all plugin modules in ipaserver.install.plugins... 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.adtrust 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.dns 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.fix_kra_people_entry 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_changelog_maxage 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_nis 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_pwpolicy 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_referint 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_services 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_unhashed_password 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness 2024-07-09T14:27:10Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt 2024-07-09T14:27:10Z DEBUG Created connection context.ldap2_139943554751392 2024-07-09T14:27:10Z DEBUG raw: idrange_show('EXAMPLE.TEST_id_range', version='2.254') 2024-07-09T14:27:10Z DEBUG idrange_show('EXAMPLE.TEST_id_range', rights=False, all=False, raw=False, version='2.254') 2024-07-09T14:27:10Z DEBUG flushing ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket from SchemaCache 2024-07-09T14:27:10Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-EXAMPLE-TEST.socket conn= 2024-07-09T14:27:10Z DEBUG Parsing update file '/usr/share/ipa/updates/73-custodia.update' 2024-07-09T14:27:10Z DEBUG Updating existing entry: cn=custodia,cn=ipa,cn=etc,dc=example,dc=test 2024-07-09T14:27:10Z DEBUG --------------------------------------------- 2024-07-09T14:27:10Z DEBUG Initial value 2024-07-09T14:27:10Z DEBUG dn: cn=custodia,cn=ipa,cn=etc,dc=example,dc=test 2024-07-09T14:27:10Z DEBUG objectClass: 2024-07-09T14:27:10Z DEBUG nsContainer 2024-07-09T14:27:10Z DEBUG top 2024-07-09T14:27:10Z DEBUG cn: 2024-07-09T14:27:10Z DEBUG custodia 2024-07-09T14:27:10Z DEBUG --------------------------------------------- 2024-07-09T14:27:10Z DEBUG Final value after applying updates 2024-07-09T14:27:10Z DEBUG dn: cn=custodia,cn=ipa,cn=etc,dc=example,dc=test 2024-07-09T14:27:10Z DEBUG objectClass: 2024-07-09T14:27:10Z DEBUG nsContainer 2024-07-09T14:27:10Z DEBUG top 2024-07-09T14:27:10Z DEBUG cn: 2024-07-09T14:27:10Z DEBUG custodia 2024-07-09T14:27:10Z DEBUG [] 2024-07-09T14:27:10Z DEBUG Updated 0 2024-07-09T14:27:10Z DEBUG Done 2024-07-09T14:27:10Z DEBUG Updating existing entry: cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=example,dc=test 2024-07-09T14:27:10Z DEBUG --------------------------------------------- 2024-07-09T14:27:10Z DEBUG Initial value 2024-07-09T14:27:10Z DEBUG dn: cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=example,dc=test 2024-07-09T14:27:10Z DEBUG objectClass: 2024-07-09T14:27:10Z DEBUG nsContainer 2024-07-09T14:27:10Z DEBUG top 2024-07-09T14:27:10Z DEBUG cn: 2024-07-09T14:27:10Z DEBUG dogtag 2024-07-09T14:27:10Z DEBUG --------------------------------------------- 2024-07-09T14:27:10Z DEBUG Final value after applying updates 2024-07-09T14:27:10Z DEBUG dn: cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=example,dc=test 2024-07-09T14:27:10Z DEBUG objectClass: 2024-07-09T14:27:10Z DEBUG nsContainer 2024-07-09T14:27:10Z DEBUG top 2024-07-09T14:27:10Z DEBUG cn: 2024-07-09T14:27:10Z DEBUG dogtag 2024-07-09T14:27:10Z DEBUG [] 2024-07-09T14:27:10Z DEBUG Updated 0 2024-07-09T14:27:10Z DEBUG Done 2024-07-09T14:27:10Z DEBUG LDAP update duration: /usr/share/ipa/updates/73-custodia.update 0.002 sec 2024-07-09T14:27:10Z DEBUG Destroyed connection context.ldap2_139943554751392 2024-07-09T14:27:10Z DEBUG step duration: ipa-custodia __create_container 0.46 sec 2024-07-09T14:27:10Z DEBUG [2/5]: Generating ipa-custodia config file 2024-07-09T14:27:10Z DEBUG step duration: ipa-custodia __config_file 0.01 sec 2024-07-09T14:27:10Z DEBUG [3/5]: Generating ipa-custodia keys 2024-07-09T14:27:11Z DEBUG step duration: ipa-custodia __gen_keys 0.61 sec 2024-07-09T14:27:11Z DEBUG [4/5]: starting ipa-custodia 2024-07-09T14:27:11Z DEBUG Starting external process 2024-07-09T14:27:11Z DEBUG args=['/bin/systemctl', 'is-active', 'ipa-custodia.service'] 2024-07-09T14:27:11Z DEBUG Process finished, return code=3 2024-07-09T14:27:11Z DEBUG stdout=inactive 2024-07-09T14:27:11Z DEBUG stderr= 2024-07-09T14:27:11Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:11Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:11Z DEBUG Starting external process 2024-07-09T14:27:11Z DEBUG args=['/bin/systemctl', 'restart', 'ipa-custodia.service'] 2024-07-09T14:27:11Z DEBUG Process finished, return code=0 2024-07-09T14:27:11Z DEBUG stdout= 2024-07-09T14:27:11Z DEBUG stderr= 2024-07-09T14:27:11Z DEBUG Starting external process 2024-07-09T14:27:11Z DEBUG args=['/bin/systemctl', 'is-active', 'ipa-custodia.service'] 2024-07-09T14:27:11Z DEBUG Process finished, return code=0 2024-07-09T14:27:11Z DEBUG stdout=active 2024-07-09T14:27:11Z DEBUG stderr= 2024-07-09T14:27:11Z DEBUG Restart of ipa-custodia.service complete 2024-07-09T14:27:11Z DEBUG step duration: ipa-custodia __start 0.32 sec 2024-07-09T14:27:11Z DEBUG [5/5]: configuring ipa-custodia to start on boot 2024-07-09T14:27:11Z DEBUG Starting external process 2024-07-09T14:27:11Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ipa-custodia.service'] 2024-07-09T14:27:11Z DEBUG Process finished, return code=1 2024-07-09T14:27:11Z DEBUG stdout=disabled 2024-07-09T14:27:11Z DEBUG stderr= 2024-07-09T14:27:11Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:11Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:11Z DEBUG Starting external process 2024-07-09T14:27:11Z DEBUG args=['/bin/systemctl', 'unmask', 'ipa-custodia.service'] 2024-07-09T14:27:12Z DEBUG Process finished, return code=0 2024-07-09T14:27:12Z DEBUG stdout= 2024-07-09T14:27:12Z DEBUG stderr= 2024-07-09T14:27:12Z DEBUG Starting external process 2024-07-09T14:27:12Z DEBUG args=['/bin/systemctl', 'disable', 'ipa-custodia.service'] 2024-07-09T14:27:12Z DEBUG Process finished, return code=0 2024-07-09T14:27:12Z DEBUG stdout= 2024-07-09T14:27:12Z DEBUG stderr= 2024-07-09T14:27:12Z DEBUG step duration: ipa-custodia __enable 0.46 sec 2024-07-09T14:27:12Z DEBUG Done configuring ipa-custodia. 2024-07-09T14:27:12Z DEBUG service duration: ipa-custodia 1.86 sec 2024-07-09T14:27:12Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' 2024-07-09T14:27:12Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state' 2024-07-09T14:27:12Z DEBUG update_entry modlist [(2, 'ipacertificatesubjectbase', [b'O=EXAMPLE.TEST'])] 2024-07-09T14:27:12Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' 2024-07-09T14:27:12Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state' 2024-07-09T14:27:12Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:12Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2024-07-09T14:27:12Z DEBUG Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes 2024-07-09T14:27:12Z DEBUG [1/32]: configuring certificate server instance 2024-07-09T14:27:12Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:12Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:12Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:12Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:12Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:12Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2024-07-09T14:27:12Z DEBUG Contents of pkispawn configuration file (/tmp/tmpas37nw9v): [CA] pki_admin_cert_file = /root/.dogtag/pki-tomcat/ca_admin.cert pki_admin_cert_request_type = pkcs10 pki_admin_dualkey = False pki_admin_email = root@localhost pki_admin_name = admin pki_admin_nickname = ipa-ca-agent pki_admin_XXXXXXXX = XXXXXXXX pki_admin_subject_dn = cn=ipa-ca-agent,O=EXAMPLE.TEST pki_admin_uid = admin pki_ajp_host_ipv4 = 127.0.0.1 pki_ajp_host_ipv6 = ::1 pki_ajp_secret = 1Lp3nNYUDMwGWQ9Fj9twEo23NGHyyqnin9KQKFOfHjid pki_audit_group = pkiaudit pki_audit_signing_key_algorithm = SHA256withRSA pki_audit_signing_key_size = 2048 pki_audit_signing_key_type = rsa pki_audit_signing_nickname = auditSigningCert cert-pki-ca pki_audit_signing_signing_algorithm = SHA256withRSA pki_audit_signing_subject_dn = cn=CA Audit,O=EXAMPLE.TEST pki_audit_signing_token = ipa_token pki_backup_keys = False pki_backup_XXXXXXXX = pki_ca_hostname = ipa.example.test pki_ca_port = 443 pki_ca_signing_cert_path = pki_ca_signing_csr_path = pki_ca_signing_key_algorithm = SHA256withRSA pki_ca_signing_key_size = 3072 pki_ca_signing_key_type = rsa pki_ca_signing_nickname = caSigningCert cert-pki-ca pki_ca_signing_record_create = True pki_ca_signing_serial_number = 1 pki_ca_signing_signing_algorithm = SHA256withRSA pki_ca_signing_subject_dn = CN=Certificate Authority,O=EXAMPLE.TEST pki_ca_signing_token = ipa_token pki_ca_starting_crl_number = 0 pki_cert_chain_nickname = caSigningCert External CA pki_cert_chain_path = pki_cert_id_generator = random pki_client_admin_cert_p12 = /root/ca-agent.p12 pki_client_database_XXXXXXXX = pki_client_database_purge = True pki_client_dir = /root/.dogtag/pki-tomcat pki_client_pkcs12_XXXXXXXX = XXXXXXXX pki_configuration_path = /etc/pki pki_default_ocsp_uri = http://ipa-ca.example.test/ca/ocsp pki_dns_domainname = example.test pki_ds_base_dn = o=ipaca pki_ds_bind_dn = cn=Directory Manager pki_ds_database = ipaca pki_ds_hostname = ipa.example.test pki_ds_ldap_port = 389 pki_ds_ldaps_port = 636 pki_ds_XXXXXXXX = XXXXXXXX pki_ds_remove_data = True pki_ds_secure_connection = False pki_ds_secure_connection_ca_nickname = Directory Server CA certificate pki_ds_secure_connection_ca_pem_file = /etc/ipa/ca.crt pki_enable_proxy = True pki_existing = False pki_external = False pki_external_pkcs12_XXXXXXXX = pki_external_pkcs12_path = pki_external_step_two = False pki_group = pkiuser pki_hostname = ipa.example.test pki_hsm_enable = True pki_hsm_libfile = /usr/lib64/pkcs11/libsofthsm2.so pki_hsm_modulename = libsofthsm2 pki_import_admin_cert = False pki_instance_configuration_path = /etc/pki/pki-tomcat pki_instance_name = pki-tomcat pki_issuing_ca = https://ipa.example.test:443 pki_issuing_ca_hostname = ipa.example.test pki_issuing_ca_https_port = 443 pki_issuing_ca_uri = https://ipa.example.test:443 pki_master_crl_enable = True pki_ocsp_signing_key_algorithm = SHA256withRSA pki_ocsp_signing_key_size = 2048 pki_ocsp_signing_key_type = rsa pki_ocsp_signing_nickname = ocspSigningCert cert-pki-ca pki_ocsp_signing_signing_algorithm = SHA256withRSA pki_ocsp_signing_subject_dn = cn=OCSP Subsystem,O=EXAMPLE.TEST pki_ocsp_signing_token = ipa_token pki_pkcs12_XXXXXXXX = pki_pkcs12_path = pki_profiles_in_ldap = True pki_random_serial_numbers_enable = True pki_replica_number_range_end = 100 pki_replica_number_range_start = 1 pki_replication_XXXXXXXX = pki_request_id_generator = random pki_request_number_range_end = 10000000 pki_request_number_range_start = 1 pki_san_for_server_cert = pki_san_inject = False pki_security_domain_hostname = ipa.example.test pki_security_domain_https_port = 443 pki_security_domain_name = IPA pki_security_domain_XXXXXXXX = XXXXXXXX pki_security_domain_user = admin pki_self_signed_token = internal pki_serial_number_range_end = 10000000 pki_serial_number_range_start = 1 pki_server_database_XXXXXXXX = XXXXXXXX pki_share_db = False pki_share_dbuser_dn = uid=pkidbuser,ou=people,o=ipaca pki_skip_configuration = False pki_skip_ds_verify = False pki_skip_installation = False pki_skip_sd_verify = False pki_sslserver_key_algorithm = SHA256withRSA pki_sslserver_key_size = 2048 pki_sslserver_key_type = rsa pki_sslserver_nickname = Server-Cert cert-pki-ca pki_sslserver_subject_dn = cn=ipa.example.test,O=EXAMPLE.TEST pki_sslserver_token = internal pki_status_request_timeout = 15 pki_subordinate = False pki_subordinate_create_new_security_domain = False pki_subsystem = CA pki_subsystem_key_algorithm = SHA256withRSA pki_subsystem_key_size = 2048 pki_subsystem_key_type = rsa pki_subsystem_nickname = subsystemCert cert-pki-ca pki_subsystem_subject_dn = cn=CA Subsystem,O=EXAMPLE.TEST pki_subsystem_token = ipa_token pki_subsystem_type = ca pki_token_name = ipa_token pki_token_XXXXXXXX = XXXXXXXX pki_user = pkiuser 2024-07-09T14:27:12Z DEBUG Starting external process 2024-07-09T14:27:12Z DEBUG args=['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpas37nw9v', '--debug', '--log-file', '/var/log/pki/pki-ca-spawn.20240709162712.log'] 2024-07-09T14:27:12Z DEBUG Process finished, return code=1 2024-07-09T14:27:12Z DEBUG stdout=Loading deployment configuration from /tmp/tmpas37nw9v. Installation log: /var/log/pki/pki-ca-spawn.20240709162712.log 2024-07-09T14:27:12Z DEBUG stderr=WARNING: The 'pki_ds_hostname' in [CA] has been deprecated. Use 'pki_ds_url' instead. WARNING: The 'pki_ds_ldap_port' in [CA] has been deprecated. Use 'pki_ds_url' instead. WARNING: The 'pki_ds_ldaps_port' in [CA] has been deprecated. Use 'pki_ds_url' instead. WARNING: The 'pki_ds_secure_connection' in [CA] has been deprecated. Use 'pki_ds_url' instead. DEBUG: ===================================================== DISPLAY CONTENTS OF PKI MASTER DICTIONARY ===================================================== DEBUG: { 0: None, 'CATALINA_HOME': '/usr/share/tomcat', 'JAVA_HOME': '/usr/lib/jvm/jre-21-openjdk', '__name__': 'PKI Master Dictionary', 'application_version': '11.5.0', 'home_dir': '/root', 'java_home': '/usr/lib/jvm/jre-21-openjdk', 'nss_default_db_type': 'sql', 'pki_admin_cert_file': '/root/.dogtag/pki-tomcat/ca_admin.cert', 'pki_admin_cert_request_type': 'pkcs10', 'pki_admin_dualkey': 'False', 'pki_admin_email': 'root@localhost', 'pki_admin_key_algorithm': 'SHA256withRSA', 'pki_admin_key_size': '2048', 'pki_admin_key_type': 'rsa', 'pki_admin_keysize': '2048', 'pki_admin_name': 'admin', 'pki_admin_nickname': 'ipa-ca-agent', 'pki_admin_XXXXXXXX': 'XXXXXXXX', 'pki_admin_profile_id': 'caAdminCert', 'pki_admin_setup': 'True', 'pki_admin_subject_dn': 'cn=ipa-ca-agent,O=EXAMPLE.TEST', 'pki_admin_uid': 'admin', 'pki_ajp_host': 'localhost4', 'pki_ajp_host_ipv4': '127.0.0.1', 'pki_ajp_host_ipv6': '::1', 'pki_ajp_port': '8009', 'pki_ajp_secret': '1Lp3nNYUDMwGWQ9Fj9twEo23NGHyyqnin9KQKFOfHjid', 'pki_architecture': 64, 'pki_audit_group': 'pkiaudit', 'pki_audit_signing_cert_path': '', 'pki_audit_signing_csr_path': '', 'pki_audit_signing_key_algorithm': 'SHA256withRSA', 'pki_audit_signing_key_size': '2048', 'pki_audit_signing_key_type': 'rsa', 'pki_audit_signing_nickname': 'auditSigningCert cert-pki-ca', 'pki_audit_signing_opFlags': '', 'pki_audit_signing_opFlagsMask': '', 'pki_audit_signing_signing_algorithm': 'SHA256withRSA', 'pki_audit_signing_subject_dn': 'cn=CA Audit,O=EXAMPLE.TEST', 'pki_audit_signing_token': 'ipa_token', 'pki_backup_file': '', 'pki_backup_keys': 'False', 'pki_backup_XXXXXXXX': 'XXXXXXXX', 'pki_ca_hostname': 'ipa.example.test', 'pki_ca_port': '443', 'pki_ca_signing_cert_path': '', 'pki_ca_signing_csr_path': '', 'pki_ca_signing_key_algorithm': 'SHA256withRSA', 'pki_ca_signing_key_size': '3072', 'pki_ca_signing_key_type': 'rsa', 'pki_ca_signing_nickname': 'caSigningCert cert-pki-ca', 'pki_ca_signing_opFlags': '', 'pki_ca_signing_opFlagsMask': '', 'pki_ca_signing_record_create': 'True', 'pki_ca_signing_serial_number': '1', 'pki_ca_signing_signing_algorithm': 'SHA256withRSA', 'pki_ca_signing_subject_dn': 'CN=Certificate Authority,O=EXAMPLE.TEST', 'pki_ca_signing_token': 'ipa_token', 'pki_ca_starting_crl_number': '0', 'pki_cert_chain_nickname': 'caSigningCert External CA', 'pki_cert_chain_path': '', 'pki_cert_id_generator': 'random', 'pki_cert_id_length': '128', 'pki_certificate_timestamp': '2024-07-09 16:27:12', 'pki_client_admin_cert': '/root/.dogtag/pki-tomcat/ca_admin.cert', 'pki_client_admin_cert_p12': '/root/ca-agent.p12', 'pki_client_database_dir': '/root/.dogtag/pki-tomcat/ca/alias', 'pki_client_database_XXXXXXXX': 'XXXXXXXX', 'pki_client_database_purge': 'True', 'pki_client_dir': '/root/.dogtag/pki-tomcat', 'pki_client_XXXXXXXX_conf': '/root/.dogtag/pki-tomcat/ca/XXXXXXXX.conf', 'pki_client_pkcs12_XXXXXXXX': 'XXXXXXXX', 'pki_client_pkcs12_XXXXXXXX_conf': '/root/.dogtag/pki-tomcat/ca/pkcs12_XXXXXXXX.conf', 'pki_client_subsystem_dir': '/root/.dogtag/pki-tomcat/ca', 'pki_clone': 'False', 'pki_clone_pkcs12_XXXXXXXX': 'XXXXXXXX', 'pki_clone_pkcs12_path': '', 'pki_clone_reindex_data': 'False', 'pki_clone_replicate_schema': 'True', 'pki_clone_replication_clone_port': '', 'pki_clone_replication_master_port': '', 'pki_clone_replication_security': 'None', 'pki_clone_setup_replication': 'True', 'pki_clone_uri': 'https://ipa.example.test:8443', 'pki_configuration_path': '/etc/pki', 'pki_default_ocsp_uri': 'http://ipa-ca.example.test/ca/ocsp', 'pki_deployed_instance_name': None, 'pki_deployment_executable': 'pkispawn.py', 'pki_dns_domainname': 'example.test', 'pki_ds_base_dn': 'o=ipaca', 'pki_ds_bind_dn': 'cn=Directory Manager', 'pki_ds_create_new_db': 'True', 'pki_ds_database': 'ipaca', 'pki_ds_hostname': 'ipa.example.test', 'pki_ds_ldap_port': '389', 'pki_ds_ldaps_port': '636', 'pki_ds_XXXXXXXX': 'XXXXXXXX', 'pki_ds_remove_data': 'True', 'pki_ds_secure_connection': 'False', 'pki_ds_secure_connection_ca_nickname': 'Directory Server CA certificate', 'pki_ds_secure_connection_ca_pem_file': '/etc/ipa/ca.crt', 'pki_ds_setup': 'True', 'pki_enable_access_log': 'True', 'pki_enable_java_debugger': 'False', 'pki_enable_on_system_boot': 'True', 'pki_enable_proxy': 'True', 'pki_existing': 'False', 'pki_external': 'False', 'pki_external_ca_cert_chain_nickname': 'caSigningCert External CA', 'pki_external_ca_cert_chain_path': '', 'pki_external_ca_cert_path': '', 'pki_external_csr_path': '', 'pki_external_pkcs12_XXXXXXXX': 'XXXXXXXX', 'pki_external_pkcs12_path': '', 'pki_external_step_two': 'False', 'pki_group': 'pkiuser', 'pki_hostname': 'ipa.example.test', 'pki_hsm_enable': 'True', 'pki_hsm_libfile': '/usr/lib64/pkcs11/libsofthsm2.so', 'pki_hsm_modulename': 'libsofthsm2', 'pki_http_enable': 'True', 'pki_http_port': '8080', 'pki_https_port': '8443', 'pki_import_admin_cert': 'False', 'pki_import_system_certs': 'True', 'pki_install_time': 'Tue Jul 9 16:27:12 2024', 'pki_instance_configuration_path': '/etc/pki/pki-tomcat', 'pki_instance_name': 'pki-tomcat', 'pki_instance_path': '/var/lib/pki/pki-tomcat', 'pki_issuing_ca': 'https://ipa.example.test:443', 'pki_issuing_ca_hostname': 'ipa.example.test', 'pki_issuing_ca_https_port': '443', 'pki_issuing_ca_uri': 'https://ipa.example.test:443', 'pki_master_crl_enable': 'True', 'pki_master_hostname': 'ipa.example.test', 'pki_master_https_port': '8443', 'pki_ocsp_signing_cert_path': '', 'pki_ocsp_signing_csr_path': '', 'pki_ocsp_signing_key_algorithm': 'SHA256withRSA', 'pki_ocsp_signing_key_size': '2048', 'pki_ocsp_signing_key_type': 'rsa', 'pki_ocsp_signing_nickname': 'ocspSigningCert cert-pki-ca', 'pki_ocsp_signing_opFlags': '', 'pki_ocsp_signing_opFlagsMask': '', 'pki_ocsp_signing_signing_algorithm': 'SHA256withRSA', 'pki_ocsp_signing_subject_dn': 'cn=OCSP Subsystem,O=EXAMPLE.TEST', 'pki_ocsp_signing_token': 'ipa_token', 'pki_pin': 'XXXXXXXX', 'pki_pkcs12_XXXXXXXX': 'XXXXXXXX', 'pki_pkcs12_path': '', 'pki_profiles_in_ldap': 'True', 'pki_proxy_http_port': '80', 'pki_proxy_https_port': '443', 'pki_random_ajp_secret': 'VZpVpU5JQUOI0cVWJN8TRCpB7', 'pki_random_serial_numbers_enable': 'True', 'pki_registry_enable': 'True', 'pki_replica_number_range_end': '100', 'pki_replica_number_range_start': '1', 'pki_replication_XXXXXXXX': 'XXXXXXXX', 'pki_req_ext_add': 'False', 'pki_req_ext_critical': 'False', 'pki_req_ext_data': '', 'pki_req_ext_oid': '', 'pki_request_id_generator': 'random', 'pki_request_id_length': '128', 'pki_request_number_range_end': '10000000', 'pki_request_number_range_start': '1', 'pki_san_for_server_cert': '', 'pki_san_inject': 'False', 'pki_security_domain_hostname': 'ipa.example.test', 'pki_security_domain_https_port': '443', 'pki_security_domain_name': 'IPA', 'pki_security_domain_XXXXXXXX': 'XXXXXXXX', 'pki_security_domain_setup': 'True', 'pki_security_domain_type': 'new', 'pki_security_domain_uri': 'https://ipa.example.test:443', 'pki_security_domain_user': 'admin', 'pki_security_manager': 'true', 'pki_self_signed_nickname': 'temp Server-Cert cert-pki-ca', 'pki_self_signed_token': 'internal', 'pki_serial_number_range_end': '10000000', 'pki_serial_number_range_start': '1', 'pki_server_database_XXXXXXXX': 'XXXXXXXX', 'pki_server_external_certs_path': '', 'pki_server_pkcs12_XXXXXXXX': 'XXXXXXXX', 'pki_server_pkcs12_path': '', 'pki_share_db': 'False', 'pki_share_dbuser_dn': 'uid=pkidbuser,ou=people,o=ipaca', 'pki_skip_configuration': 'False', 'pki_skip_ds_verify': 'False', 'pki_skip_installation': 'False', 'pki_skip_sd_verify': 'False', 'pki_ssl_server_key_algorithm': 'SHA256withRSA', 'pki_ssl_server_key_size': '2048', 'pki_ssl_server_key_type': 'rsa', 'pki_ssl_server_nickname': 'Server-Cert cert-pki-tomcat', 'pki_ssl_server_subject_dn': 'cn=ipa.example.test,ou=pki-tomcat,o=IPA', 'pki_ssl_server_token': '', 'pki_sslserver_cert_path': '', 'pki_sslserver_csr_path': '', 'pki_sslserver_key_algorithm': 'SHA256withRSA', 'pki_sslserver_key_size': '2048', 'pki_sslserver_key_type': 'rsa', 'pki_sslserver_nickname': 'Server-Cert cert-pki-ca', 'pki_sslserver_opFlags': '', 'pki_sslserver_opFlagsMask': '', 'pki_sslserver_signing_algorithm': 'SHA256withRSA', 'pki_sslserver_subject_dn': 'cn=ipa.example.test,O=EXAMPLE.TEST', 'pki_sslserver_token': 'internal', 'pki_standalone': 'false', 'pki_status_request_timeout': '15', 'pki_storage_token': 'ipa_token', 'pki_subordinate': 'False', 'pki_subordinate_create_new_security_domain': 'False', 'pki_subordinate_security_domain_name': 'example.test Subordinate Security ' 'Domain', 'pki_subsystem': 'CA', 'pki_subsystem_cert_path': '', 'pki_subsystem_csr_path': '', 'pki_subsystem_key_algorithm': 'SHA256withRSA', 'pki_subsystem_key_size': '2048', 'pki_subsystem_key_type': 'rsa', 'pki_subsystem_name': 'CA ipa.example.test 8443', 'pki_subsystem_nickname': 'subsystemCert cert-pki-ca', 'pki_subsystem_opFlags': '', 'pki_subsystem_opFlagsMask': '', 'pki_subsystem_signing_algorithm': 'SHA256withRSA', 'pki_subsystem_subject_dn': 'cn=CA Subsystem,O=EXAMPLE.TEST', 'pki_subsystem_token': 'ipa_token', 'pki_subsystem_type': 'ca', 'pki_systemd_service_create': 'True', 'pki_timestamp': '20240709162712', 'pki_token_name': 'ipa_token', 'pki_token_XXXXXXXX': 'XXXXXXXX', 'pki_tomcat_bin_path': '/usr/share/tomcat/bin', 'pki_tomcat_lib_path': '/usr/share/tomcat/lib', 'pki_tomcat_server_port': '8005', 'pki_transport_token': 'ipa_token', 'pki_use_oaep_rsa_keywrap': 'False', 'pki_use_pss_rsa_signing_algorithm': 'False', 'pki_user': 'pkiuser', 'pki_user_deployment_cfg': '/tmp/tmpas37nw9v', 'sensitive_parameters': '\n' 'pki_admin_XXXXXXXX\n' 'pki_backup_XXXXXXXX\n' 'pki_client_database_XXXXXXXX\n' 'pki_client_pin\n' 'pki_client_pkcs12_XXXXXXXX\n' 'pki_clone_pkcs12_XXXXXXXX\n' 'pki_ds_XXXXXXXX\n' 'pki_external_pkcs12_XXXXXXXX\n' 'pki_pkcs12_XXXXXXXX\n' 'pki_one_time_pin\n' 'pki_pin\n' 'pki_replication_XXXXXXXX\n' 'pki_security_domain_XXXXXXXX\n' 'pki_server_database_XXXXXXXX\n' 'pki_server_pkcs12_XXXXXXXX\n' 'pki_token_XXXXXXXX'} INFO: Loading instance type: pki-tomcatd INFO: Loading instance: pki-tomcat INFO: Loading global Tomcat config: /etc/tomcat/tomcat.conf INFO: Loading PKI Tomcat config: /usr/share/pki/etc/tomcat.conf INFO: Connecting to LDAP server at ldap://ipa.example.test:389 ERROR: Unable to access LDAP server: ldap://ipa.example.test:389 Traceback (most recent call last): File "", line 198, in _run_module_as_main File "", line 88, in _run_code File "/usr/lib/python3.13/site-packages/pki/server/pkispawn.py", line 987, in main(sys.argv) ~~~~^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/pki/server/pkispawn.py", line 560, in main check_ds() ~~~~~~~~^^ File "/usr/lib/python3.13/site-packages/pki/server/pkispawn.py", line 722, in check_ds verify_ds_configuration() ~~~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.13/site-packages/pki/server/pkispawn.py", line 58, in verify_ds_configuration deployer.ds_bind() ~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.13/site-packages/pki/server/deployment/__init__.py", line 2442, in ds_bind self.ds_connection.simple_bind_s( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ self.mdict['pki_ds_bind_dn'], ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ self.mdict['pki_ds_XXXXXXXX']) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib64/python3.13/site-packages/ldap/ldapobject.py", line 248, in simple_bind_s msgid = self.simple_bind(who,cred,serverctrls,clientctrls) File "/usr/lib64/python3.13/site-packages/ldap/ldapobject.py", line 242, in simple_bind return self._ldap_call(self._l.simple_bind,who,cred,RequestControlTuples(serverctrls),RequestControlTuples(clientctrls)) ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib64/python3.13/site-packages/ldap/ldapobject.py", line 128, in _ldap_call result = func(*args,**kwargs) ldap.SERVER_DOWN: {'result': -1, 'desc': "Can't contact LDAP server", 'errno': 107, 'ctrls': [], 'info': 'Transport endpoint is not connected'} 2024-07-09T14:27:12Z CRITICAL Failed to configure CA instance 2024-07-09T14:27:12Z CRITICAL See the installation logs and the following files/directories for more information: 2024-07-09T14:27:12Z CRITICAL /var/log/pki/pki-tomcat 2024-07-09T14:27:12Z DEBUG Traceback (most recent call last): File "/usr/lib/python3.13/site-packages/ipaserver/install/service.py", line 686, in start_creation run_step(full_msg, method) ~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/service.py", line 672, in run_step method() ~~~~~~^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/cainstance.py", line 678, in __spawn_instance DogtagInstance.spawn_instance( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ self, f.name, ^^^^^^^^^^^^^ nolog_list=nolog_list ^^^^^^^^^^^^^^^^^^^^^ ) ^ File "/usr/lib/python3.13/site-packages/ipaserver/install/dogtaginstance.py", line 227, in spawn_instance self.handle_setup_error(e) ~~~~~~~~~~~~~~~~~~~~~~~^^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/dogtaginstance.py", line 609, in handle_setup_error raise RuntimeError( "%s configuration failed." % self.subsystem ) from None RuntimeError: CA configuration failed. 2024-07-09T14:27:12Z DEBUG [error] RuntimeError: CA configuration failed. 2024-07-09T14:27:12Z DEBUG Removing /root/.dogtag/pki-tomcat/ca 2024-07-09T14:27:12Z DEBUG File "/usr/lib/python3.13/site-packages/ipapython/admintool.py", line 180, in execute return_value = self.run() File "/usr/lib/python3.13/site-packages/ipapython/install/cli.py", line 344, in run return cfgr.run() ~~~~~~~~^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 360, in run return self.execute() ~~~~~~~~~~~~^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 386, in execute for rval in self._executor(): if rval is not None and rval > return_value: return_value = rval File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 435, in __runner exc_handler(exc_info) ~~~~~~~~~~~^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 468, in _handle_execute_exception self._handle_exception(exc_info) ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 458, in _handle_exception six.reraise(*exc_info) ~~~~~~~~~~~^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 425, in __runner step() ~~~~^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 419, in step_next return next(self.__gen) File "/usr/lib/python3.13/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) ~~~~~~~~~~~^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3.13/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 663, in _configure next(executor) ~~~~^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 435, in __runner exc_handler(exc_info) ~~~~~~~~~~~^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 468, in _handle_execute_exception self._handle_exception(exc_info) ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 526, in _handle_exception self.__parent._handle_exception(exc_info) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 458, in _handle_exception six.reraise(*exc_info) ~~~~~~~~~~~^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 523, in _handle_exception super(ComponentBase, self)._handle_exception(exc_info) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 458, in _handle_exception six.reraise(*exc_info) ~~~~~~~~~~~^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 425, in __runner step() ~~~~^^ File "/usr/lib/python3.13/site-packages/ipapython/install/core.py", line 419, in step_next return next(self.__gen) File "/usr/lib/python3.13/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) ~~~~~~~~~~~^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3.13/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python3.13/site-packages/ipapython/install/common.py", line 65, in _install for unused in self._installer(self.parent): yield from_(super(Step, self)._install()) File "/usr/lib/python3.13/site-packages/ipaserver/install/server/__init__.py", line 608, in main master_install(self) ~~~~~~~~~~~~~~^^^^^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/server/install.py", line 278, in decorated func(installer) ~~~~^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/server/install.py", line 960, in install ca.install_step_0(False, None, options, custodia=custodia) ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/ca.py", line 607, in install_step_0 ca.configure_instance( ~~~~~~~~~~~~~~~~~~~~~^ host_name, dm_password, dm_password, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ...<19 lines>... token_password=options.token_password, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ File "/usr/lib/python3.13/site-packages/ipaserver/install/cainstance.py", line 515, in configure_instance self.start_creation(runtime=runtime) ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/service.py", line 686, in start_creation run_step(full_msg, method) ~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/service.py", line 672, in run_step method() ~~~~~~^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/cainstance.py", line 678, in __spawn_instance DogtagInstance.spawn_instance( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ self, f.name, ^^^^^^^^^^^^^ nolog_list=nolog_list ^^^^^^^^^^^^^^^^^^^^^ ) ^ File "/usr/lib/python3.13/site-packages/ipaserver/install/dogtaginstance.py", line 227, in spawn_instance self.handle_setup_error(e) ~~~~~~~~~~~~~~~~~~~~~~~^^^ File "/usr/lib/python3.13/site-packages/ipaserver/install/dogtaginstance.py", line 609, in handle_setup_error raise RuntimeError( "%s configuration failed." % self.subsystem ) from None 2024-07-09T14:27:12Z DEBUG The ipa-server-install command failed, exception: RuntimeError: CA configuration failed. 2024-07-09T14:27:12Z ERROR CA configuration failed. 2024-07-09T14:27:12Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information root@ipa:/home/felipe# ipa-server-install -a $ADMIN_PASSWORD -p $DM_PASSWORD -r EXAMPLE.TEST -U --random-serial-numbers --token-name=ipa_token --token-library-path=/usr/lib64/pkcs11/libsofthsm2.so --token-password=$TOKEN_PASSWORD --skip-mem-check