I installed this patch, tried again, but there was same error. I did reboot, tried again, but got error. Is it fine, I didn't reinstalled ipa server again? ----------------------- [root@ipa site-packages]# patch -p1 < /tmp/temp-fix.patch patching file ipaserver/install/ipa_migrate.py Hunk #1 succeeded at 1085 (offset -21 lines). Hunk #2 succeeded at 1099 (offset -21 lines). Hunk #3 succeeded at 1322 (offset -43 lines). patching file ipaserver/install/ipa_migrate.py Hunk #1 succeeded at 1510 (offset -118 lines). ------------------------ [root@ipa user]# ipa-migrate -v prod-mode ipa.dom.loc Enter the password for cn=directory manager: Warning - the migration process is irreversible! Make sure you have a backup of the local IPA server before doing the migration To proceed type "yes": yes Initializing ... Connecting to local server ... ipaserver.install.ipa_migrate: INFO: ================================================================================ ipaserver.install.ipa_migrate: INFO: IPA to IPA migration starting ... ipaserver.install.ipa_migrate: INFO: Migration options: ipaserver.install.ipa_migrate: INFO: --mode=prod-mode ipaserver.install.ipa_migrate: INFO: --hostname=ipa.dom.loc ipaserver.install.ipa_migrate: INFO: --verbose=True ipaserver.install.ipa_migrate: INFO: --bind-dn=cn=directory manager ipaserver.install.ipa_migrate: INFO: --bind-pw-file=None ipaserver.install.ipa_migrate: INFO: --cacertfile=None ipaserver.install.ipa_migrate: INFO: --subtree=[] ipaserver.install.ipa_migrate: INFO: --log-file=/var/log/ipa-migrate.log ipaserver.install.ipa_migrate: INFO: --skip-schema=False ipaserver.install.ipa_migrate: INFO: --skip-config=False ipaserver.install.ipa_migrate: INFO: --migrate-dns=False ipaserver.install.ipa_migrate: INFO: --dryrun=False ipaserver.install.ipa_migrate: INFO: --dryrun-record=None ipaserver.install.ipa_migrate: INFO: --force=False ipaserver.install.ipa_migrate: INFO: --quiet=False ipaserver.install.ipa_migrate: INFO: --schema-overwrite=False ipaserver.install.ipa_migrate: INFO: --reset-range=False ipaserver.install.ipa_migrate: INFO: --db-ldif=None ipaserver.install.ipa_migrate: INFO: --schema-ldif=None ipaserver.install.ipa_migrate: INFO: --config-ldif=None ipaserver.install.ipa_migrate: INFO: --no-prompt=False ipapython.ipaldap: DEBUG: flushing ldapi://%2Frun%2Fslapd-DOMAIN-LOC.socket from SchemaCache ipapython.ipaldap: DEBUG: retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-DOMAIN-LOC.socket conn=<ldap.ldapobject.SimpleLDAPObject object at 0x7f830b627ce0> ipapython.ipaldap: DEBUG: retrieving schema for SchemaCache url=ldap://ipa.dom.loc conn=<ldap.ldapobject.SimpleLDAPObject object at 0x7f8309384e30> ipaserver.install.ipa_migrate: INFO: Found realm from remote server: DOM.LOC ipaserver.install.ipa_migrate: INFO: Migrating schema ... ipaserver.install.ipa_migrate: INFO: Getting schema from the remote server ... ipaserver.install.ipa_migrate: INFO: Retrieved 1367 attributes and 298 objectClasses ipaserver.install.ipa_migrate: INFO: Migrated 0 attributes and 0 objectClasses ipaserver.install.ipa_migrate: INFO: Skipped 1367 attributes and 298 objectClasses ipaserver.install.ipa_migrate: INFO: Migrating configuration ... ipaserver.install.ipa_migrate: INFO: Getting config from the remote server ... ipapython.ipaldap: DEBUG: flushing ldapi://%2Frun%2Fslapd-DOMAIN-LOC.socket from SchemaCache ipapython.ipaldap: DEBUG: retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-DOMAIN-LOC.socket conn=<ldap.ldapobject.SimpleLDAPObject object at 0x7f830b627ce0> ipaserver.install.ipa_migrate: INFO: Config setting 'nsslapd-idletimeout' replaced '['3600']' with '0' in 'cn=config' ipaserver.install.ipa_migrate: INFO: Config setting 'nsslapd-ioblocktimeout' replaced '['10000']' with '1800000' in 'cn=config' ipaserver.install.ipa_migrate: INFO: Config setting 'nsslapd-sizelimit' replaced '['100000']' with '2000' in 'cn=config' ipaserver.install.ipa_migrate: INFO: Config setting 'nsslapd-unhashed-pw-switch' replaced '['nolog']' with 'on' in 'cn=config' ipaserver.install.ipa_migrate: INFO: Config setting 'nsslapd-auditlog-logrotationtimeunit' replaced '['week']' with 'day' in 'cn=config' ipaserver.install.ipa_migrate: INFO: Config setting 'nsslapd-auditlog-maxlogsperdir' replaced '['2']' with '1' in 'cn=config' ipapython.ipaldap: DEBUG: update_entry modlist [(2, 'nsslapd-idletimeout', [b'0']), (2, 'nsslapd-auditlog-logrotationtimeunit', [b'day']), (2, 'nsslapd-sizelimit', [b'2000']), (2, 'nsslapd-ioblocktimeout', [b'1800000']), (1, 'nsslapd-auditlog-maxlogsperdir', [b'2']), (0, 'nsslapd-auditlog-maxlogsperdir', [b'1']), (2, 'nsslapd-unhashed-pw-switch', [b'on'])] ipaserver.install.ipa_migrate: ERROR: Error updating local entry: change collided with another change -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[Freeipa-users] Re: can't enroll ubuntu 24
Dmitry Krasov via FreeIPA-users Sun, 26 Jan 2025 07:41:28 -0800
- [Freeipa-users] ... Rob Crittenden via FreeIPA-users
- [Freeipa-users] ... Dmitry Krasov via FreeIPA-users
- [Freeipa-users] ... Rob Crittenden via FreeIPA-users
- [Freeipa-users] ... Dmitry Krasov via FreeIPA-users
- [Freeipa-users] ... Dmitry Krasov via FreeIPA-users
- [Freeipa-users] ... Alexander Bokovoy via FreeIPA-users
- [Freeipa-users] ... Dmitry Krasov via FreeIPA-users
- [Freeipa-users] ... Alexander Bokovoy via FreeIPA-users
- [Freeipa-users] ... Dmitry Krasov via FreeIPA-users
- [Freeipa-users] ... Alexander Bokovoy via FreeIPA-users
- [Freeipa-users] ... Dmitry Krasov via FreeIPA-users
- [Freeipa-users] ... Dmitry Krasov via FreeIPA-users
- [Freeipa-users] ... Alexander Bokovoy via FreeIPA-users
- [Freeipa-users] ... Dmitry Krasov via FreeIPA-users
- [Freeipa-users] Re: can't enroll ubunt... Dmitry Krasov via FreeIPA-users