Hi Florence,
There's still something amiss in dse.ldif. The errors look like something
related to replication topology, which I don't have. The reported runtime error
is still literally ''.
I've attached the new ipaupgrade.log and journal entries.
I'm guessing that over all the years I've been upgrading this server, some
entry is not present that should be or is missing some property value.
Best regards,
Eric
Dec 19, 2025, 04:42 by [email protected]:
> Hi Eric,
>
> I am not very familiar with the 389ds migration procedure from BDB to LMDB
> but in the dse.ldif one can see that the migration has happened and the
> server should already be using lmdb:
>
> dn: cn=config,cn=ldbm database,cn=plugins,cn=config
> cn: config
> modifiersName: cn=server,cn=plugins,cn=config
> modifyTimestamp: 20250808231416Z
> nsslapd-backend-implement: mdb
> ...
>
> The journal points to an invalid entry starting with
> cn=usercertificate,cn=index,cn=userroot,cn=l...
> On a fresh install this entry looks like:
> dn: cn=userCertificate,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=con
> fig
> cn: userCertificate
> createTimestamp: 20251219092748Z
> creatorsName: cn=Directory Manager
> modifiersName: cn=Directory Manager
> modifyTimestamp: 20251219092748Z
> nsIndexType: eq
> nsIndexType: pres
> nsSystemIndex: false
> objectClass: nsIndex
> objectClass: top
> but in your dse.ldif it is missing the nsIndex objectclass:
> dn: cn=usercertificate,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=c
> onfig
> cn: userCertificate
> createTimestamp: 20200724163749Z
> creatorsName: cn=Directory Manager
> modifiersName: cn=Directory Manager
> modifyTimestamp: 20200724163749Z
> nsIndexType: eq
> nsIndexType: pres
> nsSystemIndex: false
> objectClass: top
>
> Try adding the missing objectclass (stop ipa, edit dse.ldif, start ipa with
> ipactl start) and let us know how it went.
> flo
>
> On Thu, Dec 18, 2025 at 12:48 AM Eric Ashley <> [email protected]> > wrote:
>
>> Hi Florence,
>>
>> It exists in the file as "dn: cn=schema
>> compatibility,cm=plugins,cn=config". Is there a case sensitive test
>> occurring somewhere?
>>
>> I think the errors are occurring on the entries that still include
>> "cn=ldbm". I think they should be "cn=mdb" now, but I'm not sure. Should I
>> change them as such?
>>
>> I've attached ipaupgrade.log and the journal entries for the failure.
>> dse.ldif is too large for the list, so it's available here: >>
>> https://drive.proton.me/urls/2CMCHCM520#PUqS5gw5wemZ
>>
>> Best regards,
>> Eric
>>
>>
>> Dec 17, 2025, 18:41 by >> [email protected]>> :
>>
>> > Hi Florence,
>> >
>> > It exists in the file as "dn: cn=schema
>> compatibility,cm=plugins,cn=config". Is there a case sensitive test
>> occurring somewhere?
>> >
>> > I think the errors are occurring on the entries that still include
>> "cn=ldbm". I think they should be "cn=mdb" now, but I'm not sure. Should I
>> change them as such?
>> >
>> > I've attached dse.ldif, ipaupgrade.log and the journal entries for the
>> failure.
>> >
>> > Best regards,
>> > Eric
>> >
>> > Dec 17, 2025, 04:37 by >> [email protected]>> :
>> >
>> >> Hi,
>> >>
>> >> in the file /etc/dirsrv/slapd-IPA-EXAMPLE-COM/dse.ldif, do you have an
>> entry with "dn: cn=Schema Compatibility,cn=plugins,cn=config" ?
>> >> Could you post the content of /var/log/ipaupgrade.log and dse.ldif?
>> >>
>> >> flo
>> >>
>> >> On Mon, Dec 15, 2025 at 10:16 PM Eric Ashley via FreeIPA-users <>> >>
>> [email protected]>> >> > wrote:
>> >>
>> >>> This is a follow-on to the thread titled: "Re: [Freeipa-users] FreeIP
>> 4.12.5-2-fc42 missing dse.ldif"
>> >>>
>> >>> After dsctl was updated to guard against the double close of the bdb
>> source database, I now get the following error when trying to start IPA.
>> >>>
>> >>> ```
>> >>> # ipactl start
>> >>> IPA version error: data needs to be upgraded (expected version
>> '4.12.5-3.fc43', current version '4.12.5-3.fc42')
>> >>> Automatically running upgrade, for details see /var/log/ipaupgrade.log
>> >>> Be patient, this may take a few minutes.
>> >>> Automatic upgrade failed: DN: cn=Schema
>> Compatibility,cn=plugins,cn=config does not exists or haven't been updated
>> >>> Upgrade failed with ''
>> >>> DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or
>> haven't been updated
>> >>> IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run
>> command ipa-server-upgrade manually.
>> >>> ('IPA upgrade failed.', 1)
>> >>> The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for
>> more information
>> >>>
>> >>> See the upgrade log for more details and/or run
>> /usr/sbin/ipa-server-upgrade again
>> >>> Aborting ipactl
>> >>> ```
>> >>> I had to manually touch empty files in
>> /var/lib/dirsrv/slapd-IPA-EXAMPLE-COM/ldif/ to get dsctl to complete
>> correctly(ish): __dblib-changelog.ldif, __dblib-ipaca.ldif and
>> __dblib-userroot.ldif. Nothing was actually written into any of these file,
>> but with them extant it did complete without error.
>> >>> I'm still receiving this error now, with the latest versions of all F43
>> updates code:
>> >>>
>> >>> ```
>> >>> 2025-12-15T20:30:35Z ERROR Upgrade failed with ''
>> >>> 2025-12-15T20:30:35Z ERROR DN: cn=Schema
>> Compatibility,cn=plugins,cn=config does not exists or haven't been updated
>> >>> 2025-12-15T20:30:35Z ERROR IPA server upgrade failed: Inspect
>> /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
>> >>> ```Of course, the only reference I can see to this error was a fix 7
>> years ago. How do I get my IPA back online?
>> >>>
>> >>> Best regards,
>> >>> Eric
>> >>> --
>> >>> _______________________________________________
>> >>> FreeIPA-users mailing list -- >>> >>
>> [email protected]
>> >>> To unsubscribe send an email to >>> >>
>> [email protected]
>> >>> Fedora Code of Conduct: >>> >>
>> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> >>> List Guidelines: >>> >>
>> https://fedoraproject.org/wiki/Mailing_list_guidelines
>> >>> List Archives: >>> >>
>> https://lists.fedorahosted.org/archives/list/[email protected]
>> >>> Do not reply to spam, report it: >>> >>
>> https://pagure.io/fedora-infrastructure/new_issue
>> >>>
>> >
>> >
>>
Dec 19 15:04:12 phobos.ipa.ab-data.us systemd[1]: Starting
[email protected] - 389 Directory Server IPA-AB-DATA-US....
░░ Subject: A start job for unit [email protected] has begun
execution
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit [email protected] has begun execution.
░░
░░ The job identifier is 253076.
Dec 19 15:04:12 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:12.554118482 -0500] - WARN - config_set_ldapi_root_dn - The
"nsslapd-ldapimaprootdn" setting is obsolete and kept for compatibility
reasons. For LDAPI configuration, "nsslapd-rootdn" is used instead.
Dec 19 15:04:12 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:12.638819754 -0500] - NOTICE - config_set_port - Non-Secure
Port Disabled
Dec 19 15:04:12 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:12.749419299 -0500] - INFO - main -
389-Directory/3.1.3.202509220912git3ffa104 B2025.262.0000 starting up
Dec 19 15:04:12 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:12.775693481 -0500] - INFO - main - Setting the maximum file
descriptor limit to: 524288
Dec 19 15:04:12 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:12.801389545 -0500] - INFO - PBKDF2-SHA1 - Number of
iterations set to 100000 from default
Dec 19 15:04:12 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:12.825773593 -0500] - INFO - PBKDF2-SHA1 - Number of
iterations set to 100000 from default
Dec 19 15:04:12 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:12.859096097 -0500] - INFO - PBKDF2-SHA256 - Number of
iterations set to 100000 from default
Dec 19 15:04:12 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:12.875806651 -0500] - INFO - PBKDF2-SHA512 - Number of
iterations set to 100000 from default
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.291310701 -0500] - INFO - PBKDF2_SHA256 - Based on CPU
performance, chose 2048 rounds
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.312693373 -0500] - INFO -
ldbm_instance_config_cachememsize_set - force a minimal value 512000
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.327502711 -0500] - INFO -
ldbm_instance_config_cachememsize_set - force a minimal value 512000
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.335324324 -0500] - INFO -
ldbm_instance_config_cachememsize_set - force a minimal value 512000
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.344002905 -0500] - INFO - dbmdb_make_env - MDB
environment created with maxsize=9171763.
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.358937871 -0500] - INFO - dbmdb_make_env - MDB
environment created with max readers=126.
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.367230605 -0500] - INFO - dbmdb_make_env - MDB
environment created with max database instances=322.
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.414035410 -0500] - INFO - slapd_daemon - New referral
entries are detected under dc=ipa,dc=ab-data,dc=us (returned to SRCH req)
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.437868008 -0500] - INFO - slapd_daemon - New referral
entries are detected under o=ipaca (returned to SRCH req)
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.460094598 -0500] - ERR - schema-compat-plugin - scheduled
schema-compat-plugin tree scan in about 5 seconds after the server startup!
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.502179145 -0500] - WARN - NSACLPlugin - acl_parse - The
ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.511545234 -0500] - ERR - dna-plugin -
dna_parse_config_entry - Unable to locate shared configuration entry
(cn=subordinate-ids,cn=dna,cn=ipa,cn=etc,dc=ipa,dc=ab-data,dc=us)
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.517205612 -0500] - ERR - dna-plugin -
dna_parse_config_entry - Invalid config entry [cn=subordinate
ids,cn=distributed numeric assignment plugin,cn=plugins,cn=config] skipped
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.525677733 -0500] - ERR - dna-plugin -
dna_parse_config_entry - Unable to locate shared configuration entry
(cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=ipa,dc=ab-data,dc=us)
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.533881085 -0500] - ERR - dna-plugin -
dna_parse_config_entry - Invalid config entry [cn=posix ids,cn=distributed
numeric assignment plugin,cn=plugins,cn=config] skipped
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.552170504 -0500] - INFO -
validate_num_config_reservedescriptors - reserve descriptors changed from 64 to
214
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.558912320 -0500] - INFO - connection_table_new - Number
of connection sub-tables 1, each containing 63787 slots.
Dec 19 15:04:13 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:13.577895718 -0500] - INFO - slapd_daemon - slapd started.
Listening on /var/run/slapd-IPA-AB-DATA-US.socket for LDAPI requests
Dec 19 15:04:13 phobos.ipa.ab-data.us systemd[1]: Started
[email protected] - 389 Directory Server IPA-AB-DATA-US..
░░ Subject: A start job for unit [email protected] has finished
successfully
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit [email protected] has finished successfully.
░░
░░ The job identifier is 253076.
Dec 19 15:04:16 phobos.ipa.ab-data.us systemd[1]: Stopping
[email protected] - 389 Directory Server IPA-AB-DATA-US....
░░ Subject: A stop job for unit [email protected] has begun
execution
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A stop job for unit [email protected] has begun execution.
░░
░░ The job identifier is 253323.
Dec 19 15:04:16 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:16.785450843 -0500] - INFO - ct_thread_cleanup - slapd
shutting down - signaling connection table threads
Dec 19 15:04:16 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:16.799648991 -0500] - INFO - op_thread_cleanup - slapd
shutting down - signaling operation threads - op stack size 2 max work q size 2
max work q stack size 2
Dec 19 15:04:16 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:16.810322149 -0500] - INFO - slapd_daemon - slapd shutting
down - waiting for 2 threads to terminate
Dec 19 15:04:16 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:16.970438964 -0500] - INFO - slapd_daemon - slapd shutting
down - accept_thread
Dec 19 15:04:17 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:17.030686011 -0500] - INFO - slapd_daemon - slapd shutting
down - closing down internal subsystems and plugins
Dec 19 15:04:17 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:17.083845853 -0500] - INFO -
ldbm_back_instance_set_destructor - Set of instances destroyed
Dec 19 15:04:17 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:17.091666385 -0500] - INFO -
connection_post_shutdown_cleanup - slapd shutting down - freed 2 work q stack
objects - freed 2 op stack objects
Dec 19 15:04:17 phobos.ipa.ab-data.us ns-slapd[244088]:
[19/Dec/2025:15:04:17.099645938 -0500] - INFO - main - slapd stopped.
Dec 19 15:04:17 phobos.ipa.ab-data.us systemd[1]:
[email protected]: Deactivated successfully.
░░ Subject: Unit succeeded
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ The unit [email protected] has successfully entered the 'dead'
state.
Dec 19 15:04:17 phobos.ipa.ab-data.us systemd[1]: Stopped
[email protected] - 389 Directory Server IPA-AB-DATA-US..
░░ Subject: A stop job for unit [email protected] has finished
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A stop job for unit [email protected] has finished.
░░
░░ The job identifier is 253323 and the job result is done.
Dec 19 15:04:17 phobos.ipa.ab-data.us systemd[1]:
[email protected]: Consumed 2.548s CPU time, 91.2M memory peak.
░░ Subject: Resources consumed by unit runtime
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ The unit [email protected] completed and consumed the indicated
resources.
2025-12-19T20:04:12Z DEBUG Logging to /var/log/ipaupgrade.log
2025-12-19T20:04:12Z DEBUG ipa-server-upgrade was invoked with arguments [] and
options: {'verbose': False, 'quiet': False, 'log_file': None, 'force': False,
'skip_version_check': False}
2025-12-19T20:04:12Z DEBUG IPA version 4.13.0-2.fc43
2025-12-19T20:04:12Z DEBUG IPA platform fedora
2025-12-19T20:04:12Z DEBUG IPA os-release Fedora Linux 43 (Server Edition)
2025-12-19T20:04:12Z DEBUG importing all plugin modules in ipaserver.plugins...
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.aci
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.automember
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.automount
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.baseldap
2025-12-19T20:04:12Z DEBUG ipaserver.plugins.baseldap is not a valid plugin
module
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.baseuser
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.batch
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.ca
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.caacl
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.cert
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.certmap
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.certprofile
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.config
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.delegation
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.dns
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.dnsserver
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.dogtag
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.domainlevel
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.group
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.hbac
2025-12-19T20:04:12Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.hbacrule
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.plugins.hbacsvcgroup
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.hbactest
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.host
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.hostgroup
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.idp
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.idrange
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.idviews
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.internal
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.join
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.ldap2
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.location
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.migration
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.misc
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.netgroup
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.otp
2025-12-19T20:04:12Z DEBUG ipaserver.plugins.otp is not a valid plugin module
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.otpconfig
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.otptoken
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.plugins.passkeyconfig
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.passwd
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.permission
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.ping
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.pkinit
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.privilege
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.rabase
2025-12-19T20:04:12Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.plugins.realmdomains
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.role
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.schema
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.selfservice
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.plugins.selinuxusermap
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.server
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.serverrole
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.serverroles
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.service
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.plugins.servicedelegation
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.session
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.stageuser
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.subid
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.sudo
2025-12-19T20:04:12Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.sudocmd
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.plugins.sudocmdgroup
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.sudorule
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.sysaccounts
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.topology
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.trust
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.user
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.vault
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.virtual
2025-12-19T20:04:12Z DEBUG ipaserver.plugins.virtual is not a valid plugin
module
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.whoami
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.plugins.xmlserver
2025-12-19T20:04:12Z DEBUG importing all plugin modules in
ipaserver.install.plugins...
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.add_admin_krbcanonicalname
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.adtrust
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.ca_renewal_master
2025-12-19T20:04:12Z DEBUG importing plugin module ipaserver.install.plugins.dns
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.fix_kra_people_entry
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.fix_replica_agreements
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.rename_managed
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_ca_topology
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_changelog_maxage
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_dna_shared_config
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_idranges
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_ldap_server_list
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_managed_permissions
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_pacs
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_passsync
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_pwpolicy
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_referint
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_services
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_subid_support
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_unhashed_password
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.update_uniqueness
2025-12-19T20:04:12Z DEBUG importing plugin module
ipaserver.install.plugins.upload_cacrt
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Searching for an interface of IP address: ::1
2025-12-19T20:04:12Z DEBUG Testing local IP address: ::1/128 (interface: lo)
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysupgrade/sysupgrade.state'
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysupgrade/sysupgrade.state'
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysupgrade/sysupgrade.state'
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Loading Index file from
'/var/lib/ipa/sysrestore/sysrestore.index'
2025-12-19T20:04:12Z DEBUG Starting external process
2025-12-19T20:04:12Z DEBUG args=['/bin/systemctl', 'is-active',
'[email protected]']
2025-12-19T20:04:12Z DEBUG Process finished, return code=3
2025-12-19T20:04:12Z DEBUG stdout=inactive
2025-12-19T20:04:12Z DEBUG stderr=
2025-12-19T20:04:12Z DEBUG Upgrading IPA:. Estimated time: 1 minute 30 seconds
2025-12-19T20:04:12Z DEBUG [1/9]: saving configuration
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Saving StateFile to
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Saving StateFile to
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Saving StateFile to
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG Saving StateFile to
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:12Z DEBUG step duration: dirsrv __save_config 0.02 sec
2025-12-19T20:04:12Z DEBUG [2/9]: disabling listeners
2025-12-19T20:04:12Z DEBUG step duration: dirsrv __disable_listeners 0.01 sec
2025-12-19T20:04:12Z DEBUG [3/9]: enabling DS global lock
2025-12-19T20:04:12Z DEBUG step duration: dirsrv __enable_ds_global_write_lock
0.01 sec
2025-12-19T20:04:12Z DEBUG [4/9]: disabling Schema Compat
2025-12-19T20:04:12Z ERROR DN: cn=Schema Compatibility,cn=plugins,cn=config
does not exists or haven't been updated
2025-12-19T20:04:12Z DEBUG step duration: dirsrv __disable_schema_compat 0.02
sec
2025-12-19T20:04:12Z DEBUG [5/9]: starting directory server
2025-12-19T20:04:12Z DEBUG Starting external process
2025-12-19T20:04:12Z DEBUG args=['/bin/systemctl', 'start',
'[email protected]']
2025-12-19T20:04:13Z DEBUG Process finished, return code=0
2025-12-19T20:04:13Z DEBUG stdout=
2025-12-19T20:04:13Z DEBUG stderr=
2025-12-19T20:04:13Z DEBUG Start of [email protected] complete
2025-12-19T20:04:13Z DEBUG Created connection context.ldap2_140196335604064
2025-12-19T20:04:13Z DEBUG step duration: dirsrv __start 1.38 sec
2025-12-19T20:04:13Z DEBUG [6/9]: updating schema
2025-12-19T20:04:13Z DEBUG retrieving schema for SchemaCache
url=ldapi://%2Frun%2Fslapd-IPA-AB-DATA-US.socket
conn=<ldap.ldapobject.SimpleLDAPObject object at 0x7f81ffed4550>
2025-12-19T20:04:14Z DEBUG Processing schema LDIF file
/usr/share/ipa/60kerberos.ldif
2025-12-19T20:04:14Z DEBUG Processing schema LDIF file
/usr/share/ipa/60samba.ldif
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.55 NAME
'sambaLogonHours' DESC 'Logon Hours' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN ( 'IPA v4.13.0' 'user
defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.55 NAME
'sambaLogonHours' DESC 'Logon Hours' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{42} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.42 NAME
'sambaOptionName' DESC 'Option Name' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA
v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.42 NAME
'sambaOptionName' DESC 'Option Name' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} X-ORIGIN
'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.36 NAME
'sambaUserWorkstations' DESC 'List of user workstations the user is allowed to
logon to' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.36 NAME
'sambaUserWorkstations' DESC 'List of user workstations the user is allowed to
logon to' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255}
SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.76 NAME
'sambaTrustAuthIncoming' DESC 'Authentication information for the incoming
portion of a trust' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.76 NAME
'sambaTrustAuthIncoming' DESC 'Authentication information for the incoming
portion of a trust' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{1050} X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.75 NAME
'sambaTrustAuthOutgoing' DESC 'Authentication information for the outgoing
portion of a trust' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.75 NAME
'sambaTrustAuthOutgoing' DESC 'Authentication information for the outgoing
portion of a trust' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{1050} X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.73 NAME
'sambaTrustPartner' DESC 'Fully qualified name of the domain with which a trust
exists' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN
( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.73 NAME
'sambaTrustPartner' DESC 'Fully qualified name of the domain with which a trust
exists' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.25 NAME
'sambaNTPassword' DESC 'MD4 hash of the unicode password' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN (
'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.25 NAME
'sambaNTPassword' DESC 'MD4 hash of the unicode password' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE
X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.51 NAME
'sambaSIDList' DESC 'Security ID List' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.51 NAME
'sambaSIDList' DESC 'Security ID List' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{64} X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.33 NAME
'sambaHomeDrive' DESC 'Driver letter of home directory mapping' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN (
'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.33 NAME
'sambaHomeDrive' DESC 'Driver letter of home directory mapping' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4} SINGLE-VALUE
X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.35 NAME
'sambaProfilePath' DESC 'Roaming profile path' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN ( 'IPA v4.13.0' 'user
defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.35 NAME
'sambaProfilePath' DESC 'Roaming profile path' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.23 NAME
'sambaPrimaryGroupSID' DESC 'Primary Group Security ID' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN (
'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.23 NAME
'sambaPrimaryGroupSID' DESC 'Primary Group Security ID' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE
X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.74 NAME
'sambaFlatName' DESC 'NetBIOS name of a domain' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.74 NAME
'sambaFlatName' DESC 'NetBIOS name of a domain' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{128} X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.24 NAME
'sambaLMPassword' DESC 'LanManager Password' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN ( 'IPA v4.13.0' 'user
defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.24 NAME
'sambaLMPassword' DESC 'LanManager Password' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.38 NAME
'sambaDomainName' DESC 'Windows NT domain to which the user belongs' EQUALITY
caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.13.0'
'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.38 NAME
'sambaDomainName' DESC 'Windows NT domain to which the user belongs' EQUALITY
caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} X-ORIGIN 'IPA
v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.26 NAME
'sambaAcctFlags' DESC 'Account Flags' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN ( 'IPA v4.13.0' 'user
defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.26 NAME
'sambaAcctFlags' DESC 'Account Flags' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{16} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.47 NAME
'sambaMungedDial' DESC 'Base64 encoded user parameter string' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.13.0'
'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.47 NAME
'sambaMungedDial' DESC 'Base64 encoded user parameter string' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} X-ORIGIN 'IPA
v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.34 NAME
'sambaLogonScript' DESC 'Logon script path' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN ( 'IPA v4.13.0' 'user
defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.34 NAME
'sambaLogonScript' DESC 'Logon script path' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.37 NAME
'sambaHomePath' DESC 'Home directory UNC path' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.37 NAME
'sambaHomePath' DESC 'Home directory UNC path' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{128} X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.78 NAME
'sambaTrustForestTrustInfo' DESC 'Forest trust information for a trusted domain
object' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN (
'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.78 NAME
'sambaTrustForestTrustInfo' DESC 'Forest trust information for a trusted domain
object' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050}
X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.77 NAME
'sambaSecurityIdentifier' DESC 'SID of a trusted domain' EQUALITY
caseIgnoreIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN ( 'IPA v4.13.0' 'user
defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.77 NAME
'sambaSecurityIdentifier' DESC 'SID of a trusted domain' EQUALITY
caseIgnoreIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.20 NAME 'sambaSID'
DESC 'Security ID' EQUALITY caseIgnoreIA5Match SUBSTR
caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE
X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.20 NAME 'sambaSID'
DESC 'Security ID' EQUALITY caseIgnoreIA5Match SUBSTR
caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64}
SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.1.54 NAME
'sambaPasswordHistory' DESC 'Concatenated MD5 hashes of the salted NT passwords
used on this account' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.1.54 NAME
'sambaPasswordHistory' DESC 'Concatenated MD5 hashes of the salted NT passwords
used on this account' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{32} X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Schema modlist:
2025-12-19T20:04:14Z DEBUG update_entry modlist [(0, 'attributetypes', [b"(
1.3.6.1.4.1.7165.2.1.55 NAME 'sambaLogonHours' DESC 'Logon Hours' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{42} SINGLE-VALUE
X-ORIGIN 'IPA v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.1.42 NAME 'sambaOptionName'
DESC 'Option Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.36 NAME 'sambaUserWorkstations' DESC 'List of user
workstations the user is allowed to logon to' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.76 NAME 'sambaTrustAuthIncoming' DESC 'Authentication
information for the incoming portion of a trust' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{1050} X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.75 NAME 'sambaTrustAuthOutgoing' DESC 'Authentication
information for the outgoing portion of a trust' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{1050} X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.73 NAME 'sambaTrustPartner' DESC 'Fully qualified name of
the domain with which a trust exists' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{128} X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.25 NAME 'sambaNTPassword' DESC 'MD4 hash of the unicode
password' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32}
SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.1.51 NAME
'sambaSIDList' DESC 'Security ID List' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{64} X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.33 NAME 'sambaHomeDrive' DESC 'Driver letter of home
directory mapping' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{4} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.35 NAME 'sambaProfilePath' DESC 'Roaming profile path'
EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE
X-ORIGIN 'IPA v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.1.23 NAME
'sambaPrimaryGroupSID' DESC 'Primary Group Security ID' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE
X-ORIGIN 'IPA v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.1.74 NAME 'sambaFlatName'
DESC 'NetBIOS name of a domain' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{128} X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.24 NAME 'sambaLMPassword' DESC 'LanManager Password'
EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32}
SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.1.38 NAME
'sambaDomainName' DESC 'Windows NT domain to which the user belongs' EQUALITY
caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} X-ORIGIN 'IPA
v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.1.26 NAME 'sambaAcctFlags' DESC 'Account
Flags' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{16}
SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.1.47 NAME
'sambaMungedDial' DESC 'Base64 encoded user parameter string' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} X-ORIGIN 'IPA
v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.1.34 NAME 'sambaLogonScript' DESC 'Logon
script path' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255}
SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.1.37 NAME
'sambaHomePath' DESC 'Home directory UNC path' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{128} X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.78 NAME 'sambaTrustForestTrustInfo' DESC 'Forest trust
information for a trusted domain object' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{1050} X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.77 NAME 'sambaSecurityIdentifier' DESC 'SID of a trusted
domain' EQUALITY caseIgnoreIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.20 NAME 'sambaSID' DESC 'Security ID' EQUALITY
caseIgnoreIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.1.54 NAME 'sambaPasswordHistory' DESC 'Concatenated MD5
hashes of the salted NT passwords used on this account' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} X-ORIGIN 'IPA
v4.13.0' )"])]
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.16 NAME
'sambaTrustedDomain' DESC 'Samba Trusted Domain Object' SUP top STRUCTURAL MUST
cn MAY ( sambaTrustType $ sambaTrustAttributes $ sambaTrustDirection $
sambaTrustPartner $ sambaFlatName $ sambaTrustAuthOutgoing $
sambaTrustAuthIncoming $ sambaSecurityIdentifier $ sambaTrustForestTrustInfo $
sambaTrustPosixOffset $ sambaSupportedEncryptionTypes ) X-ORIGIN ( 'IPA
v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.16 NAME
'sambaTrustedDomain' DESC 'Samba Trusted Domain Object' SUP top STRUCTURAL MUST
cn MAY ( sambaTrustType $ sambaTrustAttributes $ sambaTrustDirection $
sambaTrustPartner $ sambaFlatName $ sambaTrustAuthOutgoing $
sambaTrustAuthIncoming $ sambaSecurityIdentifier $ sambaTrustForestTrustInfo $
sambaTrustPosixOffset $ sambaSupportedEncryptionTypes ) X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.9 NAME
'sambaSidEntry' DESC 'Structural Class for a SID' SUP top STRUCTURAL MUST
sambaSID X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.9 NAME
'sambaSidEntry' DESC 'Structural Class for a SID' SUP top STRUCTURAL MUST
sambaSID X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.7 NAME
'sambaUnixIdPool' DESC 'Pool for allocating UNIX uids/gids' SUP top AUXILIARY
MUST ( uidNumber $ gidNumber ) X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.7 NAME
'sambaUnixIdPool' DESC 'Pool for allocating UNIX uids/gids' SUP top AUXILIARY
MUST ( uidNumber $ gidNumber ) X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.6 NAME
'sambaSamAccount' DESC 'Samba 3.0 Auxilary SAM Account' SUP top AUXILIARY MUST
( uid $ sambaSID ) MAY ( cn $ sambaLMPassword $ sambaNTPassword $
sambaPwdLastSet $ sambaLogonTime $ sambaLogoffTime $ sambaKickoffTime $
sambaPwdCanChange $ sambaPwdMustChange $ sambaAcctFlags $ displayName $
sambaHomePath $ sambaHomeDrive $ sambaLogonScript $ sambaProfilePath $
description $ sambaUserWorkstations $ sambaPrimaryGroupSID $ sambaDomainName $
sambaMungedDial $ sambaBadPasswordCount $ sambaBadPasswordTime $
sambaPasswordHistory $ sambaLogonHours ) X-ORIGIN ( 'IPA v4.13.0' 'user
defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.6 NAME
'sambaSamAccount' DESC 'Samba 3.0 Auxilary SAM Account' SUP top AUXILIARY MUST
( uid $ sambaSID ) MAY ( cn $ sambaLMPassword $ sambaNTPassword $
sambaPwdLastSet $ sambaLogonTime $ sambaLogoffTime $ sambaKickoffTime $
sambaPwdCanChange $ sambaPwdMustChange $ sambaAcctFlags $ displayName $
sambaHomePath $ sambaHomeDrive $ sambaLogonScript $ sambaProfilePath $
description $ sambaUserWorkstations $ sambaPrimaryGroupSID $ sambaDomainName $
sambaMungedDial $ sambaBadPasswordCount $ sambaBadPasswordTime $
sambaPasswordHistory $ sambaLogonHours ) X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.5 NAME 'sambaDomain'
DESC 'Samba Domain Information' SUP top STRUCTURAL MUST ( sambaDomainName $
sambaSID ) MAY ( sambaNextRid $ sambaNextGroupRid $ sambaNextUserRid $
sambaAlgorithmicRidBase $ sambaMinPwdLength $ sambaPwdHistoryLength $
sambaLogonToChgPwd $ sambaMaxPwdAge $ sambaMinPwdAge $ sambaLockoutDuration $
sambaLockoutObservationWindow $ sambaLockoutThreshold $ sambaForceLogoff $
sambaRefuseMachinePwdChange ) X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.5 NAME 'sambaDomain'
DESC 'Samba Domain Information' SUP top STRUCTURAL MUST ( sambaDomainName $
sambaSID ) MAY ( sambaNextRid $ sambaNextGroupRid $ sambaNextUserRid $
sambaAlgorithmicRidBase $ sambaMinPwdLength $ sambaPwdHistoryLength $
sambaLogonToChgPwd $ sambaMaxPwdAge $ sambaMinPwdAge $ sambaLockoutDuration $
sambaLockoutObservationWindow $ sambaLockoutThreshold $ sambaForceLogoff $
sambaRefuseMachinePwdChange ) X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.8 NAME
'sambaIdmapEntry' DESC 'Mapping from a SID to an ID' SUP top AUXILIARY MUST
sambaSID MAY ( uidNumber $ gidNumber ) X-ORIGIN ( 'IPA v4.13.0' 'user defined'
) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.8 NAME
'sambaIdmapEntry' DESC 'Mapping from a SID to an ID' SUP top AUXILIARY MUST
sambaSID MAY ( uidNumber $ gidNumber ) X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.12 NAME
'sambaConfigOption' DESC 'Samba Configuration Option' SUP top STRUCTURAL MUST
sambaOptionName MAY ( sambaBoolOption $ sambaIntegerOption $ sambaStringOption
$ sambaStringListOption $ description ) X-ORIGIN ( 'IPA v4.13.0' 'user defined'
) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.12 NAME
'sambaConfigOption' DESC 'Samba Configuration Option' SUP top STRUCTURAL MUST
sambaOptionName MAY ( sambaBoolOption $ sambaIntegerOption $ sambaStringOption
$ sambaStringListOption $ description ) X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.15 NAME
'sambaTrustedDomainPassword' DESC 'Samba Trusted Domain Password' SUP top
STRUCTURAL MUST ( sambaDomainName $ sambaSID $ sambaClearTextPassword $
sambaPwdLastSet ) MAY sambaPreviousClearTextPassword X-ORIGIN ( 'IPA v4.13.0'
'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.15 NAME
'sambaTrustedDomainPassword' DESC 'Samba Trusted Domain Password' SUP top
STRUCTURAL MUST ( sambaDomainName $ sambaSID $ sambaClearTextPassword $
sambaPwdLastSet ) MAY sambaPreviousClearTextPassword X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.4 NAME
'sambaGroupMapping' DESC 'Samba Group Mapping' SUP top AUXILIARY MUST (
gidNumber $ sambaSID $ sambaGroupType ) MAY ( displayName $ description $
sambaSIDList ) X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.4 NAME
'sambaGroupMapping' DESC 'Samba Group Mapping' SUP top AUXILIARY MUST (
gidNumber $ sambaSID $ sambaGroupType ) MAY ( displayName $ description $
sambaSIDList ) X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.10 NAME
'sambaConfig' DESC 'Samba Configuration Section' SUP top AUXILIARY MAY
description X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.10 NAME
'sambaConfig' DESC 'Samba Configuration Section' SUP top AUXILIARY MAY
description X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.11 NAME 'sambaShare'
DESC 'Samba Share Section' SUP top STRUCTURAL MUST sambaShareName MAY
description X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.11 NAME 'sambaShare'
DESC 'Samba Share Section' SUP top STRUCTURAL MUST sambaShareName MAY
description X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.4.1.7165.2.2.14 NAME
'sambaTrustPassword' DESC 'Samba Trust Password' SUP top STRUCTURAL MUST (
sambaDomainName $ sambaNTPassword $ sambaTrustFlags ) MAY ( sambaSID $
sambaPwdLastSet ) X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.4.1.7165.2.2.14 NAME
'sambaTrustPassword' DESC 'Samba Trust Password' SUP top STRUCTURAL MUST (
sambaDomainName $ sambaNTPassword $ sambaTrustFlags ) MAY ( sambaSID $
sambaPwdLastSet ) X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Schema modlist:
2025-12-19T20:04:14Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
1.3.6.1.4.1.7165.2.2.16 NAME 'sambaTrustedDomain' DESC 'Samba Trusted Domain
Object' SUP top STRUCTURAL MUST cn MAY ( sambaTrustType $ sambaTrustAttributes
$ sambaTrustDirection $ sambaTrustPartner $ sambaFlatName $
sambaTrustAuthOutgoing $ sambaTrustAuthIncoming $ sambaSecurityIdentifier $
sambaTrustForestTrustInfo $ sambaTrustPosixOffset $
sambaSupportedEncryptionTypes ) X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.2.9 NAME 'sambaSidEntry' DESC 'Structural Class for a SID'
SUP top STRUCTURAL MUST sambaSID X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.2.7 NAME 'sambaUnixIdPool' DESC 'Pool for allocating UNIX
uids/gids' SUP top AUXILIARY MUST ( uidNumber $ gidNumber ) X-ORIGIN 'IPA
v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.2.6 NAME 'sambaSamAccount' DESC 'Samba 3.0
Auxilary SAM Account' SUP top AUXILIARY MUST ( uid $ sambaSID ) MAY ( cn $
sambaLMPassword $ sambaNTPassword $ sambaPwdLastSet $ sambaLogonTime $
sambaLogoffTime $ sambaKickoffTime $ sambaPwdCanChange $ sambaPwdMustChange $
sambaAcctFlags $ displayName $ sambaHomePath $ sambaHomeDrive $
sambaLogonScript $ sambaProfilePath $ description $ sambaUserWorkstations $
sambaPrimaryGroupSID $ sambaDomainName $ sambaMungedDial $
sambaBadPasswordCount $ sambaBadPasswordTime $ sambaPasswordHistory $
sambaLogonHours ) X-ORIGIN 'IPA v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.2.5 NAME
'sambaDomain' DESC 'Samba Domain Information' SUP top STRUCTURAL MUST (
sambaDomainName $ sambaSID ) MAY ( sambaNextRid $ sambaNextGroupRid $
sambaNextUserRid $ sambaAlgorithmicRidBase $ sambaMinPwdLength $
sambaPwdHistoryLength $ sambaLogonToChgPwd $ sambaMaxPwdAge $ sambaMinPwdAge $
sambaLockoutDuration $ sambaLockoutObservationWindow $ sambaLockoutThreshold $
sambaForceLogoff $ sambaRefuseMachinePwdChange ) X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.2.8 NAME 'sambaIdmapEntry' DESC 'Mapping from a SID to an
ID' SUP top AUXILIARY MUST sambaSID MAY ( uidNumber $ gidNumber ) X-ORIGIN 'IPA
v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.2.12 NAME 'sambaConfigOption' DESC 'Samba
Configuration Option' SUP top STRUCTURAL MUST sambaOptionName MAY (
sambaBoolOption $ sambaIntegerOption $ sambaStringOption $
sambaStringListOption $ description ) X-ORIGIN 'IPA v4.13.0' )", b"(
1.3.6.1.4.1.7165.2.2.15 NAME 'sambaTrustedDomainPassword' DESC 'Samba Trusted
Domain Password' SUP top STRUCTURAL MUST ( sambaDomainName $ sambaSID $
sambaClearTextPassword $ sambaPwdLastSet ) MAY sambaPreviousClearTextPassword
X-ORIGIN 'IPA v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.2.4 NAME 'sambaGroupMapping'
DESC 'Samba Group Mapping' SUP top AUXILIARY MUST ( gidNumber $ sambaSID $
sambaGroupType ) MAY ( displayName $ description $ sambaSIDList ) X-ORIGIN 'IPA
v4.13.0' )", b"( 1.3.6.1.4.1.7165.2.2.10 NAME 'sambaConfig' DESC 'Samba
Configuration Section' SUP top AUXILIARY MAY description X-ORIGIN 'IPA v4.13.0'
)", b"( 1.3.6.1.4.1.7165.2.2.11 NAME 'sambaShare' DESC 'Samba Share Section'
SUP top STRUCTURAL MUST sambaShareName MAY description X-ORIGIN 'IPA v4.13.0'
)", b"( 1.3.6.1.4.1.7165.2.2.14 NAME 'sambaTrustPassword' DESC 'Samba Trust
Password' SUP top STRUCTURAL MUST ( sambaDomainName $ sambaNTPassword $
sambaTrustFlags ) MAY ( sambaSID $ sambaPwdLastSet ) X-ORIGIN 'IPA v4.13.0'
)"])]
2025-12-19T20:04:14Z DEBUG Processing schema LDIF file
/usr/share/ipa/60ipaconfig.ldif
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.1.14 NAME
'ipaServiceKeyTypeSize' DESC 'Key type and size for IPA certs' SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN ( 'IPA v4.12' 'user
defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.1.14 NAME
'ipaServiceKeyTypeSize' DESC 'Key type and size for IPA certs' SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'IPA v4.12' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.14 NAME
'ipaUserDefaultSubordinateId' DESC 'Enable adding user entries with subordinate
id' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN ( 'IPA v4.9'
'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.14 NAME
'ipaUserDefaultSubordinateId' DESC 'Enable adding user entries with subordinate
id' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:14Z DEBUG Schema modlist:
2025-12-19T20:04:14Z DEBUG update_entry modlist [(0, 'attributetypes', [b"(
2.16.840.1.113730.3.8.1.14 NAME 'ipaServiceKeyTypeSize' DESC 'Key type and size
for IPA certs' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'IPA
v4.12' )", b"( 2.16.840.1.113730.3.8.23.14 NAME 'ipaUserDefaultSubordinateId'
DESC 'Enable adding user entries with subordinate id' SYNTAX
1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN 'IPA v4.9' )"])]
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.2.1 NAME
'ipaGuiConfig' AUXILIARY MAY ( ipaUserSearchFields $ ipaGroupSearchFields $
ipaSearchTimeLimit $ ipaSearchRecordsLimit $ ipaCustomFields $ ipaHomesRootDir
$ ipaDefaultLoginShell $ ipaDefaultPrimaryGroup $ ipaMaxUsernameLength $
ipaPwdExpAdvNotify $ ipaUserObjectClasses $ ipaGroupObjectClasses $
ipaDefaultEmailDomain $ ipaMigrationEnabled $ ipaCertificateSubjectBase $
ipaSELinuxUserMapDefault $ ipaSELinuxUserMapOrder $ ipaKrbAuthzData $
ipaMaxHostnameLength $ ipaUserDefaultSubordinateId $ ipaServiceKeyTypeSize )
X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.2.1 NAME
'ipaGuiConfig' AUXILIARY MAY ( ipaUserSearchFields $ ipaGroupSearchFields $
ipaSearchTimeLimit $ ipaSearchRecordsLimit $ ipaCustomFields $ ipaHomesRootDir
$ ipaDefaultLoginShell $ ipaDefaultPrimaryGroup $ ipaMaxUsernameLength $
ipaPwdExpAdvNotify $ ipaUserObjectClasses $ ipaGroupObjectClasses $
ipaDefaultEmailDomain $ ipaMigrationEnabled $ ipaCertificateSubjectBase $
ipaSELinuxUserMapDefault $ ipaSELinuxUserMapOrder $ ipaKrbAuthzData $
ipaMaxHostnameLength $ ipaUserDefaultSubordinateId $ ipaServiceKeyTypeSize )
X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Schema modlist:
2025-12-19T20:04:14Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
2.16.840.1.113730.3.8.2.1 NAME 'ipaGuiConfig' AUXILIARY MAY (
ipaUserSearchFields $ ipaGroupSearchFields $ ipaSearchTimeLimit $
ipaSearchRecordsLimit $ ipaCustomFields $ ipaHomesRootDir $
ipaDefaultLoginShell $ ipaDefaultPrimaryGroup $ ipaMaxUsernameLength $
ipaPwdExpAdvNotify $ ipaUserObjectClasses $ ipaGroupObjectClasses $
ipaDefaultEmailDomain $ ipaMigrationEnabled $ ipaCertificateSubjectBase $
ipaSELinuxUserMapDefault $ ipaSELinuxUserMapOrder $ ipaKrbAuthzData $
ipaMaxHostnameLength $ ipaUserDefaultSubordinateId $ ipaServiceKeyTypeSize )
X-ORIGIN 'IPA v4.13.0' )"])]
2025-12-19T20:04:14Z DEBUG Processing schema LDIF file
/usr/share/ipa/60basev2.ldif
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.4 NAME
'ipaPwdDictCheck' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE X-ORIGIN ( 'IPA v4' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.4 NAME
'ipaPwdDictCheck' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE X-ORIGIN 'IPA v4' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.31 NAME
'ipaPwdOcredit' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN ( 'IPA v4' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.31 NAME
'ipaPwdOcredit' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN 'IPA v4' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.5 NAME
'ipaPwdUserCheck' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE X-ORIGIN ( 'IPA v4' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.5 NAME
'ipaPwdUserCheck' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE X-ORIGIN 'IPA v4' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.28 NAME
'ipaPwdDcredit' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN ( 'IPA v4' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.28 NAME
'ipaPwdDcredit' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN 'IPA v4' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.2 NAME
'ipaPwdMaxRepeat' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN ( 'IPA v4' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.2 NAME
'ipaPwdMaxRepeat' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN 'IPA v4' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.3 NAME
'ipaPwdMaxSequence' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN ( 'IPA v4' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.3 NAME
'ipaPwdMaxSequence' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN 'IPA v4' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.29 NAME
'ipaPwdUcredit' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN ( 'IPA v4' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.29 NAME
'ipaPwdUcredit' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN 'IPA v4' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.30 NAME
'ipaPwdLcredit' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN ( 'IPA v4' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.30 NAME
'ipaPwdLcredit' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN 'IPA v4' )
2025-12-19T20:04:14Z DEBUG Schema modlist:
2025-12-19T20:04:14Z DEBUG update_entry modlist [(0, 'attributetypes', [b"(
2.16.840.1.113730.3.8.23.4 NAME 'ipaPwdDictCheck' EQUALITY booleanMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN 'IPA v4' )", b"(
2.16.840.1.113730.3.8.23.31 NAME 'ipaPwdOcredit' EQUALITY integerMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4' )", b"(
2.16.840.1.113730.3.8.23.5 NAME 'ipaPwdUserCheck' EQUALITY booleanMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN 'IPA v4' )", b"(
2.16.840.1.113730.3.8.23.28 NAME 'ipaPwdDcredit' EQUALITY integerMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4' )", b"(
2.16.840.1.113730.3.8.23.2 NAME 'ipaPwdMaxRepeat' EQUALITY integerMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4' )", b"(
2.16.840.1.113730.3.8.23.3 NAME 'ipaPwdMaxSequence' EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4' )", b"(
2.16.840.1.113730.3.8.23.29 NAME 'ipaPwdUcredit' EQUALITY integerMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4' )", b"(
2.16.840.1.113730.3.8.23.30 NAME 'ipaPwdLcredit' EQUALITY integerMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4' )"])]
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.1.1.2.17 NAME 'automount' DESC
'Automount information' SUP top STRUCTURAL MUST ( automountKey $
automountInformation ) MAY description X-ORIGIN ( 'RFC 2307bis' 'user defined'
) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.1.1.2.17 NAME 'automount' DESC
'Automount information' SUP top STRUCTURAL MUST ( automountKey $
automountInformation ) MAY description X-ORIGIN 'RFC 2307bis' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.1 NAME
'ipaPwdPolicy' DESC 'IPA Password policy object class' SUP top STRUCTURAL MAY (
ipaPwdMaxRepeat $ ipaPwdMaxSequence $ ipaPwdDictCheck $ ipaPwdUserCheck $
ipaPwdDcredit $ ipaPwdUcredit $ ipaPwdLcredit $ ipaPwdOcredit $
passwordGraceLimit ) X-ORIGIN ( 'IPA v4' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.24.1 NAME
'ipaPwdPolicy' DESC 'IPA Password policy object class' SUP top STRUCTURAL MAY (
ipaPwdMaxRepeat $ ipaPwdMaxSequence $ ipaPwdDictCheck $ ipaPwdUserCheck $
ipaPwdDcredit $ ipaPwdUcredit $ ipaPwdLcredit $ ipaPwdOcredit $
passwordGraceLimit ) X-ORIGIN 'IPA v4' )
2025-12-19T20:04:14Z DEBUG Replace: ( 1.3.6.1.1.1.2.16 NAME 'automountMap' DESC
'Automount Map information' SUP top STRUCTURAL MUST automountMapName MAY
description X-ORIGIN ( 'RFC 2307bis' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 1.3.6.1.1.1.2.16 NAME 'automountMap' DESC
'Automount Map information' SUP top STRUCTURAL MUST automountMapName MAY
description X-ORIGIN 'RFC 2307bis' )
2025-12-19T20:04:14Z DEBUG Schema modlist:
2025-12-19T20:04:14Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
1.3.6.1.1.1.2.17 NAME 'automount' DESC 'Automount information' SUP top
STRUCTURAL MUST ( automountKey $ automountInformation ) MAY description
X-ORIGIN 'RFC 2307bis' )", b"( 2.16.840.1.113730.3.8.24.1 NAME 'ipaPwdPolicy'
DESC 'IPA Password policy object class' SUP top STRUCTURAL MAY (
ipaPwdMaxRepeat $ ipaPwdMaxSequence $ ipaPwdDictCheck $ ipaPwdUserCheck $
ipaPwdDcredit $ ipaPwdUcredit $ ipaPwdLcredit $ ipaPwdOcredit $
passwordGraceLimit ) X-ORIGIN 'IPA v4' )", b"( 1.3.6.1.1.1.2.16 NAME
'automountMap' DESC 'Automount Map information' SUP top STRUCTURAL MUST
automountMapName MAY description X-ORIGIN 'RFC 2307bis' )"])]
2025-12-19T20:04:14Z DEBUG Processing schema LDIF file
/usr/share/ipa/60basev3.ldif
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.11.51 NAME
'ipaAllowedToPerform' DESC 'DNs allowed to perform an operation' SUP
distinguishedName EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN ( 'IPA v4.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.11.51 NAME
'ipaAllowedToPerform' DESC 'DNs allowed to perform an operation' SUP
distinguishedName X-ORIGIN 'IPA v4.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.11.52 NAME
'ipaProtectedOperation' DESC 'Operation to be protected' EQUALITY
caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.13.0'
'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.11.52 NAME
'ipaProtectedOperation' DESC 'Operation to be protected' EQUALITY
caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} X-ORIGIN 'IPA
v4.13.0' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.6 NAME
'ipaAutoPrivateGroups' DESC 'Auto private groups' EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.23.6 NAME
'ipaAutoPrivateGroups' DESC 'Auto private groups' EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:14Z DEBUG Replace: ( 2.16.840.1.113730.3.8.11.14 NAME
'ipaNTTrustPartner' DESC 'Fully qualified name of the domain with which a trust
exists' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN
( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:14Z DEBUG with: ( 2.16.840.1.113730.3.8.11.14 NAME
'ipaNTTrustPartner' DESC 'Fully qualified name of the domain with which a trust
exists' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:14Z DEBUG Schema modlist:
2025-12-19T20:04:14Z DEBUG update_entry modlist [(0, 'attributetypes', [b"(
2.16.840.1.113730.3.8.11.51 NAME 'ipaAllowedToPerform' DESC 'DNs allowed to
perform an operation' SUP distinguishedName X-ORIGIN 'IPA v4.0' )", b"(
2.16.840.1.113730.3.8.11.52 NAME 'ipaProtectedOperation' DESC 'Operation to be
protected' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
X-ORIGIN 'IPA v4.13.0' )", b"( 2.16.840.1.113730.3.8.23.6 NAME
'ipaAutoPrivateGroups' DESC 'Auto private groups' EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
X-ORIGIN 'IPA v4.9' )", b"( 2.16.840.1.113730.3.8.11.14 NAME
'ipaNTTrustPartner' DESC 'Fully qualified name of the domain with which a trust
exists' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
X-ORIGIN 'IPA v4.13.0' )"])]
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.12.17 NAME
'ipaTrustedADDomainRange' SUP ipaIDrange STRUCTURAL MUST ( ipaBaseRID $
ipaNTTrustedDomainSID ) MAY ipaAutoPrivateGroups X-ORIGIN ( 'IPA v3' 'user
defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.12.17 NAME
'ipaTrustedADDomainRange' SUP ipaIDrange STRUCTURAL MUST ( ipaBaseRID $
ipaNTTrustedDomainSID ) MAY ipaAutoPrivateGroups X-ORIGIN 'IPA v3' )
2025-12-19T20:04:15Z DEBUG Schema modlist:
2025-12-19T20:04:15Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
2.16.840.1.113730.3.8.12.17 NAME 'ipaTrustedADDomainRange' SUP ipaIDrange
STRUCTURAL MUST ( ipaBaseRID $ ipaNTTrustedDomainSID ) MAY ipaAutoPrivateGroups
X-ORIGIN 'IPA v3' )"])]
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/60basev4.ldif
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.26 NAME
'ipaRequireUserVerification' DESC 'require passkey user verification' EQUALITY
booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN ( 'IPA
v4.10' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.26 NAME
'ipaRequireUserVerification' DESC 'require passkey user verification' EQUALITY
booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN 'IPA
v4.10' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.25 NAME
'ipaIdpKeysEndpoint' DESC 'Identity Provider JWKS Endpoint' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.9' 'user
defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.25 NAME
'ipaIdpKeysEndpoint' DESC 'Identity Provider JWKS Endpoint' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.20 NAME
'ipaIdpScope' DESC 'Identity Provider Scope' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.20 NAME
'ipaIdpScope' DESC 'Identity Provider Scope' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.8 NAME
'ipaSubUidCount' DESC 'Subordinate user ID count (range size)' EQUALITY
integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.8 NAME
'ipaSubUidCount' DESC 'Subordinate user ID count (range size)' EQUALITY
integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.10 NAME
'ipaSubGidNumber' DESC 'Numerical subordinate group ID (range start value)'
EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN ( 'IPA v4.9' 'user defined'
) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.10 NAME
'ipaSubGidNumber' DESC 'Numerical subordinate group ID (range start value)'
EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.17 NAME
'ipaIdpTokenEndpoint' DESC 'Identity Provider Token Endpoint' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.9' 'user
defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.17 NAME
'ipaIdpTokenEndpoint' DESC 'Identity Provider Token Endpoint' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.18 NAME
'ipaIdpClientId' DESC 'Identity Provider Client Identifier' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.9' 'user
defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.18 NAME
'ipaIdpClientId' DESC 'Identity Provider Client Identifier' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.13 NAME
'ipaOwner' DESC 'Owner of an entry' SUP distinguishedName EQUALITY
distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE
X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.13 NAME
'ipaOwner' DESC 'Owner of an entry' SUP distinguishedName EQUALITY
distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE
X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.23 NAME
'ipaIdpIssuerURL' DESC 'Identity Provider OIDC URL' EQUALITY caseExactMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.23 NAME
'ipaIdpIssuerURL' DESC 'Identity Provider OIDC URL' EQUALITY caseExactMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.22 NAME
'ipaIdpSub' DESC 'Identity Provider User Subject' EQUALITY caseExactMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.22 NAME
'ipaIdpSub' DESC 'Identity Provider User Subject' EQUALITY caseExactMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.27 NAME
'ipapasskey' DESC 'Passkey mapping' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.10' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.27 NAME
'ipapasskey' DESC 'Passkey mapping' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.10' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.16 NAME
'ipaIdpAuthEndpoint' DESC 'Identity Provider Authorization Endpoint' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.9' 'user
defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.16 NAME
'ipaIdpAuthEndpoint' DESC 'Identity Provider Authorization Endpoint' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.19 NAME
'ipaIdpClientSecret' DESC 'Identity Provider Client Secret' EQUALITY
octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 X-ORIGIN ( 'IPA v4.9'
'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.19 NAME
'ipaIdpClientSecret' DESC 'Identity Provider Client Secret' EQUALITY
octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.24 NAME
'ipaIdpUserInfoEndpoint' DESC 'Identity Provider UserInfo Endpoint' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA v4.9' 'user
defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.24 NAME
'ipaIdpUserInfoEndpoint' DESC 'Identity Provider UserInfo Endpoint' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.7 NAME
'ipaSubUidNumber' DESC 'Numerical subordinate user ID (range start value)'
EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN ( 'IPA v4.9' 'user defined'
) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.7 NAME
'ipaSubUidNumber' DESC 'Numerical subordinate user ID (range start value)'
EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.21 NAME
'ipaIdpConfigLink' DESC 'Corresponding Identity Provider Configuration link'
SUP distinguishedName EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE X-ORIGIN ( 'IPA v4.9' 'user defined'
) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.21 NAME
'ipaIdpConfigLink' DESC 'Corresponding Identity Provider Configuration link'
SUP distinguishedName EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.15 NAME
'ipaIdpDevAuthEndpoint' DESC 'Identity Provider Device Authorization Endpoint'
EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN ( 'IPA
v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.15 NAME
'ipaIdpDevAuthEndpoint' DESC 'Identity Provider Device Authorization Endpoint'
EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA
v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.23.11 NAME
'ipaSubGidCount' DESC 'Subordinate group ID count (range size)' EQUALITY
integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.23.11 NAME
'ipaSubGidCount' DESC 'Subordinate group ID count (range size)' EQUALITY
integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Schema modlist:
2025-12-19T20:04:15Z DEBUG update_entry modlist [(0, 'attributetypes', [b"(
2.16.840.1.113730.3.8.23.26 NAME 'ipaRequireUserVerification' DESC 'require
passkey user verification' EQUALITY booleanMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN 'IPA v4.10' )", b"(
2.16.840.1.113730.3.8.23.25 NAME 'ipaIdpKeysEndpoint' DESC 'Identity Provider
JWKS Endpoint' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
X-ORIGIN 'IPA v4.9' )", b"( 2.16.840.1.113730.3.8.23.20 NAME 'ipaIdpScope' DESC
'Identity Provider Scope' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )", b"(
2.16.840.1.113730.3.8.23.8 NAME 'ipaSubUidCount' DESC 'Subordinate user ID
count (range size)' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4.9' )", b"(
2.16.840.1.113730.3.8.23.10 NAME 'ipaSubGidNumber' DESC 'Numerical subordinate
group ID (range start value)' EQUALITY integerMatch ORDERING
integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN
'IPA v4.9' )", b"( 2.16.840.1.113730.3.8.23.17 NAME 'ipaIdpTokenEndpoint' DESC
'Identity Provider Token Endpoint' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )", b"(
2.16.840.1.113730.3.8.23.18 NAME 'ipaIdpClientId' DESC 'Identity Provider
Client Identifier' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
X-ORIGIN 'IPA v4.9' )", b"( 2.16.840.1.113730.3.8.23.13 NAME 'ipaOwner' DESC
'Owner of an entry' SUP distinguishedName EQUALITY distinguishedNameMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE X-ORIGIN 'IPA v4.9' )", b"(
2.16.840.1.113730.3.8.23.23 NAME 'ipaIdpIssuerURL' DESC 'Identity Provider OIDC
URL' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA
v4.9' )", b"( 2.16.840.1.113730.3.8.23.22 NAME 'ipaIdpSub' DESC 'Identity
Provider User Subject' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )", b"(
2.16.840.1.113730.3.8.23.27 NAME 'ipapasskey' DESC 'Passkey mapping' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.10' )",
b"( 2.16.840.1.113730.3.8.23.16 NAME 'ipaIdpAuthEndpoint' DESC 'Identity
Provider Authorization Endpoint' EQUALITY caseExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )", b"(
2.16.840.1.113730.3.8.23.19 NAME 'ipaIdpClientSecret' DESC 'Identity Provider
Client Secret' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
X-ORIGIN 'IPA v4.9' )", b"( 2.16.840.1.113730.3.8.23.24 NAME
'ipaIdpUserInfoEndpoint' DESC 'Identity Provider UserInfo Endpoint' EQUALITY
caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v4.9' )", b"(
2.16.840.1.113730.3.8.23.7 NAME 'ipaSubUidNumber' DESC 'Numerical subordinate
user ID (range start value)' EQUALITY integerMatch ORDERING
integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN
'IPA v4.9' )", b"( 2.16.840.1.113730.3.8.23.21 NAME 'ipaIdpConfigLink' DESC
'Corresponding Identity Provider Configuration link' SUP distinguishedName
EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
SINGLE-VALUE X-ORIGIN 'IPA v4.9' )", b"( 2.16.840.1.113730.3.8.23.15 NAME
'ipaIdpDevAuthEndpoint' DESC 'Identity Provider Device Authorization Endpoint'
EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA
v4.9' )", b"( 2.16.840.1.113730.3.8.23.11 NAME 'ipaSubGidCount' DESC
'Subordinate group ID count (range size)' EQUALITY integerMatch ORDERING
integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN
'IPA v4.9' )"])]
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.8 NAME
'ipaPasskeyConfigObject' DESC 'IPA passkey global config options' AUXILIARY
MUST ipaRequireUserVerification X-ORIGIN ( 'IPA v4.10' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.24.8 NAME
'ipaPasskeyConfigObject' DESC 'IPA passkey global config options' AUXILIARY
MUST ipaRequireUserVerification X-ORIGIN 'IPA v4.10' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.7 NAME
'ipaIdpUser' DESC 'User from an external Identity Provider ' SUP top AUXILIARY
MAY ( ipaIdpConfigLink $ ipaIdpSub ) X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.24.7 NAME
'ipaIdpUser' DESC 'User from an external Identity Provider ' SUP top AUXILIARY
MAY ( ipaIdpConfigLink $ ipaIdpSub ) X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.5 NAME
'ipaSubordinateIdEntry' DESC 'Subordinate uid and gid entry' SUP top STRUCTURAL
MUST ipaUniqueID MAY description X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.24.5 NAME
'ipaSubordinateIdEntry' DESC 'Subordinate uid and gid entry' SUP top STRUCTURAL
MUST ipaUniqueId MAY description X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.4 NAME
'ipaSubordinateId' DESC 'Subordinate uid and gid for users' SUP top AUXILIARY
MUST ( ipaOwner $ ipaSubUidNumber $ ipaSubUidCount $ ipaSubGidNumber $
ipaSubGidCount ) X-ORIGIN ( 'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.24.4 NAME
'ipaSubordinateId' DESC 'Subordinate uid and gid for users' SUP top AUXILIARY
MUST ( ipaOwner $ ipaSubUidNumber $ ipaSubUidCount $ ipaSubGidNumber $
ipaSubGidCount ) X-ORIGIN 'IPA v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.3 NAME
'ipaSubordinateGid' DESC 'Subordinate gids for users, see subgid(5)' SUP top
AUXILIARY MUST ( ipaOwner $ ipaSubGidNumber $ ipaSubGidCount ) X-ORIGIN ( 'IPA
v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.24.3 NAME
'ipaSubordinateGid' DESC 'Subordinate gids for users, see subgid(5)' SUP top
AUXILIARY MUST ( ipaOwner $ ipaSubGidNumber $ ipaSubGidCount ) X-ORIGIN 'IPA
v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.2 NAME
'ipaSubordinateUid' DESC 'Subordinate uids for users, see subuid(5)' SUP top
AUXILIARY MUST ( ipaOwner $ ipaSubUidNumber $ ipaSubUidCount ) X-ORIGIN ( 'IPA
v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.24.2 NAME
'ipaSubordinateUid' DESC 'Subordinate uids for users, see subuid(5)' SUP top
AUXILIARY MUST ( ipaOwner $ ipaSubUidNumber $ ipaSubUidCount ) X-ORIGIN 'IPA
v4.9' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.9 NAME
'ipaPasskeyUser' DESC 'IPA passkey user' AUXILIARY MAY ipapasskey X-ORIGIN (
'IPA v4.10' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.24.9 NAME
'ipaPasskeyUser' DESC 'IPA passkey user' AUXILIARY MAY ipapasskey X-ORIGIN 'IPA
v4.10' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.6 NAME 'ipaIdP'
DESC 'Identity Provider Configuration' SUP top STRUCTURAL MUST cn MAY (
ipaIdpDevAuthEndpoint $ ipaIdpAuthEndpoint $ ipaIdpTokenEndpoint $
ipaIdpUserInfoEndpoint $ ipaIdpKeysEndpoint $ ipaIdpClientId $ description $
ipaIdpClientSecret $ ipaIdpScope $ ipaIdpIssuerURL $ ipaIdpSub ) X-ORIGIN (
'IPA v4.9' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.24.6 NAME 'ipaIdP'
DESC 'Identity Provider Configuration' SUP top STRUCTURAL MUST cn MAY (
ipaIdpDevAuthEndpoint $ ipaIdpAuthEndpoint $ ipaIdpTokenEndpoint $
ipaIdpUserInfoEndpoint $ ipaIdpKeysEndpoint $ ipaIdpClientId $ description $
ipaIdpClientSecret $ ipaIdpScope $ ipaIdpIssuerURL $ ipaIdpSub ) X-ORIGIN 'IPA
v4.9' )
2025-12-19T20:04:15Z DEBUG Schema modlist:
2025-12-19T20:04:15Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
2.16.840.1.113730.3.8.24.8 NAME 'ipaPasskeyConfigObject' DESC 'IPA passkey
global config options' AUXILIARY MUST ipaRequireUserVerification X-ORIGIN 'IPA
v4.10' )", b"( 2.16.840.1.113730.3.8.24.7 NAME 'ipaIdpUser' DESC 'User from an
external Identity Provider ' SUP top AUXILIARY MAY ( ipaIdpConfigLink $
ipaIdpSub ) X-ORIGIN 'IPA v4.9' )", b"( 2.16.840.1.113730.3.8.24.5 NAME
'ipaSubordinateIdEntry' DESC 'Subordinate uid and gid entry' SUP top STRUCTURAL
MUST ipaUniqueId MAY description X-ORIGIN 'IPA v4.9' )", b"(
2.16.840.1.113730.3.8.24.4 NAME 'ipaSubordinateId' DESC 'Subordinate uid and
gid for users' SUP top AUXILIARY MUST ( ipaOwner $ ipaSubUidNumber $
ipaSubUidCount $ ipaSubGidNumber $ ipaSubGidCount ) X-ORIGIN 'IPA v4.9' )", b"(
2.16.840.1.113730.3.8.24.3 NAME 'ipaSubordinateGid' DESC 'Subordinate gids for
users, see subgid(5)' SUP top AUXILIARY MUST ( ipaOwner $ ipaSubGidNumber $
ipaSubGidCount ) X-ORIGIN 'IPA v4.9' )", b"( 2.16.840.1.113730.3.8.24.2 NAME
'ipaSubordinateUid' DESC 'Subordinate uids for users, see subuid(5)' SUP top
AUXILIARY MUST ( ipaOwner $ ipaSubUidNumber $ ipaSubUidCount ) X-ORIGIN 'IPA
v4.9' )", b"( 2.16.840.1.113730.3.8.24.9 NAME 'ipaPasskeyUser' DESC 'IPA
passkey user' AUXILIARY MAY ipapasskey X-ORIGIN 'IPA v4.10' )", b"(
2.16.840.1.113730.3.8.24.6 NAME 'ipaIdP' DESC 'Identity Provider Configuration'
SUP top STRUCTURAL MUST cn MAY ( ipaIdpDevAuthEndpoint $ ipaIdpAuthEndpoint $
ipaIdpTokenEndpoint $ ipaIdpUserInfoEndpoint $ ipaIdpKeysEndpoint $
ipaIdpClientId $ description $ ipaIdpClientSecret $ ipaIdpScope $
ipaIdpIssuerURL $ ipaIdpSub ) X-ORIGIN 'IPA v4.9' )"])]
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/60ipapk11.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/60ipadns.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/60certificate-profiles.ldif
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.21.1.7 NAME
'ipaCaIssuerDN' DESC 'Issuer DN' SUP distinguishedName EQUALITY
distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN ( 'IPA
v4.4 Lightweight CAs' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.21.1.7 NAME
'ipaCaIssuerDN' DESC 'Issuer DN' SUP distinguishedName X-ORIGIN 'IPA v4.4
Lightweight CAs' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.21.1.9 NAME
'ipaCaRandomSerialNumberVersion' DESC 'Random Serial Number Version' EQUALITY
integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN ( 'IPA v4.9 RSNv3' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.21.1.9 NAME
'ipaCaRandomSerialNumberVersion' DESC 'Random Serial Number Version' EQUALITY
integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE X-ORIGIN 'IPA v4.9 RSNv3' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.21.1.10 NAME
'ipaCaHSMConfiguration' DESC 'HSM Configuration' EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE X-ORIGIN ( 'IPA v4.10 HSM' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.21.1.10 NAME
'ipaCaHSMConfiguration' DESC 'HSM Configuration' EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE X-ORIGIN 'IPA v4.10 HSM' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.21.1.8 NAME
'ipaCaSubjectDN' DESC 'Subject DN' SUP distinguishedName EQUALITY
distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN ( 'IPA
v4.4 Lightweight CAs' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.21.1.8 NAME
'ipaCaSubjectDN' DESC 'Subject DN' SUP distinguishedName X-ORIGIN 'IPA v4.4
Lightweight CAs' )
2025-12-19T20:04:15Z DEBUG Schema modlist:
2025-12-19T20:04:15Z DEBUG update_entry modlist [(0, 'attributetypes', [b"(
2.16.840.1.113730.3.8.21.1.7 NAME 'ipaCaIssuerDN' DESC 'Issuer DN' SUP
distinguishedName X-ORIGIN 'IPA v4.4 Lightweight CAs' )", b"(
2.16.840.1.113730.3.8.21.1.9 NAME 'ipaCaRandomSerialNumberVersion' DESC 'Random
Serial Number Version' EQUALITY integerMatch ORDERING integerOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'IPA v4.9 RSNv3' )",
b"( 2.16.840.1.113730.3.8.21.1.10 NAME 'ipaCaHSMConfiguration' DESC 'HSM
Configuration' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'IPA v4.10 HSM' )", b"(
2.16.840.1.113730.3.8.21.1.8 NAME 'ipaCaSubjectDN' DESC 'Subject DN' SUP
distinguishedName X-ORIGIN 'IPA v4.4 Lightweight CAs' )"])]
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.21.2.2 NAME
'ipaCaAcl' SUP ipaAssociation STRUCTURAL MAY ( ipaCaCategory $
ipaCertProfileCategory $ serviceCategory $ ipaMemberCa $ ipaMemberCertProfile $
memberService ) X-ORIGIN ( 'IPA v4.2' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.21.2.2 NAME
'ipaCaAcl' SUP ipaAssociation STRUCTURAL MUST cn MAY ( ipaCaCategory $
ipaCertProfileCategory $ userCategory $ hostCategory $ serviceCategory $
ipaMemberCa $ ipaMemberCertProfile $ memberService ) X-ORIGIN 'IPA v4.2' )
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.21.2.3 NAME 'ipaCa'
SUP top STRUCTURAL MUST ( cn $ ipaCaId $ ipaCaSubjectDN $ ipaCaIssuerDN ) MAY (
description $ ipaCaRandomSerialNumberVersion $ ipaCaHSMConfiguration ) X-ORIGIN
( 'IPA v4.4 Lightweight CAs' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.21.2.3 NAME 'ipaCa'
SUP top STRUCTURAL MUST ( cn $ ipaCaId $ ipaCaSubjectDN $ ipaCaIssuerDN ) MAY (
description $ ipaCaRandomSerialNumberVersion $ ipaCaHSMConfiguration ) X-ORIGIN
'IPA v4.4 Lightweight CAs' )
2025-12-19T20:04:15Z DEBUG Schema modlist:
2025-12-19T20:04:15Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
2.16.840.1.113730.3.8.21.2.2 NAME 'ipaCaAcl' SUP ipaAssociation STRUCTURAL MUST
cn MAY ( ipaCaCategory $ ipaCertProfileCategory $ userCategory $ hostCategory $
serviceCategory $ ipaMemberCa $ ipaMemberCertProfile $ memberService ) X-ORIGIN
'IPA v4.2' )", b"( 2.16.840.1.113730.3.8.21.2.3 NAME 'ipaCa' SUP top STRUCTURAL
MUST ( cn $ ipaCaId $ ipaCaSubjectDN $ ipaCaIssuerDN ) MAY ( description $
ipaCaRandomSerialNumberVersion $ ipaCaHSMConfiguration ) X-ORIGIN 'IPA v4.4
Lightweight CAs' )"])]
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/61kerberos-ipav3.ldif
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.8.24.10 NAME
'resourceDelegation' SUP krbPrincipal AUXILIARY MAY memberPrincipal X-ORIGIN (
'IPA v4.10' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.8.24.10 NAME
'resourceDelegation' SUP krbPrincipal AUXILIARY MAY memberPrincipal X-ORIGIN
'IPA v4.10' )
2025-12-19T20:04:15Z DEBUG Schema modlist:
2025-12-19T20:04:15Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
2.16.840.1.113730.3.8.24.10 NAME 'resourceDelegation' SUP krbPrincipal
AUXILIARY MAY memberPrincipal X-ORIGIN 'IPA v4.10' )"])]
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/65ipacertstore.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/65ipasudo.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/70ipaotp.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/70topology.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/71idviews.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/72domainlevels.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/73certmap.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/15rfc2307bis.ldif
2025-12-19T20:04:15Z DEBUG Replace: ( 2.16.840.1.113730.3.2.4 NAME 'mailGroup'
DESC 'mailGroup' SUP top STRUCTURAL MUST mail MAY ( cn $ mgrpRFC822MailMember )
X-ORIGIN ( 'IPA v4.13.0' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 2.16.840.1.113730.3.2.4 NAME 'mailGroup'
DESC 'mailGroup' SUP top STRUCTURAL MUST mail MAY ( cn $ mgrpRFC822MailMember )
X-ORIGIN 'IPA v4.13.0' )
2025-12-19T20:04:15Z DEBUG Schema modlist:
2025-12-19T20:04:15Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
2.16.840.1.113730.3.2.4 NAME 'mailGroup' DESC 'mailGroup' SUP top STRUCTURAL
MUST mail MAY ( cn $ mgrpRFC822MailMember ) X-ORIGIN 'IPA v4.13.0' )"])]
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/15rfc4876.ldif
2025-12-19T20:04:15Z DEBUG Processing schema LDIF file
/usr/share/ipa/05rfc2247.ldif
2025-12-19T20:04:15Z DEBUG Replace: ( 0.9.2342.19200300.100.1.38 NAME
'associatedName' DESC 'Standard LDAP attribute type' SYNTAX
1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN ( 'RFC 1274' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 0.9.2342.19200300.100.1.38 NAME
'associatedName' DESC 'Standard LDAP attribute type' SYNTAX
1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN 'RFC 1274' )
2025-12-19T20:04:15Z DEBUG Replace: ( 0.9.2342.19200300.100.1.25 NAME ( 'dc'
'domaincomponent' ) DESC 'Standard LDAP attribute type' EQUALITY
caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN ( 'RFC 2247' 'user defined'
) )
2025-12-19T20:04:15Z DEBUG with: ( 0.9.2342.19200300.100.1.25 NAME ( 'dc'
'domaincomponent' ) DESC 'Standard LDAP attribute type' EQUALITY
caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'RFC 2247' )
2025-12-19T20:04:15Z DEBUG Schema modlist:
2025-12-19T20:04:15Z DEBUG update_entry modlist [(0, 'attributetypes', [b"(
0.9.2342.19200300.100.1.38 NAME 'associatedName' DESC 'Standard LDAP attribute
type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN 'RFC 1274' )", b"(
0.9.2342.19200300.100.1.25 NAME ( 'dc' 'domaincomponent' ) DESC 'Standard LDAP
attribute type' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'RFC 2247' )"])]
2025-12-19T20:04:15Z DEBUG Replace: ( 0.9.2342.19200300.100.4.13 NAME 'domain'
DESC 'Standard LDAP objectclass' SUP top STRUCTURAL MUST dc MAY (
associatedName $ businessCategory $ description $ destinationIndicator $
facsimileTelephoneNumber $ internationalISDNNumber $ l $ o $
physicalDeliveryOfficeName $ postOfficeBox $ postalAddress $ postalCode $
preferredDeliveryMethod $ registeredAddress $ searchGuide $ seeAlso $ st $
street $ telephoneNumber $ teletexTerminalIdentifier $ telexNumber $
userPassword $ x121Address ) X-ORIGIN ( 'RFC 2247' 'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 0.9.2342.19200300.100.4.13 NAME 'domain'
DESC 'Standard LDAP objectclass' SUP top STRUCTURAL MUST dc MAY (
associatedName $ businessCategory $ description $ destinationIndicator $
facsimileTelephoneNumber $ internationalISDNNumber $ l $ o $
physicalDeliveryOfficeName $ postOfficeBox $ postalAddress $ postalCode $
preferredDeliveryMethod $ registeredAddress $ searchGuide $ seeAlso $ st $
street $ telephoneNumber $ teletexTerminalIdentifier $ telexNumber $
userPassword $ x121Address ) X-ORIGIN 'RFC 2247' )
2025-12-19T20:04:15Z DEBUG Replace: ( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC
'Standard LDAP objectclass' SUP top AUXILIARY MUST dc X-ORIGIN ( 'RFC 2247'
'user defined' ) )
2025-12-19T20:04:15Z DEBUG with: ( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC
'Standard LDAP objectclass' SUP top AUXILIARY MUST dc X-ORIGIN 'RFC 2247' )
2025-12-19T20:04:16Z DEBUG Schema modlist:
2025-12-19T20:04:16Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
0.9.2342.19200300.100.4.13 NAME 'domain' DESC 'Standard LDAP objectclass' SUP
top STRUCTURAL MUST dc MAY ( associatedName $ businessCategory $ description $
destinationIndicator $ facsimileTelephoneNumber $ internationalISDNNumber $ l $
o $ physicalDeliveryOfficeName $ postOfficeBox $ postalAddress $ postalCode $
preferredDeliveryMethod $ registeredAddress $ searchGuide $ seeAlso $ st $
street $ telephoneNumber $ teletexTerminalIdentifier $ telexNumber $
userPassword $ x121Address ) X-ORIGIN 'RFC 2247' )", b"( 1.3.6.1.4.1.1466.344
NAME 'dcObject' DESC 'Standard LDAP objectclass' SUP top AUXILIARY MUST dc
X-ORIGIN 'RFC 2247' )"])]
2025-12-19T20:04:16Z DEBUG Replace: ( 0.9.2342.19200300.100.4.14 NAME
'RFC822localPart' DESC 'Pilot objectclass' SUP domain STRUCTURAL MAY ( cn $ sn
) X-ORIGIN ( 'Internet directory pilot' 'user defined' ) )
2025-12-19T20:04:16Z DEBUG with: ( 0.9.2342.19200300.100.4.14 NAME
'RFC822localPart' DESC 'Pilot objectclass' SUP domain STRUCTURAL MAY ( cn $ sn
) X-ORIGIN 'Internet directory pilot' )
2025-12-19T20:04:16Z DEBUG Schema modlist:
2025-12-19T20:04:16Z DEBUG update_entry modlist [(0, 'objectclasses', [b"(
0.9.2342.19200300.100.4.14 NAME 'RFC822localPart' DESC 'Pilot objectclass' SUP
domain STRUCTURAL MAY ( cn $ sn ) X-ORIGIN 'Internet directory pilot' )"])]
2025-12-19T20:04:16Z DEBUG step duration: dirsrv __update_schema 2.40 sec
2025-12-19T20:04:16Z DEBUG [7/9]: upgrading server
2025-12-19T20:04:16Z DEBUG importing all plugin modules in ipaserver.plugins...
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.aci
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.automember
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.automount
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.baseldap
2025-12-19T20:04:16Z DEBUG ipaserver.plugins.baseldap is not a valid plugin
module
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.baseuser
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.batch
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.ca
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.caacl
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.cert
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.certmap
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.certprofile
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.config
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.delegation
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.dns
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.dnsserver
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.dogtag
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.domainlevel
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.group
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.hbac
2025-12-19T20:04:16Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.hbacrule
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.plugins.hbacsvcgroup
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.hbactest
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.host
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.hostgroup
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.idp
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.idrange
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.idviews
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.internal
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.join
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.ldap2
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.location
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.migration
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.misc
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.netgroup
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.otp
2025-12-19T20:04:16Z DEBUG ipaserver.plugins.otp is not a valid plugin module
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.otpconfig
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.otptoken
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.plugins.passkeyconfig
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.passwd
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.permission
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.ping
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.pkinit
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.privilege
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.rabase
2025-12-19T20:04:16Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.plugins.realmdomains
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.role
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.schema
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.selfservice
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.plugins.selinuxusermap
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.server
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.serverrole
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.serverroles
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.service
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.plugins.servicedelegation
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.session
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.stageuser
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.subid
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.sudo
2025-12-19T20:04:16Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.sudocmd
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.plugins.sudocmdgroup
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.sudorule
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.sysaccounts
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.topology
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.trust
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.user
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.vault
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.virtual
2025-12-19T20:04:16Z DEBUG ipaserver.plugins.virtual is not a valid plugin
module
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.whoami
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.plugins.xmlserver
2025-12-19T20:04:16Z DEBUG importing all plugin modules in
ipaserver.install.plugins...
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.add_admin_krbcanonicalname
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.adtrust
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.ca_renewal_master
2025-12-19T20:04:16Z DEBUG importing plugin module ipaserver.install.plugins.dns
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.fix_kra_people_entry
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.fix_replica_agreements
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.rename_managed
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_ca_topology
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_changelog_maxage
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_dna_shared_config
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_idranges
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_ldap_server_list
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_managed_permissions
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_pacs
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_passsync
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_pwpolicy
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_referint
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_services
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_subid_support
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_unhashed_password
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.update_uniqueness
2025-12-19T20:04:16Z DEBUG importing plugin module
ipaserver.install.plugins.upload_cacrt
2025-12-19T20:04:16Z DEBUG Created connection context.ldap2_140196316642704
2025-12-19T20:04:16Z DEBUG raw: idrange_show('IPA.AB-DATA.US_id_range',
version='2.257')
2025-12-19T20:04:16Z DEBUG idrange_show('IPA.AB-DATA.US_id_range',
rights=False, all=False, raw=False, version='2.257')
2025-12-19T20:04:16Z DEBUG flushing
ldapi://%2Frun%2Fslapd-IPA-AB-DATA-US.socket from SchemaCache
2025-12-19T20:04:16Z DEBUG retrieving schema for SchemaCache
url=ldapi://%2Frun%2Fslapd-IPA-AB-DATA-US.socket
conn=<ldap.ldapobject.SimpleLDAPObject object at 0x7f81ff3e5950>
2025-12-19T20:04:16Z DEBUG Parsing update file
'/usr/share/ipa/updates/05-pre_upgrade_plugins.update'
2025-12-19T20:04:16Z DEBUG Executing upgrade plugin: update_managed_post_first
2025-12-19T20:04:16Z DEBUG raw: update_managed_post_first
2025-12-19T20:04:16Z DEBUG Executing upgrade plugin: update_changelog_maxage
2025-12-19T20:04:16Z DEBUG raw: update_changelog_maxage
2025-12-19T20:04:16Z DEBUG Error retrieving: cn=changelog5,cn=config
2025-12-19T20:04:16Z DEBUG Executing upgrade plugin:
update_replica_attribute_lists
2025-12-19T20:04:16Z DEBUG raw: update_replica_attribute_lists
2025-12-19T20:04:16Z DEBUG Start replication agreement exclude list update task
2025-12-19T20:04:16Z DEBUG raw: topologysuffix_find(None, version='2.257')
2025-12-19T20:04:16Z DEBUG topologysuffix_find(None, all=False, raw=False,
version='2.257', pkey_only=False)
2025-12-19T20:04:16Z DEBUG Destroyed connection context.ldap2_140196316642704
2025-12-19T20:04:16Z ERROR Upgrade failed with ''
2025-12-19T20:04:16Z DEBUG Traceback (most recent call last):
2025-12-19T20:04:16Z DEBUG Traceback (most recent call last):
2025-12-19T20:04:16Z DEBUG [error] RuntimeError: ''
2025-12-19T20:04:16Z DEBUG [cleanup]: stopping directory server
2025-12-19T20:04:16Z DEBUG Destroyed connection context.ldap2_140196335604064
2025-12-19T20:04:16Z DEBUG Starting external process
2025-12-19T20:04:16Z DEBUG args=['/bin/systemctl', 'stop',
'[email protected]']
2025-12-19T20:04:17Z DEBUG Process finished, return code=0
2025-12-19T20:04:17Z DEBUG stdout=
2025-12-19T20:04:17Z DEBUG stderr=
2025-12-19T20:04:17Z DEBUG Stop of [email protected] complete
2025-12-19T20:04:17Z DEBUG step duration: dirsrv __stop_instance 0.42 sec
2025-12-19T20:04:17Z DEBUG [cleanup]: restoring configuration
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z ERROR DN: cn=Schema Compatibility,cn=plugins,cn=config
does not exists or haven't been updated
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Saving StateFile to
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Saving StateFile to
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Saving StateFile to
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG Saving StateFile to
'/var/lib/ipa/sysrestore/sysrestore.state'
2025-12-19T20:04:17Z DEBUG step duration: dirsrv __restore_config 0.02 sec
2025-12-19T20:04:17Z ERROR IPA server upgrade failed: Inspect
/var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
2025-12-19T20:04:17Z DEBUG File
"/usr/lib/python3.14/site-packages/ipapython/admintool.py", line 219, in execute
2025-12-19T20:04:17Z DEBUG The ipa-server-upgrade command failed, exception:
ScriptError: ('IPA upgrade failed.', 1)
2025-12-19T20:04:17Z ERROR ('IPA upgrade failed.', 1)
2025-12-19T20:04:17Z ERROR The ipa-server-upgrade command failed. See
/var/log/ipaupgrade.log for more information
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
