On Пан, 25 мая 2026, Ian Kumlien wrote:
So they are two different setups running the same version.
I find nothing in 389-ds that points to the shm - the problem is more
that migration as in ipa-server-upgrade hasn't fixed this even if it
should in my opinion
On my fresh test deployment I also have no /dev/shm/slapd-IPA-TEST and
'dsctl IPA-TEST healthcheck' produces no errors. This is Fedora Rawhide,
so it uses lmdb by default.
I looked at the healthcheck code. This particular check (in ds.backends)
ensures old BDB files removed after migration. But it is coded without
defence from the file path missing but defined (or derived when missing)
in configuration.
I think what you could do is set it to the correct value:
# dsconf slapd-IPA-TEST backend config set --db-home-directory
/var/lib/dirsrv/slapd-IPA-TEST/db
But the issue can stem from the fact that i manually did the bdb -> lmdb
On Mon, May 25, 2026 at 10:53 AM Alexander Bokovoy <[email protected]> wrote:
On Срд, 20 мая 2026, Ian Kumlien via FreeIPA-users wrote:
>Hi,
>
>I worked around the migration from bdb to lmdb since there was issues
>that later was patched.
>
>But now i'm encountering this:
>[
> {
> "source": "ipahealthcheck.ds.backends",
> "check": "BackendsCheck",
> "result": "CRITICAL",
> "uuid": "6bd31d54-3fc0-498e-930d-460cae949218",
> "when": "20260520124304Z",
> "duration": "0.063039",
> "kw": {
> "exception": "[Errno 2] No such file or directory:
>'/dev/shm/slapd-XERCES-LAN'",
> "traceback": "Traceback (most recent call last):\n File
>\"/usr/lib/python3.14/site-packages/ipahealthcheck/core/core.py\",
>line 61, in run_plugin\n for result in plugin.check():\n
> ~~~~~~~~~~~~^^\n File
>\"/usr/lib/python3.14/site-packages/ipahealthcheck/core/plugin.py\",
>line 18, in wrapper\n for result in f(*args, **kwds):\n
> ~^^^^^^^^^^^^^^^\n File
>\"/usr/lib/python3.14/site-packages/ipahealthcheck/ds/plugin.py\",
>line 108, in check\n results = self.doCheck(self.check_class,
>self.many)\n File
>\"/usr/lib/python3.14/site-packages/ipahealthcheck/ds/plugin.py\",
>line 91, in doCheck\n results += result\n File
>\"/usr/lib/python3.14/site-packages/lib389/_mapped_object_lint.py\",
>line 126, in lint\n yield from f()\n File
>\"/usr/lib/python3.14/site-packages/lib389/backend.py\", line 556, in
>_lint_backend_implementation_cleanup_needed\n
>db_files.extend(os.listdir(self._instance.ds_paths.db_home_dir))\n
>
~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\nFileNotFoundError:
>[Errno 2] No such file or directory: '/dev/shm/slapd-XERCES-LAN'\n"
> }
> }
>]
>
>Which didn't happen on 6 other machines i have installed...
This is coming from DS healthcheck which is provided by the 389-ds. It
checks that you have /dev/shm/slapd-XERCES-LAN as a home directory (see
nsslpad-db-home-directory below) and it doesn't exist. The config poitns
to /dev/shm/slapd-EGL-LAN...
Why XERCES-LAN vs EGL-LAN? Was it a migration artifact or it was a
failed attempt to scrub the logs and configs?
>
>The only clue i can find is that my
>/etc/dirsrv/slapd-XERCES-LAN/dse.ldif is different
>
>There is a whole new section, the only section that mentions shm which is
>dn: cn=config,cn=ldbm database,cn=plugins,cn=config
>cn: config
>modifiersName: cn=Directory Manager
>modifyTimestamp: 20251103151530Z
>nsslapd-db-home-directory: /dev/shm/slapd-EGL-LAN
>nsslapd-systemidlistscanlimit: 5000
>objectClass: top
>objectClass: extensibleObject
>numSubordinates: 3
>nsslapd-lookthroughlimit: 100000
>nsslapd-mode: 600
>nsslapd-idlistscanlimit: 2147483646
>nsslapd-directory: /var/lib/dirsrv/slapd-EGL-LAN/db
>nsslapd-import-cachesize: 16777216
>nsslapd-idl-switch: new
>nsslapd-search-bypass-filter-test: on
>nsslapd-search-use-vlv-index: on
>nsslapd-exclude-from-export: entrydn entryid dncomp parentid numSubordinates t
> ombstonenumsubordinates entryusn
>nsslapd-serial-lock: on
>nsslapd-pagedlookthroughlimit: 0
>nsslapd-pagedidlistscanlimit: 0
>nsslapd-rangelookthroughlimit: 5000
>nsslapd-backend-opt-level: 1
>nsslapd-backend-implement: mdb
>nsslapd-dynamic-lists-enabled: off
>nsslapd-dynamic-lists-attr: member
>nsslapd-dynamic-lists-oc: groupOfUrls
>nsslapd-dynamic-lists-url-attr: memberURL
>
>So, is there a way to generate/fix dse.lfdif that is not just me hacking it?
>--
>_______________________________________________
>FreeIPA-users mailing list -- [email protected]
>To unsubscribe send an email to [email protected]
>Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
>Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
