On Mon, May 25, 2026 at 11:18 AM Alexander Bokovoy <[email protected]> wrote: > > On Пан, 25 мая 2026, Ian Kumlien wrote: > >So they are two different setups running the same version. > > > >I find nothing in 389-ds that points to the shm - the problem is more > >that migration as in ipa-server-upgrade hasn't fixed this even if it > >should in my opinion > > On my fresh test deployment I also have no /dev/shm/slapd-IPA-TEST and > 'dsctl IPA-TEST healthcheck' produces no errors. This is Fedora Rawhide, > so it uses lmdb by default. > > I looked at the healthcheck code. This particular check (in ds.backends) > ensures old BDB files removed after migration. But it is coded without > defence from the file path missing but defined (or derived when missing) > in configuration. > > I think what you could do is set it to the correct value: > > # dsconf slapd-IPA-TEST backend config set --db-home-directory > /var/lib/dirsrv/slapd-IPA-TEST/db
So, dsconf slapd-XERCES-LAN backend config get | grep shm returns nothing. Changing it changes nothing (in the output of get) and the error is still there after ... > >But the issue can stem from the fact that i manually did the bdb -> lmdb > > > >On Mon, May 25, 2026 at 10:53 AM Alexander Bokovoy <[email protected]> > >wrote: > >> > >> On Срд, 20 мая 2026, Ian Kumlien via FreeIPA-users wrote: > >> >Hi, > >> > > >> >I worked around the migration from bdb to lmdb since there was issues > >> >that later was patched. > >> > > >> >But now i'm encountering this: > >> >[ > >> > { > >> > "source": "ipahealthcheck.ds.backends", > >> > "check": "BackendsCheck", > >> > "result": "CRITICAL", > >> > "uuid": "6bd31d54-3fc0-498e-930d-460cae949218", > >> > "when": "20260520124304Z", > >> > "duration": "0.063039", > >> > "kw": { > >> > "exception": "[Errno 2] No such file or directory: > >> >'/dev/shm/slapd-XERCES-LAN'", > >> > "traceback": "Traceback (most recent call last):\n File > >> >\"/usr/lib/python3.14/site-packages/ipahealthcheck/core/core.py\", > >> >line 61, in run_plugin\n for result in plugin.check():\n > >> > ~~~~~~~~~~~~^^\n File > >> >\"/usr/lib/python3.14/site-packages/ipahealthcheck/core/plugin.py\", > >> >line 18, in wrapper\n for result in f(*args, **kwds):\n > >> > ~^^^^^^^^^^^^^^^\n File > >> >\"/usr/lib/python3.14/site-packages/ipahealthcheck/ds/plugin.py\", > >> >line 108, in check\n results = self.doCheck(self.check_class, > >> >self.many)\n File > >> >\"/usr/lib/python3.14/site-packages/ipahealthcheck/ds/plugin.py\", > >> >line 91, in doCheck\n results += result\n File > >> >\"/usr/lib/python3.14/site-packages/lib389/_mapped_object_lint.py\", > >> >line 126, in lint\n yield from f()\n File > >> >\"/usr/lib/python3.14/site-packages/lib389/backend.py\", line 556, in > >> >_lint_backend_implementation_cleanup_needed\n > >> >db_files.extend(os.listdir(self._instance.ds_paths.db_home_dir))\n > >> > > >> > ~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\nFileNotFoundError: > >> >[Errno 2] No such file or directory: '/dev/shm/slapd-XERCES-LAN'\n" > >> > } > >> > } > >> >] > >> > > >> >Which didn't happen on 6 other machines i have installed... > >> > >> This is coming from DS healthcheck which is provided by the 389-ds. It > >> checks that you have /dev/shm/slapd-XERCES-LAN as a home directory (see > >> nsslpad-db-home-directory below) and it doesn't exist. The config poitns > >> to /dev/shm/slapd-EGL-LAN... > >> > >> Why XERCES-LAN vs EGL-LAN? Was it a migration artifact or it was a > >> failed attempt to scrub the logs and configs? > >> > >> > > >> >The only clue i can find is that my > >> >/etc/dirsrv/slapd-XERCES-LAN/dse.ldif is different > >> > > >> >There is a whole new section, the only section that mentions shm which is > >> >dn: cn=config,cn=ldbm database,cn=plugins,cn=config > >> >cn: config > >> >modifiersName: cn=Directory Manager > >> >modifyTimestamp: 20251103151530Z > >> >nsslapd-db-home-directory: /dev/shm/slapd-EGL-LAN > >> >nsslapd-systemidlistscanlimit: 5000 > >> >objectClass: top > >> >objectClass: extensibleObject > >> >numSubordinates: 3 > >> >nsslapd-lookthroughlimit: 100000 > >> >nsslapd-mode: 600 > >> >nsslapd-idlistscanlimit: 2147483646 > >> >nsslapd-directory: /var/lib/dirsrv/slapd-EGL-LAN/db > >> >nsslapd-import-cachesize: 16777216 > >> >nsslapd-idl-switch: new > >> >nsslapd-search-bypass-filter-test: on > >> >nsslapd-search-use-vlv-index: on > >> >nsslapd-exclude-from-export: entrydn entryid dncomp parentid > >> >numSubordinates t > >> > ombstonenumsubordinates entryusn > >> >nsslapd-serial-lock: on > >> >nsslapd-pagedlookthroughlimit: 0 > >> >nsslapd-pagedidlistscanlimit: 0 > >> >nsslapd-rangelookthroughlimit: 5000 > >> >nsslapd-backend-opt-level: 1 > >> >nsslapd-backend-implement: mdb > >> >nsslapd-dynamic-lists-enabled: off > >> >nsslapd-dynamic-lists-attr: member > >> >nsslapd-dynamic-lists-oc: groupOfUrls > >> >nsslapd-dynamic-lists-url-attr: memberURL > >> > > >> >So, is there a way to generate/fix dse.lfdif that is not just me hacking > >> >it? > >> >-- > >> >_______________________________________________ > >> >FreeIPA-users mailing list -- [email protected] > >> >To unsubscribe send an email to [email protected] > >> >Fedora Code of Conduct: > >> >https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > >> >List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > >> >List Archives: > >> >https://lists.fedorahosted.org/archives/list/[email protected] > >> >Do not reply to spam, report it: > >> >https://forge.fedoraproject.org/infra/tickets/issues/new > >> > >> > >> > >> -- > >> / Alexander Bokovoy > >> Sr. Principal Software Engineer > >> Security / Identity Management Engineering > >> Red Hat Limited, Finland > >> > > > > > > -- > / Alexander Bokovoy > Sr. Principal Software Engineer > Security / Identity Management Engineering > Red Hat Limited, Finland > -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
