So now how can i restore the normal status.

Can i export those acc out and restore to new server if same schema.?

Manual backup restore i test before should work.

This is a feature design page. The files there are notes, not a full list of things to backup, and definitely not meant as manual instructions.

What I'd recommend is to pause, restate what the problems are with as much detail as you can, what you've tried (again, details matter) and basically start this process over again so include the cert renewal problems, replication issues and now the startup problem. There are now something like three separate threads, all asking for similar information and none of which are really making any forward progress.

The python error is coming from dogtag so I've cc'd one of their developers to see what they think. That will need to be fixed eventually as well.

I've found these threads very difficult to follow but it seems like it started when cert renewal failed and moved onto replication issues which upgrading is probably not going to address and IMHO it is best to not add another variable to the mix. In order to migrate to RHEL 7/IPA 4.x you need a stable system to migrate from, and in that case the latest bits are necessary, as Petr pointed out.


2016年5月10日 下午8:16 於 "Martin Basti" <
<>> 寫道:

    There is no ipa-restore or ipa-backup commands even on RHEL6.7,
    centos6.7, so I have no idea how you got that commands there. If you
    just copy files manually it is not working as you can see.


    On 10.05.2016 14:12, Barry wrote:

    The bottom manual files based backup restore . I remember there s
    one for 3.0

    And test work before.

    2016年5月10日 下午8:00 於 "Petr Vobornik"
    <>> 寫道:

        On 05/10/2016 01:49 PM, Martin Basti wrote:
        > No there is not python 2.7 on centos 6.x, maybe there is
        something wrong in the
        > code, let me check first

        How did you run the backup and restore? AFAIK it was introduced in
        FreeIPA 3.2, then it was introduced in ipa 3.3 release on RHEL
        7. It is
        not on RHEL 6.

        > On 10.05.2016 13:34, Barry wrote:
        >> Ipa 3.0 e47
        >> Centos 6.5 . Just update python?
        >> 2016年5月10日 下午6:58 於 "Martin Basti"
        >> <<
        <>> 寫道:
        >>     On 10.05.2016 12:41,
        <> <
        <>> wrote:
        >>>     Hi:
        >>>     Restore form backup follow the procedure below:
        >>>     Now server web page launch but canot access
        >>>     Sorry you are not allowed to access this service.
        >>>     Starting dirsrv:
        >>>     PKI-IPA... [  OK  ]
        >>>     WISERS-COM... [  OK  ]
        >>>     Starting KDC Service
        >>>     Starting Kerberos 5 KDC:              [  OK  ]
        >>>     Starting KPASSWD Service
        >>>     Starting Kerberos 5 Admin Server:               [  OK  ]
        >>>     Starting MEMCACHE Service
        >>>     Starting ipa_memcached:               [ OK  ]
        >>>     Starting HTTP Service
        >>>     Starting httpd:               [ OK  ]
        >>>     Starting CA Service
        >>>     Starting CA Service
        >>>     Traceback (most recent call last):
        >>>       File "/usr/sbin/pki-server", line 88, in <module>
        >>>         cli = PKIServerCLI()
        >>>       File "/usr/sbin/pki-server", line 34, in __init__
        >>>         super(PKIServerCLI, self).__init__('pki-server',
        'PKI server
        >>>     command-line interface')
        >>>       File "/usr/lib/python2.6/site-packages/pki/",
        line 39, in __init__
        >>>         self.modules = collections.OrderedDict()
        >>>     AttributeError: 'module' object has no attribute
        >>>     Starting pki-ca:              [ OK  ]
        >>>     Any idea above?
        >>     You are using the old python, python 2.7 is required,
        which version of OS
        >>     and IPA do you use?
        >>     Martin

        Petr Vobornik

Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to