That was it. Minor edits (nsslapd-localhost) and we're up and running.

Thanks, Ludwig!

On 05/09/2017 06:50 AM, Ludwig Krispenz wrote:
looks like you lost your configuration files dse.ldif and its backup as well during the outage.
could you check what you have in /etc/dirsrv/slapd-<INSTANCE>

you can try to copy one of the *dse.ldif* to dse.ldif and try to restart, but that file maybe up to date.


On 05/09/2017 12:00 PM, Bret Wortman wrote:
We had an unplanned power outage which may have affected one of our freeipa servers. When trying to start, it now errors out.

# ipactl start
Starting Directory Service
Failed to start Directory Service: Command '/bin/systemctl start dirsrv@SPX-NET.service' returned non-zero exit status 1

In /var/log/messages, there is a lengthy list of errors like this:

2017-05-09T09:25:40.178252+00:00 asipa ns-slapd: [09/May/2017:09:25:40.159091115 +0000] valueset_value_symtax_cmp: slapi_attr_bvalues2keys_sv failed for type attributetypes

ending with:

2017-05-09T09:25:40.178438+00:00 asiopa ns-slapd: [09/May/2017:09:25:40:161987520 +0000] dse_read_one_file - The entry cn=schema in file /etc/dirsrv/slapd-DAMASCUSGRP.COM /schema/00core.ldif (lineno: 1) is invalid, error code 21 (Invalid syntax) - attribute type aci: Unknown attribute syntax OID "" 2017-05-09T09:25:40.178469+00:00 asipa ns-slapd: [09/May/2017:09:25:40.162014035 +0000] dse - Please edit the file to correct the reported problems and then restart the server.

The entry in 00core.ldif was verified against the other servers and the file hasn't been altered or edited that I can see.

Where else can I look? I've got two servers up, but I'd like to have all 3 operational.

*Bret Wortman*
Damascus Products
ph/fax: 1-855-644-2783
Wrap Buddies InDemand at

Red Hat GmbH,, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric 

Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to