freeipa

#9961 ipa-migrate fails to update existing entries: error: Type or value exists
Opened by kororland. Modified

Open
Close Issue

What were you trying to do that didn't work?

migrating entries to the same-name domain (Moving from broken deployment to a fresh one)

What is the impact of this issue to you?

ipa-migration fails (with --force continues, but fails to upgrade some of the entries)

Please provide the package NVR for which the bug is seen:

ipa-server-4.12.2-24.el10_1.1.x86_64

How reproducible is this bug?:

always

Steps to reproduce

Install a source server, modify the password policy, make a backup:

# ipa-server-install --domain ipa.test --realm IPA.TEST --setup-dns --forwarder 10.11.5.160 -a Secret123 -p Secret123 -U
# echo Secret123 | kinit admin
# ipa pwpolicy-mod --minlength 9
# dsctl slapd-IPA-TEST stop
# dsctl slapd-IPA-TEST db2ldif userroot /tmp/userroot.ldif
# dsctl slapd-IPA-TEST start
# scp /tmp/userroot.ldif root@dest.ipa.test:/tmp

On the destination server, modify the file userroot.ldif and replace objectClass: ipaPwdPolicy with objectClass: ipapwdpolicy (lowercase attribute value).

On the destination server, configure ipa server and call ipa-migrate:

# ipa-server-install --domain ipa.test --realm IPA.TEST --setup-dns --forwarder 10.11.5.160 -a Secret123 -p Secret123 -U
# echo Secret123 | kinit admin
# ipa-migrate stage-mode src1.ipa.test --db-ldif /tmp/userroot.ldif -w Secret123 -n
Initializing ...
Connecting to local server ...
IPA to IPA migration starting ...
Migrating schema ...
Migrating configuration ...
Migrating database ... (this may take a while)
Failed to update "cn=global_policy,cn=IPA.TEST,cn=kerberos,dc=ipa,dc=test" error: Type or value exists

The values for objectclass are case-insensitive and should be compared as such.

clone of https://redhat.atlassian.net/browse/RHEL-153856

PR: https://github.com/freeipa/freeipa/pull/8256
Metadata
None
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.