[Freeipa-users] Restore form backup , start servrer will error but sucess

[Rob Crittenden]

barrykfl at gmail.com wrote:
> So now how can i restore the normal status.
>
> Can i export those acc out and restore to new server if same schema.?
>
> Manual backup restore i test before should work.

This is a feature design page. The files there are notes, not a full 
list of things to backup, and definitely not meant as manual instructions.

What I'd recommend is to pause, restate what the problems are with as 
much detail as you can, what you've tried (again, details matter) and 
basically start this process over again so include the cert renewal 
problems, replication issues and now the startup problem. There are now 
something like three separate threads, all asking for similar 
information and none of which are really making any forward progress.

The python error is coming from dogtag so I've cc'd one of their 
developers to see what they think. That will need to be fixed eventually 
as well.

I've found these threads very difficult to follow but it seems like it 
started when cert renewal failed and moved onto replication issues which 
upgrading is probably not going to address and IMHO it is best to not 
add another variable to the mix. In order to migrate to RHEL 7/IPA 4.x 
you need a stable system to migrate from, and in that case the latest 
bits are necessary, as Petr pointed out.

rob

>
> 2016年5月10日 下午8:16 於 "Martin Basti" <mbasti at redhat.com
> <mailto:mbasti at redhat.com>> 寫道：
>
>     There is no ipa-restore or ipa-backup commands even on RHEL6.7,
>     centos6.7, so I have no idea how you got that commands there. If you
>     just copy files manually it is not working as you can see.
>
>     Martin
>
>
>     On 10.05.2016 14:12, Barry wrote:
>>
>>     The bottom manual files based backup restore . I remember there s
>>     one for 3.0
>>
>>     And test work before.
>>
>>     2016年5月10日 下午8:00 於 "Petr Vobornik"
>>     <<mailto:pvoborni at redhat.com>pvoborni at redhat.com
>>     <mailto:pvoborni at redhat.com>> 寫道：
>>
>>         On 05/10/2016 01:49 PM, Martin Basti wrote:
>>         > No there is not python 2.7 on centos 6.x, maybe there is
>>         something wrong in the
>>         > code, let me check first
>>
>>         How did you run the backup and restore? AFAIK it was introduced in
>>         FreeIPA 3.2, then it was introduced in ipa 3.3 release on RHEL
>>         7. It is
>>         not on RHEL 6.
>>
>>         >
>>         >
>>         > On 10.05.2016 13:34, Barry wrote:
>>         >>
>>         >> Ipa 3.0 e47
>>         >>
>>         >> Centos 6.5 . Just update python?
>>         >>
>>         >> 2016年5月10日 下午6:58 於 "Martin Basti"
>>         >> <<mailto:mbasti at redhat.com
>>         <mailto:mbasti at redhat.com>><mailto:mbasti at redhat.com>mbasti at redhat.com
>>         <mailto:mbasti at redhat.com>> 寫道：
>>         >>
>>         >>
>>         >>
>>         >>     On 10.05.2016 12:41, barrykfl at gmail.com
>>         <mailto:barrykfl at gmail.com> <mailto:barrykfl at gmail.com
>>         <mailto:barrykfl at gmail.com>> wrote:
>>         >>>     Hi:
>>         >>>
>>         >>>     Restore form backup follow the procedure below:
>>         >>> http://www.freeipa.org/page/V3/Backup_and_Restore
>>         >>>
>>         >>>     Now server web page launch but canot access
>>         >>>     Sorry you are not allowed to access this service.
>>         >>>
>>         >>>     Starting dirsrv:
>>         >>>     PKI-IPA... [  OK  ]
>>         >>>     WISERS-COM... [  OK  ]
>>         >>>     Starting KDC Service
>>         >>>     Starting Kerberos 5 KDC:              [  OK  ]
>>         >>>     Starting KPASSWD Service
>>         >>>     Starting Kerberos 5 Admin Server:               [  OK  ]
>>         >>>     Starting MEMCACHE Service
>>         >>>     Starting ipa_memcached:               [ OK  ]
>>         >>>     Starting HTTP Service
>>         >>>     Starting httpd:               [ OK  ]
>>         >>>     Starting CA Service
>>         >>>
>>         >>>
>>         >>>     Starting CA Service
>>         >>>     Traceback (most recent call last):
>>         >>>       File "/usr/sbin/pki-server", line 88, in <module>
>>         >>>         cli = PKIServerCLI()
>>         >>>       File "/usr/sbin/pki-server", line 34, in __init__
>>         >>>         super(PKIServerCLI, self).__init__('pki-server',
>>         'PKI server
>>         >>>     command-line interface')
>>         >>>       File "/usr/lib/python2.6/site-packages/pki/cli.py",
>>         line 39, in __init__
>>         >>>         self.modules = collections.OrderedDict()
>>         >>>     AttributeError: 'module' object has no attribute
>>         'OrderedDict'
>>         >>>     Starting pki-ca:              [ OK  ]
>>         >>>
>>         >>>
>>         >>>     Any idea above?
>>         >>>
>>         >>>
>>         >>
>>         >>     You are using the old python, python 2.7 is required,
>>         which version of OS
>>         >>     and IPA do you use?
>>         >>     Martin
>>         >>
>>         >
>>         >
>>         >
>>
>>
>>         --
>>         Petr Vobornik
>>
>
>
>