RHEL IdM LDAP service start fails - LDAP error krb5_init_context failed

Solution In Progress - Updated -

Issue

RHEL IdM is not starting. It fails while starting the Directory Server with an error.

Note Red Hat recommends to start and stop IPA using the systemd systemctl command, but this issue was reported like this:

# ipactl start -d
IPA version error: data needs to be upgraded (expected version '4.6.8-5.el7_9.4', current version '4.6.8-5.el7')
Automatically running upgrade, for details see /var/log/ipaupgrade.log
Be patient, this may take a few minutes.
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/usr/sbin/ipa-server-upgrade
ipa: DEBUG: Process finished, return code=1
ipa: DEBUG: stdout=Upgrading IPA:. Estimated time: 1 minute 30 seconds
  [1/9]: saving configuration
  [2/9]: disabling listeners
  [3/9]: enabling DS global lock
  [4/9]: disabling Schema Compat
  [5/9]: starting directory server
  [error] CalledProcessError: Command '/bin/systemctl start dirsrv@IDM-EXAMPLE-COM.service' returned non-zero exit status 1
  [cleanup]: stopping directory server
  [cleanup]: restoring configuration

ipa: DEBUG: stderr=IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
Unexpected error - see /var/log/ipaupgrade.log for details:
CalledProcessError: Command '/bin/systemctl start dirsrv@IDM-EXAMPLE-COM.service' returned non-zero exit status 1
The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information

Automatic upgrade failed: IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
Unexpected error - see /var/log/ipaupgrade.log for details:
CalledProcessError: Command '/bin/systemctl start dirsrv@IDM-EXAMPLE-COM.service' returned non-zero exit status 1
The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information

See the upgrade log for more details and/or run /usr/sbin/ipa-server-upgrade again
ipa: DEBUG:   File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 1015, in run_script
    return_value = main_function()

  File "/sbin/ipactl", line 598, in main
    ipa_start(options)

  File "/sbin/ipactl", line 288, in ipa_start
    version_check()

  File "/sbin/ipactl", line 161, in version_check
    raise IpactlError("Aborting ipactl")

ipa: DEBUG: The ipactl command failed, exception: IpactlError: Aborting ipactl
Aborting ipactl

Environment

  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • sssd < v2.6.1-1

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content