freeipa

#7965 Stop using 389-ds legacy tools for backup and restore
Closed: fixed by rcritten. Opened by rcritten.

Closed: fixed
Reopen Issue

Issue

dsctl is the main tool in 389-ds now providing access to individual commands rather than having separate executables.

Backup should now be accessed using dsctl db2ldif

Restore using dsctl ldif2db

Legacy tools backup and restore broke in 389-ds-base1.4.1.3-1 in rawhide (F31). The DS team is fixing that build but IPA should future-proof itself and move to the newer tool before the legacy tools are dropped.

The migration is straight forward and easy, e.g. db2ldif -Z $instance -r -n $backend -a $ldiffile becomes dsctl $instance db2ldif --replication $backend $ldiffile.

I found one missing feature: The ipa restore command takes an option backend argument, but bak2db does not have a backend option.

Metadata Update from @cheimes:
- Issue priority set to: important (was: normal)
- Issue set to the milestone: FreeIPA 4.8
- Issue tagged with: easyfix

Metadata Update from @rcritten:
- Issue assigned to rcritten

Metadata Update from @rcritten:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/3226

master:

  • f606d82024d3a74df2aeb5448944aa015e96cce2 Stop using 389-ds legacy backup and restoration utilities

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

easyfix

None
None
Low
https://github.com/freeipa/freeipa/pull/3226
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.