Issue

After migrating 389-dirsrv database (BDB->LMDB) and upgrading from Fedora 41->42 I noticed a new error message in various ipa commands (ipa-healthcheck, ipa server-cert-fix, ...).

Steps to Reproduce

1. (unconfirmed, most likely cause: run BDB -> LMDB migration)
2. run various ipa commands that use dsinstance.py:get_server_cert_nickname

Actual behavior

Error message Unable to find server cert nickname in /etc/dirsrv/slapd-my-instance/dse.ldif in output

Expected behavior

Since the entry is present, no error should occur.

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server
freeipa-server-4.12.2-14.fc42.x86_64
freeipa-client-4.12.2-14.fc42.x86_64
package ipa-server is not installed
package ipa-client is not installed
389-ds-base-3.1.3-2.fc42.x86_64
package pki-ca is not installed
krb5-server-1.21.3-6.fc42.x86_64

Additional info:

In dse.ldif I can see

dn: cn=rsa,cn=encryption,cn=config
cn: RSA
createTimestamp: 20170812014705Z
creatorsName: cn=directory manager
modifiersName: cn=directory manager
modifyTimestamp: 20170812014705Z
nsSSLActivation: on
nsSSLPersonalitySSL: Server-Cert
nsSSLToken: internal (software)
objectClass: top
objectClass: nsEncryptionModule

However, parser.parse_results().keys() appears to be empty. This is because the case changed and the entries_dn filter in "GetEntryFromLDIF" is wrong. However LDAP is not case sensitive, so any case should be supported, and therefore this is a bug. Probably all keys should be converted to lower case as should all lookups to preserve case insensitivity.