ipa-adtrust-install fails with invalid 'cn': must be Unicode text

[iulian roman]

Hello, 

When I run ipa-adtrust-install command in order to configure trust prerequisites , it
fails in step 4, with the following error: 

Configuring CIFS
  [1/24]: validate server hostname
  [2/24]: stopping smbd
  [3/24]: creating samba domain object
Samba domain object already exists
  [4/24]: retrieve local idmap range
  [error] ConversionError: invalid 'cn': must be Unicode text
Unexpected error - see /var/log/ipaserver-install.log for details:
ConversionError: invalid 'cn': must be Unicode text

The existing idrange is in the following format :
dn: cn=IPA.EXAMPLE.COM_id_range,cn=ranges,cn=etc,dc=ipa,dc=example,dc=com


Any hint/suggestion would be really appreciated .

[Alexander Bokovoy]

On pe, 05 maalis 2021, iulian roman via FreeIPA-users wrote:
> Hello,
>
> When I run ipa-adtrust-install command in order to configure trust prerequisites , it
> fails in step 4, with the following error:
>
> Configuring CIFS
>   [1/24]: validate server hostname
>   [2/24]: stopping smbd
>   [3/24]: creating samba domain object
> Samba domain object already exists
>   [4/24]: retrieve local idmap range
>   [error] ConversionError: invalid 'cn': must be Unicode text
> Unexpected error - see /var/log/ipaserver-install.log for details:
> ConversionError: invalid 'cn': must be Unicode text
>
> The existing idrange is in the following format :
> dn: cn=IPA.EXAMPLE.COM_id_range,cn=ranges,cn=etc,dc=ipa,dc=example,dc=com
>
>
> Any hint/suggestion would be really appreciated . 
What version of IPA is this and what distribution version?

If I remember correctly, this was fixed in 2019 with
https://pagure.io/freeipa/issue/6951 and should be at least in FreeIPA
4.6.8 or later. In was backported to RHEL in ipa-4.6.6-5.el7.


-- 
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland

[iulian roman]

>  On pe, 05 maalis 2021, iulian roman via FreeIPA-users wrote:
>  
>  What version of IPA is this and what distribution version?
>  
FreeIPA version: 4.7.4 on Ubuntu 18.04
> If I remember correctly, this was fixed in 2019 with
> https://pagure.io/freeipa/issue/6951 and should be at least in FreeIPA
> 4.6.8 or later. In was backported to RHEL in ipa-4.6.6-5.el7.