IPA users/groups are gone after a second reboot

[G H]

I noticed that the web GUI and `ipa user-find` returned zero users after I migrated my FreeIPA VM to a different hypervisor. So I turned the original VM on and the problem persisted. I then restored from a backup from a week ago on the original hypervisor and the users are back. But then if I reboot that restored VM, the users are gone again.

When I do an ldapsearch for users, I can find them; so I think the 389 DB is functional. It seems to be something with the JSON API. I have tried with the admin user and a non-admin user, but with admin rights.

How can I begin to debug this?

[Rafael Jeffman]

Hello,

Can you kinit against the realm?

I'd start looking at 389 logs (/var/log/dirsrv/slapd-${REALM}) and
at httpd logs.

Rafael

On Tue, Dec 23, 2025 at 1:33 PM G H via FreeIPA-users <
[e-mail]> wrote:
> I noticed that the web GUI and `ipa user-find` returned zero users after I
> migrated my FreeIPA VM to a different hypervisor. So I turned the original
> VM on and the problem persisted. I then restored from a backup from a week
> ago on the original hypervisor and the users are back. But then if I reboot
> that restored VM, the users are gone again.
>
> When I do an ldapsearch for users, I can find them; so I think the 389 DB
> is functional. It seems to be something with the JSON API. I have tried
> with the admin user and a non-admin user, but with admin rights.
> How can I begin to debug this?
>
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue