Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

After a closer look at the customer case, it looks like the issue is the result of a misunderstanding of the way IPA services are started.

When IPA is configured on the server, there is a single service ipa.service that is used by systemd to start all the IPA components (the LDAP server, the KDC server, the Apache server etc...). The systemd units for 389ds or httpd are disabled because those services are started within ipa service unit, and ipa service is handling the startup order and dependencies. Within IPA, httpd service depends on the LDAP service and there is no way to avoid this dependency. Httpd service provides the web interface for IPA management, which is accessing LDAP to retrieve the configuration and requires kerberos for authentication. The kerberos server also depends on the LDAP server.

In the customer case, the customer mentioned that he enabled dirsrv unit and httpd unit, but that is a wrong configuration.

Hence this BZ is closed as WONTFIX.