Bug 2216880

Summary: [DDF] command fails with the message: Error: 105 - 3 - 68 - Already exists - [] - add_ext_s((dn: cn=config,cn=Account Policy Plugin,cn=plugins,cn=config
Product: Red Hat Directory Server Reporter: Direct Docs Feedback <ddf-bot>
Component: DocumentationAssignee: Evgenia Martynyuk <emartyny>
Documentation sub component: DDF QA Contact:
Status: CLOSED CURRENTRELEASE Docs Contact:
Severity: medium    
Priority: medium CC: radrao, rhel-docs
Version: 11.0Keywords: Documentation
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-06-28 12:50:48 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Direct Docs Feedback 2023-06-23 02:57:33 UTC
Hi team.

When following the instructions on this page, this command fails with the message:

[root@rluds11 ~]# dsconf testds11 plugin account-policy config-entry add "cn=config,cn=Account Policy Plugin,cn=plugins,cn=config" --always-record-login yes --state-attr lastLoginTime --alt-state-attr 1.1 --spec-attr acctPolicySubentry --limit-attr accountInactivityLimit
Error: 105 - 3 - 68 - Already exists - [] - add_ext_s((dn: cn=config,cn=Account Policy Plugin,cn=plugins,cn=config
altstateattrname: 1.1
alwaysRecordLogin: yes
cn: config
limitattrname: accountInactivityLimit
objectclass: top
objectclass: extensibleObject
specattrname: acctPolicySubentry
stateattrname: lastLoginTime

,),{'serverctrls': None, 'clientctrls': None, 'escapehatch': 'i am sure'}) on instance testds11

I do not know if the "cn=config,cn=Account Policy Plugin,cn=plugins,cn=config" entry is created during installation or when running the previous commands to activate the plugin, but it already exists.

I had to use 'dsconf  plugin account-policy config-entry set .." instead of "dsconf  plugin account-policy config-entry add .." to set the plugin configuration entry.

Let me know if you need more information.

Cheers,
/Runar (rlundgre)

Reported by: rhn-support-rlundgren

https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/administration_guide/account-policy-plugin#annotations:d50af12f-5ebc-4656-904c-8fa32371ae22