Seems like a critical issue to me.

Bug closed upstream, seems to have been a permissions problem in /var/log/dirsrv/slapd-IPA-REALM. How/why this was changed is unknown but the user said he had done at least one previous install.

I dropped Matt and Andrew an e-mail to see if dogtag does any chowns.

The dogtag team assures me it isn't them changing ownership, they have no need as they don't even assume that the LDAP server is on the same machine.

Reducing priority since this doesn't happen every time and there is an easy workaround.

upstream bug closed as NOTABUG