When some users are setting the umask to 0027 due to security policies ipa-restore will result not working dirsrv. So a fix is to temporary set umask to 0022 while ipa-restore is running. https://pagure.io/freeipa/issue/6844 Reviewed-By: Christian Heimes <cheimes@redhat.com>