freeipa

#5374 custodia: ipa-upgrade failed on replica
Closed: Fixed Opened by mbasti.

Closed: Fixed
Reopen Issue

Upgrade failed on replica (master server has not been upgraded):

2015-10-15T14:58:05Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
2015-10-15T14:58:05Z DEBUG   File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171, in execute
    return_value = self.run()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py", line 48, in run
    server.upgrade()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1632, in upgrade
    upgrade_configuration()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1544, in upgrade_configuration
    custodia.upgrade_instance()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/custodiainstance.py", line 58, in upgrade_instance
    self.__gen_keys()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/custodiainstance.py", line 52, in __gen_keys
    KeyStore.generate_server_keys()
  File "/usr/lib/python2.7/site-packages/ipapython/secrets/kem.py", line 181, in generate_server_keys
    ldapconn.set_key(KEY_USAGE_SIG, self.host, principal, pubkeys[0])
  File "/usr/lib/python2.7/site-packages/ipapython/secrets/kem.py", line 127, in set_key
    conn.modify_s(dn, mods)
  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 364, in modify_s
    return self.result(msgid,all=1,timeout=self.timeout)
  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 465, in result
    resp_type, resp_data, resp_msgid = self.result2(msgid,all,timeout)
  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 469, in result2
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all,timeout)
  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 476, in result3
    resp_ctrl_classes=resp_ctrl_classes
  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 483, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 106, in _ldap_call
    result = func(*args,**kwargs)
2015-10-15T14:58:05Z DEBUG The ipa-server-upgrade command failed, exception: NO_SUCH_OBJECT: {'desc': 'No such object'}
2015-10-15T14:58:05Z ERROR LDAP error: NO_SUCH_OBJECT
No such object

Martin,
do you know which object failed to be created ?

I do not know.

Also would be nice to have debug messages in custodia upgrade, upgrade log is usually the only way how to detect what happened without direct access to the machine.

I cannot reproduce the fail. If nobody else is able to reproduce this we can close this ticket as woksforme.

I can reproduce with rpms. Problem was that the Custodia update file was missing from the Makefile.

master:

  • 1e91ef33b522c3b316c7917379e56c168b1e2d52 custodia: ipa-upgrade failed on replica

Metadata Update from @mbasti:
- Issue assigned to rga
- Issue set to the milestone: FreeIPA 4.3
Metadata
None
None
None
Normal
defect
Upgrade
1
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.