Description of problem:
ipa-server-upgrade fails
Version-Release number of selected component (if applicable):
ipa-server-4.6.5-2.el7.x86_64
How reproducible:
Always
Steps to Reproduce:
1. ipa-server-install --domain $DOMAIN --realm $REALM --setup-dns
--auto-forwarder --auto-reverse -a Secret123 -p Secret123 -U
2. ipa-server-upgrade
Actual results:
ipa-server-upgrade fails with:
[...]
[Create systemd-user hbac service and rule]
IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command
ipa-server-upgrade manually.
Unexpected error - see /var/log/ipaupgrade.log for details:
ConversionError: invalid 'cn': must be Unicode text
The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more
information
Expected results:
ipa-server-upgrade should finish successfully
Additional info:
Extract of /var/log/ipaupgrade.log:
2019-04-01T08:25:08Z INFO [Create systemd-user hbac service and rule]
2019-04-01T08:25:08Z DEBUG raw: hbacsvc_add('systemd-user',
description='pam_systemd and systemd user@.service', version=u'2.230')
2019-04-01T08:25:08Z ERROR IPA server upgrade failed: Inspect
/var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
2019-04-01T08:25:08Z DEBUG   File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 178, in execute
    return_value = self.run()
  File
"/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py",
line 54, in run
    server.upgrade()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py",
line 2146, in upgrade
    upgrade_configuration()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py",
line 2033, in upgrade_configuration
    add_systemd_user_hbac()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py",
line 1697, in add_systemd_user_hbac
    description='pam_systemd and systemd user@.service'
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 450, in
__call__
    return self.__do_call(*args, **options)
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 471, in
__do_call
    params = self.convert(**params)
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 672, in
convert
    (k, self.params[k].convert(v)) for (k, v) in kw.items()
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 672, in
<genexpr>
    (k, self.params[k].convert(v)) for (k, v) in kw.items()
  File "/usr/lib/python2.7/site-packages/ipalib/parameters.py", line 852, in
convert
    return convert(value)
  File "/usr/lib/python2.7/site-packages/ipalib/parameters.py", line 1571, in
_convert_scalar
    raise ConversionError(name=self.name, error=ugettext(self.type_error))
2019-04-01T08:25:08Z DEBUG The ipa-server-upgrade command failed, exception:
ConversionError: invalid 'cn': must be Unicode text
2019-04-01T08:25:08Z ERROR Unexpected error - see /var/log/ipaupgrade.log for
details:
ConversionError: invalid 'cn': must be Unicode text
2019-04-01T08:25:08Z ERROR The ipa-server-upgrade command failed. See
/var/log/ipaupgrade.log for more information