Issue

I just upgraded copies of our 3 servers from Centos 8.2 to 8.3. I always try it on copies before doing it on the real thing.

The upgrades all went fine, but on one of the servers, the services weren’t running, and ipactl status complained

Failed to get list of services to probe status!
Configured hostname z does not match any master server in LDAP:
x
y
z

Adding prints to the python code, I found the issue was that the services, e.g.

dn: cn=KPASSWD,cn=z,cn=masters,cn=ipa,cn=etc,dc=cs,dc=rutgers,dc=edu

had

ipaConfigString: configuredService

when they should have had

ipaConfigString: enabledService

It was easy to fix. Things now look OK.

Since I’ve fixed it, I don’t need any help, but I thought it was worth reporting.

The error message wasn’t entirely helpful.

I still had copies from before the upgrade. I verified that this problem was not caused by the upgrade. The one server ha configuredService before the upgrade, while the others had enabledService. There's no telling how many releases ago the problem actually happened.

It appears that this is the first release in which ipactl actually cared. It might be worth detecting the issue and either giving a more specific error message or fixing it.

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server

package freeipa-server is not installed
package freeipa-client is not installed
ipa-server-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64
ipa-client-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64
389-ds-base-1.4.3.8-5.module_el8.3.0+473+53682548.x86_64
pki-ca-10.9.4-1.module_el8.3.0+500+458aeb54.noarch
krb5-server-1.18.2-5.el8.x86_64