Hi IPA Team,
after an IPA upgrade from version 4.9.6 to 4.9.8 I get the following error when I run ipa-server-upgrad manually:
2022-06-09T09:24:25Z DEBUG stderr=
2022-06-09T09:24:25Z DEBUG wait_for_open_ports: localhost [389] timeout 120
2022-06-09T09:24:25Z DEBUG waiting for port: 389
2022-06-09T09:24:25Z DEBUG Failed to connect to port 389 tcp on 127.0.0.1
2022-06-09T09:26:25Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manua
lly.
2022-06-09T09:26:25Z DEBUG File "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 180, in execute
return_value = self.run()
File "/usr/lib/python3.6/site-packages/ipaserver/install/ipa_server_upgrade.py", line 54, in run
server.upgrade()
File "/usr/lib/python3.6/site-packages/ipaserver/install/server/upgrade.py", line 2011, in upgrade
upgrade_configuration()
File "/usr/lib/python3.6/site-packages/ipaserver/install/server/upgrade.py", line 1632, in upgrade_configuration
ds.start(ds.serverid)
File "/usr/lib/python3.6/site-packages/ipaserver/install/dsinstance.py", line 643, in start
instance_name, capture_output=capture_output, wait=wait
File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 524, in start
self.service.start(instance_name, capture_output=capture_output, wait=wait)
File "/usr/lib/python3.6/site-packages/ipaplatform/redhat/services.py", line 138, in start
instance_name, capture_output=capture_output, wait=wait)
File "/usr/lib/python3.6/site-packages/ipaplatform/base/services.py", line 317, in start
self.wait_for_open_ports(self.service_instance(instance_name))
File "/usr/lib/python3.6/site-packages/ipaplatform/base/services.py", line 286, in wait_for_open_ports
self.api.env.startup_timeout)
File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 1341, in wait_for_open_ports
raise socket.timeout("Timeout exceeded")
2022-06-09T09:26:25Z DEBUG The ipa-server-upgrade command failed, exception: timeout: Timeout exceeded
2022-06-09T09:26:25Z ERROR Timeout exceeded
2022-06-09T09:26:25Z ERROR The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information
A subset of the upgraded packages:
Upgrade ipa-client-4.9.8-7.0.1.module+el8.6.0+20654+19b76db2.x86_64 @ol8_x86_64_appstream
Upgraded ipa-client-4.9.6-12.0.1.module+el8.5.0+20642+b228f286.x86_64 @@System
Upgrade ipa-client-common-4.9.8-7.0.1.module+el8.6.0+20654+19b76db2.noarch @ol8_x86_64_appstream
Upgraded ipa-client-common-4.9.6-12.0.1.module+el8.5.0+20642+b228f286.noarch @@System
Upgrade ipa-common-4.9.8-7.0.1.module+el8.6.0+20654+19b76db2.noarch @ol8_x86_64_appstream
Upgraded ipa-common-4.9.6-12.0.1.module+el8.5.0+20642+b228f286.noarch @@System
Upgrade ipa-healthcheck-core-0.7-10.module+el8.6.0+20578+18b36d36.noarch @ol8_x86_64_appstream
Upgraded ipa-healthcheck-core-0.7-6.module+el8.5.0+20379+1b4496cf.noarch @@System
Upgrade ipa-selinux-4.9.8-7.0.1.module+el8.6.0+20654+19b76db2.noarch @ol8_x86_64_appstream
Upgraded ipa-selinux-4.9.6-12.0.1.module+el8.5.0+20642+b228f286.noarch @@System
Upgrade ipa-server-4.9.8-7.0.1.module+el8.6.0+20654+19b76db2.x86_64 @ol8_x86_64_appstream
Upgraded ipa-server-4.9.6-12.0.1.module+el8.5.0+20642+b228f286.x86_64 @@System
Upgrade ipa-server-common-4.9.8-7.0.1.module+el8.6.0+20654+19b76db2.noarch @ol8_x86_64_appstream
Upgraded ipa-server-common-4.9.6-12.0.1.module+el8.5.0+20642+b228f286.noarch @@System
Upgrade ipa-server-trust-ad-4.9.8-7.0.1.module+el8.6.0+20654+19b76db2.x86_64 @ol8_x86_64_appstream
Upgraded ipa-server-trust-ad-4.9.6-12.0.1.module+el8.5.0+20642+b228f286.x86_64 @@System
We found the following error in the file /var/log/dirsrv/DOMAIN/errors
[09/Jun/2022:11:30:45.658955068 +0200] - ERR - set_krb5_creds - Could not get initial credentials for principal [ldap/fqdn-host@MYDOMAIN] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested
realm)
In comparison with other IPA Servers the entries in the ds.keytab file looks fine.
Thanks
G