From datakid at gmail.com Wed Jun 6 01:25:34 2018
Content-Type: multipart/mixed; boundary="===============2903330500499313627=="
MIME-Version: 1.0
From: Lachlan Musicman
To: freeipa-users at lists.fedorahosted.org
Subject: [Freeipa-users] FreeIPA upgrade fails in CentOS 7.4 to CentOS 7.5
upgrade
Date: Wed, 06 Jun 2018 11:24:46 +1000
Message-ID:
--===============2903330500499313627==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
>From ipaupgrade.log, the CA isn't coming up?
2018-06-06T01:05:40Z DEBUG wait_for_open_ports: localhost [8080, 8443]
timeout 300
2018-06-06T01:05:40Z DEBUG waiting for port: 8080
2018-06-06T01:05:40Z DEBUG Failed to connect to port 8080 tcp on ::1
2018-06-06T01:05:40Z DEBUG Failed to connect to port 8080 tcp on 127.0.0.1
2018-06-06T01:05:41Z DEBUG SUCCESS: port: 8080
2018-06-06T01:05:41Z DEBUG waiting for port: 8443
2018-06-06T01:05:41Z DEBUG Failed to connect to port 8443 tcp on ::1
2018-06-06T01:05:41Z DEBUG Failed to connect to port 8443 tcp on 127.0.0.1
2018-06-06T01:05:42Z DEBUG SUCCESS: port: 8443
2018-06-06T01:05:42Z DEBUG Waiting until the CA is running
2018-06-06T01:05:42Z DEBUG request POST
http://vmpr-linuxidm.unix.company.com:8080/ca/admin/ca/getStatus
2018-06-06T01:05:42Z DEBUG request body ''
2018-06-06T01:05:46Z DEBUG response status 500
2018-06-06T01:05:46Z DEBUG response headers Server: Apache-Coyote/1.1
Content-Type: text/html;charset=3Dutf-8
Content-Language: en
Content-Length: 2208
Date: Wed, 06 Jun 2018 01:05:46 GMT
Connection: close
2018-06-06T01:05:46Z DEBUG response body 'Apache
Tomcat/7.0.76 - Error report
HTTP Status 500 - Subsystem unavailable
type Exception report
message
Subsystem unavailable
description The server
encountered an internal error that prevented it from fulfilling this
request.
exception
javax.ws.rs.ServiceUnavailableException: Subsystem
unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(P=
roxyRealm.java:145)\n\torg.apache.catalina.authenticator.AuthenticatorBase.=
invoke(AuthenticatorBase.java:500)\n\torg.apache.catalina.valves.ErrorRepor=
tValve.invoke(ErrorReportValve.java:103)\n\torg.apache.catalina.valves.Acce=
ssLogValve.invoke(AccessLogValve.java:962)\n\torg.apache.catalina.connector=
.CoyoteAdapter.service(CoyoteAdapter.java:445)\n\torg.apache.coyote.http11.=
AbstractHttp11Processor.process(AbstractHttp11Processor.java:1087)\n\torg.a=
pache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractPro=
tocol.java:637)\n\torg.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.r=
un(JIoEndpoint.java:316)\n\tjava.util.concurrent.ThreadPoolExecutor.runWork=
er(ThreadPoolExecutor.java:1149)\n\tjava.util.concurrent.ThreadPoolExecutor=
$Worker.run(ThreadPoolExecutor.java:624)\n\torg.apache.tomcat.util.threads.=
TaskThread$WrappingRunnable.run(TaskThread.java:61)\n\tjava.lang.Thread.run=
(Thread.java:748)\n
note
The full stack trace of the root cause is available in the Apache
Tomcat/7.0.76 logs.
Apache
Tomcat/7.0.76
'
2018-06-06T01:05:46Z DEBUG The CA status is: check interrupted due to
error: Retrieving CA status failed with status 500
2018-06-06T01:05:46Z DEBUG Waiting for CA to start...
2018-06-06T01:05:47Z DEBUG request POST
http://vmpr-linuxidm.unix.company.com:8080/ca/admin/ca/getStatus
2018-06-06T01:05:47Z DEBUG request body ''
2018-06-06T01:05:47Z DEBUG response status 500
2018-06-06T01:05:47Z DEBUG response headers Server: Apache-Coyote/1.1
Content-Type: text/html;charset=3Dutf-8
Content-Language: en
Content-Length: 2208
Date: Wed, 06 Jun 2018 01:05:47 GMT
Connection: close
I found some old bugs that don't seem to apply, like this one
https://bugzilla.redhat.com/show_bug.cgi?id=3D1318616
and some that do
https://pagure.io/freeipa/issue/6766
Doesn't actually fix the problem that my users can't login :/
Gah, I thought this had been fixed - it was in my upgrade of the dev server
L.
------
"The antidote to apocalypticism is *apocalyptic civics*. Apocalyptic civics
is the insistence that we cannot ignore the truth, nor should we panic
about it. It is a shared consciousness that our institutions have failed
and our ecosystem is collapsing, yet we are still here =E2=80=94 and we are
creative agents who can shape our destinies. Apocalyptic civics is the
conviction that the only way out is through, and the only way through is
together. "
*Greg Bloom* @greggish
https://twitter.com/greggish/status/873177525903609857
--===============2903330500499313627==
Content-Type: text/html
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"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--===============2903330500499313627==--