On ma, 04 marras 2019, Wulf C. Krueger wrote:
Hello Alex,
On 2019-11-04 16:49, Alex Scheel via FreeIPA-users wrote:
>These backtraces from Wulf don't end in JSS at all. In fact, JSS seems to
initalize
>just fine around 2019-11-02 11:55:34 in the Tomcat debug log. This seems like a bug
>in the LDAPProfileSubsystem of Dogtag.
Thanks for chiming in - any suggestions on how to proceed?
I'm wondering why the LDAP server *only* seems to be listening on that
socket (cf. log) instead of (or in addition to) ports 389/636.
I think it is a red herring. ipa-server-upgrade switches off 389/636
during upgrade to prevent inconsistency leaking out for replication. If
something unexpected happens during the upgrade when these ports were
disabled, they might be left disabled. The question is why it was left
in a state it was left in.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland