On 6 June 2018 at 11:24, Lachlan Musicman <datakid@gmail.com> wrote:

From ipaupgrade.log, the CA isn't coming up?

Digging, I found this

Internal Database Error encountered: Could not connect to LDAP server host vmpr-linuxidm.unix.company.com port 636 Error netscape.ldap.LDAPException: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) (-1)

I think it was in the pki logs?

So tomcat wont start (according to ipactl, it's started according to sysctl), same for pki-tomcat and dirsrv.

I've had to revert to last night's backup as this is required infrastructure. My updates of the other servers I use as dev worked fine in centos 7.4 -> 7.5 eventually. I can't recall but I think it was just a reboot and ipa-server-upgrade and it was fine.

hmmm