On 1/20/20 9:39 AM, Jochen Demmer via FreeIPA-users wrote:
I suffer the exact same problem and already tried to upgrade twice
but
every time the update fails.
The ldap server does not listen when I check with ss or netstat.
I reverted back to Fedora 30 with snapshots every time.
Hi,
can you paste the logs from /var/logs/ipaupgrade.log? We would need the
full logs as the error may differ between a first run and a second run.
When the packages are upgraded, the script ipa-server-upgrade is called
and starts by disabling the LDAP server ports to avoid any LDAP
operation during the upgrade. Then the script performs its duty, and
re-enables the port.
If there is an untrapped failure before the ports are re-enabled, or the
user repeatedly presses CTRL-C, we sometimes end up in a situation where
the ports are still disabled (please see ticket
https://pagure.io/freeipa/issue/7534) after the ipa-server-upgrade
script exits. If the user re-runs ipa-server-upgrade at this point, the
script output will be completely different but will not give us any hint
related to the original failure root cause. That's why we need the full
logs.
If you are in a situation where the LDAP server isn't listening:
0. stop IPA with ipactl stop
1. edit /etc/dirsrv/slapd-EXAMPLE-COM/dse.ldif
2. set nsslapd-port to 389
3. set nsslapd-security to on
4. set nsslapd-global-backend-lock to off (if you have this attribute at
all)
5. restart IPA with ipactl start
If the services are able to restart at this point, try to run
ipa-server-upgrade and provide full logs.
HTH,
flo
Can someone help me to work this around. The OP writes of an IP that
changed but mine didn't. Where can I find a clue why ldap does not listen?
Jochen
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...