do you have any news on this issue... i havea similar trouble...after yum update from
centos 7.4 to 7.6
the pki-tomcatd services failed to start...it worked for a while then failed and now it
won't start anymore...
looked at the certificate and all seems ok...
after a quick look at the different log file, here's what i found:
In Ldap (bound) connection pool to host ipa port 636, Cannot connect to LDAP server.
Error: netscape.ldap.LDAPException: Unable to create socket: java.net.ConnectException:
Connection refused (Connection refused) (-1)
also, when i run ipa-server-upgrade, it hang waiting for CA to come up ...
The CA status is: check interrupted due to error: cannot connect to
'http://cgi-mgmt01d.mgmt.internal:8080/ca/admin/ca/getStatus': timed out
something broke with the update... and i can't put my finger on it...