Hi Rob, in fact it’s not working either. Jan 8 00:02:58 headnode ipa-pki-wait-running[59836]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='headnode.cluster.tmc.if.ufrj.br', port=8080): Max retries exceeded with url: /ca/admin/ca/getStatus (Caused by ConnectTimeoutError(<urllib3.connection.HTTPConnection object at 0x7f4caa2ffda0>, 'Connection to headnode.cluster.tmc.if.ufrj.br timed out. (connect timeout=1.0)')) Jan 8 00:02:58 headnode systemd[1]: [email protected]<mailto:[email protected]>: Start-post operation timed out. Stopping. Jan 8 00:02:59 headnode systemd[1]: [email protected]<mailto:[email protected]>: Failed with result 'timeout'. Jan 8 00:02:59 headnode systemd[1]: Failed to start PKI Tomcat Server pki-tomcat.
I have upgraded from 8.2 to 8.3; here’s the output of yum history and indeed there’s an error with Java: https://pastebin.com/CH5g3kBw On the end of the paste there’s the Java errors. Thank you. On 7 Jan 2021, at 11:01, Rob Crittenden <[email protected]<mailto:[email protected]>> wrote: Vinícius Ferrão via FreeIPA-users wrote: Hello, I’ve a single IPA machine that provides authentication for itself. It does not even have any client or host. After def -y update and reboot, IPA fails to load an it’s in broken state. [root@headnode ~]# systemctl status ipa ● ipa.service - Identity, Policy, Audit Loaded: loaded (/usr/lib/systemd/system/ipa.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Wed 2021-01-06 16:14:48 -03; 45min ago Process: 1278 ExecStart=/usr/sbin/ipactl start (code=exited, status=1/FAILURE) Main PID: 1278 (code=exited, status=1/FAILURE) Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: CRL tree already moved Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command i> Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: Unexpected error - see /var/log/ipaupgrade.log for details: Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', '> Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more > Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: See the upgrade log for more details and/or run /usr/sbin/ipa-server-upgrade> Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: Aborting ipactl Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br systemd[1]: ipa.service: Main process exited, code=exited, status=1/FAILURE Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br systemd[1]: ipa.service: Failed with result 'exit-code'. Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br systemd[1]: Failed to start Identity, Policy, Audit. If asks for look on /var/log/ipaupgrade.log; but this log is just overwhelming. You must know what you should be looking for for actually find something. The relevant thing that I’ve found by myself is: 2021-01-06T19:09:51Z DEBUG The ipa-server-upgrade command failed, exception: CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', '[email protected]<mailto:[email protected]> <mailto:[email protected]>'] returned non-zero exit status 1: 'Job for [email protected]<mailto:[email protected]> <mailto:[email protected]> failed because a timeout was exceeded.\nSee "systemctl status [email protected]<mailto:[email protected]> <mailto:[email protected]>" and "journalctl -xe" for details.\n’) Is that Java regression again that happened a month or two ago? Hard to say. You upgraded from what to what? Was java included in the updated packages? Does /bin/systemctl start [email protected]<mailto:[email protected]> work outside the upgrader? rob
_______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
