2015-11-05 12:26 GMT+01:00 Alexander Bokovoy <aboko...@redhat.com>:
> On Thu, 05 Nov 2015, John Obaterspok wrote:
>> I waited a couple of days and when "dnf list freeipa-server
>> --releasever=23" said 4.2.3 I hit the upgrade. Unfortunately I noticed to
>> late that I received 4.2.2 during "dnf system-upgrade".
>> Any ideas how to get it going again? Or is it easier to start from scratch
>> if I only have ~ 10 IPA clients?
> Did you already upgrade to 4.2.3? Make sure you have
> pki-core-10.2.6-12.fc23 and freeipa 4.2.3-1.fc23, run
> ipa-server-upgrade. It should be able to recover.
Untfortunatly not, it's not able to recover:
##### rpm -q pki-base freeipa-server
(Note I have pki-base, not pki-core... but I guess that was what you ment)
session memcached servers not running
Missing version: no platform stored
[1/8]: saving configuration
[2/8]: disabling listeners
[3/8]: enabling DS global lock
[4/8]: starting directory server
[error] CalledProcessError: Command ''/bin/systemctl' 'start'
'dirsrv@MY-LAN.service'' returned non-zero exit status 1
[cleanup]: stopping directory server
[cleanup]: restoring configuration
IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command
Unexpected error - see /var/log/ipaupgrade.log for details:
CalledProcessError: Command ''/bin/systemctl' 'start' 'dirsrv@MY-LAN.service''
returned non-zero exit status 1
ns-slapd: [05/Nov/2015:16:55:32 +0100] - Cannot find parent attribute
ns-slapd: [05/Nov/2015:16:55:32 +0100] dse_read_one_file - The entry
cn=schema in file /etc/dirsrv/slapd-MY-LAN/schema/99user.ldif (lineno: 1)
is invalid, error code 21 (
ns-slapd: [05/Nov/2015:16:55:32 +0100] dse - Please edit the file to
correct the reported problems and then restart the server.
systemd: dirsrv@MY-LAN.service: Control process exited, code=exited
##### 99user.ldif first lines has the following
aci: (target="ldap:///cn=schema")(targetattr !="aci")(version 3.0;acl
"anonymous, no acis"; allow (read, search, compare) userdn =
modifiersname: cn=Directory Manager
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project