Hello Wulf,
I am having the same problem about three days ago.
Related thread in:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org/thread/WLBFHI266KKHLF6G2UC4MHR4OLCLR45S/
Looks like the problem is related to https://pagure.io/dogtagpki/issue/3111
I am waiting for the bugfix or new rpm.
Best regards,
Patrick
On Sat, Nov 2, 2019 at 8:47 PM Wulf C. Krueger via FreeIPA-users <
freeipa-users@lists.fedorahosted.org> wrote:
> Hello,
>
> my FreeIPA installation was working well on Fedora 30. After upgrading
> to F31, though, it fails to start:
>
>
> # ipactl start
> IPA version error: data needs to be upgraded (expected version
> '4.8.1-4.fc31', current version '4.8.1-1.fc30')
> Automatically running upgrade, for details see /var/log/ipaupgrade.log
> Be patient, this may take a few minutes.
> Automatic upgrade failed: Update complete
> Upgrading the configuration of the IPA services
> [Verifying that root certificate is published]
> [Migrate CRL publish directory]
> CRL tree already moved
> IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run
> command ipa-server-upgrade manually.
> Unexpected error - see /var/log/ipaupgrade.log for details:
> CalledProcessError: CalledProcessError(Command ['/bin/systemctl',
> 'start', 'pki-tomcatd@pki-tomcat.service'] returned non-zero exit status
> 1: 'Job for pki-tomcatd@pki-tomcat.service failed because a timeout was
> exceeded.\nSee "systemctl status pki-tomcatd@pki-tomcat.service" and
> "journalctl -xe" for details.\n')
> The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for
> more information
>
> See the upgrade log for more details and/or run
> /usr/sbin/ipa-server-upgrade again
> Aborting ipactl
>
>
> Logs:
>
> ipaupgrade.log: https://mailstation.de/ipa-logs/ipaupgrade.log
> pki-tomcatd@pki-tomcat log:
> https://mailstation.de/ipa-logs/pki-tomc...@pki-tomcat.log
> pki-tomcat-ca-debug log:
> https://mailstation.de/ipa-logs/pki-tomcat-ca-debug.2019-11-02.log
>
> So it looks like the LDAP server isn't reachable but its log says it's
> running: https://mailstation.de/ipa-logs/dir...@mailstation-de.log
>
> There's nothing listening on ports 389 and 636, though.
>
> Help would be highly appreciated.
>
> Best regards, Wulf
> ___
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
>
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
