[Freeipa-users] Re: IPA server upgrade fails with KDC error

2018-11-23 Thread Zarko D via FreeIPA-users
> Hi, have you found resolution here? > > I get same/similar error while troubleshooting expired certificates, for > example going > back in time when all certs are valid and restarting certmonger, then I see > this error. sorry, please ignore. Apologies.

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2018-11-23 Thread Zarko D via FreeIPA-users
Hi, have you found resolution here? I get same/similar error while troubleshooting expired certificates, for example going back in time when all certs are valid and restarting certmonger, then I see this error. ___ FreeIPA-users mailing list --

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-18 Thread Johannes Brandstetter via FreeIPA-users
So I finally reverted to a snapshot with version 4.4 before the inadvertent update. After some 15min of no output the instance came back up again. ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-18 Thread Johannes Brandstetter via FreeIPA-users
I've rebuilt the RPM from the src.rpm and installed that but it didn't help. Any other ideas on how to solve the mismatch? ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Robbie Harwood via FreeIPA-users
Alexander Bokovoy writes: > On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote: >> >> I'm trying to upgrade FreeIPA through ipa-server-upgrade from 4.4 to >> 4.5. The command fails with an "ACIError: Insufficient access:" . I >> find in the

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Johannes Brandstetter via FreeIPA-users
[17/Oct/2017:04:15:07.895680200 +] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. [17/Oct/2017:04:15:07.901635774 +] - INFO - Security Initialization - SSL info: Enabling default

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Alexander Bokovoy via FreeIPA-users
On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote: Hi, it was all done in one yum upgrade session. I just grepped the output for ipa and krb and didn't bother to put them back in the correct order. If I run ipa-server-upgrade directly I get the following output which leads to

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Johannes Brandstetter via FreeIPA-users
Hi, it was all done in one yum upgrade session. I just grepped the output for ipa and krb and didn't bother to put them back in the correct order. If I run ipa-server-upgrade directly I get the following output which leads to the log entry stated above: [jbrandstetter@ip-172-29-1-184 ~]$

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Alexander Bokovoy via FreeIPA-users
On ti, 17 loka 2017, Alexander Bokovoy via FreeIPA-users wrote: On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote: Hi, I'm trying to upgrade FreeIPA through ipa-server-upgrade from 4.4 to 4.5. The command fails with an "ACIError: Insufficient access:" . I find in the kdc log

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Johannes Brandstetter via FreeIPA-users
Hi, the system is fully upgraded "No packages marked for update" Cheers, Johannes ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Alexander Bokovoy via FreeIPA-users
On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote: Hi, I'm trying to upgrade FreeIPA through ipa-server-upgrade from 4.4 to 4.5. The command fails with an "ACIError: Insufficient access:" . I find in the kdc log that it complains about " Database module does not match KDC