I am using F31.
Originally I had a stack trace same as the original post as https://pagure.io/dogtagpki/issue/3111.
Then I had upgraded the jss in a recent update. Also I tried to get the pki-server srpm and update the GenericPolicyProcessor.java according to the git commit (https://github.com/dogtagpki/pki/commit/b2a58eb240a93fe01e75311611341ed33f650619) Then I recompiled the pki-* rpm and reinstall it.
Now the stack trace is different.
<img alt="debug.2019-11-05.log" src="/dogtagpki/issue/raw/files/9581e8cf227a07c58b0721b2556968a1c851ec6ed26445275dcaedcd423da5cc-debug.2019-11-05.log" />
Attached is the debug log for the CA.
Thanks for creating the ticket.
Unfortunately this seems to be the same Connection Refused problem that has been discussed in these threads:
Currently it is not clear whether this is a problem with PKI, Tomcat, JSS, NSS, DS, or IPA.
Metadata Update from @edewata: - Custom field component adjusted to None - Custom field feature adjusted to None - Custom field origin adjusted to None - Custom field proposedmilestone adjusted to None - Custom field proposedpriority adjusted to None - Custom field reviewer adjusted to None - Custom field type adjusted to None - Custom field version adjusted to None
Unfortunately this seems to be the same Connection Refused problem that has been discussed in these threads: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org/thread/WLBFHI266KKHLF6G2UC4MHR4OLCLR45S/ https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org/thread/PAGG3ADPCCHYWQDWJZWG6QRON3OPV5IU/ Currently it is not clear whether this is a problem with PKI, Tomcat, JSS, NSS, DS, or IPA.
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org/thread/WLBFHI266KKHLF6G2UC4MHR4OLCLR45S/ https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org/thread/PAGG3ADPCCHYWQDWJZWG6QRON3OPV5IU/
And these two seem to be different issues to boot (cf. stack traces and logs).
@dkt Did the IP address of your server change? @philantrop reported that was his issue for his LDAP Connection Refused issue.
No, there are no IP changes. In the original setting, it is dual master setup. Only one node have problem and another node is able to upgrade after upgrading jss.
Now I had uninstall FreeIPA server from the problem node.
Considering to close this with insufficient_data. @dkt do you have further info / reliable reproducer with current packages?
insufficient_data
@ftweedal Since the problem server had uninstalled FreeIPA, I can't test it with the newest packages. You can close the ticket as you wish.
Cheers; closing.
Metadata Update from @ftweedal: - Issue close_status updated to: insufficient_data - Issue status updated to: Closed (was: Open)
Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.
This issue has been cloned to GitHub and is available here: https://github.com/dogtagpki/pki/issues/3229
If you want to receive further updates on the issue, please navigate to the GitHub issue and click on Subscribe button.
Subscribe
Thank you for understanding, and we apologize for any inconvenience.
Login to comment on this ticket.