/var/log/ipaupgrade.log: 2012-09-11T18:28:22Z DEBUG args=/bin/systemctl start certmonger.service 2012-09-11T18:28:22Z DEBUG stdout= 2012-09-11T18:28:22Z DEBUG stderr= 2012-09-11T18:28:22Z DEBUG args=/bin/systemctl is-active certmonger.service 2012-09-11T18:28:22Z DEBUG stdout=active ... ... [ snip certutil output ] ... 2012-09-11T18:28:52Z DEBUG args=/usr/bin/getcert start-tracking -d /var/lib/pki-ca/alias -n auditSigningCert cert-pki-ca -c dogtag-ipa-renew-agent -C /usr/lib64/ipa/certmonger/renew_ca_cert "auditSigningCert cert-pki-ca" -P XXXXXXXX 2012-09-11T18:28:52Z DEBUG stdout=Please verify that the certmonger service is still running. 2012-09-11T18:28:52Z DEBUG stderr= 2012-09-11T18:28:52Z INFO File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 614, in run_script return_value = main_function() File "/usr/sbin/ipa-upgradeconfig", line 540, in main enable_certificate_renewal(api.env.realm) File "/usr/sbin/ipa-upgradeconfig", line 455, in enable_certificate_renewal ca.configure_renewal() File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 1298, in configure_renewal self.dogtag_constants.ALIAS_DIR, 'renew_ca_cert "%s"' % nickname) File "/usr/lib/python2.7/site-packages/ipapython/certmonger.py", line 394, in dogtag_start_tracking (stdout, stderr, returncode) = ipautil.run(args, nolog=[pin]) File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 309, in run raise CalledProcessError(p.returncode, args) 2012-09-11T18:28:52Z INFO The ipa-upgradeconfig command failed, exception: CalledProcessError: Command '/usr/bin/getcert start-tracking -d /var/lib/pki-ca/alias -n auditSigningCert cert-pki-ca -c dogtag-ipa-renew-agent -C /usr/lib64/ipa/certmonger/renew_ca_cert "auditSigningCert cert-pki-ca" -P XXXXXXXX' returned non-zero exit status 1
I was not able to reproduce this issue. Update works fine for me on both F17 and when updating from F17 to F18.
Metadata Update from @pviktori: - Issue assigned to jcholast - Issue set to the milestone: FreeIPA 3.0 RC2
Login to comment on this ticket.