Sometimes during upgrade, ldap returns error. We don't have reproducer.
2014-10-17T02:02:38Z INFO Parsing update file '/usr/share/ipa/updates/30-policy.update' 2014-10-17T02:02:38Z INFO Parsing update file '/usr/share/ipa/updates/30-s4u2proxy.update' 2014-10-17T02:02:38Z INFO New entry: cn=policies,dc=idm,dc=lab,dc=bos,dc=redhat,dc=com 2014-10-17T02:02:38Z DEBUG --------------------------------------------- 2014-10-17T02:02:38Z DEBUG Initial value 2014-10-17T02:02:38Z DEBUG dn: cn=policies,dc=idm,dc=lab,dc=bos,dc=redhat,dc=com 2014-10-17T02:02:38Z DEBUG add: 'nsContainer' to objectclass, current value [] 2014-10-17T02:02:38Z DEBUG add: updated value ['nsContainer'] 2014-10-17T02:02:38Z DEBUG add: 'ipaContainer' to objectclass, current value ['nsContainer'] 2014-10-17T02:02:38Z DEBUG add: updated value ['nsContainer', 'ipaContainer'] 2014-10-17T02:02:38Z DEBUG add: 'policies' to cn, current value [] 2014-10-17T02:02:38Z DEBUG add: updated value ['policies'] 2014-10-17T02:02:38Z DEBUG add: 'Root of the policy related sub tree' to description, current value [] 2014-10-17T02:02:38Z DEBUG add: updated value ['Root of the policy related sub tree'] 2014-10-17T02:02:38Z DEBUG --------------------------------------------- 2014-10-17T02:02:38Z DEBUG Final value after applying updates 2014-10-17T02:02:38Z DEBUG dn: cn=policies,dc=idm,dc=lab,dc=bos,dc=redhat,dc=com 2014-10-17T02:02:38Z DEBUG objectclass: 2014-10-17T02:02:38Z DEBUG nsContainer 2014-10-17T02:02:38Z DEBUG ipaContainer 2014-10-17T02:02:38Z DEBUG cn: 2014-10-17T02:02:38Z DEBUG policies 2014-10-17T02:02:38Z DEBUG description: 2014-10-17T02:02:38Z DEBUG Root of the policy related sub tree 2014-10-17T02:02:38Z ERROR Add failure unknown object class "ipaContainer" 2014-10-17T08:27:25Z INFO New entry: cn=policylinks,cn=configs,cn=policies,dc=idm,dc=lab,dc=bos,dc=redhat,dc=com 2014-10-17T08:27:25Z DEBUG --------------------------------------------- 2014-10-17T08:27:25Z DEBUG Initial value 2014-10-17T08:27:25Z DEBUG dn: cn=policylinks,cn=configs,cn=policies,dc=idm,dc=lab,dc=bos,dc=redhat,dc=com 2014-10-17T08:27:25Z DEBUG add: 'ipaContainer' to objectclass, current value [] 2014-10-17T08:27:25Z DEBUG add: updated value ['ipaContainer'] 2014-10-17T08:27:25Z DEBUG add: 'ipaOrderedContainer' to objectclass, current value ['ipaContainer'] 2014-10-17T08:27:25Z DEBUG add: updated value ['ipaContainer', 'ipaOrderedContainer'] 2014-10-17T08:27:25Z DEBUG add: 'policylinks' to cn, current value [] 2014-10-17T08:27:25Z DEBUG add: updated value ['policylinks'] 2014-10-17T08:27:25Z DEBUG add: 'Sub tree to hold policy links' to description, current value [] 2014-10-17T08:27:25Z DEBUG add: updated value ['Sub tree to hold policy links'] 2014-10-17T08:27:25Z DEBUG --------------------------------------------- 2014-10-17T08:27:25Z DEBUG Final value after applying updates 2014-10-17T08:27:25Z DEBUG dn: cn=policylinks,cn=configs,cn=policies,dc=idm,dc=lab,dc=bos,dc=redhat,dc=com 2014-10-17T08:27:25Z DEBUG objectclass: 2014-10-17T08:27:25Z DEBUG ipaContainer 2014-10-17T08:27:25Z DEBUG ipaOrderedContainer 2014-10-17T08:27:25Z DEBUG cn: 2014-10-17T08:27:25Z DEBUG policylinks 2014-10-17T08:27:25Z DEBUG description: 2014-10-17T08:27:25Z DEBUG Sub tree to hold policy links 2014-10-17T08:27:25Z ERROR Add failure unknown object class "ipaOrderedContainer"
This schema is not installed since fe7cb34. The patch should simply delete install/updates/30-policy and install/share/60policyv2.ldif as it is just an ancient unused schema that should live just in our git history.
install/updates/30-policy
install/share/60policyv2.ldif
I want to eliminate any chance of upgrade errors in 4.1, so moving to this milestone.
master:
ipa-4-1:
Patch was not reviewed in 4.1 scope, moving to 4.1.1 release.
Sorry, overlook on my side, I should have closed this in 4.1 as part of comment:4.
Metadata Update from @mbasti: - Issue assigned to mbasti - Issue set to the milestone: FreeIPA 4.1
Login to comment on this ticket.