Upgrade failed on replica (master server has not been upgraded):
2015-10-15T14:58:05Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. 2015-10-15T14:58:05Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171, in execute return_value = self.run() File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py", line 48, in run server.upgrade() File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1632, in upgrade upgrade_configuration() File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1544, in upgrade_configuration custodia.upgrade_instance() File "/usr/lib/python2.7/site-packages/ipaserver/install/custodiainstance.py", line 58, in upgrade_instance self.__gen_keys() File "/usr/lib/python2.7/site-packages/ipaserver/install/custodiainstance.py", line 52, in __gen_keys KeyStore.generate_server_keys() File "/usr/lib/python2.7/site-packages/ipapython/secrets/kem.py", line 181, in generate_server_keys ldapconn.set_key(KEY_USAGE_SIG, self.host, principal, pubkeys[0]) File "/usr/lib/python2.7/site-packages/ipapython/secrets/kem.py", line 127, in set_key conn.modify_s(dn, mods) File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 364, in modify_s return self.result(msgid,all=1,timeout=self.timeout) File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 465, in result resp_type, resp_data, resp_msgid = self.result2(msgid,all,timeout) File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 469, in result2 resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all,timeout) File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 476, in result3 resp_ctrl_classes=resp_ctrl_classes File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 483, in result4 ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop) File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 106, in _ldap_call result = func(*args,**kwargs) 2015-10-15T14:58:05Z DEBUG The ipa-server-upgrade command failed, exception: NO_SUCH_OBJECT: {'desc': 'No such object'} 2015-10-15T14:58:05Z ERROR LDAP error: NO_SUCH_OBJECT No such object
Martin, do you know which object failed to be created ?
I do not know.
Also would be nice to have debug messages in custodia upgrade, upgrade log is usually the only way how to detect what happened without direct access to the machine.
I cannot reproduce the fail. If nobody else is able to reproduce this we can close this ticket as woksforme.
attachment freeipa-rga-0062-custodia-ipa-upgrade-failed-on-replica.patch
I can reproduce with rpms. Problem was that the Custodia update file was missing from the Makefile.
master:
Metadata Update from @mbasti: - Issue assigned to rga - Issue set to the milestone: FreeIPA 4.3
Login to comment on this ticket.