#5519 ipa-server-upgrade fails if certmonger is not running
Closed: Fixed None Opened 8 years ago by orion.

I have a CA-less install (with --root-ca-file) and so certmonger is not configured to run. ipa-server-upgrade from 4.2.0 fails in this situation with:

2015-12-07T17:47:46Z DEBUG Starting external process
2015-12-07T17:47:46Z DEBUG args='/bin/systemctl' 'is-active' 'certmonger.service'
2015-12-07T17:47:46Z DEBUG Process finished, return code=3
2015-12-07T17:47:46Z DEBUG stdout=unknown

2015-12-07T17:47:46Z DEBUG stderr=
2015-12-07T17:47:46Z ERROR IPA server upgrade failed: Inspect
/var/log/ipaupgrade.log and run com
mand ipa-server-upgrade manually.
2015-12-07T17:47:46Z DEBUG   File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line
 171, in execute
    return_value = self.run()
  File
"/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py",
line 50, in ru
n
    raise admintool.ScriptError(str(e))

2015-12-07T17:47:46Z DEBUG The ipa-server-upgrade command failed, exception:
ScriptError: Certmon
ger is not running. Start certmonger and run upgrade again.
2015-12-07T17:47:46Z ERROR Certmonger is not running. Start certmonger and run
upgrade again.

master:

  • bef0f4c prevent crash of CA-less server upgrade due to absent certmonger

ipa-4-2:

  • f55a228 prevent crash of CA-less server upgrade due to absent certmonger

ipa-4-3:

  • 0097558 prevent crash of CA-less server upgrade due to absent certmonger

Metadata Update from @orion:
- Issue assigned to mbabinsk
- Issue set to the milestone: FreeIPA 4.2.4

7 years ago

Login to comment on this ticket.

Metadata