Natxo Asenjo via FreeIPA-users wrote: > hi, > > no, it's without quotes but the rolledback version: > > Configuration-Version: 11.4.2 > > I tried modifiying it to 11.5.0 and ipactl restart, but it does not help > (reset it to the proper value 11.4.2 now)
Did the error change when you switched to 11.4.2? You didn't include a new traceback. rob > > > > On Fri, May 24, 2024 at 5:14 PM Alexander Bokovoy <aboko...@redhat.com > <mailto:aboko...@redhat.com>> wrote: > > On Fri, 24 May 2024, Natxo Asenjo via FreeIPA-users wrote: > >hi, > > > >after a botched update > (https://access.redhat.com/solutions/7065748) and > >rolling back the changes, this service will not start: > > > ># ipactl status > >Directory Service: RUNNING > >krb5kdc Service: RUNNING > >kadmin Service: RUNNING > >named Service: RUNNING > >httpd Service: RUNNING > >ipa-custodia Service: RUNNING > >pki-tomcatd Service: STOPPED > >smb Service: RUNNING > >winbind Service: RUNNING > >ipa-otpd Service: RUNNING > >ipa-dnskeysyncd Service: RUNNING > >1 service(s) are not running > > > >in journalctl I found this stdout/stderr messages: > > > > > >May 24 11:40:35 kdc1.sub.domain.tld named[27437]: zone > sub.domain.tld/IN: > >sending notifies (serial 1716543629) > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: ERROR: Unable to > >parse version number: "11.5.0" > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: Traceback (most > >recent call last): > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/server/pkiserver.py", line 41, in > ><module> > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: > >cli.execute(sys.argv) > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/server/cli/__init__.py", line > 145, in > >execute > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: > >super().execute(args) > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/cli/__init__.py", line 217, > in execute > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: > >module.execute(module_args) > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/server/cli/upgrade.py", line > 144, in > >execute > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: > self.upgrade( > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/server/cli/upgrade.py", line > 178, in > >upgrade > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: > >upgrader.upgrade() > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/upgrade.py", line 481, in upgrade > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: versions = > >self.versions() > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/upgrade.py", line 238, in > versions > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: > current_version > >= self.get_current_version() > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/upgrade.py", line 341, in > >get_current_version > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: > current_version > >= self.get_tracker().get_version() > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/upgrade.py", line 141, in > get_version > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: return > >pki.util.Version(version) > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: File > >"/usr/lib/python3.9/site-packages/pki/util.py", line 613, in __init__ > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: raise > >Exception('Unable to parse version number: %s' % obj) > >May 24 11:40:35 kdc1.sub.domain.tld pki-server[27758]: Exception: > Unable to > >parse version number: "11.5.0" > > What do you have in /etc/pki/pki.version file? Is it literally > > # cat /etc/pki/pki.version > Configuration-Version: "11.5.0" > > ? If so, then remove quotes around 11.5.0, they are not expected. > > >May 24 11:40:35 kdc1.sub.domain.tld systemd[1]: > >pki-tomcatd@pki-tomcat.service: Control process exited, code=exited, > >status=1/FAILURE > >May 24 11:40:35 kdc1.sub.domain.tld systemd[1]: > >pki-tomcatd@pki-tomcat.service: Failed with result 'exit-code'. > >May 24 11:40:35 kdc1.sub.domain.tld systemd[1]: Failed to start PKI > Tomcat > >Server pki-tomcat. > > > >So it seems something is broken on this upgrade script. This is in in > >almalinux 9.3 > >ipa-server-4.10.2-5.el9_3.alma.1.x86_64 > > > >I cannot upgrade because I get bitten by the named ldap thing, even > though > >the versions are newer. > > > >I will create a replicat to a rhel host but first I need to get the > CA up > >and running obviously :-). > > > >Any ideas? > > > >Thanks! > > > >-- > >regards, > > > >natxo > > > >-- > >-- > >Groeten, > >natxo > > > > > -- > / Alexander Bokovoy > Sr. Principal Software Engineer > Security / Identity Management Engineering > Red Hat Limited, Finland > > > > -- > -- > Groeten, > natxo > > -- > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue > -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
