Hello all.
I'm currently running a FreeIPA server on Docker using the rocky-9-4.10.2 and 
trying to upgrade my installation to version rocky-9-4.11.0, but currently 
getting this error:

2024-08-28T09:21:52Z DEBUG Failed to check CA status: cannot connect to 
'http://<my-freeipa-hostname>:8080/ca/admin/ca/getStatus': [Errno 111] 
Connection refused

2024-08-28T09:22:38Z ERROR IPA server upgrade failed: Inspect 
/var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
2024-08-28T09:22:38Z DEBUG   File 
"/usr/lib/python3.9/site-packages/ipapython/admintool.py", line 180, in execute
    return_value = self.run()
  File 
"/usr/lib/python3.9/site-packages/ipaserver/install/ipa_server_upgrade.py", 
line 54, in run
    server.upgrade()
  File "/usr/lib/python3.9/site-packages/ipaserver/install/server/upgrade.py", 
line 2081, in upgrade
    upgrade_configuration()
  File "/usr/lib/python3.9/site-packages/ipaserver/install/server/upgrade.py", 
line 1803, in upgrade_configuration
    ca.start('pki-tomcat')
  File "/usr/lib/python3.9/site-packages/ipaserver/install/service.py", line 
575, in start
    self.service.start(instance_name, capture_output=capture_output, wait=wait)
  File "/usr/lib/python3.9/site-packages/ipaplatform/base/services.py", line 
304, in start
    ipautil.run([paths.SYSTEMCTL, "start",
  File "/usr/lib/python3.9/site-packages/ipapython/ipautil.py", line 599, in run
    raise CalledProcessError(

2024-08-28T09:22:38Z DEBUG The ipa-server-upgrade command failed, exception: 
CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', 
'pki-tomcatd@pki-tomcat.service'] returned non-zero exit status 1: 'Job for 
pki-tomcatd@pki-tomcat.service canceled.\n')
2024-08-28T09:22:38Z ERROR Unexpected error - see /var/log/ipaupgrade.log for 
details:
CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', 
'pki-tomcatd@pki-tomcat.service'] returned non-zero exit status 1: 'Job for 
pki-tomcatd@pki-tomcat.service canceled.\n')
2024-08-28T09:22:38Z ERROR The ipa-server-upgrade command failed. See 
/var/log/ipaupgrade.log for more information

The endpoint that FreeIPA tries to connect to eventually generates a 404 error 
(logs from var/log/pki/pki-tomcat/localhost_access_log.2024-08-28.txt):
172.18.0.2 - - [28/Aug/2024:09:22:33 +0000] "GET /ca/admin/ca/getStatus 
HTTP/1.1" 404 784
172.18.0.2 - - [28/Aug/2024:09:22:34 +0000] "GET /ca/admin/ca/getStatus 
HTTP/1.1" 404 784
172.18.0.2 - - [28/Aug/2024:09:22:35 +0000] "GET /ca/admin/ca/getStatus 
HTTP/1.1" 404 784
172.18.0.2 - - [28/Aug/2024:09:22:36 +0000] "GET /ca/admin/ca/getStatus 
HTTP/1.1" 404 784
172.18.0.2 - - [28/Aug/2024:09:22:37 +0000] "GET /ca/admin/ca/getStatus 
HTTP/1.1" 404 784
172.18.0.2 - - [28/Aug/2024:09:22:38 +0000] "GET /ca/admin/ca/getStatus 
HTTP/1.1" 404 784

Can anyone help? This makes it so that I'm completely unable to update FreeIPA 
to the latest version, which I currently need to do.
Thanks!
-- 
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to