Luis Correia via FreeIPA-users wrote:
> Hello all.
> I'm currently running a FreeIPA server on Docker using the rocky-9-4.10.2 and
> trying to upgrade my installation to version rocky-9-4.11.0, but currently
> getting this error:
>
> 2024-08-28T09:21:52Z DEBUG Failed to check CA status: cannot connect to
> 'http://<my-freeipa-hostname>:8080/ca/admin/ca/getStatus': [Errno 111]
> Connection refused
>
> 2024-08-28T09:22:38Z ERROR IPA server upgrade failed: Inspect
> /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
> 2024-08-28T09:22:38Z DEBUG File
> "/usr/lib/python3.9/site-packages/ipapython/admintool.py", line 180, in
> execute
> return_value = self.run()
> File
> "/usr/lib/python3.9/site-packages/ipaserver/install/ipa_server_upgrade.py",
> line 54, in run
> server.upgrade()
> File
> "/usr/lib/python3.9/site-packages/ipaserver/install/server/upgrade.py", line
> 2081, in upgrade
> upgrade_configuration()
> File
> "/usr/lib/python3.9/site-packages/ipaserver/install/server/upgrade.py", line
> 1803, in upgrade_configuration
> ca.start('pki-tomcat')
> File "/usr/lib/python3.9/site-packages/ipaserver/install/service.py", line
> 575, in start
> self.service.start(instance_name, capture_output=capture_output,
> wait=wait)
> File "/usr/lib/python3.9/site-packages/ipaplatform/base/services.py", line
> 304, in start
> ipautil.run([paths.SYSTEMCTL, "start",
> File "/usr/lib/python3.9/site-packages/ipapython/ipautil.py", line 599, in
> run
> raise CalledProcessError(
>
> 2024-08-28T09:22:38Z DEBUG The ipa-server-upgrade command failed, exception:
> CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start',
> 'pki-tomcatd@pki-tomcat.service'] returned non-zero exit status 1: 'Job for
> pki-tomcatd@pki-tomcat.service canceled.\n')
> 2024-08-28T09:22:38Z ERROR Unexpected error - see /var/log/ipaupgrade.log for
> details:
> CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start',
> 'pki-tomcatd@pki-tomcat.service'] returned non-zero exit status 1: 'Job for
> pki-tomcatd@pki-tomcat.service canceled.\n')
> 2024-08-28T09:22:38Z ERROR The ipa-server-upgrade command failed. See
> /var/log/ipaupgrade.log for more information
>
> The endpoint that FreeIPA tries to connect to eventually generates a 404
> error (logs from var/log/pki/pki-tomcat/localhost_access_log.2024-08-28.txt):
> 172.18.0.2 - - [28/Aug/2024:09:22:33 +0000] "GET /ca/admin/ca/getStatus
> HTTP/1.1" 404 784
> 172.18.0.2 - - [28/Aug/2024:09:22:34 +0000] "GET /ca/admin/ca/getStatus
> HTTP/1.1" 404 784
> 172.18.0.2 - - [28/Aug/2024:09:22:35 +0000] "GET /ca/admin/ca/getStatus
> HTTP/1.1" 404 784
> 172.18.0.2 - - [28/Aug/2024:09:22:36 +0000] "GET /ca/admin/ca/getStatus
> HTTP/1.1" 404 784
> 172.18.0.2 - - [28/Aug/2024:09:22:37 +0000] "GET /ca/admin/ca/getStatus
> HTTP/1.1" 404 784
> 172.18.0.2 - - [28/Aug/2024:09:22:38 +0000] "GET /ca/admin/ca/getStatus
> HTTP/1.1" 404 784
>
> Can anyone help? This makes it so that I'm completely unable to update
> FreeIPA to the latest version, which I currently need to do.
> Thanks!
>
Your CA likely did not start. You'll need to look at the CA logs to try
to determine why. /var/log/pki/pki-tomcat/ca/debug-<date>.log
rob
--
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
