https://bugzilla.redhat.com/show_bug.cgi?id=808201 (Red Hat Enterprise Linux 6)
Description of problem: Attempting to upgrade the IPA master in a master and replica configuration failed. Master and replica both running 2.1.3. Attempted to upgrade master to 2.2.0-5. From command output, it appeared as if the master upgrade succeeded. Attempting to run ipa commands afterwards though shows kerberos errors. Inspection of the ipaupgrade.log file shows the errors listed in the summary. Version-Release number of selected component (if applicable): # rpm -q ipa-server 389-ds-base krb5-server bind-dyndb-ldap pki-common ipa-server-2.2.0-5.el6.x86_64 389-ds-base-1.2.10.2-4.el6.x86_64 krb5-server-1.9-32.el6.x86_64 bind-dyndb-ldap-1.1.0-0.5.b1.el6.x86_64 pki-common-9.0.3-24.el6.noarch How reproducible: So far, it appears that it is always reproducable. Steps to Reproduce: 1. <setup ipa 2.1.3-9 master on RHEL6.2 > 2. <setup ipa 2.1.3-9 replica on RHEL6.2> 3. <setup ipa 2.1.3-9 client on RHEL6.2> # this may be optional but, it's what I was doing. 4. <add some test data to IPA> 5. <add yum repos for RHEL6.3 and/or IPA 2.2.0-5> 6. yum -u update 'ipa*' 7. kdestroy 8. kinit admin 9. ipa user-find 10. less /var/log/ipaupgrade.log Actual results: # ipa user-find ipa: ERROR: Kerberos error: did not receive Kerberos credentials/ Expected results: returns user list per normal operations. Additional info: /var/log/ipaupgrade.log entries: 2012-03-29T18:47:49Z DEBUG me to qe-blade-12.testrelm.com 2012-03-29T18:47:49Z ERROR Upgrade failed with argument of type 'NoneType' is not iterable 2012-03-29T18:47:49Z DEBUG Traceback (most recent call last): File "/usr/lib/python2.6/site-packages/ipaserver/install/upgradeinstance.py", line 107, in __upgrade self.modified = ld.update(self.files) File "/usr/lib/python2.6/site-packages/ipaserver/install/ldapupdate.py", line 792, in update updates = api.Backend.updateclient.update(PRE_UPDATE, self.dm_password, self.ldapi, self.live_run) File "/usr/lib/python2.6/site-packages/ipaserver/install/plugins/updateclient.py", line 135, in update (restart, apply_now, res) = self.run(update.name, **kw) File "/usr/lib/python2.6/site-packages/ipaserver/install/plugins/updateclient.py", line 165, in run return self.Updater[method](**kw) #pylint: disable=E1101 File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 1347, in __call__ return self.execute(**options) File "/usr/lib/python2.6/site-packages/ipaserver/install/plugins/fix_replica_ memberof.py", line 46, in execute if 'memberof' not in replica.nsDS5ReplicatedAttributeList: TypeError: argument of type 'NoneType' is not iterable
attachment freeipa-rcrit-1000-upgrade.patch
master: 16b38d3[[BR]] ipa-2-2: 5b895af
Metadata Update from @rcritten: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 2.2 Core Effort - 2012/04
Login to comment on this ticket.