Description of problem:

Upgrading from IPA on RHEL7.0 to IPA on RHEL7.2, I see failures and dirsrv
won't start.

I see this during yum update:

773/773
2619 blocks
IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command
ipa-server-upgrade manually.
Unexpected error - see /var/log/ipaupgrade.log for details:
CalledProcessError: Command ''/bin/systemctl' 'start'
'dirsrv@EXAMPLE-COM.service'' returned non-zero exit status 1
rhel-7.2-server/productid
| 1.6 kB  00:00:00


Version-Release number of selected component (if applicable):
From: ipa-server-3.3.3-28.el7.x86_64
To: ipa-server-4.2.0-12.el7.x86_64

How reproducible:
Unknown

Steps to Reproduce:
1.  Install IPA on rhel7.0 with external-ca signed cert
2.  Point server to RHEL7.2 repos
3.  yum update

Actual results:
fails

Expected results:


Additional info: