#5360 ipa-server-upgrade failure in export_kra_agent_pem
Closed: Fixed None Opened 8 years ago by jcholast.

ipa-server-upgrade may fail with:

ipa: DEBUG: Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
ipa.ipalib.plugins.vault.kra_is_enabled: DEBUG: raw: kra_is_enabled(version=u'2.156')
ipa.ipalib.plugins.vault.kra_is_enabled: DEBUG: kra_is_enabled(version=u'2.156')
ipa.ipaserver.install.ipa_server_upgrade.ServerUpgrade: ERROR: IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
ipa.ipaserver.install.ipa_server_upgrade.ServerUpgrade: DEBUG:   File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171, in execute
    return_value = self.run()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py", line 48, in run
    server.upgrade()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1621, in upgrade
    upgrade_configuration()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1472, in upgrade_configuration
    export_kra_agent_pem()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1261, in export_kra_agent_pem
    if not api.Command.kra_is_enabled()['result']:
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 447, in __call__
    ret = self.run(*args, **options)
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 764, in run
    return self.execute(*args, **options)
  File "/usr/lib/python2.7/site-packages/ipalib/plugins/vault.py", line 2110, in execute
    base_dn=base_dn, filter=filter, attrs_list=[])
  File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 192, in find_entries
    time_limit = _get_limits()['time']
  File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 185, in _get_limits
    config = self.get_ipa_config()
  File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 219, in get_ipa_config
    time_limit=2, size_limit=10
  File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 199, in find_entries
    search_refs=search_refs, paged_search=paged_search)
  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1325, in find_entries
    id = self.conn.search_ext(
  File "/usr/lib/python2.7/site-packages/ipalib/backend.py", line 98, in __get_conn
    self.id, threading.currentThread().getName())

ipa.ipaserver.install.ipa_server_upgrade.ServerUpgrade: DEBUG: The ipa-server-upgrade command failed, exception: AttributeError: no context.ldap2_140246713266320 in thread 'MainThread'
ipa.ipaserver.install.ipa_server_upgrade.ServerUpgrade: ERROR: Unexpected error - see /var/log/ipaupgrade.log for details:
AttributeError: no context.ldap2_140246713266320 in thread 'MainThread'

The patch looks good, ACK.
Thanks!

master:

  • 61bdbd6 upgrade: make sure ldap2 is connected in export_kra_agent_pem

ipa-4-2:

  • 9182f40 upgrade: make sure ldap2 is connected in export_kra_agent_pem

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.2.3

7 years ago

Login to comment on this ticket.

Metadata