<div dir="ltr">I tried this, but no joy:<div><br></div><div><font face="courier new, monospace"># /usr/sbin/ipa-upgradeconfig --debug</font></div><div><font face="courier new, monospace">:</font></div><div><font face="courier new, monospace">:</font></div>
<div><font face="courier new, monospace">DEBUG: <a href="http://bl-1.com/click/load/VWRaa1w-b0221U28CYQNlAT4-b0231">caSignedLogCert.cfg</a> profile validity range is 720</font></div><div><font face="courier new, monospace">INFO: [Certificate renewal should stop the CA]</font></div>
<div><font face="courier new, monospace">ERROR: Unable to find certmonger request ID for auditSigning Cert</font></div><div><font face="courier new, monospace">INFO: The ipa-upgradeconfig command was successful</font></div>
<div><font face="courier new, monospace">#</font></div><div><br></div><div>But I still can't connect to <a href="http://ipamaster/ipa/ui/">http://ipamaster/ipa/ui/</a>; I get a 903 error every time, and /var/log/httpd/error_log shows, in part:</div>
<div><br></div><div><font face="courier new, monospace">[Tue Aug 13 13:07:20.786566 2013] [:error] [pid 5890] KeyError: 'ipadnszone'</font></div><div><font face="courier new, monospace">[Tue Aug 13 13:07:20.786717 2013] [:error] [pid 5890] ipa: INFO: <a href="mailto:bretw@FOO.NET">bretw@FOO.NET</a>: json_metadata(None, None, object=u'all'): KeyError</font></div>
<div><font face="courier new, monospace">[Tue Aug 13 13:07:21.001525 2013] [:error] [pid 5890] ipa: INFO: <a href="mailto:bretw@FOO.NET">bretw@FOO.NET</a>: json_metadata(None, None, command=u'all'): SUCCESS</font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="arial, helvetica, sans-serif">DNS resolution, authentication and authorization all <i>appear</i> to be working fine.</font></div><img alt="" width="1" height="1" src="http://bl-1.com/img/U2EMPlYxUmBVNFE1Azc-b0231.gif"></div>
<div class="gmail_extra"><br clear="all"><div><div dir="ltr"><div><br></div><div><u><br></u></div><div><b>Bret Wortman</b></div><div><img src="http://damascusgrp.com/item/51f7de33e4b08d2bdb8b4860?format=1500w" width="200" height="53"><br>
</div><div><a href="http://damascusgrp.com/" target="_blank">http://damascusgrp.com/</a><br></div><div><a href="http://about.me/wortmanbret" target="_blank">http://about.me/wortmanbret</a><br></div></div></div>
<br><br><div class="gmail_quote">On Tue, Aug 13, 2013 at 10:29 AM, Bret Wortman <span dir="ltr"><<a href="mailto:bret.wortman@damascusgrp.com" target="_blank">bret.wortman@damascusgrp.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">I just upgraded my IPA master from F17 to F18 and, in the process, updated IPA to 3.1.5-1. Apparently, though, all is not well, because there are a number of errors in <a href="http://bl-1.com/click/load/BzZcbVU2VmpTOwFsCD4-b0231" target="_blank">/var/log/ipaupgrade.log</a>, mostly related to things like (samples here; the server is on a private network so I'm having to transcribe, if it looks like a typo, it probably is):<div>
<br></div><div>ERROR Cannot connect to LDAP to add DNS records: cannot connect to u'ldapi://%2fvar%2run%2fslapd-FOO-NET.socket': LDAP Server Down<br clear="all">
<div><div dir="ltr"><div><br></div><div>ERROR certmonger failed to start tracking certificate: Command '/usr/bin/getcert start-tracking -d /var/lib/pki-ca/alias -n auditSigningCert cert-pki-ca -c dogtag-ipa-retrieve-agent-submit -B /usr/lib64/ipa/certmonger/stop_pkicad -C /usr/lib64/ipa/certmonger/restart_pkicad "auditSigningCert cert-pki-ca" -P XXXXXXXX -T auditSigningCert cert-pki-ca' returned non-zero exit status 1</div>
<div><br></div><div>and numerous certmonger errors similar to this one. Finally, there's a stacktrace from <a href="http://bl-1.com/click/load/BzYIOV0-b0221AT1QOFc6BjE-b0231" target="_blank">ipapython/admintool.py</a>, line 171 which ends the whole thing.</div>
<div><br></div><div>What's my best plan for re-attempting this upgrade?</div><span class="HOEnZb"><font color="#888888"><div><br></div><div><u><br></u></div><div><b>Bret Wortman</b></div><div><img src="http://damascusgrp.com/item/51f7de33e4b08d2bdb8b4860?format=1500w" width="200" height="53"><br>
</div><div><a href="http://bl-1.com/click/load/VWQAMVQ3UGxVPQBtADQ-b0231" target="_blank">http://damascusgrp.com/</a><br>
</div><div><a href="http://bl-1.com/click/load/XWwMPV0-b0221UW0CagZrBjM-b0231" target="_blank">http://about.me/wortmanbret</a><br></div></font></span></div></div><span class="HOEnZb"><font color="#888888">
</font></span></div><span class="HOEnZb"><font color="#888888"><img alt="" width="1" height="1" src="http://bl-1.com/img/UGJebFUyBzZVMVYxAT4-b0231.gif"></font></span></div>
</blockquote></div><br></div>