[389-users] Upgrading OS from FC9 to FC10

[James Roman]

I am attempting to upgrade my FreeIPA server from Fedora 9 (Fedora-ds-base 1.2.0-4) to Fedora 10 (389-ds-base 1.2.2-1). I have been running into problems with the directory server during the upgrade. 

Prior to the upgrade process I am stopping the directory server and using chkconfig to ensure that it does not start after the upgrade. The oS upgrade goes seemingly without a hitch. At first boot, the FC9 directory server packages are still installed. I perform a "yum update" which indicates that the fedora-ds-package will be replaced with the 389 package (Not sure if this means upgrade or not, but the fedora-ds-base package is definitely removed). 

When I try to manually start the directory server I receive the following errors:

[04/Oct/2009:19:40:35 -0400] - All database threads now stopped
[04/Oct/2009:19:41:37 -0400] - slapd shutting down - signaling operation threads
[04/Oct/2009:19:41:37 -0400] - slapd shutting down - closing down internal subsystems and plugins
[04/Oct/2009:19:41:38 -0400] - Waiting for 4 database threads to stop
[04/Oct/2009:19:41:38 -0400] - All database threads now stopped
[04/Oct/2009:19:41:38 -0400] - slapd stopped.
        389-Directory/1.2.2 B2009.237.206
        directory.REALM.com:636 (/etc/dirsrv/slapd-REALM-COM)

[05/Oct/2009:01:46:34 -0400] - 389-Directory/1.2.2 B2009.237.206 starting up
[05/Oct/2009:01:46:34 -0400] - Clean up db environment and start from archive.
[05/Oct/2009:01:46:34 -0400] - libdb: Program version 4.7 doesn't match environment version 4.6
[05/Oct/2009:01:46:34 -0400] - libdb: Program version 4.7 doesn't match environment version 4.6
[05/Oct/2009:01:46:36 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher AES
[05/Oct/2009:01:46:37 -0400] - Failed to retrieve key for cipher AES in attrcrypt_cipher_init
[05/Oct/2009:01:46:37 -0400] - Failed to initialize cipher AES in attrcrypt_init
[05/Oct/2009:01:46:37 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher 3DES
[05/Oct/2009:01:46:37 -0400] - Failed to retrieve key for cipher 3DES in attrcrypt_cipher_init
[05/Oct/2009:01:46:37 -0400] - Failed to initialize cipher 3DES in attrcrypt_init
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - Upgrading from bdb/4 to bdb/4.7/libreplication-plugin is successfully done (/var/lib/dirsrv/slapd-REALM-COM/cldb)
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed to open changelog
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - changelog5_init: failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:46:37 -0400] - Failed to start object plugin Multimaster Replication Plugin
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed to open changelog
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - changelog5_init: failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:46:37 -0400] - Failed to start object plugin Multimaster Replication Plugin
[05/Oct/2009:01:46:37 -0400] - Error: Failed to resolve plugin dependencies
[05/Oct/2009:01:46:37 -0400] - Error: object plugin Legacy Replication Plugin is not started
[05/Oct/2009:01:46:37 -0400] - Error: object plugin Multimaster Replication Plugin is not started
        389-Directory/1.2.2 B2009.237.206
        directory.REALM.com:636 (/etc/dirsrv/slapd-REALM-COM)

[05/Oct/2009:01:58:17 -0400] - 389-Directory/1.2.2 B2009.237.206 starting up
[05/Oct/2009:01:58:17 -0400] - Detected Disorderly Shutdown last time Directory Server was running, recovering database.
[05/Oct/2009:01:58:18 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher AES
[05/Oct/2009:01:58:18 -0400] - Failed to retrieve key for cipher AES in attrcrypt_cipher_init
[05/Oct/2009:01:58:18 -0400] - Failed to initialize cipher AES in attrcrypt_init
[05/Oct/2009:01:58:18 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher 3DES
[05/Oct/2009:01:58:18 -0400] - Failed to retrieve key for cipher 3DES in attrcrypt_cipher_init
[05/Oct/2009:01:58:18 -0400] - Failed to initialize cipher 3DES in attrcrypt_init
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed to open changelog
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - changelog5_init: failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:58:19 -0400] - Failed to start object plugin Multimaster Replication Plugin
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed to open changelog
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - changelog5_init: failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:58:19 -0400] - Failed to start object plugin Multimaster Replication Plugin
[05/Oct/2009:01:58:19 -0400] - Error: Failed to resolve plugin dependencies
[05/Oct/2009:01:58:19 -0400] - Error: object plugin Legacy Replication Plugin is not started
[05/Oct/2009:01:58:19 -0400] - Error: object plugin Multimaster Replication Plugin is not started
        Fedora-Directory/1.2.0 B2009.118.167
        directory.REALM.com:636 (/etc/dirsrv/slapd-REALM-COM)

[05/Oct/2009:02:49:56 -0400] - Fedora-Directory/1.2.0 B2009.118.167 starting up
[05/Oct/2009:02:49:56 -0400] - Detected Disorderly Shutdown last time Directory Server was running, recovering database.
[05/Oct/2009:02:49:57 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher AES
[05/Oct/2009:02:49:57 -0400] - Failed to retrieve key for cipher AES in attrcrypt_cipher_init
[05/Oct/2009:02:49:57 -0400] - Failed to initialize cipher AES in attrcrypt_init
[05/Oct/2009:02:49:57 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:02:49:57 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed to open changelog
[05/Oct/2009:02:49:57 -0400] NSMMReplicationPlugin - changelog program - changelog5_init: failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:02:49:57 -0400] - Failed to start object plugin Multimaster Replication Plugin
[05/Oct/2009:02:49:58 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:02:49:58 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed to open changelog
[05/Oct/2009:02:49:58 -0400] NSMMReplicationPlugin - changelog program - changelog5_init: failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:02:49:58 -0400] - Failed to start object plugin Multimaster Replication Plugin
[05/Oct/2009:02:49:58 -0400] - Error: Failed to resolve plugin dependencies
[05/Oct/2009:02:49:58 -0400] - Error: object plugin Legacy Replication Plugin is not started
[05/Oct/2009:02:49:58 -0400] - Error: object plugin Multimaster Replication Plugin is not started

I have two replica servers installed, one a FC10 DS 1.2.2 and one a windows domain controller. 

I have backed up basically everything in multiple formats (db2bak, ldif, tar). I am going to have to roll the server back to FC9 for the evening. Anyone have any ideas how to eliminate the errors, or perform the upgrade in a way that avoids them? Do I need to remove the replication agreements first?


James Roman
Sr. Network Administrator
TerraNet, Inc. on Contract to SSAI