[Freeipa-users] Migration fails from 3.0.0 to 3.3.3 on Centos 6/7

[Rob Crittenden]

Jani West wrote:
> Re-created replication file and run ipa-replica-install o fresh CentOS 7
> server.
> 
> It is still giving the same error:
> 
> ---------------------
> 2015-02-24T21:40:54Z DEBUG Process finished, return code=1
> 2015-02-24T21:40:54Z DEBUG stdout=Loading deployment configuration from
> /tmp/tmpR56_Ck.
> Installing CA into /var/lib/pki/pki-tomcat.
> Storing deployment configuration into
> /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg.
> Installation failed.
> 
> 
> 2015-02-24T21:40:54Z DEBUG stderr=pkispawn    : WARNING  ....... unable
> to validate security domain user/password through REST interface.
> Interface not available

That is expected.

> pkispawn    : ERROR    ....... Exception from Java Configuration
> Servlet: Error while updating security domain: java.io.IOException: 2

I think a fresh set of logs is in needed.

rob

> --------------------.
> 
> On 02/24/2015 06:06 PM, Rob Crittenden wrote:
>> West, Jani wrote:
>>> Thank you for the tip,
>>>
>>> Just created new /root/cacerts.p12. Should I import it to the CA somehow
>>> or just restart the ipa server?
>>>
>>> Will reset the new replicate vm to clean CentOS 7 installation without
>>> any leftovers from ipa-replica-install.
>>>
>>
>> Re-run ipa-replica-prepare and it will pick up the new file. Use that
>> newly prepared file on your replica and hopefully that will do the trick.
>>
>> rob
>>
> 
>