Back to bug 1298103

Who When What Removed Added
Jan Cholasta 2016-01-13 09:24:34 UTC Status NEW MODIFIED
Fixed In Version ipa-4.2.0-15.el7_2.4
errata-xmlrpc 2016-01-13 09:31:11 UTC Status MODIFIED ON_QA
Jan Cholasta 2016-01-18 06:23:11 UTC CC mbabinsk
Flags needinfo?(mbabinsk)
Martin Babinsky 2016-01-18 09:03:02 UTC Doc Text Cause:

ipa-server-upgrade tests for a running certmonger at the start of upgrade process and raises an error if this service is not running. Since CA-less IPA server does not require a running certmonger service, ipa-server-upgrade will always crash due to this service not running.

Consequence:

This bug effectively prevents the upgrade of CA-less IPA master to newer versions.

Fix:

When the dogtag CA service is not configured (as is the case in CA-less installations) the check for running certmonger service is skipped.

Result:

The upgrade of CA-less IPA master does not abort due to certmonger service not running and proceeds as usual.
Flags needinfo?(mbabinsk)
Xiyang Dong 2016-01-29 18:27:49 UTC Status ON_QA VERIFIED
CC xdong
Martin Bašti 2016-02-01 11:54:14 UTC Status VERIFIED ASSIGNED
CC mbasti
Martin Bašti 2016-02-01 11:55:48 UTC Assignee ipa-maint mbabinsk
Petr Vobornik 2016-02-02 13:00:36 UTC Status ASSIGNED POST
Jan Cholasta 2016-02-02 14:28:17 UTC Status POST MODIFIED
Fixed In Version ipa-4.2.0-15.el7_2.4 ipa-4.2.0-15.el7_2.6
errata-xmlrpc 2016-02-02 14:33:40 UTC Status MODIFIED ON_QA
Xiyang Dong 2016-02-02 15:03:38 UTC Status ON_QA VERIFIED
Martin Babinsky 2016-02-08 12:23:33 UTC Doc Text Cause:

ipa-server-upgrade tests for a running certmonger at the start of upgrade process and raises an error if this service is not running. Since CA-less IPA server does not require a running certmonger service, ipa-server-upgrade will always crash due to this service not running.

Consequence:

This bug effectively prevents the upgrade of CA-less IPA master to newer versions.

Fix:

When the dogtag CA service is not configured (as is the case in CA-less installations) the check for running certmonger service is skipped.

Result:

The upgrade of CA-less IPA master does not abort due to certmonger service not running and proceeds as usual.
Cause:

ipa-server-upgrade tests for a running certmonger at the start of upgrade process and raises an error if this service is not running. Since CA-less IPA server does not require a running certmonger service, ipa-server-upgrade will always crash due to this service not running.

Consequence:

This bug effectively prevents the upgrade of CA-less IPA master to newer versions.

Fix:

The upgrade script will now always start certmonger service regardless of whether CA is present or not.

Result:

The upgrade of CA-less IPA master does not abort due to certmonger service not running and proceeds as usual.
Lenka Špačková 2016-02-08 16:37:17 UTC Doc Text Cause:

ipa-server-upgrade tests for a running certmonger at the start of upgrade process and raises an error if this service is not running. Since CA-less IPA server does not require a running certmonger service, ipa-server-upgrade will always crash due to this service not running.

Consequence:

This bug effectively prevents the upgrade of CA-less IPA master to newer versions.

Fix:

The upgrade script will now always start certmonger service regardless of whether CA is present or not.

Result:

The upgrade of CA-less IPA master does not abort due to certmonger service not running and proceeds as usual.
The ipa-server-upgrade utility checks for a running certmonger service at the start of the upgrade process and raises an error if the service is not running. Previously, when the Certificate System CA service was not configured, a running certmonger service was not required, and the check always failed. Consequently, this effectively prevented the upgrade of a CA-less IdM master to later versions. With this update, the certmonger service is started also when the CA service is not configured, and the upgrade of a CA-less IdM master works as expected.
errata-xmlrpc 2016-02-16 00:24:23 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-02-16 10:59:07 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-02-16 05:59:07 UTC

Back to bug 1298103