Red Hat Bugzilla – Bug 1296216
ipa-server-upgrade fails if certmonger is not running
Last modified: 2016-11-04 01:48:23 EDT
This bug is created as a clone of upstream ticket:
I have a CA-less install (with --root-ca-file) and so certmonger is not configured to run. ipa-server-upgrade from 4.2.0 fails in this situation with:
2015-12-07T17:47:46Z DEBUG Starting external process
2015-12-07T17:47:46Z DEBUG args='/bin/systemctl' 'is-active' 'certmonger.service'
2015-12-07T17:47:46Z DEBUG Process finished, return code=3
2015-12-07T17:47:46Z DEBUG stdout=unknown
2015-12-07T17:47:46Z DEBUG stderr=
2015-12-07T17:47:46Z ERROR IPA server upgrade failed: Inspect
/var/log/ipaupgrade.log and run com
mand ipa-server-upgrade manually.
2015-12-07T17:47:46Z DEBUG File
171, in execute
return_value = self.run()
line 50, in ru
2015-12-07T17:47:46Z DEBUG The ipa-server-upgrade command failed, exception:
ger is not running. Start certmonger and run upgrade again.
2015-12-07T17:47:46Z ERROR Certmonger is not running. Start certmonger and run
Upgrade issue - high sev/prio.
This patch causes upgrade regression https://fedorahosted.org/freeipa/ticket/5655
Ticket 5655 is fixed.
612f4aa9003658f9a494ec327d50ec5a0592f7b4 always start certmonger during IPA server configuration upgrade
d99552a8a9f855a7c5e00c4b0736061e05d6ed31 always start certmonger during IPA server configuration upgrade
3664efa31edf0dff6dd3410e2eccd12c9cd25782 always start certmonger during IPA server configuration upgrade
IPA server version: ipa-server-4.4.0-3.el7.x86_64
Verified the bug on the basis of following steps:
1. Verified that no error message like "ERROR Certmonger is not running" is observed during upgrade of IPA server.
2. Verified the bug for upgrade paths:
a) 7.2(GA) to 7.3
b) 7.2.z to 7.3 (In my case upgrade from 7.2up6)
Thus on the basis of above observations marking the status of bug to "VERIFIED".
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.