Bug 1296216 - ipa-server-upgrade fails if certmonger is not running
Summary: ipa-server-upgrade fails if certmonger is not running
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: ipa
Version: 7.3
Hardware: All
OS: Linux
Target Milestone: rc
: ---
Assignee: Martin Babinsky
QA Contact: Namita Soman
Depends On:
Blocks: 1298103
TreeView+ depends on / blocked
Reported: 2016-01-06 15:49 UTC by Petr Vobornik
Modified: 2016-11-04 05:48 UTC (History)
9 users (show)

Fixed In Version: ipa-4.2.0-16.el7
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 1298103 (view as bug list)
Last Closed: 2016-11-04 05:48:23 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:2404 0 normal SHIPPED_LIVE ipa bug fix and enhancement update 2016-11-03 13:56:18 UTC

Description Petr Vobornik 2016-01-06 15:49:59 UTC
This bug is created as a clone of upstream ticket:

I have a CA-less install (with --root-ca-file) and so certmonger is not configured to run.  ipa-server-upgrade from 4.2.0 fails in this situation with:
2015-12-07T17:47:46Z DEBUG Starting external process
2015-12-07T17:47:46Z DEBUG args='/bin/systemctl' 'is-active' 'certmonger.service'
2015-12-07T17:47:46Z DEBUG Process finished, return code=3
2015-12-07T17:47:46Z DEBUG stdout=unknown

2015-12-07T17:47:46Z DEBUG stderr=
2015-12-07T17:47:46Z ERROR IPA server upgrade failed: Inspect
/var/log/ipaupgrade.log and run com
mand ipa-server-upgrade manually.
2015-12-07T17:47:46Z DEBUG   File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line
 171, in execute
    return_value = self.run()
line 50, in ru
    raise admintool.ScriptError(str(e))

2015-12-07T17:47:46Z DEBUG The ipa-server-upgrade command failed, exception:
ScriptError: Certmon
ger is not running. Start certmonger and run upgrade again.
2015-12-07T17:47:46Z ERROR Certmonger is not running. Start certmonger and run
upgrade again.

Comment 4 Martin Kosek 2016-01-12 15:58:33 UTC
Upgrade issue - high sev/prio.

Comment 7 Martin Bašti 2016-02-01 11:55:07 UTC
This patch causes upgrade regression https://fedorahosted.org/freeipa/ticket/5655

Comment 8 Martin Bašti 2016-02-02 12:58:15 UTC
Upstream ticket:

Comment 9 Petr Vobornik 2016-02-02 13:00:50 UTC
Ticket 5655 is fixed.

Comment 10 Martin Bašti 2016-02-02 13:02:06 UTC

612f4aa9003658f9a494ec327d50ec5a0592f7b4 always start certmonger during IPA server configuration upgrade

d99552a8a9f855a7c5e00c4b0736061e05d6ed31 always start certmonger during IPA server configuration upgrade

3664efa31edf0dff6dd3410e2eccd12c9cd25782 always start certmonger during IPA server configuration upgrade

Comment 12 Nikhil Dehadrai 2016-08-08 10:25:15 UTC
IPA server version: ipa-server-4.4.0-3.el7.x86_64

Verified the bug on the basis of following steps:
1. Verified that no error message like "ERROR Certmonger is not running" is observed during upgrade of IPA server.
2. Verified the bug for upgrade paths:
   a) 7.2(GA) to 7.3
   b) 7.2.z to 7.3 (In my case upgrade from 7.2up6)

 Thus on the basis of above observations marking the status of bug to "VERIFIED".

Comment 15 errata-xmlrpc 2016-11-04 05:48:23 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.