Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1436295

Summary: ipa-server-install fails with Error: Upgrade failed with no such entry
Product: Red Hat Enterprise Linux 7 Reporter: Varun Mylaraiah <mvarun>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED DUPLICATE QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.4CC: arahaman, juraj.bujdoso, ksiddiqu, mbasti, pvoborni, rcritten, romerom, tbordaz, tscherf
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-03-28 12:01:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
httpd_error.log
none
389ds.log none

Description Varun Mylaraiah 2017-03-27 15:13:52 UTC 
Description of problem:
ipa-server-install fails with Error: Upgrade failed with no such entry

Version-Release number of selected component (if applicable):
ipa-server-4.5.0-2.el7.x86_64

How reproducible:
100%


[root@server74 ~]# ipa-server-install --setup-dns --forwarder=10.16.36.29 --reverse-zone=35.70.10.in-addr.arpa. --allow-zone-overlap --hostname=server74.martestrelm.test -r MARTESTRELM.TEST -n martestrelm.test. -p <XXXXX> -a <XXXXX> --ip-address=10.70.35.84 -U

The log file for this installation can be found in /var/log/ipaserver-install.log
==============================================================================
This program will set up the IPA Server.

This includes:
  * Configure a stand-alone CA (dogtag) for certificate management
  * Configure the Network Time Daemon (ntpd)
  * Create and configure an instance of Directory Server
  * Create and configure a Kerberos Key Distribution Center (KDC)
  * Configure Apache (httpd)
  * Configure DNS (bind)
  * Configure the KDC to enable PKINIT

WARNING: conflicting time&date synchronization service 'chronyd' will be disabled
in favor of ntpd

Warning: skipping DNS resolution of host server74.martestrelm.test
Checking DNS domain martestrelm.test., please wait ...
Checking DNS forwarders, please wait ...
Using reverse zone(s) 35.70.10.in-addr.arpa.

The IPA Master Server will be configured with:
Hostname:       server74.martestrelm.test
IP address(es): 10.70.35.84
Domain name:    martestrelm.test.
Realm name:     MARTESTRELM.TEST

BIND DNS server will be configured to serve IPA domain with:
Forwarders:       10.16.36.29
Forward policy:   only
Reverse zone(s):  35.70.10.in-addr.arpa.

WARNING: Realm name does not match the domain name.
You will not be able to estabilish trusts with Active Directory unless
the realm name of the IPA server matches its domain name.


Adding [10.70.35.84 server74.martestrelm.test] to your /etc/hosts file
Configuring NTP daemon (ntpd)
  [1/4]: stopping ntpd
  [2/4]: writing configuration
  [3/4]: configuring ntpd to start on boot
  [4/4]: starting ntpd
Done configuring NTP daemon (ntpd).
Configuring directory server (dirsrv). Estimated time: 30 seconds
  [1/47]: creating directory server user
  [2/47]: creating directory server instance
  [3/47]: enabling ldapi
  [4/47]: configure autobind for root
  [5/47]: stopping directory server
  [6/47]: updating configuration in dse.ldif
  [7/47]: starting directory server
  [8/47]: adding default schema
  [9/47]: enabling memberof plugin
  [10/47]: enabling winsync plugin
  [11/47]: configuring replication version plugin
  [12/47]: enabling IPA enrollment plugin
  [13/47]: configuring uniqueness plugin
  [14/47]: configuring uuid plugin
  [15/47]: configuring modrdn plugin
  [16/47]: configuring DNS plugin
  [17/47]: enabling entryUSN plugin
  [18/47]: configuring lockout plugin
  [19/47]: configuring topology plugin
  [20/47]: creating indices
  [21/47]: enabling referential integrity plugin
  [22/47]: configuring certmap.conf
  [23/47]: configure new location for managed entries
  [24/47]: configure dirsrv ccache
  [25/47]: enabling SASL mapping fallback
  [26/47]: restarting directory server
  [27/47]: adding sasl mappings to the directory
  [28/47]: adding default layout
  [29/47]: adding delegation layout
  [30/47]: creating container for managed entries
  [31/47]: configuring user private groups
  [32/47]: configuring netgroups from hostgroups
  [33/47]: creating default Sudo bind user
  [34/47]: creating default Auto Member layout
  [35/47]: adding range check plugin
  [36/47]: creating default HBAC rule allow_all
  [37/47]: adding entries for topology management
  [38/47]: initializing group membership
  [39/47]: adding master entry
  [40/47]: initializing domain level
  [41/47]: configuring Posix uid/gid generation
  [42/47]: adding replication acis
  [43/47]: enabling compatibility plugin
  [44/47]: activating sidgen plugin
  [45/47]: activating extdom plugin
  [46/47]: tuning directory server
  [47/47]: configuring directory to start on boot
Done configuring directory server (dirsrv).
Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
  [1/30]: creating certificate server user
  [2/30]: configuring certificate server instance
  [3/30]: exporting Dogtag certificate store pin
  [4/30]: stopping certificate server instance to update CS.cfg
  [5/30]: backing up CS.cfg
  [6/30]: disabling nonces
  [7/30]: set up CRL publishing
  [8/30]: enable PKIX certificate path discovery and validation
  [9/30]: starting certificate server instance
  [10/30]: configure certmonger for renewals
  [11/30]: requesting RA certificate from CA
  [12/30]: setting up signing cert profile
  [13/30]: setting audit signing renewal to 2 years
  [14/30]: restarting certificate server
  [15/30]: publishing the CA certificate
  [16/30]: adding RA agent as a trusted user
  [17/30]: authorizing RA to modify profiles
  [18/30]: authorizing RA to manage lightweight CAs
  [19/30]: Ensure lightweight CAs container exists
  [20/30]: configure certificate renewals
  [21/30]: configure Server-Cert certificate renewal
  [22/30]: Configure HTTP to proxy connections
  [23/30]: restarting certificate server
  [24/30]: migrating certificate profiles to LDAP
  [25/30]: importing IPA certificate profiles
  [26/30]: adding default CA ACL
  [27/30]: adding 'ipa' CA entry
  [28/30]: updating IPA configuration
  [29/30]: enabling CA instance
  [30/30]: configuring certmonger renewal for lightweight CAs
Done configuring certificate server (pki-tomcatd).
Configuring directory server (dirsrv)
  [1/3]: configuring TLS for DS instance
  [2/3]: restarting directory server
  [3/3]: adding CA certificate entry
Done configuring directory server (dirsrv).
Configuring Kerberos KDC (krb5kdc)
  [1/10]: adding kerberos container to the directory
  [2/10]: configuring KDC
  [3/10]: initialize kerberos container
WARNING: Your system is running out of entropy, you may experience long delays
  [4/10]: adding default ACIs
  [5/10]: creating a keytab for the directory
  [6/10]: creating a keytab for the machine
  [7/10]: adding the password extension to the directory
  [8/10]: creating anonymous principal
  [9/10]: starting the KDC
  [10/10]: configuring KDC to start on boot
Done configuring Kerberos KDC (krb5kdc).
Configuring kadmin
  [1/2]: starting kadmin 
  [2/2]: configuring kadmin to start on boot
Done configuring kadmin.
Restarting directory server to enable password extension plugin
Configuring ipa-otpd
  [1/2]: starting ipa-otpd 
  [2/2]: configuring ipa-otpd to start on boot
Done configuring ipa-otpd.
Configuring ipa-custodia
  [1/5]: Generating ipa-custodia config file
  [2/5]: Making sure custodia container exists
  [3/5]: Generating ipa-custodia keys
  [4/5]: starting ipa-custodia 
  [5/5]: configuring ipa-custodia to start on boot
Done configuring ipa-custodia.
Configuring the web interface (httpd)
  [1/22]: setting mod_nss port to 443
  [2/22]: setting mod_nss cipher suite
  [3/22]: setting mod_nss protocol list to TLSv1.0 - TLSv1.2
  [4/22]: setting mod_nss password file
  [5/22]: enabling mod_nss renegotiate
  [6/22]: adding URL rewriting rules
  [7/22]: configuring httpd
  [8/22]: setting up httpd keytab
  [9/22]: retrieving anonymous keytab
  [10/22]: configuring Gssproxy
  [11/22]: setting up ssl
  [12/22]: configure certmonger for renewals
  [13/22]: importing CA certificates from LDAP
  [14/22]: publish CA cert
  [15/22]: clean up any existing httpd ccaches
  [16/22]: configuring SELinux for httpd
  [17/22]: create KDC proxy user
  [18/22]: create KDC proxy config
  [19/22]: enable KDC proxy
  [20/22]: restarting httpd
  [21/22]: configuring httpd to start on boot
  [22/22]: enabling oddjobd
Done configuring the web interface (httpd).
Configuring Kerberos KDC (krb5kdc)
  [1/1]: installing X509 Certificate for PKINIT
Done configuring Kerberos KDC (krb5kdc).
Applying LDAP updates
Upgrading IPA:. Estimated time: 1 minute 30 seconds
  [1/9]: stopping directory server
  [2/9]: saving configuration
  [3/9]: disabling listeners
  [4/9]: enabling DS global lock
  [5/9]: starting directory server
  [6/9]: upgrading server
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=anonymous-limits,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Add failure Operations error: 
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=usermap,cn=selinux,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Managed Entries,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Templates,cn=Managed Entries,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Definitions,cn=Managed Entries,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ng,cn=alt,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Add failure missing required attribute "objectclass"
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=computers,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=computers,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=masters,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=masters,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=sysaccounts,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=kerberos,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=services,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ranges,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=sysaccounts,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Default Host Password Policy,cn=computers,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Default Service Password Policy,cn=services,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Kerberos Service Password Policy,cn=MARTESTRELM.TEST,cn=kerberos,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Default Kerberos Service Password Policy,cn=Kerberos Service Password Policy,cn=MARTESTRELM.TEST,cn=kerberos,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=cosTemplates,cn=computers,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Default Password Policy,cn=cosTemplates,cn=computers,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Default Password Policy,cn=computers,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=cosTemplates,cn=services,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Default Password Policy,cn=cosTemplates,cn=services,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Default Password Policy,cn=services,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=cosTemplates,cn=MARTESTRELM.TEST,cn=kerberos,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Default Password Policy,cn=cosTemplates,cn=MARTESTRELM.TEST,cn=kerberos,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Default Password Policy,cn=MARTESTRELM.TEST,cn=kerberos,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=NGP HGP Template,cn=Templates,cn=Managed Entries,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=NGP Definition,cn=Definitions,cn=Managed Entries,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipaservers,cn=hostgroups,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipaservers,cn=hostgroups,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of ou=profile,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=default,ou=profile,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=replication,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=replication managers,cn=sysaccounts,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=topology,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=domain,cn=topology,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=server74.martestrelm.test,cn=masters,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=UPG Template,cn=Templates,cn=Managed Entries,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=UPG Definition,cn=Definitions,cn=Managed Entries,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ca_renewal,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=certificates,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=replicas,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=provisioning,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=accounts,cn=provisioning,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=staged users,cn=accounts,cn=provisioning,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=deleted users,cn=accounts,cn=provisioning,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=staged users,cn=accounts,cn=provisioning,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=deleted users,cn=accounts,cn=provisioning,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=provisioning accounts lock,cn=accounts,cn=provisioning,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Inactivation cos template,cn=accounts,cn=provisioning,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=s4u2proxy,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa-ldap-delegation-targets,cn=s4u2proxy,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa-ldap-delegation-targets,cn=s4u2proxy,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=locations,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=automember,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Hostgroup,cn=automember,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Group,cn=automember,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ca,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=certprofiles,cn=ca,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Write IPA Configuration,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Write IPA Configuration,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=HBAC Administrator,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Sudo Administrator,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Password Policy Administrator,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Host Enrollment,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=SELinux User Map Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Retrieve Certificates from the CA,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Revoke Certificate,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=certificates,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Automember Task Administrator,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Add Automember Rebuild Membership Task,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=retrieve certificate,cn=virtual operations,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=request certificate,cn=virtual operations,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=request certificate different host,cn=virtual operations,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=certificate status,cn=virtual operations,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=revoke certificate,cn=virtual operations,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=certificate remove hold,cn=virtual operations,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=request certificate ignore caacl,cn=virtual operations,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Request Certificate ignoring CA ACLs,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=RBAC Readers,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Password Policy Readers,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Kerberos Ticket Policy Readers,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Automember Readers,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=IPA Masters Readers,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=masters,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=PassSync Service,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Read PassSync Managers Configuration,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Modify PassSync Managers Configuration,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Read LDBM Database Configuration,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Add Configuration Sub-Entries,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=CA Administrator,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Vault Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=DNS Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=DNS Servers,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=otp,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=otp,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=radiusproxy,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Realm Domains,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Modify DNA Range,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Read DNA Range,cn=permissions,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=caacls,cn=ca,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=cas,cn=ca,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Modify Users and Reset passwords,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Modify Group membership,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=User Administrator,cn=roles,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=User Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Group Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Stage User Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=IT Specialist,cn=roles,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Host Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Host Group Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Service Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Automount Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=IT Security Specialist,cn=roles,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Netgroups Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=HBAC Administrator,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Sudo administrator,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Security Architect,cn=roles,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Delegation Administrator,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Replication Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Write IPA Configuration,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Password Policy Administrator,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=admins,cn=groups,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipausers,cn=groups,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=editors,cn=groups,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=crond,cn=hbacservices,cn=hbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=vsftpd,cn=hbacservices,cn=hbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=proftpd,cn=hbacservices,cn=hbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=pure-ftpd,cn=hbacservices,cn=hbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=gssftp,cn=hbacservices,cn=hbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ftp,cn=hbacservicegroups,cn=hbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipaConfig,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=MARTESTRELM.TEST,cn=kerberos,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=adtrust agents,cn=sysaccounts,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=trust admins,cn=groups,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ADTrust Agents,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=trusts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=trusts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa-cifs-delegation-targets,cn=s4u2proxy,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ranges,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=views,cn=accounts,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Domain Level,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=server74.martestrelm.test,cn=masters,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=certmap,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=certmaprules,cn=certmap,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=Certificate Identity Mapping Administrators,cn=privileges,cn=pbac,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=custodia,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=server74.martestrelm.test,cn=masters,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa.ipaserver.install.ldapupdate.LDAPUpdate: ERROR    Parent DN of cn=ca,cn=topology,cn=ipa,cn=etc,dc=martestrelm,dc=test may not exist, cannot create the entry
ipa         : ERROR    default_range: No local ID range and no admins group found. Cannot create default ID range
ipa         : ERROR    Upgrade failed with no such entry
  [error] RuntimeError: no such entry
  [cleanup]: stopping directory server
  [cleanup]: restoring configuration
ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall): ERROR    Update failed: no such entry
ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall): ERROR    The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information





Additional info:
ipa-server-common-4.5.0-2.el7.noarch
ipa-common-4.5.0-2.el7.noarch
ipa-client-common-4.5.0-2.el7.noarch
ipa-client-4.5.0-2.el7.x86_64
ipa-server-4.5.0-2.el7.x86_64
ipa-server-dns-4.5.0-2.el7.noarch

[root@server74 ~]# getenforce 
Permissive

[root@server74 ~]# cat /var/log/audit/audit.log |audit2allow


#============= certmonger_t ==============
allow certmonger_t krb5kdc_conf_t:dir { add_name write };
allow certmonger_t krb5kdc_conf_t:file create;
allow certmonger_t systemd_unit_file_t:dir { create setattr };
allow certmonger_t systemd_unit_file_t:service { start status };

#============= chronyd_t ==============
allow chronyd_t self:capability chown;

#============= gssproxy_t ==============
allow gssproxy_t fs_t:filesystem getattr;
allow gssproxy_t ipa_var_lib_t:file { lock open read };
allow gssproxy_t self:capability dac_override;

##############################
/var/log/ipaserver-install.log
##############################
2017-03-27T14:06:32Z DEBUG stderr=
2017-03-27T14:06:32Z DEBUG Destroyed connection context.ldap2_218926224
2017-03-27T14:06:32Z ERROR Upgrade failed with no such entry
2017-03-27T14:06:33Z DEBUG Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/ipaserver/install/upgradeinstance.py", line 220, in __upgrade
    self.modified = (ld.update(self.files) or self.modified)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ldapupdate.py", line 911, in update
    self._run_updates(all_updates)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ldapupdate.py", line 883, in _run_updates
    self._run_update_plugin(update['plugin'])
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ldapupdate.py", line 859, in _run_update_plugin
    restart_ds, updates = self.api.Updater[plugin_name]()
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 1470, in __call__
    return self.execute(**options)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/plugins/upload_cacrt.py", line 80, in execute
    ldap.add_entry(entry)
  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1504, in add_entry
    self.conn.add_s(str(entry.dn), list(attrs.items()))
  File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
    self.gen.throw(type, value, traceback)
  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 966, in error_handler
    raise errors.NotFound(reason=arg_desc or 'no such entry')
NotFound: no such entry

2017-03-27T14:06:33Z DEBUG Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 423, in start_creation
    run_step(full_msg, method)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 413, in run_step
    method()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/upgradeinstance.py", line 228, in __upgrade
    raise RuntimeError(e)
RuntimeError: no such entry

2017-03-27T14:06:33Z DEBUG   [error] RuntimeError: no such entry
2017-03-27T14:06:33Z DEBUG   [cleanup]: stopping directory server
2017-03-27T14:06:33Z DEBUG Destroyed connection context.ldap2_72401360
2017-03-27T14:06:33Z DEBUG Starting external process
2017-03-27T14:06:33Z DEBUG args=/bin/systemctl stop dirsrv
2017-03-27T14:06:35Z DEBUG Process finished, return code=0
2017-03-27T14:06:35Z DEBUG stdout=
2017-03-27T14:06:35Z DEBUG stderr=
2017-03-27T14:06:35Z DEBUG   duration: 2 seconds
2017-03-27T14:06:35Z DEBUG   [cleanup]: restoring configuration
2017-03-27T14:06:35Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2017-03-27T14:06:35Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2017-03-27T14:06:35Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2017-03-27T14:06:35Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2017-03-27T14:06:35Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2017-03-27T14:06:35Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2017-03-27T14:06:35Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2017-03-27T14:06:35Z DEBUG   duration: 0 seconds
2017-03-27T14:06:35Z DEBUG   File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
    return_value = self.run()

File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 333, in run
    cfgr.run()
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 368, in run
    self.execute()
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 392, in execute
    for _nothing in self._executor():
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner
    exc_handler(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception
    self._handle_exception(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner
    step()
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda>
    step = lambda: next(self.__gen)
  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
    value = gen.send(prev_value)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 658, in _configure
    next(executor)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner
    exc_handler(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception
    self._handle_exception(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521, in _handle_exception
    self.__parent._handle_exception(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception
    super(ComponentBase, self)._handle_exception(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner
    step()
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda>
    step = lambda: next(self.__gen)
  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
    value = gen.send(prev_value)
  File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install
    for _nothing in self._installer(self.parent):
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 568, in main
    master_install(self)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 249, in decorated
    func(installer)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 845, in install
    ds.apply_updates()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 704, in apply_updates
    raise RuntimeError("Update failed: %s" % e)

2017-03-27T14:06:35Z DEBUG The ipa-server-install command failed, exception: RuntimeError: Update failed: no such entry
2017-03-27T14:06:35Z ERROR Update failed: no such entry
2017-03-27T14:06:35Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
Comment 2 Martin Bašti 2017-03-27 15:19:31 UTC 
Hello, can you share 389ds error and access log?
Error messages says that entry cn=etc,dc=martestrelm,dc=test doesn't exists but basically it must be there because installation would fail earlier. I suspect a potential DS bug.
Comment 3 Varun Mylaraiah 2017-03-27 17:34:01 UTC 
Created attachment 1266728 [details]
httpd_error.log
Comment 4 Varun Mylaraiah 2017-03-27 17:35:05 UTC 
Created attachment 1266729 [details]
389ds.log
Comment 5 Martin Bašti 2017-03-28 09:48:55 UTC 
Related (or duplicate) to https://bugzilla.redhat.com/show_bug.cgi?id=1435122
Comment 6 thierry bordaz 2017-03-28 09:53:17 UTC 
RC of the failure likely related to 'WARN - dblayer_get_home_dir - Db home directory is not set' in 389ds.log attachment
Comment 7 Kaleem 2017-03-28 12:01:30 UTC 

*** This bug has been marked as a duplicate of bug 1435122 ***
Comment 8 jurajb 2019-04-23 09:39:11 UTC 
https://pagure.io/389-ds-base/c/1e035d1
I have increase the memory, in my case 1GB was not sufficient, it was probably WAD.
Log perfectly match to your issue.

I assume something similar happens:
... int)(*cachesize / pagesize) <= (pages - procpages) ...

Maybe it helps the others :D)


My logs:
  [6/10]: starting directory server
  [7/10]: upgrading server
ipaserver.install.ldapupdate: ERROR    Parent DN of cn=anonymous-limits,cn=etc,dc=linux,dc=lab may not exist, cannot create the entry
ipaserver.install.ldapupdate: ERROR    Add failure Operations error:
ipaserver.install.ldapupdate: ERROR    Parent DN of cn=usermap,cn=selinux,dc=linux,dc=lab may not exist, cannot create the entry
...
Comment 9 Ashfaqur Rahaman 2019-09-25 03:12:22 UTC 
Thanks. The comment #8 works for me. It was failing with the same error. Increase the RAM to 4Gb. its working now.
Comment 10 Michael Romero 2020-10-05 17:45:03 UTC 
Comment #8 worked for me also. Bumping RAM amount to 4GB allowed the 'ipa-server-install' command to exit cleanly.