Cause: Upgrading IPA from 2.0.0-23
Consequence: The 389-ds configuration has been modified not to accept requests.
Fix: Make the upgrade process more robust so it always restores the 389-ds configuration. When upgrading we disable the 389-ds listeners so modifications are not done during this window. An error was causing this process to abort and the 389-ds configuration was not being restored.
Result: Upgrading IPA does not leave the system in an inconsistent state.