IPA: Server upgrade using command ipa-server-upgrade is hanging indefinetly

Solution Verified - Updated -

Issue

  • IPA: Server upgrade using command ipa-server-upgrade is hanging indefinetly
  • During hang file /var/log/ipaupgrade.log is showing below message.
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG:     nsIndex
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG: nsMatchingRule:
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG:     caseIgnoreIA5Match
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG:     caseExactIA5Match
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG: cn:
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG:     krbPrincipalName
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG: nsSystemIndex:
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG:     false
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG: [(2, u'nsMatchingRule', ['caseIgnoreIA5Match', 'caseExactIA5Match'])]
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG: Updated 1
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG: Done
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG: Creating task to index attribute: krbPrincipalName
ipa.ipaserver.install.ldapupdate.LDAPUpdate: DEBUG: Task id: cn=indextask_krbPrincipalName_137071185835325620_8892,cn=index,cn=tasks  n=config
[root@server1 ~]# KRB5_TRACE=/dev/stdout kinit admin@EXAMPLE.COM
[21388] 1488171062.18660: Getting initial credentials for admin@EXAMPLE.COM
[21388] 1488171062.21580: Sending request (173 bytes) to EXAMPLE.COM
[21388] 1488171062.22300: Resolving hostname server1.example.com
[21388] 1488171062.26231: Initiating TCP connection to stream 192.168.2.2:88
[21388] 1488171062.26540: Sending TCP request to stream 192.168.2.2:88
[21388] 1488171062.28674: Received answer (181 bytes) from stream 192.168.2.2:88
[21388] 1488171062.28733: Terminating TCP connection to stream 192.168.2.2:88
[21388] 1488171062.28811: Response was from master KDC
[21388] 1488171062.28840: Received error from KDC: -1765328378/Client not found in Kerberos database
kinit: Client 'admin@EXAMPLE.COM' not found in Kerberos database while getting initial credentials

~~~

Environment

  • Red Hat Enterprise Linux 7
  • IPA 4.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.