Hi everyone,
I'm currently trying to update Fedora IPA installation on staging from RHEL 8 to RHEL 9. I'm using this guide https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/htm... for it.
I'm currently stuck on error "RuntimeError: Failed to start replication" and I don't see anything strange in the logs. Here is the log from `ipa-replica-install` run: https://paste.centos.org/view/a0e2c2b9 . Maybe somebody here will know what seems to be the problem.
For those interested the ticket for this work is here https://pagure.io/fedora-infrastructure/issue/10358
Michal
On Срд, 27 вер 2023, Michal Konecny via FreeIPA-users wrote:
Hi everyone,
I'm currently trying to update Fedora IPA installation on staging from RHEL 8 to RHEL 9. I'm using this guide https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/htm... for it.
I'm currently stuck on error "RuntimeError: Failed to start replication" and I don't see anything strange in the logs. Here is the log from `ipa-replica-install` run: https://paste.centos.org/view/a0e2c2b9 . Maybe somebody here will know what seems to be the problem.
The only odd thing I can see is a bit of discrepancy between handling of JSON structure in check_repl_init() and check_repl_update(). We fail due to the former not expecting 'Error (0) No replication sessions started since server startup' status message.
I think the replication actually succeeded in one of previous DS restarts, that's why we've got here.
Please create an issue and attach this pastebin content there.
Hi,
On Wed, Sep 27, 2023 at 10:26 AM Alexander Bokovoy via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote:
On Срд, 27 вер 2023, Michal Konecny via FreeIPA-users wrote:
Hi everyone,
I'm currently trying to update Fedora IPA installation on staging from RHEL 8 to RHEL 9. I'm using this guide
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/htm...
for it.
I'm currently stuck on error "RuntimeError: Failed to start replication" and I don't see anything strange in the logs. Here is the log from `ipa-replica-install` run: https://paste.centos.org/view/a0e2c2b9 . Maybe somebody here will know what seems to be the problem.
I noticed that ipa-replica-install is run with the --skip-conncheck option. Was there any issue reported without the option? The connection checks often reveal DNS issues or firewall preventing communication on required ports.
flo
The only odd thing I can see is a bit of discrepancy between handling of JSON structure in check_repl_init() and check_repl_update(). We fail due to the former not expecting 'Error (0) No replication sessions started since server startup' status message.
I think the replication actually succeeded in one of previous DS restarts, that's why we've got here.
Please create an issue and attach this pastebin content there.
-- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste... Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Hi,
I can try to run it without the parameter. We had this in our ansible playbook, so I just tried to run the same.
Michal
On 27. 09. 23 11:41, Florence Blanc-Renaud wrote:
Hi,
On Wed, Sep 27, 2023 at 10:26 AM Alexander Bokovoy via FreeIPA-users freeipa-users@lists.fedorahosted.org wrote:
On Срд, 27 вер 2023, Michal Konecny via FreeIPA-users wrote: >Hi everyone, > >I'm currently trying to update Fedora IPA installation on staging from >RHEL 8 to RHEL 9. I'm using this guide https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/migrating_to_identity_management_on_rhel_9 >for it. > >I'm currently stuck on error "RuntimeError: Failed to start >replication" and I don't see anything strange in the logs. Here is the >log from `ipa-replica-install` run: >https://paste.centos.org/view/a0e2c2b9 . Maybe somebody here will know >what seems to be the problem.I noticed that ipa-replica-install is run with the --skip-conncheck option. Was there any issue reported without the option? The connection checks often reveal DNS issues or firewall preventing communication on required ports.
flo
The only odd thing I can see is a bit of discrepancy between handling of JSON structure in check_repl_init() and check_repl_update(). We fail due to the former not expecting 'Error (0) No replication sessions started since server startup' status message. I think the replication actually succeeded in one of previous DS restarts, that's why we've got here. Please create an issue and attach this pastebin content there. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Hi,
the VM I'm using is completely new, it could be something in our ansible playbook that I'm using to deploy it. The playbook is here: https://pagure.io/fedora-infra/ansible/blob/main/f/playbooks/groups/ipa.yml, but it is created for RHEL-8, so it fails on setting up KRA.
Where should I fill the issue?
Michal
On 27. 09. 23 10:24, Alexander Bokovoy wrote:
On Срд, 27 вер 2023, Michal Konecny via FreeIPA-users wrote:
Hi everyone,
I'm currently trying to update Fedora IPA installation on staging from RHEL 8 to RHEL 9. I'm using this guide https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/htm... for it.
I'm currently stuck on error "RuntimeError: Failed to start replication" and I don't see anything strange in the logs. Here is the log from `ipa-replica-install` run: https://paste.centos.org/view/a0e2c2b9 . Maybe somebody here will know what seems to be the problem.
The only odd thing I can see is a bit of discrepancy between handling of JSON structure in check_repl_init() and check_repl_update(). We fail due to the former not expecting 'Error (0) No replication sessions started since server startup' status message.
I think the replication actually succeeded in one of previous DS restarts, that's why we've got here.
Please create an issue and attach this pastebin content there.
On Срд, 27 вер 2023, Michal Konecny wrote:
Hi,
the VM I'm using is completely new, it could be something in our ansible playbook that I'm using to deploy it. The playbook is here: https://pagure.io/fedora-infra/ansible/blob/main/f/playbooks/groups/ipa.yml, but it is created for RHEL-8, so it fails on setting up KRA.
Where should I fill the issue?
Please use https://pagure.io/freeipa/issues
Michal
On 27. 09. 23 10:24, Alexander Bokovoy wrote:
On Срд, 27 вер 2023, Michal Konecny via FreeIPA-users wrote:
Hi everyone,
I'm currently trying to update Fedora IPA installation on staging from RHEL 8 to RHEL 9. I'm using this guide https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/htm... for it.
I'm currently stuck on error "RuntimeError: Failed to start replication" and I don't see anything strange in the logs. Here is the log from `ipa-replica-install` run: https://paste.centos.org/view/a0e2c2b9 . Maybe somebody here will know what seems to be the problem.
The only odd thing I can see is a bit of discrepancy between handling of JSON structure in check_repl_init() and check_repl_update(). We fail due to the former not expecting 'Error (0) No replication sessions started since server startup' status message.
I think the replication actually succeeded in one of previous DS restarts, that's why we've got here.
Please create an issue and attach this pastebin content there.
The issue is now filled https://pagure.io/freeipa/issue/9456
FYI: I was digging a little more and it seems that there could be some issue with GSSAPI authentication in kerberos.
Michal
On 27. 09. 23 12:45, Alexander Bokovoy wrote:
On Срд, 27 вер 2023, Michal Konecny wrote:
Hi,
the VM I'm using is completely new, it could be something in our ansible playbook that I'm using to deploy it. The playbook is here: https://pagure.io/fedora-infra/ansible/blob/main/f/playbooks/groups/ipa.yml, but it is created for RHEL-8, so it fails on setting up KRA.
Where should I fill the issue?
Please use https://pagure.io/freeipa/issues
Michal
On 27. 09. 23 10:24, Alexander Bokovoy wrote:
On Срд, 27 вер 2023, Michal Konecny via FreeIPA-users wrote:
Hi everyone,
I'm currently trying to update Fedora IPA installation on staging from RHEL 8 to RHEL 9. I'm using this guide https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/htm... for it.
I'm currently stuck on error "RuntimeError: Failed to start replication" and I don't see anything strange in the logs. Here is the log from `ipa-replica-install` run: https://paste.centos.org/view/a0e2c2b9 . Maybe somebody here will know what seems to be the problem.
The only odd thing I can see is a bit of discrepancy between handling of JSON structure in check_repl_init() and check_repl_update(). We fail due to the former not expecting 'Error (0) No replication sessions started since server startup' status message.
I think the replication actually succeeded in one of previous DS restarts, that's why we've got here.
Please create an issue and attach this pastebin content there.
freeipa-users@lists.fedorahosted.org
-
Alexander Bokovoy -
Florence Blanc-Renaud -
Michal Konecny