Hi,

On Wed, Sep 27, 2023 at 10:26 AM Alexander Bokovoy via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

On Срд, 27 вер 2023, Michal Konecny via FreeIPA-users wrote:
>Hi everyone,
>
>I'm currently trying to update Fedora IPA installation on staging from
>RHEL 8 to RHEL 9. I'm using this guide https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/migrating_to_identity_management_on_rhel_9
>for it.
>
>I'm currently stuck on error "RuntimeError: Failed to start
>replication" and I don't see anything strange in the logs. Here is the
>log from `ipa-replica-install` run:
>https://paste.centos.org/view/a0e2c2b9 . Maybe somebody here will know
>what seems to be the problem.

I noticed that ipa-replica-install is run with the --skip-conncheck option. Was there any issue reported without the option? The connection checks often reveal DNS issues or firewall preventing communication on required ports.

flo

The only odd thing I can see is a bit of discrepancy between handling of
JSON structure in check_repl_init() and check_repl_update(). We fail due
to the former not expecting 'Error (0) No replication sessions started
since server startup' status message.

I think the replication actually succeeded in one of previous DS
restarts, that's why we've got here.

Please create an issue and attach this pastebin content there.

--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue