[Freeipa-users] (no subject)

Rob Crittenden rcritten at redhat.com
Wed Mar 14 20:33:23 UTC 2012


Jimmy wrote:
> Ok, I upgraded and that didn't go so well, now IPA doesn't start:
>
>> service ipa start
> Starting Directory Service
> Starting dirsrv:
>      XXXXXX...                                             [  OK  ]
>      PKI-IPA...                                             [  OK  ]
> Failed to read data from Directory Service: Failed to get list of
> services to probe status!
> Configured hostname 'XXXXXXXXX' does not match any master server in LDAP:
> No master found because of error: {'matched': 'dc=XXX,dc=XXX', 'desc':
> 'No such object'}
> Shutting down
> Shutting down dirsrv:
>      XXXXXX...                                             [  OK  ]
>      PKI-IPA...                                             [  OK  ]
>
> *BUT* /etc/httpd/conf.d/ipa-pki-proxy.conf exists now...

That would suggest your hostname doesn't match the hostname that IPA was 
installed as. Start just dirsrv and see what masters are configured:

ldapsearch -x -b cn=masters,cn=ipa,cn=etc,dc=example,dc=com

rob

>
> On Wed, Mar 14, 2012 at 3:47 PM, Stephen Ingram<sbingram at gmail.com>  wrote:
>> On Wed, Mar 14, 2012 at 12:41 PM, Jimmy<g17jimmy at gmail.com>  wrote:
>>> Good call Stephen. the /etc/httpd/conf.d/ipa-pki-proxy.conf is
>>> missing. I'm not sure how that is missing. Was there a separate step
>>> for the IPA install that took care of the CA? It's been 6 months since
>>> I installed so I don't remember right off.
>>
>> It's part of the freeipa-server package. I noticed that you are
>> running version 2.1.1 of ipa. 2.1.4 is the latest in the non-devel
>> repos. You might want to try a yum update as you might have other
>> differing packages as well. Make sure you read about the changes in
>> 2.1.4 which might affect machines you have already enrolled.
>>
>> Steve




More information about the Freeipa-users mailing list