10:44 p.m.
I am attempting to upgrade my FreeIPA server from Fedora 9 (Fedora-ds-base 1.2.0-4) to
Fedora 10 (389-ds-base 1.2.2-1). I have been running into problems with the directory
server during the upgrade.
Prior to the upgrade process I am stopping the directory server and using chkconfig to
ensure that it does not start after the upgrade. The oS upgrade goes seemingly without a
hitch. At first boot, the FC9 directory server packages are still installed. I perform a
"yum update" which indicates that the fedora-ds-package will be replaced with
the 389 package (Not sure if this means upgrade or not, but the fedora-ds-base package is
definitely removed).
When I try to manually start the directory server I receive the following errors:
[04/Oct/2009:19:40:35 -0400] - All database threads now stopped
[04/Oct/2009:19:41:37 -0400] - slapd shutting down - signaling operation threads
[04/Oct/2009:19:41:37 -0400] - slapd shutting down - closing down internal subsystems and
plugins
[04/Oct/2009:19:41:38 -0400] - Waiting for 4 database threads to stop
[04/Oct/2009:19:41:38 -0400] - All database threads now stopped
[04/Oct/2009:19:41:38 -0400] - slapd stopped.
389-Directory/1.2.2 B2009.237.206
directory.REALM.com:636 (/etc/dirsrv/slapd-REALM-COM)
[05/Oct/2009:01:46:34 -0400] - 389-Directory/1.2.2 B2009.237.206 starting up
[05/Oct/2009:01:46:34 -0400] - Clean up db environment and start from archive.
[05/Oct/2009:01:46:34 -0400] - libdb: Program version 4.7 doesn't match environment
version 4.6
[05/Oct/2009:01:46:34 -0400] - libdb: Program version 4.7 doesn't match environment
version 4.6
[05/Oct/2009:01:46:36 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher AES
[05/Oct/2009:01:46:37 -0400] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[05/Oct/2009:01:46:37 -0400] - Failed to initialize cipher AES in attrcrypt_init
[05/Oct/2009:01:46:37 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher 3DES
[05/Oct/2009:01:46:37 -0400] - Failed to retrieve key for cipher 3DES in
attrcrypt_cipher_init
[05/Oct/2009:01:46:37 -0400] - Failed to initialize cipher 3DES in attrcrypt_init
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - Upgrading from
bdb/4 to bdb/4.7/libreplication-plugin is successfully done
(/var/lib/dirsrv/slapd-REALM-COM/cldb)
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile:
db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed
to open changelog
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - changelog5_init:
failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:46:37 -0400] - Failed to start object plugin Multimaster Replication
Plugin
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile:
db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed
to open changelog
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program - changelog5_init:
failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:46:37 -0400] - Failed to start object plugin Multimaster Replication
Plugin
[05/Oct/2009:01:46:37 -0400] - Error: Failed to resolve plugin dependencies
[05/Oct/2009:01:46:37 -0400] - Error: object plugin Legacy Replication Plugin is not
started
[05/Oct/2009:01:46:37 -0400] - Error: object plugin Multimaster Replication Plugin is not
started
389-Directory/1.2.2 B2009.237.206
directory.REALM.com:636 (/etc/dirsrv/slapd-REALM-COM)
[05/Oct/2009:01:58:17 -0400] - 389-Directory/1.2.2 B2009.237.206 starting up
[05/Oct/2009:01:58:17 -0400] - Detected Disorderly Shutdown last time Directory Server was
running, recovering database.
[05/Oct/2009:01:58:18 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher AES
[05/Oct/2009:01:58:18 -0400] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[05/Oct/2009:01:58:18 -0400] - Failed to initialize cipher AES in attrcrypt_init
[05/Oct/2009:01:58:18 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher 3DES
[05/Oct/2009:01:58:18 -0400] - Failed to retrieve key for cipher 3DES in
attrcrypt_cipher_init
[05/Oct/2009:01:58:18 -0400] - Failed to initialize cipher 3DES in attrcrypt_init
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile:
db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed
to open changelog
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - changelog5_init:
failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:58:19 -0400] - Failed to start object plugin Multimaster Replication
Plugin
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile:
db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed
to open changelog
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program - changelog5_init:
failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:58:19 -0400] - Failed to start object plugin Multimaster Replication
Plugin
[05/Oct/2009:01:58:19 -0400] - Error: Failed to resolve plugin dependencies
[05/Oct/2009:01:58:19 -0400] - Error: object plugin Legacy Replication Plugin is not
started
[05/Oct/2009:01:58:19 -0400] - Error: object plugin Multimaster Replication Plugin is not
started
Fedora-Directory/1.2.0 B2009.118.167
directory.REALM.com:636 (/etc/dirsrv/slapd-REALM-COM)
[05/Oct/2009:02:49:56 -0400] - Fedora-Directory/1.2.0 B2009.118.167 starting up
[05/Oct/2009:02:49:56 -0400] - Detected Disorderly Shutdown last time Directory Server was
running, recovering database.
[05/Oct/2009:02:49:57 -0400] - attrcrypt_unwrap_key: failed to unwrap key for cipher AES
[05/Oct/2009:02:49:57 -0400] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[05/Oct/2009:02:49:57 -0400] - Failed to initialize cipher AES in attrcrypt_init
[05/Oct/2009:02:49:57 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile:
db_open failed; db error - 22 Invalid argument
[05/Oct/2009:02:49:57 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed
to open changelog
[05/Oct/2009:02:49:57 -0400] NSMMReplicationPlugin - changelog program - changelog5_init:
failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:02:49:57 -0400] - Failed to start object plugin Multimaster Replication
Plugin
[05/Oct/2009:02:49:58 -0400] NSMMReplicationPlugin - changelog program - _cl5NewDBFile:
db_open failed; db error - 22 Invalid argument
[05/Oct/2009:02:49:58 -0400] NSMMReplicationPlugin - changelog program - cl5Open: failed
to open changelog
[05/Oct/2009:02:49:58 -0400] NSMMReplicationPlugin - changelog program - changelog5_init:
failed to start changelog at /var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:02:49:58 -0400] - Failed to start object plugin Multimaster Replication
Plugin
[05/Oct/2009:02:49:58 -0400] - Error: Failed to resolve plugin dependencies
[05/Oct/2009:02:49:58 -0400] - Error: object plugin Legacy Replication Plugin is not
started
[05/Oct/2009:02:49:58 -0400] - Error: object plugin Multimaster Replication Plugin is not
started
I have two replica servers installed, one a FC10 DS 1.2.2 and one a windows domain
controller.
I have backed up basically everything in multiple formats (db2bak, ldif, tar). I am going
to have to roll the server back to FC9 for the evening. Anyone have any ideas how to
eliminate the errors, or perform the upgrade in a way that avoids them? Do I need to
remove the replication agreements first?
James Roman
Sr. Network Administrator
TerraNet, Inc. on Contract to SSAI