I am attempting to upgrade my FreeIPA server from Fedora 9 (Fedora-ds-base
1.2.0-4) to Fedora 10 (389-ds-base 1.2.2-1). I have been running into problems
with the directory server during the upgrade.
Prior to the upgrade process I am stopping the directory server and using
chkconfig to ensure that it does not start after the upgrade. The oS upgrade
goes seemingly without a hitch. At first boot, the FC9 directory server packages
are still installed. I perform a "yum update" which indicates that the
fedora-ds-package will be replaced with the 389 package (Not sure if this means
upgrade or not, but the fedora-ds-base package is definitely removed).
When I try to manually start the directory server I receive the following
errors:
[04/Oct/2009:19:40:35 -0400] - All database threads now stopped
[04/Oct/2009:19:41:37 -0400] - slapd shutting down - signaling operation threads
[04/Oct/2009:19:41:37 -0400] - slapd shutting down - closing down internal
subsystems and plugins
[04/Oct/2009:19:41:38 -0400] - Waiting for 4 database threads to stop
[04/Oct/2009:19:41:38 -0400] - All database threads now stopped
[04/Oct/2009:19:41:38 -0400] - slapd stopped.
389-Directory/1.2.2 B2009.237.206
directory.REALM.com:636 (/etc/dirsrv/slapd-REALM-COM)
[05/Oct/2009:01:46:34 -0400] - 389-Directory/1.2.2 B2009.237.206 starting up
[05/Oct/2009:01:46:34 -0400] - Clean up db environment and start from archive.
[05/Oct/2009:01:46:34 -0400] - libdb: Program version 4.7 doesn''t match
environment version 4.6
[05/Oct/2009:01:46:34 -0400] - libdb: Program version 4.7 doesn''t match
environment version 4.6
[05/Oct/2009:01:46:36 -0400] - attrcrypt_unwrap_key: failed to unwrap key for
cipher AES
[05/Oct/2009:01:46:37 -0400] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[05/Oct/2009:01:46:37 -0400] - Failed to initialize cipher AES in attrcrypt_init
[05/Oct/2009:01:46:37 -0400] - attrcrypt_unwrap_key: failed to unwrap key for
cipher 3DES
[05/Oct/2009:01:46:37 -0400] - Failed to retrieve key for cipher 3DES in
attrcrypt_cipher_init
[05/Oct/2009:01:46:37 -0400] - Failed to initialize cipher 3DES in
attrcrypt_init
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program -
Upgrading from bdb/4 to bdb/4.7/libreplication-plugin is successfully done
(/var/lib/dirsrv/slapd-REALM-COM/cldb)
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program -
_cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program -
cl5Open: failed to open changelog
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program -
changelog5_init: failed to start changelog at
/var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:46:37 -0400] - Failed to start object plugin Multimaster
Replication Plugin
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program -
_cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program -
cl5Open: failed to open changelog
[05/Oct/2009:01:46:37 -0400] NSMMReplicationPlugin - changelog program -
changelog5_init: failed to start changelog at
/var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:46:37 -0400] - Failed to start object plugin Multimaster
Replication Plugin
[05/Oct/2009:01:46:37 -0400] - Error: Failed to resolve plugin dependencies
[05/Oct/2009:01:46:37 -0400] - Error: object plugin Legacy Replication Plugin is
not started
[05/Oct/2009:01:46:37 -0400] - Error: object plugin Multimaster Replication
Plugin is not started
389-Directory/1.2.2 B2009.237.206
directory.REALM.com:636 (/etc/dirsrv/slapd-REALM-COM)
[05/Oct/2009:01:58:17 -0400] - 389-Directory/1.2.2 B2009.237.206 starting up
[05/Oct/2009:01:58:17 -0400] - Detected Disorderly Shutdown last time Directory
Server was running, recovering database.
[05/Oct/2009:01:58:18 -0400] - attrcrypt_unwrap_key: failed to unwrap key for
cipher AES
[05/Oct/2009:01:58:18 -0400] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[05/Oct/2009:01:58:18 -0400] - Failed to initialize cipher AES in attrcrypt_init
[05/Oct/2009:01:58:18 -0400] - attrcrypt_unwrap_key: failed to unwrap key for
cipher 3DES
[05/Oct/2009:01:58:18 -0400] - Failed to retrieve key for cipher 3DES in
attrcrypt_cipher_init
[05/Oct/2009:01:58:18 -0400] - Failed to initialize cipher 3DES in
attrcrypt_init
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program -
_cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program -
cl5Open: failed to open changelog
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program -
changelog5_init: failed to start changelog at
/var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:58:19 -0400] - Failed to start object plugin Multimaster
Replication Plugin
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program -
_cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program -
cl5Open: failed to open changelog
[05/Oct/2009:01:58:19 -0400] NSMMReplicationPlugin - changelog program -
changelog5_init: failed to start changelog at
/var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:01:58:19 -0400] - Failed to start object plugin Multimaster
Replication Plugin
[05/Oct/2009:01:58:19 -0400] - Error: Failed to resolve plugin dependencies
[05/Oct/2009:01:58:19 -0400] - Error: object plugin Legacy Replication Plugin is
not started
[05/Oct/2009:01:58:19 -0400] - Error: object plugin Multimaster Replication
Plugin is not started
Fedora-Directory/1.2.0 B2009.118.167
directory.REALM.com:636 (/etc/dirsrv/slapd-REALM-COM)
[05/Oct/2009:02:49:56 -0400] - Fedora-Directory/1.2.0 B2009.118.167 starting up
[05/Oct/2009:02:49:56 -0400] - Detected Disorderly Shutdown last time Directory
Server was running, recovering database.
[05/Oct/2009:02:49:57 -0400] - attrcrypt_unwrap_key: failed to unwrap key for
cipher AES
[05/Oct/2009:02:49:57 -0400] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[05/Oct/2009:02:49:57 -0400] - Failed to initialize cipher AES in attrcrypt_init
[05/Oct/2009:02:49:57 -0400] NSMMReplicationPlugin - changelog program -
_cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:02:49:57 -0400] NSMMReplicationPlugin - changelog program -
cl5Open: failed to open changelog
[05/Oct/2009:02:49:57 -0400] NSMMReplicationPlugin - changelog program -
changelog5_init: failed to start changelog at
/var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:02:49:57 -0400] - Failed to start object plugin Multimaster
Replication Plugin
[05/Oct/2009:02:49:58 -0400] NSMMReplicationPlugin - changelog program -
_cl5NewDBFile: db_open failed; db error - 22 Invalid argument
[05/Oct/2009:02:49:58 -0400] NSMMReplicationPlugin - changelog program -
cl5Open: failed to open changelog
[05/Oct/2009:02:49:58 -0400] NSMMReplicationPlugin - changelog program -
changelog5_init: failed to start changelog at
/var/lib/dirsrv/slapd-REALM-COM/cldb
[05/Oct/2009:02:49:58 -0400] - Failed to start object plugin Multimaster
Replication Plugin
[05/Oct/2009:02:49:58 -0400] - Error: Failed to resolve plugin dependencies
[05/Oct/2009:02:49:58 -0400] - Error: object plugin Legacy Replication Plugin is
not started
[05/Oct/2009:02:49:58 -0400] - Error: object plugin Multimaster Replication
Plugin is not started
I have two replica servers installed, one a FC10 DS 1.2.2 and one a windows
domain controller.
I have backed up basically everything in multiple formats (db2bak, ldif, tar). I
am going to have to roll the server back to FC9 for the evening. Anyone have any
ideas how to eliminate the errors, or perform the upgrade in a way that avoids
them? Do I need to remove the replication agreements first?
James Roman
Sr. Network Administrator
TerraNet, Inc. on Contract to SSAI