Hey guys! Saw an old thread about this issue but it looks different. After checking certificates from uid=ipara,ou=people,o=ipaca and comparing it with /var/lib/ipa/ra-agent.pem, it matches. Every certificate is on MONITORING status and is valid (not expired)
ipa-server-upgrade complains about this: 2025-05-13T22:14:51Z DEBUG request GET https://ipa01.int.r3pek.org:8443/ca/rest/account/login 2025-05-13T22:14:51Z DEBUG request body '' 2025-05-13T22:14:51Z DEBUG response status 404 2025-05-13T22:14:51Z DEBUG response headers Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 784 2025-05-13T22:14:51Z DEBUG response body (decoded): b'<!doctype html><html lang="en"><head><title>HTTP Status 404 \xe2\x80\x93 Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 \xe2\x80\x93 Not Found</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> The requested resource [/ca/rest/account/login] is not available</p><p><b>Description</b> The origin server did not find a current representation for the target resource or is not willing to disclose that one exists.</p><hr class="line" /><h3>Apache Tomcat/9.0.87</h3></body></html>' 2025-05-13T22:14:51Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. Really can't understand what could make this happen :-/ pki-tomcat access logs clearly show the different from "working to not working": localhost_access_log.2025-05-05.txt:10.0.11.4 - ipara [05/May/2025:22:45:49 +0100] "GET /ca/rest/account/login HTTP/1.1" 200 198 localhost_access_log.2025-05-12.txt:10.0.11.4 - - [12/May/2025:22:46:20 +0100] "GET /ca/rest/account/login HTTP/1.1" 404 682 localhost_access_log.2025-05-13.txt:10.0.11.4 - - [13/May/2025:20:43:10 +0100] "GET /ca/rest/account/login HTTP/1.1" 404 682 localhost_access_log.2025-05-13.txt:10.0.11.4 - - [13/May/2025:20:43:17 +0100] "GET /ca/rest/account/login HTTP/1.1" 404 682 Any tips? Thanks in advance! -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
