Error in APIGEE OpenLDAP Upgrade from 4.16.09 to 4.17.05

Google Cloud Apigee
1

Error Message:

Can someone help on the issue. OS version is 6.9.

Current OpenLDAP version is : apigee-openldap-2.4-0.0.979

Service upgrade: apigee-openldap
Stopping apigee-openldap:
apigee-service: apigee-openldap: pid=20777
apigee-service: apigee-openldap: Not running (DEAD)
apigee-service: apigee-openldap: OK
Loaded plugins: product-id, rhnplugin, search-disabled-repos, security,
              : subscription-manager
This system is receiving updates from RHN Classic or RHN Satellite.
Setting up Update Process
No Packages marked for Update
Validating setup variables
Checking for required variables
Checking required variable RUN_USER...OK
Checking required variable RUN_GROUP...OK
Checking required variable APIGEE_LDAPPW...OK
Checking for optional variables
Found optional variable LDAP_PORT...OK
Found optional variable LDAP_TYPE...OK
Found optional variable LDAP_SID...OK
Found optional variable LDAP_PEER...OK
Found optional variable APIGEE_BIND_DN...OK
Create indices
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
apigee-configutil: apigee-openldap: # OK
updated property lib_settings_ldap_port in file /opt/apigee/token/application/openldap.properties
updated property RUN_USER in file /opt/apigee/etc/apigee-openldap.d/apigee-openldap.sh
updated property lib_settings_ldap_sid in file /opt/apigee/token/application/openldap.properties
updated property lib_settings_ldap_peer in file /opt/apigee/token/application/openldap.properties
updated property lib_settings_apigee_bind_dn in file /opt/apigee/token/application/openldap.properties
apigee-configutil: apigee-openldap: # OK
apigee-configutil: apigee-openldap: # OK
apigee-service: apigee-openldap: Not running (NO_LOCKFILE)
apigee-service: apigee-openldap: status=2, continuing
apigee-service: apigee-openldap: OK
apigee-service: apigee-openldap: apigee-openldap is running
Set LDAP ROOTDN password
Error: OpenLDAP password could not be changed
Importing ppolicy olcOverlay
Configure Apigee DIT
ldap_add: Already exists (68)
adding new entry "dc=apigee,dc=com"
ldap_add: Already exists (68)
adding new entry "ou=global,dc=apigee,dc=com"
ldap_add: Already exists (68)
adding new entry "ou=organizations,dc=apigee,dc=com"
ldap_add: Already exists (68)
adding new entry "ou=permissions,dc=apigee,dc=com"
ldap_delete: No such object (32)
        matched DN: ou=pwpolicies,dc=apigee,dc=com
ldap_delete: No such object (32)
        matched DN: ou=pwpolicies,dc=apigee,dc=com
ldap_delete: Operation not allowed on non-leaf (66)
        additional info: subordinate objects must be deleted first
Error: ldapdelete exited with unexpected status 66
Error: update.sh: /opt/apigee/apigee-service/bin/apigee-service exited with unexpected status 66
2

Is this single DC or multi DC upgrade? May be related to silent config file values. In your silent config file check if you have correct IP address and LDAP port for Open LDAP node. If it is multi-dc ensure the ports between the two OpenLDAP nodes is open.

3

Hi @mohit.baveja,

Refer https://docs.apigee.com/api-services/reference/supported-software, 17.05 is not supported on 6.9 (Rhel/Oracle/Centos). did you realize that?

Also I see ldap_sasl_bind(SIMPLE):Can’t contact LDAP server (-1), Is the ldap up and running during upgrade?