During upgrade ipa-server-upgrade disables all of the listeners in 389-ds except for ldapi. This is currently done by shutting down ns-slapd and making direct changes to dse.ldif. This can happen online using ldapi followed by a restart.
See related request in https://bugzilla.redhat.com/show_bug.cgi?id=707028