Issue

ipa-server-install fails on step "migrating certificate profiles to LDAP" with connection refused

[error] NetworkError: cannot connect to 'https://ubuntu-freeipa01.xx.yy.com:8443/ca/rest/account/logout': [Errno 111] Connection refused
ipapython.admintool: ERROR cannot connect to 'https://ubuntu-freeipa01.xx.yy.com:8443/ca/rest/account/logout': [Errno 111] Connection refused
ipapython.admintool: ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information

But with a webbrouwser it works.

Steps to Reproduce

installation is started with

The IPA Master Server will be configured with:
Hostname: ubuntu-freeipa01.xx.yy.com
IP address(es): 192.168.x.y
Domain name: xx.yy.com
Realm name: XX.YY.COM

The CA will be configured with:
Subject DN: CN=Certificate Authority,O=XX.YY.COM
Subject base: O=XX.YY.COM
Chaining: self-signed

Continue to configure the system with these values? [no]: yes

/var/log/ipaserver-install.log

2018-11-30T13:03:52Z DEBUG httplib request failed:
Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/ipapython/dogtag.py", line 220, in _httplib_request
conn.request(method, uri, body=request_body, headers=headers)
File "/usr/lib/python2.7/httplib.py", line 1042, in request
self._send_request(method, url, body, headers)
File "/usr/lib/python2.7/httplib.py", line 1082, in _send_request
self.endheaders(body)
File "/usr/lib/python2.7/httplib.py", line 1038, in endheaders
self._send_output(message_body)
File "/usr/lib/python2.7/httplib.py", line 882, in _send_output
self.send(msg)
File "/usr/lib/python2.7/httplib.py", line 844, in send
self.connect()
File "/usr/lib/python2.7/httplib.py", line 1263, in connect
server_hostname=server_hostname)
File "/usr/lib/python2.7/ssl.py", line 369, in wrap_socket
_context=self)
File "/usr/lib/python2.7/ssl.py", line 617, in init
self.do_handshake()
File "/usr/lib/python2.7/ssl.py", line 846, in do_handshake
self._sslobj.do_handshake()
error: [Errno 104] Connection reset by peer
2018-11-30T13:03:52Z DEBUG request GET https://ubuntu-freeipa01.xx.yy.com:8443/ca/rest/account/logout
2018-11-30T13:03:52Z DEBUG request body ''
2018-11-30T13:03:52Z DEBUG httplib request failed:

do you have any idea why the script ipa-server-install failes here??