Vicente Quintans via FreeIPA-users wrote:
We found this issue today, upgrading from Fedora 40 to Fedora 41.
In dogtagpk the /ca/rest/account/login enpoint (actually all /ca/rest enpoints) was moved to /ca/v1 in this commit:
https://github.com/dogtagpki/pki/commit/850e6b9e5128264a471e57b70ab8d970cf91...
We were able to complete the upgrade succesfully modifying the file /usr/lib/python3.13/site-packages/ipaserver/plugins/dogtag.py changing al "/rest" to "/v1" (patch file attached). With this modification ipa-server-upgrade completed successfully.
It seems there is some kind of version mismatch.
Thanks for sharing your research!
What is strange is that new installs don't seem to be impact, only upgrades.
Do you happen to have the version of IPA you were running on F40 and are now running on 41? That may help me reproduce the issue.
I think you forgot to attach your patch, though I don't believe changing the endpoints to v1 should be necessary.
rob