On pe, 23 joulu 2022, Martin (Lists) via FreeIPA-users wrote:
Am 23.12.22 um 12:51 schrieb Alexander Bokovoy via FreeIPA-users:
On ke, 21 joulu 2022, Martin (Lists) via FreeIPA-users wrote:
Hallo all
I have a strange issue with one of my ipa servers. after an upgrade from fedora 35 to fedora 37 the ipa-server-upgrade failed on the pki-tomcat part. The ipaupgrade.log says:
Did you do this upgrade as a jump right from 35 to 37? I am not sure this is a right way to do it. We test individual upgrades 35-36-37 and they work fine.
Yes, I did a direct upgrade from 35 to 37.
Anyway, your problem, based on the second email you sent, is that memberof plugin in 389-ds misbehaves. We've seen few issues like that recently reported so please open a bug against 389-ds-base in Fedora and attach access/errors logs from the 389-ds instance.
I will open a bug. Thanks.
From 389-ds developers:
------- The problem (55-pbacmemberof.update) is that F37 was a rebase (in Nov) that contained an incomplete fix for #5413 [1]. The #5413 was fixed in two PR [2] and [3]. F37 contains [2] but not [3] that was fixed in Dec.
For F37 we need to a respin
[1] https://github.com/389ds/389-ds-base/issues/5413 [2] https://github.com/389ds/389-ds-base/commit/9db7a5adfaed49336ccee3bac43849c9... [3] https://github.com/389ds/389-ds-base/commit/6aa7a6d5bf8b1d774087e8a5d0e147f4... -------
Please open a Fedora bug so that it is updated.