DescriptionAdam Williamson
2025-12-22 23:22:42 UTC
In openQA testing, upgrade of a FreeIPA server from F42 to F44 is failing since Fedora-Rawhide-20251218.n.0 . ipaupgrade.log shows:
2025-12-22T07:03:47Z DEBUG Updating DNS system records
2025-12-22T07:03:47Z DEBUG raw: server_find(None, version='2.257', no_members=False, servrole='IPA master')
2025-12-22T07:03:47Z DEBUG server_find(None, all=False, raw=False, version='2.257', no_members=False, pkey_only=False, servrole=('IPA master',))
2025-12-22T07:03:47Z DEBUG raw: server_role_find(None, server_server=None, role_servrole='IPA master', status='enabled', include_master=True, version='2.257')
2025-12-22T07:03:47Z DEBUG server_role_find(None, server_server=None, role_servrole='IPA master', status='enabled', include_master=True, all=False, raw=False, version='2.257')
2025-12-22T07:03:47Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
2025-12-22T07:03:47Z DEBUG File "/usr/lib/python3.14/site-packages/ipapython/admintool.py", line 219, in execute
return_value = self.run()
File "/usr/lib/python3.14/site-packages/ipaserver/install/ipa_server_upgrade.py", line 54, in run
server.upgrade()
~~~~~~~~~~~~~~^^
File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 2066, in upgrade
upgrade_configuration()
~~~~~~~~~~~~~~~~~~~~~^^
File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 1887, in upgrade_configuration
upgrade_bind(fstore)
~~~~~~~~~~~~^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 1482, in upgrade_bind
add_ca_dns_records(bind)
~~~~~~~~~~~~~~~~~~^^^^^^
File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 865, in add_ca_dns_records
bind.update_system_records()
~~~~~~~~~~~~~~~~~~~~~~~~~~^^
File "/usr/lib/python3.14/site-packages/ipaserver/install/bindinstance.py", line 1316, in update_system_records
system_records = IPASystemRecords(self.api)
File "/usr/lib/python3.14/site-packages/ipaserver/dns_data_management.py", line 97, in __init__
self.__init_data(all_servers=all_servers)
~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipaserver/dns_data_management.py", line 124, in __init_data
servers = self.api_instance.Command.server_find(**kwargs)
File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 477, in __call__
return self.__do_call(*args, **options)
~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 544, in __do_call
ret = self.run(*args, **options)
File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 885, in run
return self.execute(*args, **options)
~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipaserver/plugins/baseldap.py", line 2158, in execute
(filter, base_dn, scope) = callback(
~~~~~~~~^
self, ldap, filter, attrs_list, base_dn, scope, *args, **options)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipaserver/plugins/server.py", line 407, in pre_callback
servrole_filter = self._get_enabled_servrole_filter(
ldap, options['servrole'])
File "/usr/lib/python3.14/site-packages/ipaserver/plugins/server.py", line 354, in _get_enabled_servrole_filter
enabled_masters = _get_masters_with_enabled_servrole(
servroles[0])
File "/usr/lib/python3.14/site-packages/ipaserver/plugins/server.py", line 344, in _get_masters_with_enabled_servrole
role_status = self.api.Command.server_role_find(
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
server_server=None,
^^^^^^^^^^^^^^^^^^^
...<2 lines>...
include_master=True,
^^^^^^^^^^^^^^^^^^^^
)['result']
^
File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 477, in __call__
return self.__do_call(*args, **options)
~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 544, in __do_call
ret = self.run(*args, **options)
File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 885, in run
return self.execute(*args, **options)
~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipaserver/plugins/serverrole.py", line 158, in execute
role_status = self.obj.backend.server_role_search(
server_server=server,
role_servrole=role_name,
status=status)
File "/usr/lib/python3.14/site-packages/ipaserver/plugins/serverroles.py", line 132, in server_role_search
role_status = found_role.status(self.api, server=server_server)
File "/usr/lib/python3.14/site-packages/ipaserver/servroles.py", line 562, in status
return super(ServiceBasedRole, self).status(
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
api_instance, server=server, attrs_list=('ipaConfigString', 'cn'))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipaserver/servroles.py", line 222, in status
self._fill_in_absent_masters(ldap2, api_instance, result))
~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipaserver/servroles.py", line 175, in _fill_in_absent_masters
all_masters = ldap2.get_entries(
search_base,
filter=search_filter,
scope=SCOPE_ONELEVEL,
attrs_list=attrs_list)
File "/usr/lib/python3.14/site-packages/ipapython/ipaldap.py", line 1473, in get_entries
entries, truncated = self.find_entries(
~~~~~~~~~~~~~~~~~^
base_dn=base_dn, scope=scope, filter=filter, attrs_list=attrs_list,
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
get_effective_rights=get_effective_rights,
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
**kwargs)
^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipapython/ipaldap.py", line 1617, in find_entries
raise errors.EmptyResult(reason='no matching entry found')
2025-12-22T07:03:47Z DEBUG The ipa-server-upgrade command failed, exception: EmptyResult: no matching entry found
Proposing as a Beta blocker per criterion https://fedoraproject.org/wiki/Fedora_44_Beta_Release_Criteria#Server_upgrade_requirements , "It must be possible to successfully complete a direct upgrade from a fully updated installation of each of the last two stable Fedora Server releases with the system configured as a FreeIPA domain controller or postgresql server as specified in the relevant criteria. The upgraded system must meet all relevant release criteria, including criteria relating to functionality of the server software."
I'm closing this as a duplicate of bz2424132 which was filed earlier and where the current work is tracked. Please reassign beta blocker to that bug (unless the automation will take care of that).
*** This bug has been marked as a duplicate of bug 2424132 ***
In openQA testing, upgrade of a FreeIPA server from F42 to F44 is failing since Fedora-Rawhide-20251218.n.0 . ipaupgrade.log shows: 2025-12-22T07:03:47Z DEBUG Updating DNS system records 2025-12-22T07:03:47Z DEBUG raw: server_find(None, version='2.257', no_members=False, servrole='IPA master') 2025-12-22T07:03:47Z DEBUG server_find(None, all=False, raw=False, version='2.257', no_members=False, pkey_only=False, servrole=('IPA master',)) 2025-12-22T07:03:47Z DEBUG raw: server_role_find(None, server_server=None, role_servrole='IPA master', status='enabled', include_master=True, version='2.257') 2025-12-22T07:03:47Z DEBUG server_role_find(None, server_server=None, role_servrole='IPA master', status='enabled', include_master=True, all=False, raw=False, version='2.257') 2025-12-22T07:03:47Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. 2025-12-22T07:03:47Z DEBUG File "/usr/lib/python3.14/site-packages/ipapython/admintool.py", line 219, in execute return_value = self.run() File "/usr/lib/python3.14/site-packages/ipaserver/install/ipa_server_upgrade.py", line 54, in run server.upgrade() ~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 2066, in upgrade upgrade_configuration() ~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 1887, in upgrade_configuration upgrade_bind(fstore) ~~~~~~~~~~~~^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 1482, in upgrade_bind add_ca_dns_records(bind) ~~~~~~~~~~~~~~~~~~^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 865, in add_ca_dns_records bind.update_system_records() ~~~~~~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/bindinstance.py", line 1316, in update_system_records system_records = IPASystemRecords(self.api) File "/usr/lib/python3.14/site-packages/ipaserver/dns_data_management.py", line 97, in __init__ self.__init_data(all_servers=all_servers) ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/dns_data_management.py", line 124, in __init_data servers = self.api_instance.Command.server_find(**kwargs) File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 477, in __call__ return self.__do_call(*args, **options) ~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 544, in __do_call ret = self.run(*args, **options) File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 885, in run return self.execute(*args, **options) ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/plugins/baseldap.py", line 2158, in execute (filter, base_dn, scope) = callback( ~~~~~~~~^ self, ldap, filter, attrs_list, base_dn, scope, *args, **options) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/plugins/server.py", line 407, in pre_callback servrole_filter = self._get_enabled_servrole_filter( ldap, options['servrole']) File "/usr/lib/python3.14/site-packages/ipaserver/plugins/server.py", line 354, in _get_enabled_servrole_filter enabled_masters = _get_masters_with_enabled_servrole( servroles[0]) File "/usr/lib/python3.14/site-packages/ipaserver/plugins/server.py", line 344, in _get_masters_with_enabled_servrole role_status = self.api.Command.server_role_find( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ server_server=None, ^^^^^^^^^^^^^^^^^^^ ...<2 lines>... include_master=True, ^^^^^^^^^^^^^^^^^^^^ )['result'] ^ File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 477, in __call__ return self.__do_call(*args, **options) ~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 544, in __do_call ret = self.run(*args, **options) File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 885, in run return self.execute(*args, **options) ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/plugins/serverrole.py", line 158, in execute role_status = self.obj.backend.server_role_search( server_server=server, role_servrole=role_name, status=status) File "/usr/lib/python3.14/site-packages/ipaserver/plugins/serverroles.py", line 132, in server_role_search role_status = found_role.status(self.api, server=server_server) File "/usr/lib/python3.14/site-packages/ipaserver/servroles.py", line 562, in status return super(ServiceBasedRole, self).status( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ api_instance, server=server, attrs_list=('ipaConfigString', 'cn')) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/servroles.py", line 222, in status self._fill_in_absent_masters(ldap2, api_instance, result)) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/servroles.py", line 175, in _fill_in_absent_masters all_masters = ldap2.get_entries( search_base, filter=search_filter, scope=SCOPE_ONELEVEL, attrs_list=attrs_list) File "/usr/lib/python3.14/site-packages/ipapython/ipaldap.py", line 1473, in get_entries entries, truncated = self.find_entries( ~~~~~~~~~~~~~~~~~^ base_dn=base_dn, scope=scope, filter=filter, attrs_list=attrs_list, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ get_effective_rights=get_effective_rights, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ **kwargs) ^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipapython/ipaldap.py", line 1617, in find_entries raise errors.EmptyResult(reason='no matching entry found') 2025-12-22T07:03:47Z DEBUG The ipa-server-upgrade command failed, exception: EmptyResult: no matching entry found