Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1290142

Summary: Broken 7.2.0 to 7.2.z upgrade - flawed version comparison
Product: Red Hat Enterprise Linux 7 Reporter: Martin Bašti <mbasti>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED ERRATA QA Contact: Namita Soman <nsoman>
Severity: urgent Docs Contact: Marc Muehlfeld <mmuehlfe>
Priority: urgent    
Version: 7.2CC: ekeck, enewland, gparente, ilmostro7, jcholast, jstephen, ksiddiqu, mbasti, mkosek, ndehadra, orion, puiterwijk, pvoborni, rcritten, sgadekar
Target Milestone: rcKeywords: ZStream
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: ipa-4.2.0-16.el7 Doc Type: Bug Fix
Doc Text:
The IdM upgrade script now runs successfully Previously, the Identity Management (IdM) server upgrade script failed to detect a version change. As a consequence, upgrading an IdM server failed. This bug has been fixed and the upgrade now succeeds.
Story Points: ---
Clone Of:
: 1298100 (view as bug list) Environment:
Last Closed: 2016-11-04 05:42:28 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1298100    

Description Martin Bašti 2015-12-09 18:03:56 UTC
This bug is created as a clone of upstream ticket:
https://fedorahosted.org/freeipa/ticket/5535

Obviously it was upgrade to never version.
{{{
2015-12-09T15:21:02Z DEBUG The ipa-server-upgrade command failed, exception: ScriptError: ("Unable to execute IPA upgrade: data are in newer version than IPA (data version '4.2.0-15.el7', IPA version '4.2.0-15.el7_2.3')", 1)
2015-12-09T15:21:02Z ERROR ("Unable to execute IPA upgrade: data are in newer version than IPA (data version '4.2.0-15.el7', IPA version '4.2.0-15.el7_2.3')", 1)
"/var/log/ipaupgrade.log" 54696L, 5389464C  
}}}

Comment 3 Martin Kosek 2015-12-10 09:24:35 UTC
The bug manifests in 7.2.0 (ipa-4.2.0-15.el7) to 7.2.z (4.2.0-15.el7_2.3) upgrade. The upgrade does not happen as the version check is flawed and does not detect 7.2.z version as the new one.

The workaround is to run

# ipa-server-upgrade --skip-version-check

after the RPM upgrade and start the service again.

Comment 6 Martin Bašti 2015-12-10 10:05:49 UTC
*** Bug 1290346 has been marked as a duplicate of this bug. ***

Comment 7 ilmostro7 2015-12-10 10:16:03 UTC
Yup...sucks big time

Scriptlet output:
   1 Could not load host key: /etc/ssh/ssh_host_dsa_key
   2 warning: file /lib/modules/3.10.0-229.14.1.el7.x86_64/modules.softdep: remove failed: No such file or directory
   3 warning: file /lib/modules/3.10.0-229.14.1.el7.x86_64/modules.devname: remove failed: No such file or directory
   4 IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
   5 ("Unable to execute IPA upgrade: data are in newer version than IPA (data version '4.2.0-15.el7', IPA version '4.2.0-15.el7_2.3')", 1)

Comment 8 ilmostro7 2015-12-10 10:18:23 UTC
Not sure why the naming format; perhaps specfile got botched? Maybe it should be version 4.2.3.el7 instead of 4.2.0-15.el7_2.3?

Comment 9 Martin Bašti 2015-12-10 10:24:12 UTC
(In reply to ilmostro7 from comment #8)
> Not sure why the naming format; perhaps specfile got botched? Maybe it
> should be version 4.2.3.el7 instead of 4.2.0-15.el7_2.3?

This is bug in checking version method, 4.2.0-15.el7_2.3 version is okay.

Comment 12 Petr Vobornik 2016-01-08 13:32:59 UTC
the upstream patch causes https://fedorahosted.org/freeipa/ticket/5572 Different approach needs to be used.

Comment 13 Jan Cholasta 2016-01-11 17:22:20 UTC
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/5572

Comment 18 Nikhil Dehadrai 2016-08-08 10:28:18 UTC
IPA server version: ipa-server-4.4.0-3.el7.x86_64

Verified the bug on the basis of following steps:
1. Verified that no error message is observed during upgrade of IPA server.
2. Verified the bug for upgrade paths:
   a) 7.2(GA) to 7.3
   b) 7.2.z to 7.3 (In my case upgrade from 7.2up6)

 Thus on the basis of above observations marking the status of bug to "VERIFIED".

Comment 23 errata-xmlrpc 2016-11-04 05:42:28 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2404.html