With pki-base-10.6.0-0.2.fc28.noarch a dependency is missing to pki-symkey. Without this dependency FreeIPA couldn't run its ipa-server-upgrade script which restarts Dogtag and upon restart Dogtag fails. Mar 21 14:17:08 f28-mst-ipa.m.vda.li systemd[1]: Started PKI Tomcat Server pki-tomcat. Mar 21 14:17:08 f28-mst-ipa.m.vda.li audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pki-tomcatd@pki-tomcat comm="systemd" exe=> Mar 21 14:17:08 f28-mst-ipa.m.vda.li server[14653]: Java virtual machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java Mar 21 14:17:08 f28-mst-ipa.m.vda.li server[14653]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/lib/java/commons-daemon.jar Mar 21 14:17:08 f28-mst-ipa.m.vda.li server[14653]: main class used: org.apache.catalina.startup.Bootstrap Mar 21 14:17:08 f28-mst-ipa.m.vda.li server[14653]: flags used: -DRESTEASY_LIB=/usr/share/java/resteasy -Djava.library.path=/usr/lib64/nuxwdog-jni Mar 21 14:17:08 f28-mst-ipa.m.vda.li server[14653]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/p> Mar 21 14:17:08 f28-mst-ipa.m.vda.li server[14653]: arguments used: start Mar 21 14:17:08 f28-mst-ipa.m.vda.li server[14653]: WARNING: Problem with JAR file [/usr/share/pki/server/common/lib/symkey.jar], exists: [false], canRead: [false] Mar 21 14:17:09 f28-mst-ipa.m.vda.li server[14653]: WARNING: [SetPropertiesRule]{Server/Service/Engine/Host/Valve} Setting property 'resolveHosts' to 'false' did not find a matching propert> Mar 21 14:17:43 f28-mst-ipa.m.vda.li systemd[1]: Stopping PKI Tomcat Server pki-tomcat... Mar 21 14:17:43 f28-mst-ipa.m.vda.li server[14828]: Java virtual machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java Mar 21 14:17:43 f28-mst-ipa.m.vda.li server[14828]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/lib/java/commons-daemon.jar Mar 21 14:17:43 f28-mst-ipa.m.vda.li server[14828]: main class used: org.apache.catalina.startup.Bootstrap Mar 21 14:17:43 f28-mst-ipa.m.vda.li server[14828]: flags used: -DRESTEASY_LIB=/usr/share/java/resteasy -Djava.library.path=/usr/lib64/nuxwdog-jni Mar 21 14:17:43 f28-mst-ipa.m.vda.li server[14828]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/p> Mar 21 14:17:43 f28-mst-ipa.m.vda.li server[14828]: arguments used: stop Mar 21 14:17:44 f28-mst-ipa.m.vda.li systemd[1]: Stopped PKI Tomcat Server pki-tomcat. When I installed pki-symkey, everything went just fine.
Proposing as a Beta blocker along with the other FreeIPA upgrade issues. Per ab, this causes ipa-server-upgrade to fail, which means the upgrade process fails.
freeipa-4.6.90.pre1-6.1.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-8cff0f34f6
Note: https://bodhi.fedoraproject.org/updates/FEDORA-2018-8cff0f34f6 will resolve the Beta-blocking aspects of this bug, by adding a dependency from freeipa to pki-symkey. However this is a temporary workaround, not the correct fix, so we will not *close* this bug when that update goes stable, we will just make it no longer a blocker. We still want the bug open for pki-core to look at.
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8cff0f34f6 was pushed stable, so this no longer needs blocker status.
dogtag-pki-10.6.1-1.fc28 dogtag-pki-theme-10.6.1-1.fc28 pki-console-10.6.1-1.fc28 pki-core-10.6.1-1.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f684aab1a
dogtag-pki-10.6.1-1.fc28, dogtag-pki-theme-10.6.1-1.fc28, pki-console-10.6.1-1.fc28, pki-core-10.6.1-1.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f684aab1a
dogtag-pki-10.6.1-1.fc28, dogtag-pki-theme-10.6.1-1.fc28, pki-console-10.6.1-1.fc28, pki-core-10.6.1-1.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.