Description of problem:

Running ipa-server-install ends during ipa.service restart with segfault in /usr/sbin/ipactl.

Version-Release number of selected component (if applicable):

freeipa-server-4.8.1-2.fc32.x86_64

How reproducible:

Deterministic.

Steps to Reproduce:
1. ipa-server-install -U -r EXAMPLE.TEST -a Secret123 -p Secret123
2. systemctl status ipa
3. /usr/sbin/ipactl start

Actual results:

  [6/10]: starting directory server
  [7/10]: upgrading server
  [8/10]: stopping directory server
  [9/10]: restoring configuration
  [10/10]: starting directory server
Done.
Restarting the KDC
Configuring client side components
This program will set up FreeIPA client.
Version 4.8.1

Using existing certificate '/etc/ipa/ca.crt'.
Client hostname: freeipa.example.test
Realm: EXAMPLE.TEST
DNS Domain: example.test
IPA Server: freeipa.example.test
BaseDN: dc=example,dc=test

Configured sudoers in /etc/nsswitch.conf
Configured /etc/sssd/sssd.conf
/usr/lib/python3.8/site-packages/yubico/yubikey_usb_hid.py:288: SyntaxWarning: "is" with a literal. Did you mean "=="?
  if mode is 'nand':
/usr/lib/python3.8/site-packages/yubico/yubikey_usb_hid.py:294: SyntaxWarning: "is" with a literal. Did you mean "=="?
  elif mode is 'and':
/usr/lib/python3.8/site-packages/yubico/yubikey_usb_hid.py:306: SyntaxWarning: "is" with a literal. Did you mean "=="?
  if mode is 'nand':
/usr/lib/python3.8/site-packages/yubico/yubikey_config.py:478: SyntaxWarning: "is" with a literal. Did you mean "=="?
  if slot is 1:
/usr/lib/python3.8/site-packages/yubico/yubikey_config.py:483: SyntaxWarning: "is" with a literal. Did you mean "=="?
  elif slot is 2:
Systemwide CA database updated.
Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
Could not update DNS SSHFP records.
SSSD enabled
Configured /etc/openldap/ldap.conf
Configured /etc/ssh/ssh_config
Configured /etc/ssh/sshd_config
Configuring example.test as NIS domain.
Client configuration complete.
The ipa-client-install command was successful

Please add records in this file to your DNS system: /tmp/ipa.system.records.h1z1_7jt.db
CalledProcessError(Command ['/bin/systemctl', 'restart', 'ipa.service'] returned non-zero exit status 1: 'Job for ipa.service failed because a fatal signal was delivered causing the control process to dump core.\nSee "systemctl status ipa.service" and "journalctl -xe" for details.\n')
The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
Segmentation fault (core dumped)

# systemctl status ipa
● ipa.service - Identity, Policy, Audit
   Loaded: loaded (/usr/lib/systemd/system/ipa.service; enabled; vendor preset: disabled)
   Active: failed (Result: core-dump) since Mon 2019-09-02 08:55:57 UTC; 9s ago
  Process: 8908 ExecStart=/usr/sbin/ipactl start (code=dumped, signal=SEGV)
 Main PID: 8908 (code=dumped, signal=SEGV)
      CPU: 1.993s

Sep 02 08:55:56 freeipa.example.test ipactl[8908]: Starting krb5kdc Service
Sep 02 08:55:56 freeipa.example.test ipactl[8908]: Starting kadmin Service
Sep 02 08:55:56 freeipa.example.test ipactl[8908]: Starting httpd Service
Sep 02 08:55:56 freeipa.example.test ipactl[8908]: Starting ipa-custodia Service
Sep 02 08:55:56 freeipa.example.test ipactl[8908]: Starting pki-tomcatd Service
Sep 02 08:55:56 freeipa.example.test ipactl[8908]: Starting ipa-otpd Service
Sep 02 08:55:57 freeipa.example.test systemd[1]: ipa.service: Main process exited, code=dumped, status=11/SEGV
Sep 02 08:55:57 freeipa.example.test systemd[1]: ipa.service: Failed with result 'core-dump'.
Sep 02 08:55:57 freeipa.example.test systemd[1]: Failed to start Identity, Policy, Audit.
Sep 02 08:55:57 freeipa.example.test systemd[1]: ipa.service: Consumed 1.993s CPU time.

# /usr/sbin/ipactl start
Existing service file detected!
Assuming stale, cleaning and proceeding
Starting Directory Service
Starting krb5kdc Service
Starting kadmin Service
Starting named Service
Starting httpd Service
Starting ipa-custodia Service
Starting pki-tomcatd Service
Starting ipa-otpd Service
Starting ipa-dnskeysyncd Service
ipa: INFO: The ipactl command was successful
Segmentation fault (core dumped)

Expected results:

No error during ipa-server-install, ipa service fine and dandy, ipactl not ending with segfault after it said that it was successful.

Additional info:

This is with python3-3.8.0~b4-1.fc32.x86_64, so it has the fix for bug 1745450.