When upgrading a working FreeIPA install from F30 to F31, I find the following problem when launching FreeIPA. # ipactl start --ignore-service-failure Existing service file detected! Assuming stale, cleaning and proceeding Starting Directory Service Starting krb5kdc Service Starting kadmin Service Starting named Service Starting httpd Service Starting ipa-custodia Service Starting pki-tomcatd Service Starting smb Service Failed to start smb Service Forced start, ignoring smb Service, continuing normal operation Starting winbind Service Failed to start winbind Service Forced start, ignoring winbind Service, continuing normal operation Starting ipa-otpd Service Starting ipa-ods-exporter Service Starting ods-enforcerd Service Starting ipa-dnskeysyncd Service ipa: INFO: The ipactl command was successful In debugging this, starting samba via `smbd -i -d 10` ends with the following debug output: No builtin backend found, trying to load plugin load_module_absolute_path: Probing module '/usr/lib64/samba/pdb/ipasam.so' Error loading module '/usr/lib64/samba/pdb/ipasam.so': /usr/lib64/samba/pdb/ipasam.so: undefined symbol: unixid_from_gid, version SAMBA_PASSDB_0.2.0 No builtin nor plugin backend for ipasam found Versions: # rpm -qa | grep freeipa | sort freeipa-client-4.8.1-1.fc31.x86_64 freeipa-client-common-4.8.1-1.fc31.noarch freeipa-common-4.8.1-1.fc31.noarch freeipa-server-4.8.1-1.fc31.x86_64 freeipa-server-common-4.8.1-1.fc31.noarch freeipa-server-dns-4.8.1-1.fc31.noarch freeipa-server-trust-ad-4.8.1-1.fc31.x86_64
Thanks for the report. This is due to commit c906153cc7af21abe508ddd30c447642327d6a5d in Samba which went into 4.11 release. I'm working on a fix.
Pull request upstream: https://github.com/freeipa/freeipa/pull/3751
Proposed as a Blocker and Freeze Exception for 31-final by Fedora user abbra using the blocker tracking app because: Samba 4.11 did remove a set of functions required by FreeIPA. This breaks upgrade of Fedora 30 to Fedora 31 if trust to Active Directory is configured in FreeIPA. A fix upstream for FreeIPA is available at https://github.com/freeipa/freeipa/pull/3751 and is currently being reviewed. It could be Freeze Exception but I also asked for a blocker due to how it affects upgrade process.
Discussed during the 2019-09-30 blocker review meeting: [0] The decision to classify this bug as a "RejectedBlocker" and an "AcceptedFreezeException" was made as it breaks only if a non-default feature not in the criteria (AD trust) is enabled, but accepted as a freeze exception to help minimize the number of affected upgrades. [0] https://meetbot.fedoraproject.org/fedora-blocker-review/2019-09-30/f31-blocker-review.2019-09-30-16.00.txt
FEDORA-2019-658592a357 has been submitted as an update to Fedora 31. https://bodhi.fedoraproject.org/updates/FEDORA-2019-658592a357
FEDORA-2019-b63884f469 has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2019-b63884f469
Fixed upstream master: https://pagure.io/freeipa/c/19d51683cad9ee091d25c56431a8b5a538e3fe10
Fixed upstream ipa-4-8: https://pagure.io/freeipa/c/3f98406bcbafc3b6e1e75ca38bec8e1c9cc8bd12
freeipa-4.8.1-2.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-658592a357
freeipa-4.8.1-2.fc31 has been pushed to the Fedora 31 stable repository. If problems still persist, please make note of it in this bug report.