At present, FreeIPA upgrades from Fedora 41 to F42 or F43 are broken because the FreeIPA in Fedora 41 - freeipa-4.12.5-2.1.fc41 - is higher versioned than the ones in F42 and F43 - freeipa-4.12.5-2.fc42 and freeipa-4.12.5-2.fc43 . FreeIPA's upgrade script has a check that the version being upgraded to is newer than the version being upgraded from, and bails out if it's not.

To fix this we need to push https://bodhi.fedoraproject.org/updates/FEDORA-2025-2c4522dd71 stable for F42 and https://bodhi.fedoraproject.org/updates/FEDORA-2025-5357dfc7ec stable for F43. Those updates are currently stuck in -testing. Note if F42 goes out before F43, upgrade from F41->F42 will be fixed, but upgrade from F42->F43 would get broken, so I was planning to carefully push them stable in correct sequence, F43 then F42.

I'm proposing a 0-day blocker for this for F43, because we're in freeze, and right now this violates "It must be possible to successfully complete a direct upgrade from a fully updated installation of each of the last two stable Fedora Server releases with the system configured as a FreeIPA domain controller or postgresql server as specified in the relevant criteria." - https://fedoraproject.org/wiki/Fedora_43_Beta_Release_Criteria#Server_upgrade_requirements . It doesn't need to be a regular blocker that blocks the compose because it's an upgrade bug.