In openQA testing, upgrade of a FreeIPA server from F42 to F44 is failing since Fedora-Rawhide-20251218.n.0 . ipaupgrade.log shows: 2025-12-22T07:03:47Z DEBUG Updating DNS system records 2025-12-22T07:03:47Z DEBUG raw: server_find(None, version='2.257', no_members=False, servrole='IPA master') 2025-12-22T07:03:47Z DEBUG server_find(None, all=False, raw=False, version='2.257', no_members=False, pkey_only=False, servrole=('IPA master',)) 2025-12-22T07:03:47Z DEBUG raw: server_role_find(None, server_server=None, role_servrole='IPA master', status='enabled', include_master=True, version='2.257') 2025-12-22T07:03:47Z DEBUG server_role_find(None, server_server=None, role_servrole='IPA master', status='enabled', include_master=True, all=False, raw=False, version='2.257') 2025-12-22T07:03:47Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. 2025-12-22T07:03:47Z DEBUG File "/usr/lib/python3.14/site-packages/ipapython/admintool.py", line 219, in execute return_value = self.run() File "/usr/lib/python3.14/site-packages/ipaserver/install/ipa_server_upgrade.py", line 54, in run server.upgrade() ~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 2066, in upgrade upgrade_configuration() ~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 1887, in upgrade_configuration upgrade_bind(fstore) ~~~~~~~~~~~~^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 1482, in upgrade_bind add_ca_dns_records(bind) ~~~~~~~~~~~~~~~~~~^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/server/upgrade.py", line 865, in add_ca_dns_records bind.update_system_records() ~~~~~~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/bindinstance.py", line 1316, in update_system_records system_records = IPASystemRecords(self.api) File "/usr/lib/python3.14/site-packages/ipaserver/dns_data_management.py", line 97, in __init__ self.__init_data(all_servers=all_servers) ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/dns_data_management.py", line 124, in __init_data servers = self.api_instance.Command.server_find(**kwargs) File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 477, in __call__ return self.__do_call(*args, **options) ~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 544, in __do_call ret = self.run(*args, **options) File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 885, in run return self.execute(*args, **options) ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/plugins/baseldap.py", line 2158, in execute (filter, base_dn, scope) = callback( ~~~~~~~~^ self, ldap, filter, attrs_list, base_dn, scope, *args, **options) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/plugins/server.py", line 407, in pre_callback servrole_filter = self._get_enabled_servrole_filter( ldap, options['servrole']) File "/usr/lib/python3.14/site-packages/ipaserver/plugins/server.py", line 354, in _get_enabled_servrole_filter enabled_masters = _get_masters_with_enabled_servrole( servroles[0]) File "/usr/lib/python3.14/site-packages/ipaserver/plugins/server.py", line 344, in _get_masters_with_enabled_servrole role_status = self.api.Command.server_role_find( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ server_server=None, ^^^^^^^^^^^^^^^^^^^ ...<2 lines>... include_master=True, ^^^^^^^^^^^^^^^^^^^^ )['result'] ^ File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 477, in __call__ return self.__do_call(*args, **options) ~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 544, in __do_call ret = self.run(*args, **options) File "/usr/lib/python3.14/site-packages/ipalib/frontend.py", line 885, in run return self.execute(*args, **options) ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/plugins/serverrole.py", line 158, in execute role_status = self.obj.backend.server_role_search( server_server=server, role_servrole=role_name, status=status) File "/usr/lib/python3.14/site-packages/ipaserver/plugins/serverroles.py", line 132, in server_role_search role_status = found_role.status(self.api, server=server_server) File "/usr/lib/python3.14/site-packages/ipaserver/servroles.py", line 562, in status return super(ServiceBasedRole, self).status( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ api_instance, server=server, attrs_list=('ipaConfigString', 'cn')) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/servroles.py", line 222, in status self._fill_in_absent_masters(ldap2, api_instance, result)) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/servroles.py", line 175, in _fill_in_absent_masters all_masters = ldap2.get_entries( search_base, filter=search_filter, scope=SCOPE_ONELEVEL, attrs_list=attrs_list) File "/usr/lib/python3.14/site-packages/ipapython/ipaldap.py", line 1473, in get_entries entries, truncated = self.find_entries( ~~~~~~~~~~~~~~~~~^ base_dn=base_dn, scope=scope, filter=filter, attrs_list=attrs_list, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ get_effective_rights=get_effective_rights, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ **kwargs) ^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipapython/ipaldap.py", line 1617, in find_entries raise errors.EmptyResult(reason='no matching entry found') 2025-12-22T07:03:47Z DEBUG The ipa-server-upgrade command failed, exception: EmptyResult: no matching entry found
F43 to F44 upgrade works, this is specific to upgrade from F42 to F44.
Proposing as a Beta blocker per criterion https://fedoraproject.org/wiki/Fedora_44_Beta_Release_Criteria#Server_upgrade_requirements , "It must be possible to successfully complete a direct upgrade from a fully updated installation of each of the last two stable Fedora Server releases with the system configured as a FreeIPA domain controller or postgresql server as specified in the relevant criteria. The upgraded system must meet all relevant release criteria, including criteria relating to functionality of the server software."
I'm closing this as a duplicate of bz2424132 which was filed earlier and where the current work is tracked. Please reassign beta blocker to that bug (unless the automation will take care of that). *** This bug has been marked as a duplicate of bug 2424132 ***