Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 1886205

Summary: FreeIPA server upgrade from F32 to F33 doesn't work any more because F32's FreeIPA is newer
Product: [Fedora] Fedora Reporter: Adam Williamson <awilliam>
Component: freeipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 33CC: abokovoy, fdc, ftrivino, ipa-maint, jcholast, jhrozek, mhjacks, pvoborni, rcritten, robatino, ssorce, twoerner
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: openqa Accepted0Day
Fixed In Version: freeipa-4.8.10-5.fc33 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-10-09 23:56:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1766777    

Description Adam Williamson 2020-10-07 22:15:16 UTC
Upgrading a FreeIPA server from Fedora 32 to Fedora 33 doesn't work any more, because the IPA upgrade script fails, because Fedora 32's FreeIPA is newer than Fedora 33's:

2020-10-07T21:04:40Z ERROR ("Unable to execute IPA upgrade: data are in newer version than IPA (data version '4.8.10-5.fc32', IPA version '4.8.9-2.fc33')", 1)

We do have the 4.8.10-5.fc33 update sitting in updates-testing - https://bodhi.fedoraproject.org/updates/FEDORA-2020-e9e815177e - but we haven't pushed it stable yet because it's meant to fix systemd-resolved integration but it doesn't seem to. We may need to push it stable anyway just to fix this, but leave the resolved bug open pending a proper solution.

Proposing as a Final blocker as a clear violation of Beta criterion "It must be possible to successfully complete a direct upgrade from a fully updated installation of each of the last two stable Fedora Server releases with the system configured as a FreeIPA domain controller or postgresql server as specified in the relevant criteria".

Comment 1 Fedora Update System 2020-10-09 11:29:16 UTC
FEDORA-2020-e9e815177e has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2020-e9e815177e

Comment 2 Adam Williamson 2020-10-09 23:07:31 UTC
+3 votes in the ticket to accept this as a 0-day blocker (meaning the update only has to go out before release date, not be in the compose necessarily). Accepting.

Comment 3 Fedora Update System 2020-10-09 23:56:17 UTC
FEDORA-2020-e9e815177e has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.