Your message dated Fri, 27 Nov 2020 14:50:04 +0000 with message-id <[email protected]> and subject line Bug#971363: fixed in freeipa 4.8.10-2 has caused the Debian Bug report #971363, regarding freeipa-client fails to install on upgrade to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 971363: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971363 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: freeipa-client Version: 4.8.10-1 Severity: important dpkg configure stage fails without meaningful log: # dpkg --configure -a Setting up freeipa-client (4.8.10-1) ... dpkg: error processing package freeipa-client (--configure): installed freeipa-client package post-installation script subprocess returned error exit status 1 Errors were encountered while processing: freeipa-client Digging through the postinst script indicates that the output is being redirected to /var/log/ipaclient-upgrade.log: # cat /var/log/ipaclient-upgrade.log Traceback (most recent call last): File "<string>", line 1, in <module> File "/usr/lib/python3/dist-packages/ipaclient/install/client.py", line 2474, in update_ipa_nssdb sys_db = certdb.NSSDatabase(paths.NSS_DB_DIR) File "/usr/lib/python3/dist-packages/ipapython/certdb.py", line 267, in __init__ raise ValueError( ValueError: NSS is built without support of the legacy database(DBM) In addition to addressing the immediate bug, I also suggest using tee to ensure that the error message goes to stdout in addition to the log file so that it's easier for users to understand what is going on. -- System Information: Debian Release: bullseye/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.8.0-1-amd64 (SMP w/12 CPU threads) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages freeipa-client depends on: ii bind9-dnsutils [dnsutils] 1:9.16.6-3 ii bind9-utils 1:9.16.6-3 ii certmonger 0.79.11-1 ii curl 7.72.0-1 ii dnsutils 1:9.16.6-3 ii freeipa-common 4.8.10-1 ii krb5-user 1.17-10 ii libc6 2.31-3 ii libcom-err2 1.45.6-1 ii libini-config5 0.6.1-2 ii libk5crypto3 1.17-10 ii libkrb5-3 1.17-10 ii libldap-2.4-2 2.4.53+dfsg-1 ii libnss-sss 2.3.1-2 ii libnss3-tools 2:3.56-1 ii libpam-sss 2.3.1-2 ii libpopt0 1.18-1 ii libsasl2-modules-gssapi-mit 2.1.27+dfsg-2 ii libsss-sudo 2.3.1-2 ii libxmlrpc-core-c3 1.33.14-9 ii oddjob-mkhomedir 0.34.6-1 ii python3 3.8.2-3 ii python3-dnspython 2.0.0-1 ii python3-gssapi 1.6.1-1+b1 ii python3-ipaclient 4.8.10-1 ii python3-ldap 3.2.0-4+b1 ii python3-sss 2.3.1-2 ii sssd 2.3.1-2 Versions of packages freeipa-client recommends: pn chrony <none> Versions of packages freeipa-client suggests: pn libpam-krb5 <none> -- no debconf information
--- End Message ---
--- Begin Message ---Source: freeipa Source-Version: 4.8.10-2 Done: Timo Aaltonen <[email protected]> We believe that the bug you reported is fixed in the latest version of freeipa, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Timo Aaltonen <[email protected]> (supplier of updated freeipa package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 23 Nov 2020 20:48:56 +0200 Source: freeipa Architecture: source Version: 4.8.10-2 Distribution: unstable Urgency: medium Maintainer: Debian FreeIPA Team <[email protected]> Changed-By: Timo Aaltonen <[email protected]> Closes: 971363 Changes: freeipa (4.8.10-2) unstable; urgency=medium . * client: Drop obsolete nssdb migration, which is now causing an error. (Closes: #971363) * Move ipa-epn service to -client-epn package. * control: Rebuild against new krb5. Checksums-Sha1: b6bb7abc4a0bc6622578beb2b4a83da65497176f 3883 freeipa_4.8.10-2.dsc bf4a95f5736394bb7a5ee58a24ab69d79f0fd488 287672 freeipa_4.8.10-2.debian.tar.xz be7ad8268a6da4fd736b0978746c44757fd1875b 9236 freeipa_4.8.10-2_source.buildinfo Checksums-Sha256: 184d36877312253f4ea8297c117f29952e220dd4ce40ed55a5270cee3997703f 3883 freeipa_4.8.10-2.dsc 74152ff300281cc4b28beb310d786f915674d56f9625577382e4cf0653626827 287672 freeipa_4.8.10-2.debian.tar.xz d63fddf29db0e74c037b4b7dfc53b25a73226ed5dafe87e5cfb8c0157dfe85b6 9236 freeipa_4.8.10-2_source.buildinfo Files: 340602d0ceec6f631b92ef97a9c4c3de 3883 net optional freeipa_4.8.10-2.dsc ff190b9be1cb3974f59d35651ca71a99 287672 net optional freeipa_4.8.10-2.debian.tar.xz 6b2fe0e7ce12c8cba64d6023000b019c 9236 net optional freeipa_4.8.10-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEdS3ifE3rFwGbS2Yjy3AxZaiJhNwFAl+9IGwACgkQy3AxZaiJ hNyN2Q//WPrgRM8lpfHxOMApDeHxveS/S2ODJq9hRCvNbptpa+W/bZtRPmB0JRh+ uFTjO0kxPg6atvSRJ/mxtR0wzyosoFOQUdHtH9QpCdKemMIPK2H5eueKv2tjKygs zAbG6KvbiIE97QYDXPjrHfeX0V+CETV00mTWObdyBMwBVJghfDNosnLdw6k+xyYY gbHPTR+NgClVGrZeM1kJ3itze+UN4jBNl9ViBP6FVimRSp95EKV7CFrEb0UxjQCR ZLMT6CXaCfxgd4in1V5stJP3uuFeJ3uY0MNtf2gdQfFLhVdPMUwnEk1Fwyv93q9V Bklaf7DsAnPzhqJwEubv1+j5RzilJPXTZEzqFUY2Ka4XwPIygIMdYuI5XCIuGF2u D6V/9llJq+SGww0ZxA6OwRyprwf9CAzhMylLXRx+8kYgiAh8hzGV+Bph+yqp4fBX r42Fg5h7NOq/wkGA44HrCVteymhdtQfXgZWCOfCxQD390A4lzA6HIAKDQ1bzLNNF UoaJ1GiDbxwtwDOq/4JTL1kIR1dWW/2wBV+Pegf17Vci++e//ILopPnrrqrG4hTQ 47DhfsDzveqrch219lAGOlAKG9HT+h6IySxbbPxH1xKIHDhISwt1FiqYSV/LZlns NvpNkN0FEhwljwBB2l8/JPaIMwhcbfkxwuThg6ES+wSM9VTStNw= =MfSV -----END PGP SIGNATURE-----
--- End Message ---

