Your message dated Fri, 27 Nov 2020 14:50:04 +0000
with message-id <[email protected]>
and subject line Bug#971363: fixed in freeipa 4.8.10-2
has caused the Debian Bug report #971363,
regarding freeipa-client fails to install on upgrade
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
971363: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971363
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: freeipa-client
Version: 4.8.10-1
Severity: important

dpkg configure stage fails without meaningful log:

# dpkg --configure -a
Setting up freeipa-client (4.8.10-1) ...
dpkg: error processing package freeipa-client (--configure):
 installed freeipa-client package post-installation script subprocess returned 
error exit status 1
Errors were encountered while processing:
 freeipa-client


Digging through the postinst script indicates that the output is being 
redirected to /var/log/ipaclient-upgrade.log:

# cat /var/log/ipaclient-upgrade.log 
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python3/dist-packages/ipaclient/install/client.py", line 2474, 
in update_ipa_nssdb
    sys_db = certdb.NSSDatabase(paths.NSS_DB_DIR)
  File "/usr/lib/python3/dist-packages/ipapython/certdb.py", line 267, in 
__init__
    raise ValueError(
ValueError: NSS is built without support of the legacy database(DBM)


In addition to addressing the immediate bug, I also suggest using tee to ensure
that the error message goes to stdout in addition to the log file so that it's
easier for users to understand what is going on.

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.8.0-1-amd64 (SMP w/12 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages freeipa-client depends on:
ii  bind9-dnsutils [dnsutils]    1:9.16.6-3
ii  bind9-utils                  1:9.16.6-3
ii  certmonger                   0.79.11-1
ii  curl                         7.72.0-1
ii  dnsutils                     1:9.16.6-3
ii  freeipa-common               4.8.10-1
ii  krb5-user                    1.17-10
ii  libc6                        2.31-3
ii  libcom-err2                  1.45.6-1
ii  libini-config5               0.6.1-2
ii  libk5crypto3                 1.17-10
ii  libkrb5-3                    1.17-10
ii  libldap-2.4-2                2.4.53+dfsg-1
ii  libnss-sss                   2.3.1-2
ii  libnss3-tools                2:3.56-1
ii  libpam-sss                   2.3.1-2
ii  libpopt0                     1.18-1
ii  libsasl2-modules-gssapi-mit  2.1.27+dfsg-2
ii  libsss-sudo                  2.3.1-2
ii  libxmlrpc-core-c3            1.33.14-9
ii  oddjob-mkhomedir             0.34.6-1
ii  python3                      3.8.2-3
ii  python3-dnspython            2.0.0-1
ii  python3-gssapi               1.6.1-1+b1
ii  python3-ipaclient            4.8.10-1
ii  python3-ldap                 3.2.0-4+b1
ii  python3-sss                  2.3.1-2
ii  sssd                         2.3.1-2

Versions of packages freeipa-client recommends:
pn  chrony  <none>

Versions of packages freeipa-client suggests:
pn  libpam-krb5  <none>

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: freeipa
Source-Version: 4.8.10-2
Done: Timo Aaltonen <[email protected]>

We believe that the bug you reported is fixed in the latest version of
freeipa, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Timo Aaltonen <[email protected]> (supplier of updated freeipa package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 Nov 2020 20:48:56 +0200
Source: freeipa
Architecture: source
Version: 4.8.10-2
Distribution: unstable
Urgency: medium
Maintainer: Debian FreeIPA Team <[email protected]>
Changed-By: Timo Aaltonen <[email protected]>
Closes: 971363
Changes:
 freeipa (4.8.10-2) unstable; urgency=medium
 .
   * client: Drop obsolete nssdb migration, which is now causing an
     error. (Closes: #971363)
   * Move ipa-epn service to -client-epn package.
   * control: Rebuild against new krb5.
Checksums-Sha1:
 b6bb7abc4a0bc6622578beb2b4a83da65497176f 3883 freeipa_4.8.10-2.dsc
 bf4a95f5736394bb7a5ee58a24ab69d79f0fd488 287672 freeipa_4.8.10-2.debian.tar.xz
 be7ad8268a6da4fd736b0978746c44757fd1875b 9236 freeipa_4.8.10-2_source.buildinfo
Checksums-Sha256:
 184d36877312253f4ea8297c117f29952e220dd4ce40ed55a5270cee3997703f 3883 
freeipa_4.8.10-2.dsc
 74152ff300281cc4b28beb310d786f915674d56f9625577382e4cf0653626827 287672 
freeipa_4.8.10-2.debian.tar.xz
 d63fddf29db0e74c037b4b7dfc53b25a73226ed5dafe87e5cfb8c0157dfe85b6 9236 
freeipa_4.8.10-2_source.buildinfo
Files:
 340602d0ceec6f631b92ef97a9c4c3de 3883 net optional freeipa_4.8.10-2.dsc
 ff190b9be1cb3974f59d35651ca71a99 287672 net optional 
freeipa_4.8.10-2.debian.tar.xz
 6b2fe0e7ce12c8cba64d6023000b019c 9236 net optional 
freeipa_4.8.10-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=MfSV
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to