Alexander Bokovoy <freeipa-users@lists.fedorahosted.org> writes:

> On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote:
>>
>> I'm trying to upgrade FreeIPA through ipa-server-upgrade from 4.4 to
>> 4.5. The command fails with an "ACIError: Insufficient access:" . I
>> find in the kdc log that it complains about " Database module does
>> not match KDC version - while initializing database for realm..."
>
> You should make sure your system is fully upgraded. Not just 'yum
> install freeipa-server' to upgrade but all related packages too.  In
> particular, MIT Kerberos has database driver version that may change
> with a version update and we have to rebuild FreeIPA driver against
> it.

We have some packaging logic coming in to prevent krb5 mismatch (in
Fedora), but it's not in RHEL right now.

Thanks,
--Robbie

Attachment: signature.asc
Description: PGP signature

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to