Public bug reported: upgrading FreeIPA from xenial to yakkity or directly to zesty breaks in several spots.
/etc/pki/pki.version has an invalid version (10.2.6+git20160317) in xenial changing this to 10.2.6 gets past this error. default port for nss in apache starting in yakkety is 8443. Conflicts with pki-tomcat if maintainer version of config file is installed. /etc/systemd/system/pki-tomcatd.target.wants/pki-tomcatd@pki- tomcat.service and /etc/systemd/system/apache2.service.d/ipa.conf reference files in /usr/libexec which doesn't exist. The files are installed at /usr/lib. Linking /usr/libexec to /usr/lib works around this. GssapiDelegCcacheUnique is not available in the version of mod-auth-gssapi available on yakkity. It is available in zesty. in yakkety the jaxrs jar changed names. ln -sf /usr/share/java/javax.ws.rs-api.jar /usr/share/java/jaxrs-api.jar yakkety was missing the dependency libscannotation-java ipa-server-upgrade crashes if freeipa-server-trust-ad isn't installed File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 49, in <module> from ipaserver.install import adtrustinstance ImportError: cannot import name adtrustinstance after fixing these, upgrading from xenial directly to the zesty version seems to work. Upgrding to yakkity may work as well but I haven't tested it since sorting out the libexec bug. ** Affects: freeipa (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1703051 Title: upgrade from xenial multiple crashes Status in freeipa package in Ubuntu: New Bug description: upgrading FreeIPA from xenial to yakkity or directly to zesty breaks in several spots. /etc/pki/pki.version has an invalid version (10.2.6+git20160317) in xenial changing this to 10.2.6 gets past this error. default port for nss in apache starting in yakkety is 8443. Conflicts with pki-tomcat if maintainer version of config file is installed. /etc/systemd/system/pki-tomcatd.target.wants/pki-tomcatd@pki- tomcat.service and /etc/systemd/system/apache2.service.d/ipa.conf reference files in /usr/libexec which doesn't exist. The files are installed at /usr/lib. Linking /usr/libexec to /usr/lib works around this. GssapiDelegCcacheUnique is not available in the version of mod-auth-gssapi available on yakkity. It is available in zesty. in yakkety the jaxrs jar changed names. ln -sf /usr/share/java/javax.ws.rs-api.jar /usr/share/java/jaxrs-api.jar yakkety was missing the dependency libscannotation-java ipa-server-upgrade crashes if freeipa-server-trust-ad isn't installed File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 49, in <module> from ipaserver.install import adtrustinstance ImportError: cannot import name adtrustinstance after fixing these, upgrading from xenial directly to the zesty version seems to work. Upgrding to yakkity may work as well but I haven't tested it since sorting out the libexec bug. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1703051/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~freeipa Post to : freeipa@lists.launchpad.net Unsubscribe : https://launchpad.net/~freeipa More help : https://help.launchpad.net/ListHelp