Upgrading the FreeIPA server to Fedora 31

We need to upgrade the FreeIPA server to Fedora 31. This post serves as a report on how it went.

  • The actual upgrade itself went ok, but once done FreeIPA failed to start because the upgrade command (ipa-server-upgrade) failed to complete successfully.
  • sudo pip install nss was used to replace the python2-nss package that was not found during the original system upgrade, but this caused the above error. sudo pip remove nss followed by sudo dnf install python3-nss fixed the problem.
  • It then failed when run manually again because the file /etc/httpd/conf.d/nss.conf still existed. According to research, a migration from nss to ssl was made. Moving said file to /etc/httpd/conf.d/nss.conf.bak fixed the issue.

Upgrading the FreeIPA server is always a pain, but hopefully this brief report of the experience going from Fedora 29 -> Fedora 31 helps future admins.

This topic was automatically closed after 24 hours. New replies are no longer allowed.