We need to upgrade the FreeIPA server to Fedora 31. This post serves as a report on how it went.
- The actual upgrade itself went ok, but once done FreeIPA failed to start because the upgrade command (
ipa-server-upgrade) failed to complete successfully.
sudo pip install nsswas used to replace the
python2-nsspackage that was not found during the original system upgrade, but this caused the above error.
sudo pip remove nssfollowed by
sudo dnf install python3-nssfixed the problem.
- It then failed when run manually again because the file
/etc/httpd/conf.d/nss.confstill existed. According to research, a migration from nss to ssl was made. Moving said file to
/etc/httpd/conf.d/nss.conf.bakfixed the issue.
Upgrading the FreeIPA server is always a pain, but hopefully this brief report of the experience going from Fedora 29 -> Fedora 31 helps future admins.