I've changed my sssd config to use `/etc/sssd/conf.d` instead of putting all in 
`/etc/sssd/sssd.conf`.
When upgrading this morning to the latest FreeIPA, I got an error:

> IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command 
> ipa-server-upgrade manually.                        
> Unexpected error - see /var/log/ipaupgrade.log for details:                   
>                                                  
> NoDomainError: linuxa.teluqtest.net                                           
>                                                  
> The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more 
> information                                        

I think I traced the problem to the SSSDConfig python module:
```
def sssd_update():
    sssdconfig = SSSDConfig.SSSDConfig()
    sssdconfig.import_config()
    # upgrade domain
    domain = sssdconfig.get_domain(str(api.env.domain))
    [...]
```
https://github.com/freeipa/freeipa/blob/563f20e2a4dd63e6abdec1da65a2c0f95a49d33e/ipaserver/install/server/upgrade.py#L1053

To fix the problem, I copied the content of `/etc/sssd/conf.d/*` to 
`/etc/sssd/sssd.conf` and successfully run the `ipa-server-upgrade` command.

But now, I’m not sure where I should report this…
Should I report to FreeIPA? https://pagure.io/freeipa/issues
Or should I report this upstream to SSSDConfig?  I cannot find where that would 
be…

But my use case might be too niche to get a fix on this…  I use puppet to 
configure my servers, and the `sssd` module I use only supports adding configs 
to `conf.d` directory, instead of directly in `sssd.conf`… 
https://github.com/simp/pupmod-simp-sssd
Maybe I should use another module that support adding config in `sssd.conf`?

What are your thoughts on this?  Thanks
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to