Patrick Brideau via FreeIPA-users wrote:
> I've changed my sssd config to use `/etc/sssd/conf.d` instead of putting all 
> in `/etc/sssd/sssd.conf`.
> When upgrading this morning to the latest FreeIPA, I got an error:
> 
>> IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command 
>> ipa-server-upgrade manually.                        
>> Unexpected error - see /var/log/ipaupgrade.log for details:                  
>>                                                   
>> NoDomainError: linuxa.teluqtest.net                                          
>>                                                   
>> The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more 
>> information                                        
> 
> I think I traced the problem to the SSSDConfig python module:
> ```
> def sssd_update():
>     sssdconfig = SSSDConfig.SSSDConfig()
>     sssdconfig.import_config()
>     # upgrade domain
>     domain = sssdconfig.get_domain(str(api.env.domain))
>     [...]
> ```
> https://github.com/freeipa/freeipa/blob/563f20e2a4dd63e6abdec1da65a2c0f95a49d33e/ipaserver/install/server/upgrade.py#L1053
> 
> To fix the problem, I copied the content of `/etc/sssd/conf.d/*` to 
> `/etc/sssd/sssd.conf` and successfully run the `ipa-server-upgrade` command.
> 
> But now, I’m not sure where I should report this…
> Should I report to FreeIPA? https://pagure.io/freeipa/issues
> Or should I report this upstream to SSSDConfig?  I cannot find where that 
> would be…
> 
> But my use case might be too niche to get a fix on this…  I use puppet to 
> configure my servers, and the `sssd` module I use only supports adding 
> configs to `conf.d` directory, instead of directly in `sssd.conf`… 
> https://github.com/simp/pupmod-simp-sssd
> Maybe I should use another module that support adding config in `sssd.conf`?
> 
> What are your thoughts on this?  Thanks
> 

SSSD provides the SSSDConfig python interface so you'd want to file any
bug there.

Using snippets is a documented use-case so I don't think you're wrong
for using them.

rob

-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to