freeipa

#8885 Upgrade error: Add failure missing required attribute "objectclass"
Closed: fixed by frenaud. Opened by rcritten.

Closed: fixed
Reopen Issue

Issue

Running ipa-server-upgrade, or as part of installation, an update error is displayed:

Upgrading IPA:. Estimated time: 1 minute 30 seconds
[1/11]: stopping directory server
[2/11]: saving configuration
[3/11]: disabling listeners
[4/11]: enabling DS global lock
[5/11]: disabling Schema Compat
[6/11]: starting directory server
[7/11]: updating schema
[8/11]: upgrading server
Add failure missing required attribute "objectclass"
[9/11]: stopping directory server
[10/11]: restoring configuration
[11/11]: starting directory server
Done.

I've only see this with master builds from git (currently 0ebc59c26d54454a0821d64dcad1bbe7621b623c)

ipaupgrade.log has:

2021-06-14T18:26:01Z DEBUG New entry: cn=[b'Multimaster Replication Plugin'],cn=plugins,cn=config
2021-06-14T18:26:01Z DEBUG ---------------------------------------------
2021-06-14T18:26:01Z DEBUG Initial value
2021-06-14T18:26:01Z DEBUG dn: cn=[b'Multimaster Replication Plugin'],cn=plugins,cn=config
2021-06-14T18:26:01Z DEBUG only: set nsslapd-pluginbetxn to 'on', current value []
2021-06-14T18:26:01Z DEBUG only: updated value ['on']
2021-06-14T18:26:01Z DEBUG ---------------------------------------------
2021-06-14T18:26:01Z DEBUG Final value after applying updates
2021-06-14T18:26:01Z DEBUG dn: cn=[b'Multimaster Replication Plugin'],cn=plugins,cn=config
2021-06-14T18:26:01Z DEBUG nsslapd-pluginbetxn:
2021-06-14T18:26:01Z DEBUG on

So looks like the problem is that dn element is treated as a list.

master:

  • 922357b748e8d32f3d87ba7f443a8a4094775b60 Use get_replication_plugin_name in LDAP updater

ipa-4-9:

  • 45d8118e6c94f25c0971fe2fe07d8f6eb7eb6f7c Use get_replication_plugin_name in LDAP updater

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1975139

ipa-4-8:

  • 02845bece6f9483dfc8d8d1d4b1ba046672caa91 ds: Support renaming of a replication plugin in 389-ds
  • ebeb4980360e3b13c021de9afb6c46651d88343c Use get_replication_plugin_name in LDAP updater
Metadata
None
None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.