Florence Blanc-Renaud

@edewata let's wait for PR #6969 to be merged first, then please add an upgrade method (you can for instance add some code around these lines: https://github.com/freeipa/freeipa/blob/fe005dd3880baff72bda2c2857f9445d3b129b87/ipaserver/install/server/upgrade.py#L1900-L1909).

@edewata PR https://github.com/freeipa/freeipa/pull/6969 has been merged, you can resume work on this PR (a rebase is needed).

Hi @edewata I opened https://issues.redhat.com/browse/RHEL-27181

With your PR, the issue is also reproducible. It happened on iteration 62. /var/log/httpd/error_log: ``` [Thu Feb 29 03:28:05.156029 2024] [proxy_ajp:error] [pid 9229:tid 9331] (70007)The timeout specified has expired: AH01030:...

@f-trivino the failure of test_commands is related to feb 29, please see [9548](https://pagure.io/freeipa/issue/9548). Re-run the test tomorrow and it should succeed.

Tested on rawhide with the test_sudo.py and test_commands.py tests (with slapi-nis-0.70.0-3.fc42.x86_64), works well. ``` # IPATEST_YAML_CONFIG=~/ipa-test-config.yaml ipa-run-tests --logging-level=DEBUG --logfile-dir=/tmp/tests test_integration/test_sudo.py ... [100%] ==================================================================== warnings summary ==================================================================== ../ipapython/version.py:20 /usr/lib/python3.13/site-packages/ipapython/version.py:20: DeprecationWarning: pkg_resources...

> I have a worry about upgrades. What if ipa-client gets upgraded before the sssd-common package. In that case, the old ssh_ipa.conf will persist in the system even after sssd...

master: * 7d54a6daaf0ef91d608d67b3c70e2d566868be05 ipa-client-install: add support for sss_ssh_knownhosts * b34525c76e9f8182950bbbdd6fa3ae62f5301064 Spec file: add support for sss_ssh_knownhosts

The test is failing in the step requesting a RA certificate. ipa-server-install is using certmonger to get the RA cert (see [ipaserver-install.log](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/c570a07c-f06c-11ee-b706-fa163e8e2127/test_integration-test_dns_locations.py-TestDNSLocations-install/master.ipa.test/var/log/ipaserver-install.log.gz)): ``` 2024-04-01T21:25:45Z DEBUG [18/31]: requesting RA certificate from...

@edewata could you have a look at this regression in the nightly builds?