I had a running docker container with "rocky-8-4.9.6", created one user with the
web ui and used the (maybe broken) docker image "rocky-8-pfb-4.9.8" mentioned in
my issue above. According to logs, the container logic did start with an upgrade but then
failed at "[6/9]: updating schema [error] DuplicateEntry: Type or value
exists"
Uploaded a bit more of the "/data/var/log/ipaupgrade.log" on pastebin:
https://pastebin.com/vBjLFtj6
Some strange lines I spotted, especially as hbac is nothing I bring in via the plugin.
It's a plugin coming with FreeIPA. What does this mean, is this plugin broken or just
a false error message? But it is also saying to all my plugins -> not valid:
"
2022-05-28T19:48:22Z DEBUG importing plugin module ipaserver.plugins.hbac
2022-05-28T19:48:22Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
...
2022-05-28T19:48:22Z DEBUG importing plugin module ipaserver.plugins.mailalias
2022-05-28T19:48:22Z DEBUG ipaserver.plugins.mailalias is not a valid plugin module
2022-05-28T19:48:22Z DEBUG importing plugin module ipaserver.plugins.mailenabled
2022-05-28T19:48:22Z DEBUG ipaserver.plugins.mailenabled is not a valid plugin module
...
"
Another interesting part is here, as this error message does not make any sense to me. I
checked on a clean "rocky-8-4.9.6" with ldapsearch for attributes and
couldn't find anything with has the name "mailForwardingAddress" or the OID
"1.3.6.1.4.1.29426.1.10.10".
"
ldap.TYPE_OR_VALUE_EXISTS: {'msgtype': 103, 'msgid': 17, 'result':
20, 'desc': 'Type or value exists', 'ctrls': [], 'info':
'attribute type mailForwardingAddress: Does not match the OID
"1.3.6.1.4.1.29426.1.10.10". Another attribute type is already using the name or
OID.'}
...
2022-05-28T19:48:30Z DEBUG [error] DuplicateEntry: Type or value exists
"
Any suggestions, is this maybe the "broken" image or anything else inside
FreeIPA, I just found a kind of a similar issue here:
https://pagure.io/freeipa/issue/5972