Alexander Bokovoy freeipa-users@lists.fedorahosted.org writes:
On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote:
I'm trying to upgrade FreeIPA through ipa-server-upgrade from 4.4 to 4.5. The command fails with an "ACIError: Insufficient access:" . I find in the kdc log that it complains about " Database module does not match KDC version - while initializing database for realm..."
You should make sure your system is fully upgraded. Not just 'yum install freeipa-server' to upgrade but all related packages too. In particular, MIT Kerberos has database driver version that may change with a version update and we have to rebuild FreeIPA driver against it.
We have some packaging logic coming in to prevent krb5 mismatch (in Fedora), but it's not in RHEL right now.
Thanks, --Robbie