[Freeipa-users] Re: Fail to restart ipa server after ipa packages updates

You may be hitting was Alexander is pointing out with jss/pki. I think he was suggesting to have everything updated but have an older JDK build installed instead (eg downgrade it). I just don't know what version may work or if it's just a matter of going down just one version. I just don't have an IPA domain that ran into this problem. Perhaps you could try java-1.8.0-openjdk-1.8.0.302.b08-0.el8_4.x86_64 and see if you still run into the same issue.