according to this DEBUG ipaserver.plugins.bureau is not a valid plugin module in the ipaupgrade.log, I need to modify my plugin :-( Regards, Frederic. Frédéric AYRAULT Administrateur Systèmes et Réseaux Laboratoire d'Informatique de l'Ecole polytechnique <http://www.lix.polytechnique.fr> fred(a)lix.polytechnique.fr Le 29/04/2020 à 15:33, Frederic AYRAULT a écrit :

Bonjour, In fact my problem came from /usr/lib/python2.7/site-packages/ipaserver/plugins/cert.py When I put the one from version 4.6.5, this solves the problem In 4.6.5 starting line 1654 code was :         if not ra_options:             services = options.get('service', ())             hosts = options.get('host', ())             if len(services) == 1 and not hosts:                 principal = kerberos.Principal(options['service'][0])                 if principal.is_service:                     ra_options['subject'] = principal.hostname             elif len(hosts) == 1 and not services:                 ra_options['subject'] = options['host'][0] and it was changed in 4.6.6 (line 1656) to :         if not ra_options:             services = options.get('service', ())             hosts = options.get('host', ())             users = options.get('user', ())             if len(services) == 1 and not hosts and not users:                 principal = kerberos.Principal(services[0])                 if principal.is_service:                     ra_options['subject'] = principal.hostname             elif len(hosts) == 1 and not services and not users:                 ra_options['subject'] = hosts[0]             elif len(users) == 1 and not services and not hosts:                 ra_options['subject'] = users[0] The file is the same in version 4.6.6, 4.6.7 and 4.6.8 Regards, Frederic. Le 29/04/2020 à 15:33, Frederic AYRAULT via FreeIPA-users a écrit :