On Аўт, 24 чэр 2025, Tomasz Torcz wrote:
On Tue, Jun 24, 2025 at 10:40:55AM +0100, Aoife Moloney via devel-announce wrote:
== Upgrade/compatibility impact ==
* Directory server instances already using lmdb as database are not
impacted. (typically those created with Fedora 40 and after)
* freeipa is not impacted because it already uses lmdb since Fedora 40
Some FreeIPA installations (like mine) were created long before F40
and upgraded over the years.
Yes, you need to follow major RHEL IdM upgrade procedure that all RHEL
users follow for ~15 years now.
RHEL IdM documentation for RHEL9 to RHEL10 migration:
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html-single/migrating_to_identity_management_on_rhel_10/index#migrating_idm_from_rhel_9_to_rhel_10
I have a similar deployment where an original IPA server was installed
in 2013.
== User Experience ==
Directory server instances created since Fedora 40 and using the
default lmdb database are not impacted (that is typically the case for
freeipa users).
Arguable.
We have not detected any problems with lmdb use in past several years in
upstream CI and in Fedora OpenQA test runs for FreeIPA environments.
But users still using BerkeleyDB (either because they have not yet
migrated or because they explicitly choose to use BerkeleyDB) are
required to migrate to lmdb.
How to check what DB 389 is using, before system-upgrade?
# dsconf EXAMPLE-TEST backend config get | grep nsslapd-backend-implement
nsslapd-backend-implement: bdb
For new deployment you'd get 'mdb'.
https://www.port389.org/docs/389ds/howto/howto-use-lmdb.html describes
somewhat tersely what you can do in-place.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
