Hi all! We have 6 IPA Servers here connected to each other. We want to upgrade all from RHEL 7 with IPA 3.3.3 to RHEL 7.1with IPA 4.1. I have done it one of the 6 servers and got a problem. After upgrade if I want to login to Web UI I get: "IPA-Error 903: InternalError" after typing the credentials... I have activated debug output of IPA and see this in /var/log/httpd/error_log: [Thu Apr 02 14:39:38.848474 2015] [:error] [pid 18020] ipa: ERROR: non-public: KeyError: 'idnsforwardzone' [Thu Apr 02 14:39:38.848536 2015] [:error] [pid 18020] Traceback (most recent call last): [Thu Apr 02 14:39:38.848600 2015] [:error] [pid 18020] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 348, in wsgi_execute [Thu Apr 02 14:39:38.848607 2015] [:error] [pid 18020] result = self.Command[name](*args, **options) [Thu Apr 02 14:39:38.848612 2015] [:error] [pid 18020] File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 439, in __call__ [Thu Apr 02 14:39:38.848671 2015] [:error] [pid 18020] ret = self.run(*args, **options) [Thu Apr 02 14:39:38.848701 2015] [:error] [pid 18020] File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 754, in run [Thu Apr 02 14:39:38.848707 2015] [:error] [pid 18020] return self.execute(*args, **options) [Thu Apr 02 14:39:38.848776 2015] [:error] [pid 18020] File "/usr/lib/python2.7/site-packages/ipalib/plugins/internal.py", line 123, in execute [Thu Apr 02 14:39:38.848783 2015] [:error] [pid 18020] (o.name, json_serialize(o)) for o in self.api.Object() [Thu Apr 02 14:39:38.848789 2015] [:error] [pid 18020] File "/usr/lib/python2.7/site-packages/ipalib/plugins/internal.py", line 123, in <genexpr> [Thu Apr 02 14:39:38.848794 2015] [:error] [pid 18020] (o.name, json_serialize(o)) for o in self.api.Object() [Thu Apr 02 14:39:38.848799 2015] [:error] [pid 18020] File "/usr/lib/python2.7/site-packages/ipalib/util.py", line 60, in json_serialize [Thu Apr 02 14:39:38.848804 2015] [:error] [pid 18020] return json_serialize(obj.__json__()) [Thu Apr 02 14:39:38.848809 2015] [:error] [pid 18020] File "/usr/lib/python2.7/site-packages/ipalib/plugins/baseldap.py", line 710, in __json__ [Thu Apr 02 14:39:38.848814 2015] [:error] [pid 18020] attrs = self.api.Backend.ldap2.schema.attribute_types(objectclasses) [Thu Apr 02 14:39:38.848820 2015] [:error] [pid 18020] File "/usr/lib64/python2.7/site-packages/ldap/schema/subentry.py", line 377, in attribute_types [Thu Apr 02 14:39:38.848825 2015] [:error] [pid 18020] object_class = self.sed[ObjectClass][object_class_oid] [Thu Apr 02 14:39:38.848830 2015] [:error] [pid 18020] KeyError: 'idnsforwardzone' I have found this bug report: <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1180325">https://bugzilla.redhat.com/show_bug.cgi?id=1180325</a> It should be fixed in the last version?! I have read there I should start: <tt>setup-ds.pl -d --update</tt> But Im afraid that it kills the date on the IPA Servers with version 3.3.3... does it? What can I do? how can I fix it? Greetz Christoph Kaminski