freeipa-4.9.3版本执行ipa-server-install时存在报错，希望可以合入社区修复的补丁

【标题描述】freeipa-4.9.3版本执行ipa-server-install时存在报错，希望可以合入社区修复的补丁

【环境信息】
硬件信息：Kunpeng服务器
软件信息：openEuler-22.03-LTS-SP1

【问题复现步骤】
```
### 编译freeipa相关
echo '
[extras]
name=extras
baseurl=https://repo.oepkgs.net/openEuler/rpm/openEuler-22.03-LTS-SP1/extras/$basearch
enabled=1
gpgcheck=0' >> /etc/yum.repos.d/openEuler.repo

echo "sslverify=0" >> /etc/yum.conf && yum install -y wget git rpm-build
git config --global http.sslVerify "false"
rm -rf /root/rpmbuild/SOURCES && mkdir -p /root/rpmbuild/SOURCES
cd /root/rpmbuild/SOURCES && git init && git remote add -f origin https://gitee.com/src-openeuler/freeipa.git
git checkout openEuler-20.03-LTS-SP3
sed -i 's/ONLY_CLIENT 1/ONLY_CLIENT 0/' freeipa.spec
sed -i 's/disable-server/enable-server/' freeipa.spec
sed -i '1311d' freeipa.spec
yum builddep -y freeipa.spec && rpmbuild -ba freeipa.spec
cd /root/rpmbuild/RPMS && yum localinstall -y **/*ipa*.rpm

### 编译389-ds-base相关
wget https://vault.centos.org/8-stream/AppStream/Source/SPackages/389-ds-base-1.4.3.16-13.module_el8.4.0+804+98b1df0d.src.rpm --no-check-certificate
rpm -i 389-ds-base-1.4.3.16-13.module_el8.4.0+804+98b1df0d.src.rpm && rm -rf 389-ds-base-1.4.3.16-13.module_el8.4.0+804+98b1df0d.src.rpm
cd /root/rpmbuild/SPECS && yum builddep -y 389-ds-base.spec
sed -i '313d' 389-ds-base.spec
sed -i '333d' 389-ds-base.spec
cd /root/rpmbuild/SOURCES
tar -jxvf 389-ds-base-1.4.3.16.tar.bz2
cd 389-ds-base-1.4.3.16/src/lib389/
sed -i 's/import build_manpages/import build_manpages, get_build_py_cmd, get_install_cmd/' setup.py
sed -i 's/build_manpages.build_manpages/build_manpages/' setup.py
sed -i 's/build_manpages.get_build_py_cmd/get_build_py_cmd/' setup.py
cd /root/rpmbuild/SOURCES && rm -rf 389-ds-base-1.4.3.16.tar.bz2
tar -jcvf 389-ds-base-1.4.3.16.tar.bz2 389-ds-base-1.4.3.16/
cd /root/rpmbuild/SPECS
export CFLAGS="-fPIC"
export CXXFLAGS="-fPIC"
rpmbuild -ba 389-ds-base.spec
cd /root/rpmbuild/RPMS && yum localinstall -y **/*389*.rpm

### 执行ipa-server-install
yum install -y cyrus-sasl* jboss-sasl
host_ip=$(hostname -I|awk '{print $1}')
cat > /etc/hostname << EOF
ipakdc.cdh-dev.com
EOF

cat > /etc/hosts << EOF
$host_ip ipakdc.cdh-dev.com ipakdc
EOF
hostnamectl set-hostname $(grep $host_ip /etc/hosts|awk '{print $2}')
ln -s /etc/logrotate.d/krb5kdc /etc/sysconfig/krb5kdc

systemctl start sssd-kcm.service
mkdir -p /etc/authselect/ && touch /etc/authselect/user-nsswitch.conf
mkdir -p /etc/ssh/sshd_config.d/ && touch /etc/ssh/sshd_config.d/04-ipa.conf
echo "/usr/lib64/dirsrv/" >> /etc/ld.so.conf

ipa-server-install --allow-zone-overlap -a Cdyanfa_123456 -p Cdyanfa_123456 --setup-dns --hostname=ipakdc.cdh-dev.com -r CDH-DEV.COM -n cdh-dev.com --no-forwarders --auto-reverse -N
# 参照终端提示输入yes并回车
```

出现概率：100%必现

【预期结果】
ipa-server-install命令执行成功，相关服务正常启动无报错。

【实际结果】
![ipa-server-install执行报错](https://foruda.gitee.com/images/1688607651284522128/0b74f85b_13098309.png "360截图1728060898100106.png")
![查看服务状态报错内容](https://foruda.gitee.com/images/1688607705782244660/d8332251_13098309.png "360截图17321125528855.png")

【附件信息】
该问题开源社区已有代码修复，希望可以在src-openEuler上合入问题修改补丁，社区修复信息如下：
1. [Parse getStatus as JSON not XML](https://github.com/freeipa/freeipa/commit/7fb95cc638b1c9b7f2e9a67dba859ef8126f2c5f)
2. [Parse cert chain as JSON not XML](https://github.com/freeipa/freeipa/commit/40f76a53f78267b4d2b890defa3e4f7d27fdfb7a)

src-openEuler/freeipa
关闭

内容风险标识

评论 (1)

src-openEuler/freeipa关闭 .gitee-modal { width: 500px !important; }

内容风险标识