После обновление не стартует сервис ipa:
systemd[1]: Starting Identity, Policy, Audit...
ipactl[1249]: Upgrade required: please run ipa-server-upgrade command
ipactl[1249]: Aborting ipactl
systemd[1]: ipa.service: Main process exited, code=exited, status=1/FAILURE
systemd[1]: Failed to start Identity, Policy, Audit.
systemd[1]: ipa.service: Unit entered failed state.
systemd[1]: ipa.service: Failed with result 'exit-code'.

Команда ipa-server-upgrade завершается ошибкой:
2017-05-26T12:44:44Z DEBUG   File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171, in execute
    return_value = self.run()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py", line 48, in run
    server.upgrade()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1791, in upgrade
    data_upgrade.create_instance()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/upgradeinstance.py", line 122, in create_instance
    show_service_name=False)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 448, in start_creation
    run_step(full_msg, method)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 438, in run_step
    method()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/upgradeinstance.py", line 209, in __update_schema
    dm_password='', ldapi=True) or self.modified
  File "/usr/lib/python2.7/site-packages/ipaserver/install/schemaupdate.py", line 128, in update_schema
    dn, new_schema = ldap.schema.subentry.urlfetch(filename)
  File "/usr/lib64/python2.7/site-packages/ldap/schema/subentry.py", line 493, in urlfetch
    parsed_sub_schema = ldap.schema.SubSchema(subschemasubentry_entry)
  File "/usr/lib64/python2.7/site-packages/ldap/schema/subentry.py", line 100, in __init__
    se_instance = se_class(attr_value)
  File "/usr/lib64/python2.7/site-packages/ldap/schema/models.py", line 59, in __init__
    self._set_attrs(l,d)
  File "/usr/lib64/python2.7/site-packages/ldap/schema/models.py", line 297, in _set_attrs
    assert self.syntax_len is None or type(self.syntax_len)==type(0)

2017-05-26T12:44:44Z DEBUG The ipa-server-upgrade command failed, exception: AssertionError: 
2017-05-26T12:44:44Z ERROR Unexpected error - see /var/log/ipaupgrade.log for details:

Версия до:
# rpm -qa |grep ipa
python-module-freeipa-4.3.2-alt8.M80P.1
make-initrd-multipath-0.8.14-alt1
freeipa-server-common-4.3.2-alt8.M80P.1
libipa_hbac-1.15.2-alt1.M80P.1
freeipa-client-4.3.2-alt8.M80P.1
freeipa-server-4.3.2-alt8.M80P.1
freeipa-client-common-4.3.2-alt8.M80P.1
python-module-ipa_hbac-1.15.2-alt1.M80P.1
libmultipath-0.6.1-alt1.M80P.1
freeipa-admintools-4.3.2-alt8.M80P.1
freeipa-common-4.3.2-alt8.M80P.1
multipath-tools-0.6.1-alt1.M80P.1
sssd-ipa-1.15.2-alt1.M80P.1
python-module-ipaclient-4.3.2-alt8.M80P.1
python-module-ipaserver-4.3.2-alt8.M80P.1
python-module-ipaddress-1.0.6-alt1.git20140914.1
freeipa-server-dns-4.3.2-alt8.M80P.1
freeipa-server-trust-ad-4.3.2-alt8.M80P.1

Версия после:
# rpm -qa |grep ipa
python-module-ipa_hbac-1.15.2-alt1.S1.x86_64
freeipa-server-trust-ad-4.3.3-alt3.x86_64
freeipa-server-4.3.3-alt3.x86_64
freeipa-server-dns-4.3.3-alt3.noarch
freeipa-client-4.3.3-alt3.x86_64
sssd-ipa-1.15.2-alt1.S1.x86_64
multipath-tools-0.6.4-alt1.x86_64
libmultipath-0.6.4-alt1.x86_64
make-initrd-multipath-2.0.4-alt3.x86_64
freeipa-common-4.3.3-alt3.noarch
python-module-ipaddress-1.0.18-alt1.noarch
python-module-ipaclient-4.3.3-alt3.noarch
libipa_hbac-1.15.2-alt1.S1.x86_64
python-module-freeipa-4.3.3-alt3.noarch
freeipa-server-common-4.3.3-alt3.noarch
freeipa-client-common-4.3.3-alt3.noarch
python-module-ipaserver-4.3.3-alt3.noarch
freeipa-admintools-4.3.3-alt3.noarch