debian/changelog

+freeipa (4.8.1-2) UNRELEASED; urgency=medium
+
+  * {server,client}.postinst: Migrate checks to python3.
+  * control: Add python3-pki-base to python3-ipaserver depends.
+
+ -- Timo Aaltonen <tjaalton@debian.org>  Sun, 08 Sep 2019 23:58:09 +0300
+
 freeipa (4.8.1-1) experimental; urgency=medium
 
   * New upstream release.

debian/control.server

@@ -136,6 +136,7 @@ Depends:
  python3-kdcproxy,
  python3-ldap (>= 2.4.22),
  python3-libsss-nss-idmap,
+ python3-pki-base,
  python3-pyasn1,
  python3-sss,
  samba-common,

debian/freeipa-client.postinst

@@ -5,7 +5,7 @@ LOGFILE=/var/log/ipaclient-upgrade.log
 
 if [ "$1" = configure ]; then
     if [ -f /etc/ipa/nssdb/cert8.db ]; then
-        python2 -c 'from ipaclient.install.client import update_ipa_nssdb; update_ipa_nssdb()' \
+        python3 -c 'from ipaclient.install.client import update_ipa_nssdb; update_ipa_nssdb()' \
         > $LOGFILE 2>&1
     fi
 fi

debian/freeipa-server.postinst

@@ -94,8 +94,8 @@ if [ "$1" = configure ]; then
     fi
 
     # check if IPA is set up
-    is_configured=`python2 -c 'from ipaserver.install import installutils; print "yes" if installutils.is_ipa_configured() else "no";'`
-    if [ $is_configured = yes ]; then
+    is_configured=`python3 -c 'import sys; from ipaserver.install import installutils; sys.exit(0 if installutils.is_ipa_configured() else 1);'`
+    if [ $is_configured ]; then
         echo "Running ipa-server-upgrade..."
         ipa-server-upgrade --quiet >/dev/null
     fi