Tumbleweed updates starting around a month ago won't run my ISC dhcpd configuration. I have a shared-netowrk with a subnet in it and two pools in that subnet. It's setup with a failover peer. Everything works fine with dhcp-server-4.3.5-lp151.5.3 (from leap), but now on tumbleweed 4.3.5-17.1, no go "can't clone pool group". This even fails if I comment one of the pools out. Failover requires pools. Any ideas? Below is my config for reference ... it's grown some hair with age.

Code:
authoritative;
server-identifier 192.168.242.1; #Must be numeric for Mac Clients
allow bootp;
default-lease-time 28800;
max-lease-time 172800;
ddns-update-style standard;
ddns-domainname "mrf.sonoma.ca.us.";
ddns-rev-domainname "in-addr.arpa.";
deny client-updates;
do-forward-updates on;
update-optimization off;
update-conflict-detection off;
update-static-leases on;

option domain-name "mrf.sonoma.ca.us";
option domain-name-servers 192.168.242.1,192.168.242.3;
option domain-search "mrf.sonoma.ca.us";
option routers 192.168.242.1, 192.168.242.3;
option ntp-servers 192.168.242.1,192.168.242.3;
option time-servers 192.168.242.1,192.168.242.3;
option lpr-servers 192.168.242.1;
option netbios-name-servers 192.168.242.1;

class "xiaomi" {
match if substring (hardware,1,3) = 7c:49:eb;
}

class "dericam" {
match if substring (hardware,1,3) = 14:6b:9c;
}

class "dericam2" {
match if substring (hardware,1,3) = 0c:8c:24;
}

class "microseven" {
match if substring (hardware,1,3) = e0:09:bf;
}

failover peer "failover-gates" {
     primary;
     address 192.168.242.2;
     port 519;
     peer address 192.168.242.3;
     peer port 520;
     max-response-delay 60;
     max-unacked-updates 10;
     mclt 3600;
     split 128;
     load balance max seconds 3;
}     

omapi-port 7911;
omapi-key omapi_key;

key omapi_key {
     algorithm hmac-md5;
     secret xyzzy;
}



# Shared network declaration is used to group subnets which share the same
# physical network together.   The name is specified so that the shared
# network can be referred to in log messages - it serves no other function.
shared-network GATES {
  ddns-updates on;
  subnet 192.168.240.0 netmask 255.255.252.0 {
    authoritative;
    option subnet-mask 255.255.252.0;
    option broadcast-address 192.168.243.255;
    option routers 192.168.242.1, 192.168.242.3;
    default-lease-time 28800;
    max-lease-time 172800;
    allow unknown-clients;
  }
    
  pool {
    failover peer "failover-gates";
    range 192.168.242.20 192.168.243.128;
    deny members of "xiaomi";
    deny members of "dericam";
    deny members of "dericam2";
    deny members of "microseven";
    allow unknown-clients;
   }
    
  pool { #Unclean hosts, no route outside
    #192.168.243.192/26
    failover peer "failover-gates";
    range 192.168.243.192 192.168.243.254;
    allow members of "xiaomi";
    allow members of "dericam";
    allow members of "dericam2";
    allow members of "microseven";
    allow unknown-clients;
    }
}

zone 240.168.192.in-addr.arpa {
   primary 192.168.242.1;
   secondary 192.168.242.3;
   }

zone 241.168.192.in-addr.arpa {
   primary 192.168.242.1;
   secondary 192.168.242.3;
   }

zone 242.168.192.in-addr.arpa {
   primary 192.168.242.1;
   secondary 192.168.242.3;
   }

zone 243.168.192.in-addr.arpa {
   primary 192.168.242.1;
   secondary 192.168.242.3;
   }

zone mrf.sonoma.ca.us {
  primary 192.168.242.1;
   secondary 192.168.242.3;
  }
  

#Ubiquiti mFi power switch. SSH login ubnt:ubnt
host inet-power-switch {
   option host-name "inet-power-switch";
   hardware ethernet 24:A4:3C:D1:0B:16;
   fixed-address inet-power-switch.mrf.sonoma.ca.us;
}
   
host house-fan-bridge {
   option host-name "house-fan-bridge";
   hardware ethernet E4:95:6E:41:5E:4C;
   fixed-address 192.168.242.241;
   }

host solarmon {
   option host-name "solarmon";
   hardware ethernet 00:0f:60:08:75:18;
   fixed-address 192.168.242.242;
   }

host eagle-0093ea {
   option host-name "eagle-0093ea";
   hardware ethernet d8:d5:b9:00:93:ea;
   fixed-address 192.168.242.243;
   }

host wap-hall {
   option host-name "wap-hall";
   hardware ethernet 78:8a:20:48:12:eb;
   fixed-address 192.168.242.128;
   }

host canonea8803 {
   option host-name "canonea8803";
   hardware ethernet d0:c5:d3:43:95:cc;
   fixed-address 192.168.242.9;
   }

host yeelight1 {
   option host-name "yeelight1";
   ddns-hostname "yeelight1";
   hardware ethernet 7c:49:eb:14:d8:5e;
   }

host yeelight2 {
   option host-name "yeelight2";
   ddns-hostname "yeelight2";
   hardware ethernet 7c:49:eb:14:d7:14;
   }

host rearfirecam {
   option host-name "rearfirecam";
   ddns-hostname = "rearfirecam";
   hardware ethernet 14:6b:9c:c8:f8:b6;
   }

host drivewaycam {
   option host-name "drivewaycam";
   ddns-hostname = "drivewaycam";
   hardware ethernet 0c:8c:24:d1:8e:07;
   }

host frontdoorcam {
   option host-name "frontdoorcam";
   ddns-hostname = "frontdoorcam";
   hardware ethernet e0:09:bf:00:3b:b5;
   }