Bug 1060349
| Summary: | IPA: Unable to add host when ipv6 address already exits | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Jenny Severance <jgalipea> |
| Component: | ipa | Assignee: | Martin Kosek <mkosek> |
| Status: | CLOSED ERRATA | QA Contact: | Namita Soman <nsoman> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.0 | CC: | dpal, mnavrati, pviktori, rcritten, rmainz, tbabej |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-4.0.3-1.el7 | Doc Type: | Known Issue |
| Doc Text: |
The "ipa host-add" command does not verify the existence of AAAA records. As a consequence, "ipa host-add" fails if no A record is available for the host even if an AAAA record exists. To work around this problem, run "ipa host-add" with the "--force" option.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2015-03-05 10:10:24 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1168850 | ||
|
Description
Jenny Severance
2014-01-31 21:44:53 UTC
Well, I guess from one perspective the error is very clear: there is no A record, just an AAAA record. So I guess the question is, should we extend this test to look for both A and AAAA recoreds? Is that what you're proposing? (In reply to Rob Crittenden from comment #1) > Well, I guess from one perspective the error is very clear: there is no A > record, just an AAAA record. So I guess the question is, should we extend > this test to look for both A and AAAA records? Is that what you're > proposing? If I read it right the command fails if the AAAA for the same host is created manually in advance. IMO the logic would be a) To check both A and AAAA records when the host is added without specific address. In this case the first attempt to add the host would see that there is already an entry and if the entry with the same name it should proceed. If the entry is with a different name it should fail as now. I think we just want to change the check in host-add command to check both A and AAAA records, as Rob said (by doing DNS resolve query, not searching for records in IPA DNS). Currently, host-add does not respect IPv6-only networks and fails with the described error as it only checks IPv4 address. When host has already IPv6 address defined, admin would always need to add hosts with --force flag to workaround it. I will file an upstream ticket. Upstream ticket: https://fedorahosted.org/freeipa/ticket/4164 Fixed upstream master: https://fedorahosted.org/freeipa/changeset/ca001814abe533f19498d4207b5233eff17549a5 https://fedorahosted.org/freeipa/changeset/4b5a4882497ce7c3ecdf8f898fc695b2309df1b5 ipa-4-1: https://fedorahosted.org/freeipa/changeset/ca001814abe533f19498d4207b5233eff17549a5 https://fedorahosted.org/freeipa/changeset/4b5a4882497ce7c3ecdf8f898fc695b2309df1b5 ipa-4-0: https://fedorahosted.org/freeipa/changeset/85b2c786bf53eb2882ab0db2b2cc23ec273b4020 https://fedorahosted.org/freeipa/changeset/2fa1555722ed875a32d3480ea08c5ad420a015a6 Verified automated test passed using ipa-server-4.1.0-15.el7.x86_64 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ipa-host-cli-089: Delete host without deleting DNS Record :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ 00:31:47 ] :: IPv6 address is 2620:52:0:1007:221:5eff:fe86:834 :: [ 00:31:47 ] :: Reverse zone: 7.0.0.1.0.0.0.0.2.5.0.0.0.2.6.2.ip6.arpa. :: [ BEGIN ] :: Deleting host without deleting DNS entries :: actually running 'deleteHost mytestIPv6host.testrelm.test' ------------------------------------------- Deleted host "mytestipv6host.testrelm.test" ------------------------------------------- :: [ 00:31:49 ] :: Host mytestIPv6host.testrelm.test deleted successfully. :: [ PASS ] :: Deleting host without deleting DNS entries (Expected 0, got 0) :: [ BEGIN ] :: Checking for forward DNS entry :: actually running 'ipa dnsrecord-find testrelm.test mytestIPv6host > /tmp/tmp.lX7g8QbUBW/forward_dns_3.out' :: [ PASS ] :: Checking for forward DNS entry (Expected 0, got 0) :: [ PASS ] :: File '/tmp/tmp.lX7g8QbUBW/forward_dns_3.out' should contain 'AAAA record: 2620:52:0:1007:ffff:5eff:fe86:834' :: [ 00:31:50 ] :: Final digit. :: [ BEGIN ] :: Checking for reverse DNS entry :: actually running 'ipa dnsrecord-find 7.0.0.1.0.0.0.0.2.5.0.0.0.2.6.2.ip6.arpa. 4.3.8.0.6.8.e.f.f.f.e.5.f.f.f.f' Record name: 4.3.8.0.6.8.e.f.f.f.e.5.f.f.f.f PTR record: mytestipv6host.testrelm.test. ---------------------------- Number of entries returned 1 ---------------------------- :: [ PASS ] :: Checking for reverse DNS entry (Expected 0, got 0) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ipa-host-cli-090: Add host without force option - DNS Record Exists bz1060349 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ 00:31:52 ] :: IPv6 address is 2620:52:0:1007:221:5eff:fe86:834 :: [ 00:31:53 ] :: Reverse zone: 7.0.0.1.0.0.0.0.2.5.0.0.0.2.6.2.ip6.arpa. :: [ 00:31:53 ] :: EXECUTING: ipa host-add --ip-address=2620:52:0:1007:ffff:5eff:fe86:834 mytestIPv6host.testrelm.test :: [ BEGIN ] :: Add host DNS entries exist :: actually running 'ipa host-add mytestIPv6host.testrelm.test' ----------------------------------------- Added host "mytestipv6host.testrelm.test" ----------------------------------------- Host name: mytestipv6host.testrelm.test Principal name: host/mytestipv6host.testrelm.test Password: False Keytab: False Managed by: mytestipv6host.testrelm.test :: [ PASS ] :: Add host DNS entries exist (Expected 0, got 0) :: [ BEGIN ] :: Verifying host was added when DNS records exist. :: actually running 'findHost mytestIPv6host.testrelm.test' -------------- 1 host matched -------------- Host name: mytestipv6host.testrelm.test Principal name: host/mytestipv6host.testrelm.test Password: False Keytab: False Managed by: mytestipv6host.testrelm.test ---------------------------- Number of entries returned 1 ---------------------------- -------------- 1 host matched -------------- Host name: mytestipv6host.testrelm.test Principal name: host/mytestipv6host.testrelm.test Password: False Keytab: False Managed by: mytestipv6host.testrelm.test ---------------------------- Number of entries returned 1 ---------------------------- :: [ 00:31:57 ] :: Host name is as expected. -------------- 1 host matched -------------- Host name: mytestipv6host.testrelm.test Principal name: host/mytestipv6host.testrelm.test Password: False Keytab: False Managed by: mytestipv6host.testrelm.test ---------------------------- Number of entries returned 1 ---------------------------- :: [ 00:31:57 ] :: Principal name is as expected. :: [ PASS ] :: Verifying host was added when DNS records exist. (Expected 0, got 0) :: [ BEGIN ] :: Checking for forward DNS entry :: actually running 'ipa dnsrecord-find testrelm.test mytestIPv6host > /tmp/tmp.lX7g8QbUBW/forward_dns_4.out' :: [ PASS ] :: Checking for forward DNS entry (Expected 0, got 0) :: [ PASS ] :: File '/tmp/tmp.lX7g8QbUBW/forward_dns_4.out' should contain 'AAAA record: 2620:52:0:1007:ffff:5eff:fe86:834' :: [ 00:31:59 ] :: Final digit. :: [ BEGIN ] :: Checking for reverse DNS entry :: actually running 'ipa dnsrecord-find 7.0.0.1.0.0.0.0.2.5.0.0.0.2.6.2.ip6.arpa. 4.3.8.0.6.8.e.f.f.f.e.5.f.f.f.f' Record name: 4.3.8.0.6.8.e.f.f.f.e.5.f.f.f.f PTR record: mytestipv6host.testrelm.test. ---------------------------- Number of entries returned 1 ---------------------------- :: [ PASS ] :: Checking for reverse DNS entry (Expected 0, got 0) :: [ BEGIN ] :: Deleting host without deleting DNS entries :: actually running 'deleteHost mytestIPv6host.testrelm.test' ------------------------------------------- Deleted host "mytestipv6host.testrelm.test" ------------------------------------------- :: [ 00:32:01 ] :: Host mytestIPv6host.testrelm.test deleted successfully. :: [ PASS ] :: Deleting host without deleting DNS entries (Expected 0, got 0) :: [ BEGIN ] :: Checking for forward DNS entry :: actually running 'ipa dnsrecord-find testrelm.test mytestIPv6host > /tmp/tmp.lX7g8QbUBW/forward_dns_41.out' :: [ PASS ] :: Checking for forward DNS entry (Expected 0, got 0) :: [ PASS ] :: File '/tmp/tmp.lX7g8QbUBW/forward_dns_41.out' should contain 'AAAA record: 2620:52:0:1007:ffff:5eff:fe86:834' :: [ BEGIN ] :: Checking nslookup output :: actually running 'nslookup 2620:52:0:1007:ffff:5eff:fe86:834 > /tmp/tmp.lX7g8QbUBW/nslookup_2_output.out' :: [ PASS ] :: Checking nslookup output (Expected 0, got 0) :: [ 00:32:13 ] :: nslookup_msg=name = mytestipv6host.testrelm.test :: [ BEGIN ] :: Running 'cat /tmp/tmp.lX7g8QbUBW/nslookup_2_output.out' Server: 127.0.0.1 Address: 127.0.0.1#53 4.3.8.0.6.8.e.f.f.f.e.5.f.f.f.f.7.0.0.1.0.0.0.0.2.5.0.0.0.2.6.2.ip6.arpa name = mytestipv6host.testrelm.test. :: [ PASS ] :: Command 'cat /tmp/tmp.lX7g8QbUBW/nslookup_2_output.out' (Expected 0, got 0) 4.3.8.0.6.8.e.f.f.f.e.5.f.f.f.f.7.0.0.1.0.0.0.0.2.5.0.0.0.2.6.2.ip6.arpa name = mytestipv6host.testrelm.test. :: [ PASS ] :: nslookup shows IPAddress exist Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0442.html |