Bug 1163849

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/4724

Expected result is:

Value is accepted, we support IDNA2003 in DNS plugin.

Fixed upstream
ipa-4-0:
https://fedorahosted.org/freeipa/changeset/ca6958c348edac53c40423679340967749015dd4
ipa-4-1:
https://fedorahosted.org/freeipa/changeset/53cf615ad87c6a019eca31a924abd035c375c556
master:
https://fedorahosted.org/freeipa/changeset/d2ffd176176e20860998d29ede4e9bd65f398bf2

Following error message thrown but while configuring named component.

"ConversionError: invalid 'admin_email': domain name 'Têko.redhat.com' should be normalized to: tãako.redhat.com "

It should throw this error message before installation proceeds.

[root@dhcp207-214 ~]# ipa-server-install --setup-dns --forwarder=10.16.36.29  -r TESTRELM.TEST -p xxxxxxx -P xxxxxxx -a xxxxxxx --zonemgr=Têko -U

The log file for this installation can be found in /var/log/ipaserver-install.log
==============================================================================
This program will set up the IPA Server.

This includes:
  * Configure a stand-alone CA (dogtag) for certificate management
  * Configure the Network Time Daemon (ntpd)
  * Create and configure an instance of Directory Server
  * Create and configure a Kerberos Key Distribution Center (KDC)
  * Configure Apache (httpd)
  * Configure DNS (bind)
...
....
Restarting Directory server to apply updates
  [1/2]: stopping directory server
  [2/2]: starting directory server
Done.
Restarting the directory server
Restarting the KDC
Restarting the certificate server
Configuring DNS (named)
  [1/12]: generating rndc key file
  [2/12]: adding DNS container
  [3/12]: setting up our zone
  [error] ConversionError: invalid 'admin_email': domain name 'Têko.redhat.com' should be normalized to: tãako.redhat.com
Unexpected error - see /var/log/ipaserver-install.log for details:
ConversionError: invalid 'admin_email': domain name 'Têko.redhat.com' should be normalized to: tãako.redhat.com
[root@dhcp207-214 ~]#

[root@dhcp207-214 ~]# rpm -q ipa-server
ipa-server-4.1.0-10.el7.x86_64
[root@dhcp207-214 ~]#

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/4771

Fixed upstream
master:
https://fedorahosted.org/freeipa/changeset/ca25c92ea89661755d7204ac703e8c419c8929fa
ipa-4-1:
https://fedorahosted.org/freeipa/changeset/07e29d250550f238e5706b348d69632fdbb67bda

Still seeing the crash on strerr stream with return code 2 . Expected is return code 1 with no crash on streer stream also.

[root@dhcp207-1 install-server-cli]# rpm -q ipa-server
ipa-server-4.1.0-12.el7.x86_64
[root@dhcp207-1 install-server-cli]#

[root@dhcp207-1 install-server-cli]# ipa-server-install --setup-dns --forwarder=10.65.201.89  -r TESTRELM.TEST -p xxxxxxxx -P xxxxxxxx -a xxxxxxxx --zonemgr=Têko -U
Usage: ipa-server-install [options]

ipa-server-install: error: invalid zonemgr: domain name 'Têko.redhat.com' should be normalized to: tãako.redhat.com
[root@dhcp207-1 install-server-cli]# echo $?
2
[root@dhcp207-1 install-server-cli]# ipa-server-install --setup-dns --forwarder=10.65.201.89  -r TESTRELM.TEST -p xxxxxxxx -P xxxxxxxx -a xxxxxxxx --zonemgr=Têko -U > /tmp/ipaserverinstall_invalidzonemgr.out 2>&1
[root@dhcp207-1 install-server-cli]# cat /tmp/ipaserverinstall_invalidzonemgr.out Usage: ipa-server-install [options]

Traceback (most recent call last):
  File "/usr/sbin/ipa-server-install", line 1343, in <module>
    safe_options, options = parse_options()
  File "/usr/sbin/ipa-server-install", line 288, in parse_options
    options, args = parser.parse_args()
  File "/usr/lib64/python2.7/optparse.py", line 1399, in parse_args
    stop = self._process_args(largs, rargs, values)
  File "/usr/lib64/python2.7/optparse.py", line 1439, in _process_args
    self._process_long_opt(rargs, values)
  File "/usr/lib64/python2.7/optparse.py", line 1514, in _process_long_opt
    option.process(opt, value, values, self)
  File "/usr/lib64/python2.7/optparse.py", line 788, in process
    self.action, self.dest, opt, value, values, parser)
  File "/usr/lib64/python2.7/optparse.py", line 808, in take_action
    self.callback(self, opt, value, parser, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/bindinstance.py", line 414, in zonemgr_callback
    parser.error("invalid zonemgr: " + unicode(e))
  File "/usr/lib64/python2.7/optparse.py", line 1583, in error
    self.exit(2, "%s: error: %s\n" % (self.get_prog_name(), msg))
  File "/usr/lib64/python2.7/optparse.py", line 1572, in exit
    sys.stderr.write(msg)
UnicodeEncodeError: 'ascii' codec can't encode characters in position 58-59: ordinal not in range(128)
[root@dhcp207-1 install-server-cli]#

Why is required to have return code 1? I'm not aware that I changed the return code. Return code 2 is parser option error, and IMO it is the right return code, because installation is terminated during parsing options.

(In reply to mbasti from comment #11)
> Why is required to have return code 1? I'm not aware that I changed the
> return code. Return code 2 is parser option error, and IMO it is the right
> return code, because installation is terminated during parsing options.

My bad, just picked from the previous test case (incorrect hostname) where installation proceeded beyond parsing options.

Moving back to ON_QA. The exception found in Comment 10 is now tracked in

https://fedorahosted.org/freeipa/ticket/4805

and should be fixed in FreeIPA 4.2.

This is not a regression, IDN is new in RHEL-7.1.

Verified.

IPA Version:
============
[root@dhcp207-214 ~]# rpm -q ipa-server
ipa-server-4.1.0-15.el7.x86_64
[root@dhcp207-214 ~]# 

Proper error message displayed now

[root@dhcp207-214 ~]# ipa-server-install --setup-dns --forwarder=10.11.5.19  -r TESTRELM.TEST -p xxxxxxxx -P xxxxxxxx -a xxxxxxxx --zonemgr=Têko -U
Usage: ipa-server-install [options]

ipa-server-install: error: invalid zonemgr: domain name 'Têko.redhat.com' should be normalized to: tãako.redhat.com
[root@dhcp207-214 ~]# 

Observation of Comment 10 is covered in https://fedorahosted.org/freeipa/ticket/4805

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-0442.html