Bug 1259996
| Summary: | AttributeError: 'NameSpace' object has no attribute 'ra_certprofile' while ipa-ca-install | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Abhijeet Kasurde <akasurde> | ||||||
| Component: | ipa | Assignee: | IPA Maintainers <ipa-maint> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Namita Soman <nsoman> | ||||||
| Severity: | medium | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 7.0 | CC: | akasurde, ftweedal, jcholast, ksiddiqu, mbabinsk, mkosek, pvoborni, rcritten | ||||||
| Target Milestone: | rc | Keywords: | Regression | ||||||
| Target Release: | --- | ||||||||
| Hardware: | Unspecified | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | ipa-4.2.0-9.el7 | Doc Type: | Bug Fix | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2015-11-19 12:06:27 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
The error is caused by the fact that during installation of IPA master with external cert files, the option "ra_plugin" in IPA config file (/etc/ipa/default.conf) is set to "none". Because of this, the dogtag-related backend plugins are not loaded during subsequent CA installation using 'ipa-ca-install', causing the last step of CA install to fail with AttributeError. A workaround is to set "ra_plugin = dogtag" in /etc/ipa/default.conf before running ipa-ca-install. Upstream ticket: https://fedorahosted.org/freeipa/ticket/5288 Fixed upstream master: https://fedorahosted.org/freeipa/changeset/ff7969852d0469535a6b7639cde52ca68bb271ec ipa-4-2: https://fedorahosted.org/freeipa/changeset/eef88c5a5c2435d9dadc2c9f62b7054de9a2be4c Created attachment 1073594 [details]
fix_verification_log
Verified fix in IPA version : ipa-server-4.2.0-9.el7.x86_64 Marking bug as verified. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2015-2362.html |
Created attachment 1070160 [details] installation log Description of problem: ipa-ca-install fails with Python exception as AttributeError: 'NameSpace' object has no attribute 'ra_certprofile' Version-Release number of selected component (if applicable): ipa-server-4.2.0-8.el7.x86_64 How reproducible: 100% Steps to Reproduce: 1. Create self-signed CA certificates using certutil command 2. install ipa-server-install using this CA certificate 3. ipa-ca-install -p Secret123 -w Secret123 -U Actual results: AttributeError: 'NameSpace' object has no attribute 'ra_certprofile' Expected results: ipa-ca-install should be successfully Additional info: