Bug 1264160

Looking at the backtrace, I can see that it is pki-base which needs to gain this dependency.

$ rpm -qf /usr/lib/python2.7/site-packages/pki/__init__.py
pki-base-10.2.7-0.2.fc22.noarch

However, at least in Fedora 22 pki-base has requires on python-requests:

$ rpm -q --requires pki-base|grep python
/usr/bin/python
python(abi) = 2.7
python-ldap
python-lxml
python-requests >= 1.1.0-3

Moving to Dogtag to investigate.

This bug as well as the associated ticket reference the 'pki-base' RPM which is constructed as one of the RPMS of the 'pki-core' component.

The pki-core-10.2.6-7.fc22 spec file contains the following:

    BuildRequires:    python-requests

and

    %package -n       pki-base
    Summary:          Certificate System - PKI Framework
    Group:            System Environment/Base

    BuildArch:        noarch

    Provides:         pki-common = %{version}-%{release}
    Provides:         pki-util = %{version}-%{release}

    Obsoletes:        pki-common < %{version}-%{release}
    Obsoletes:        pki-util < %{version}-%{release}

    Conflicts:        freeipa-server < 3.0.0
    Requires:         apache-commons-cli
    Requires:         apache-commons-codec
    Requires:         apache-commons-io
    Requires:         apache-commons-lang
    Requires:         apache-commons-logging
    Requires:         jakarta-commons-httpclient
    Requires:         java-headless >= 1:1.7.0
    Requires:         javassist
    Requires:         jpackage-utils >= 0:1.7.5-10
    Requires:         jss >= 4.2.6-35
    Requires:         ldapjdk
    Requires:         python-ldap
    Requires:         python-lxml
    Requires:         python-requests >= 1.1.0-3

Additionally, checking Koji, I see that the latest available package for 'python-requests' for Fedora 22 is:
* [http://koji.fedoraproject.org/koji/buildinfo?buildID=678959 python-requests-2.7.0-6.fc22]

Finally, although this bug references a source build for Fedora 22 (pki-base-10.2.7-0.2.fc22.noarch) rather than a Koji build for Fedora 22 (e. g. - pki-base-10.2.6-7.fc22), the associated BuildRequires and Requires have been part of the pki-core.spec file for a very long time:

    # git blame pki-core.spec | grep python-requests
    f630689f specs/pki-core.spec     (Abhishek Koneru   2013-08-14 11:20:58 -0400  109) BuildRequires:    python-requests
    a3b4489e specs/pki-core.spec     (Endi Sukma Dewata 2013-03-11 14:05:30 -0400  289) Requires:         python-requests >= 1.1.0-3
    f630689f specs/pki-core.spec     (Abhishek Koneru   2013-08-14 11:20:58 -0400 1183) - Packages added: python-requests, python-ldap, libselinux-python,
    a3b4489e specs/pki-core.spec     (Endi Sukma Dewata 2013-03-11 14:05:30 -0400 1265) - Added minimum python-requests version.
    c87a6502 specs/pki-core.spec     (Endi Sukma Dewata 2013-02-21 19:47:35 -0500 1271) - Added dependency on python-requests.

Peter,

Please see comment #2 above -- 'pki-base' has had both BuildRequires and Requires of 'python-requests' for a very long time, and 'python-requests' still appears to be available on Fedora 22 and Fedora 23.

Any other ideas?

-- Matt

No idea but it definitely wasn't installed, I don't have direct access to this device to look at logs at the moment because I'm traveling.

after discussions with edewata on IRC on 9/28/2015, it is believed that this runtime requirement will be needed by both the server and the client, therefore the runtime requirement should be placed in pki-base

(In reply to Matthew Harmsen from comment #5)
> after discussions with edewata on IRC on 9/28/2015, it is believed that this
> runtime requirement will be needed by both the server and the client,
> therefore the runtime requirement should be placed in pki-base

Ignore this entry -- placed comment in wrong bug!

I was finally able to create a Fedora 22 VM using the minimal IPA template in the ABCDE lab (vm-024.abc.idm.lab.eng.brq.redhat.com), and attempted to replicate the steps described in the initial description:

    * launched console to obtain vm name and IP address
      vm-024.abc.idm.lab.eng.brq.redhat.com
      10.34.78.24
    * logged in
    * sudo passwd root
    * su -
    * dnf update
    * sync; sync; sync; reboot
    * logged in
    * su -
    * rpm -q python-requests
      package python-requests is not installed
    * rpm -q freeipa-server
      package freeipa-server is not installed
    * dnf install freeipa-server
      NOTE:  This installed python-requests.noarch 2.7.0-6.fc22
    * ipa-server-install --help
      Correctly displayed Usage: ipa-server-install [options]

Please verify that this bug still exists.

I was testing on F-23 and rawhide.

I don't currently have access to the device but I'll attempt to re-test but I probably won't have time until late this week or early next.

(In reply to Peter Robinson from comment #8)
> I was testing on F-23 and rawhide.
> 

I also tested this on F-23 per https://fedorahosted.org/pki/ticket/1613 PKI TRAC Ticket #1613.

> I don't currently have access to the device but I'll attempt to re-test but
> I probably won't have time until late this week or early next.

That is fine -- thanks!

Peter,

Is it possible you were encountering the problem described in:
* https://fedorahosted.org/pki/ticket/1690 pki.client may use PyOpenSSL or ssl?

Sounds like problems associated with python-requests.

Thanks,
-- Matt

P. S. - added cheimes to cc list of this bug.

> Is it possible you were encountering the problem described in:
> * https://fedorahosted.org/pki/ticket/1690 pki.client may use PyOpenSSL or
> ssl?
> 
> Sounds like problems associated with python-requests.

No, not at all, for starters this wasn't an upgrade but a clean install and the problem was purely a missing dependency as stated in the bug title.

Doing a "dnf install freeipa-server" on a minimal install seems to pull this in now on F-24 at least so it looks like it might be fixed