Bug 1276697

Summary: During ipa-server-install, CRITICAL Failed to load indices.ldif is shown
Product: [Fedora] Fedora Reporter: Jan Pazdziora <jpazdziora>
Component: freeipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED EOL QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 22CC: abokovoy, ipa-maint, jhrozek, jpazdziora, mkosek, pviktori, pvoborni, rcritten, ssorce
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-07-19 18:22:31 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Jan Pazdziora 2015-10-30 14:19:57 UTC
Description of problem:

When ipa-server-install is run, error is shown in the output:

Version-Release number of selected component (if applicable):

freeipa-server-4.1.4-4.fc22.x86_64

How reproducible:

Deterministic.

Steps to Reproduce:
1. Install freeipa-server.
2. Run ipa-server-install.

Actual results:

  [13/38]: enabling entryUSN plugin
  [14/38]: configuring lockout plugin
  [15/38]: creating indices
ipa         : CRITICAL Failed to load indices.ldif: Command ''/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/indices.ldif' '-H' 'ldap://ipa.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpMLF3FI'' returned non-zero exit status 53
  [16/38]: enabling referential integrity plugin
  [17/38]: configuring certmap.conf
  [18/38]: configure autobind for root

Expected results:

  [13/38]: enabling entryUSN plugin
  [14/38]: configuring lockout plugin
  [15/38]: creating indices
  [16/38]: enabling referential integrity plugin
  [17/38]: configuring certmap.conf
  [18/38]: configure autobind for root

Additional info:

In /var/log/ipaserver-install.log, there is

replace nsIndexType:
        eq,pres
modifying entry "cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"


2015-10-30T13:53:27Z DEBUG stderr=ldap_initialize( ldap://ipa.example.com:389/??base )
ldap_modify: Server is unwilling to perform (53)

2015-10-30T13:53:27Z CRITICAL Failed to load indices.ldif: Command ''/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/indices.ldif' '-H' 'ldap://ipa.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpMLF3FI'' returned non-zero exit status 53

Comment 1 Jan Pazdziora 2015-10-30 14:20:41 UTC
The ipa-server-install sadly does not fail, due to https://fedorahosted.org/freeipa/ticket/2539 (aka bug 805176 and bug ​1265900).

Comment 3 Petr Vobornik 2015-10-30 15:17:21 UTC
fixed in https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=16f47ed4520d4f89db39d1dc58be7a8efb1d8612

$ git tag --contains 16f47ed4520d4f89db39d1dc58be7a8efb1d8612
release-4-2-0
release-4-2-1
release-4-2-2

Comment 4 Jan Pazdziora 2015-10-30 15:21:33 UTC
Please consider backporting the fix to Fedora 22.

Comment 5 Petr Vobornik 2015-11-23 16:43:09 UTC
is fixed upstream also in 4.1 branch

Comment 6 Mike McCune 2016-03-28 22:43:24 UTC
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions

Comment 7 Fedora End Of Life 2016-07-19 18:22:31 UTC
Fedora 22 changed to end-of-life (EOL) status on 2016-07-19. Fedora 22 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.