Bug 1279932

Summary: ipa-client-install --request-cert needs workaround in anaconda chroot
Product: Red Hat Enterprise Linux 7 Reporter: David Kupka <dkupka>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED ERRATA QA Contact: Namita Soman <nsoman>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.2CC: jcholast, ksiddiqu, mkosek, pvoborni, rcritten
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.4.0-0.el7.1.alpha1 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-04 05:40:00 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1271551    
Bug Blocks:    
Attachments:
Description Flags
console output with verification steps none

Description David Kupka 2015-11-10 14:19:14 UTC 
Description of problem:
To run ipa-client-install --request-cert successfully in anaconda chroot workaround described in bug 1134497 must be used.

To remove the need for workaround:
a) anaconda installer must not bind-mount the DBus system bus socket into chroot (bug 1271551)
b) ipa needs logic to detect this situation and behave according.
c) DBus daemon needs to move socket outside the bind-mounted file system.

As described in bug 1271551, comment 7  a) is not easy to do in anaconda.
Approach b) is nothing else than hiding the workaround from user inside ipa-installer.
Comment 2 Jan Cholasta 2015-11-11 07:36:01 UTC 
I am strongly opposed to the idea of working around the *deliberately* broken environment of Anaconda chroot, in ipa-client-install, or anywhere else.
Comment 3 Petr Vobornik 2016-02-23 17:12:33 UTC 
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/5694
Comment 4 Petr Vobornik 2016-02-23 17:13:14 UTC 
ipa-client-install man page will be updated.
Comment 5 Martin Kosek 2016-06-10 08:36:28 UTC 
Man page fixed upstream:

master:
da5885b72a284811bda7ddd36b8716d71ac66bd9 man: Decribe ipa-client-install workaround for broken D-Bus enviroment.

ipa-4-3:
149744675315df54280955a829142f21893aa0de man: Decribe ipa-client-install workaround for broken D-Bus enviroment.
Comment 7 Kaleem 2016-09-16 17:17:03 UTC 
Verified.

IPA client version:
===================
[root@dhcp207-173 ~]# rpm -q ipa-client
ipa-client-4.4.0-11.el7.x86_64
[root@dhcp207-173 ~]# 

Please find the attached file which contains console output for verification steps.
Comment 8 Kaleem 2016-09-16 17:17:33 UTC 
Created attachment 1201728 [details]
console output with verification steps
Comment 10 errata-xmlrpc 2016-11-04 05:40:00 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2404.html