Bug 1320139

Summary: Joining to AD fails using realm with atomic cli
Product: Red Hat Enterprise Linux 7 Reporter: Niranjan Mallapadi Raghavender <mniranja>
Component: sssd-containerAssignee: Jan Pazdziora <jpazdziora>
Status: CLOSED CURRENTRELEASE QA Contact: Namita Soman <nsoman>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 7.2CC: jpazdziora, ndehadra
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: sssd-docker-7.2-8 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-04-01 08:47:38 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 1200143    

Description Niranjan Mallapadi Raghavender 2016-03-22 11:58:03 UTC 
Description of problem:

Joining to AD from atomic host using realm cli used with atomic cli fails. 

-bash-4.2# atomic install rhel7/sssd realm join WINPKI1.TESTPKI.TEST
Using default tag: latest
c539e4225a16: Download complete
4203bef5fc46: Download complete
Status: Downloaded newer image for registry.access.stage.redhat.com/rhel7/sssd:latest

docker run --rm=true --privileged --net=host -v /:/host -e NAME=sssd -e IMAGE=rhel7/sssd -e HOST=/host rhel7/sssd /bin/install.sh realm join WINPKI1.TESTPKI.TEST
Initializing configuration context from host ...
Password for Administrator: Secret123

Copying new configuration to host ...
cp: cannot stat 'etc/yp.conf': No such file or directory


-bash-4.2# cat /etc/sssd/realm-join-password
Secret123


Version-Release number of selected component (if applicable):
bash-4.2# atomic images
 REPOSITORY                          TAG                 IMAGE ID            CREATED             VIRTUAL SIZE
*<none>                              <none>              f934d4ed6bea        2016-03-22 07:44    445.8 MB    
 registry.access.stage.redhat.com/rhel7/sssd latest              c539e4225a16        2016-03-10 03:15    347.19 MB   
 registry.hub.docker.com/centos      centos7             bb3d629a7cbc        2016-03-04 12:40    196.62 MB   
-bash-4.2# atomic version registry.access.stage.redhat.com/rhel7/sssd
c539e4225a16afc132b952a54b4b1a9cabc1b5bc1bbedfd497d60a3cae7b256f rhel7/sssd-7.2-5 registry.access.stage.redhat.com/rhel7/sssd:latest


How reproducible:


Steps to Reproduce:
1. Setup Atomic Host 7.2
2. Use insecure registry access.stage.redhat.com
3. Setup Windows AD
4. Verify AD is resolvable.
5. Join to AD using atomic cli
atomic install rhel7/sssd realm join WINPKI1.TESTPKI.TEST


Actual results:
Fails with error

Copying new configuration to host ...
cp: cannot stat 'etc/yp.conf': No such file or directory


Expected results:

Should be able to join to AD Domain
Additional info:
Comment 3 Jan Pazdziora 2016-03-22 17:43:05 UTC 
Verified.

I consider it a blocker.

Patch is available.
Comment 13 Jan Pazdziora 2016-04-01 08:47:38 UTC 
The issue was fixed in sssd-docker-7.2-8 which was released via errata https://rhn.redhat.com/errata/RHEA-2016-0570.html