Bug 1327627

Summary: ipa-client-install --no-sssd: Unable to find 'admin' user with 'getent passwd admin@domainname'!
Product: Red Hat Enterprise Linux 7 Reporter: Sudhir Menon <sumenon>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED WONTFIX QA Contact: Kaleem <ksiddiqu>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.2CC: cobrown, pvoborni, rcritten
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-05-23 11:22:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
Console Output none

Description Sudhir Menon 2016-04-15 13:51:00 UTC
Created attachment 1147654 [details]
Console Output

Description of problem: Fix the console message displayed when ipa-client-install is done with --no-sssd option.

Version-Release number of selected component (if applicable):

How reproducible: Always

Steps to Reproduce:
1. Ensure IPA server is installed.
2. Now install ipa-client using the below command e.g

ipa-client-install --domain=dhcp20797.in --realm=DHCP20797.IN -p admin -w labs_pwd -U --server=host2.dhcp20797.in --no-sssd


Actual results:
IPA client is installed without any errors but it displays message "Unable to find 'admin' user with 'getent passwd admin@domainname'! because appending domain name doesn't work it works only for 'getent passwd admin'


Expected results:
Although IPA client is installed without any errors, the message displayed on the console should be fixed.

Additional info: Attached the console output displaying the message.

Comment 2 Petr Vobornik 2016-04-28 13:44:01 UTC
Triage notes, 2016-04-26:

Sumit: it is expected in the sense that only SSSD is aware of fully-qualified names. So if --no-sssd is used only the short name should be used for testing.

If SSSD is configured, shouldn't it resolve the unqualified name as well? So perhaps do the getent passwd admin always, and getent passwd admin@domainname when SSSD got configured?

pv: close as not a bug
H: shouldn't we skip the getent check when --no-sssd is used?
ab: no, we should then ask for unqualified name
sumit: everything is working fine but there is an error message in install  log
dev mtg: mark as easyfix
dev mtg: clone to Future releases, so anybody can change it to unqualified if --no-ssdd is used

Comment 3 Petr Vobornik 2016-04-28 13:44:46 UTC
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/5859

Comment 5 Petr Vobornik 2018-05-23 11:22:56 UTC
Behavior of--no-sssd option won't be changed. Upstream already deprecated them in IPA 4.7+.