Bug 1399405

Summary: replica install failed to load replica-s4u2proxy.ldif when master is older version of IPA
Product: Red Hat Enterprise Linux 7 Reporter: Scott Poore <spoore>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED DUPLICATE QA Contact: Kaleem <ksiddiqu>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.3CC: mbabinsk, pvoborni, rcritten
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-12-09 17:11:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
ipareplica-install.log failure none

Description Scott Poore 2016-11-29 01:56:06 UTC 
Description of problem:

I'm installing an IPA Replica on RHEL7.3 when the IPA Master is running on RHEL 6.9.  Doing this, I see the following error:


  [31/42]: enabling S4U2Proxy delegation
ipa         : CRITICAL Failed to load replica-s4u2proxy.ldif: Command '/usr/bin/ldapmodify -v -f /tmp/tmpKO_zcx -H ldapi://%2fvar%2frun%2fslapd-EXAMPLE-COM.socket -x -D cn=Directory Manager -y /tmp/tmpRrluWB' returned non-zero exit status 1
  [32/42]: importing CA certificates from LDAP
  [error] DatabaseError: Operations error: 
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.

ipa.ipapython.install.cli.install_tool(Replica): ERROR    Operations error: 
ipa.ipapython.install.cli.install_tool(Replica): ERROR    The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information


Version-Release number of selected component (if applicable):

On Replica:

ipa-server-4.4.0-13.el7.x86_64

On Master:

ipa-server-3.0.0-51.el6.x86_64

How reproducible:
always.  I've seen this from automation and was easily able to reproduce manually.

Steps to Reproduce:
1.  Install ipa-server 3.0.0 on RHEL6 
2.  ipa-replica-prepare
3.  copy /usr/share/ipa/copy-schema-to-ca.py from replica to master and run
4.  ipa-replica-install --setup-ca --setup-dns ...

Actual results:
error as seen above.

Expected results:
no error and IPA installs.

Additional info:
Comment 1 Scott Poore 2016-11-29 01:56:47 UTC 
Created attachment 1225581 [details]
ipareplica-install.log failure
Comment 7 Petr Vobornik 2016-12-09 17:11:56 UTC 

*** This bug has been marked as a duplicate of bug 1400421 ***