Bug 1445178

Summary: setup-ds-admin.pl -u with nsslapd-localhost changed
Product: Red Hat Enterprise Linux 7 Reporter: Jaroslav Reznik <jreznik>
Component: 389-ds-baseAssignee: mreynolds
Status: CLOSED ERRATA QA Contact: Viktor Ashirov <vashirov>
Severity: urgent Docs Contact: Marc Muehlfeld <mmuehlfe>
Priority: urgent    
Version: 7.4CC: batkisso, mreynolds, msauton, nhosoi, nkinder, pbokoc, rmeggins, spichugi, vashirov
Target Milestone: rcKeywords: ZStream
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: 389-ds-base-1.3.5.10-21.el7_3 Doc Type: Bug Fix
Doc Text:
Previously, the FullMachineName parameter was being ignored and overwritten by the server's nsslapd-localhost setting during derver upgrades using a silent install INF file. This caused upgrades to fail on servers which were behind load balancer and required a different host name to be used during the upgrade process. With this update, if the INF file contains a FullMachineName parameter, this parameter is correctly used and not overriden with the nsslapd-localhost setting. As a result, upgrades using silent install INF files work on load-balanced servers.
Story Points: ---
Clone Of: 1442880 Environment:
Last Closed: 2017-05-25 15:53:06 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1442880    
Bug Blocks:    

Description Jaroslav Reznik 2017-04-25 08:09:09 UTC
This bug has been copied from bug #1442880 and has been proposed
to be backported to 7.3 z-stream (EUS).

Comment 5 Simon Pichugin 2017-05-11 11:57:35 UTC
Build tested:
389-ds-base-1.3.5.10-21.el7_3.x86_64

Taking steps from https://bugzilla.redhat.com/show_bug.cgi?id=1442880#c10

Verification steps:
1. Install the instance and admin server with setup-ds-admin.pl
2. Create setup.inf file with a bogus FQDN in FullMachineName
[root@inst ~]# cat /tmp/setup.inf
[General]
StrictHostCheck= False
FullMachineName= bogus.example.com
SuiteSpotUserID= ldap
SuiteSpotGroup= ldap
AdminDomain= CORP_LDAP
ConfigDirectoryAdminID= admin
ConfigDirectoryAdminPwd= Secret123
ConfigDirectoryLdapURL= ldap://inst.test.redhat.com:389/o=NetscapeRoot
UserDirectoryAdminID= cn=Directory Manager
UserDirectoryAdminPwd= Secret123
UserDirectoryLdapURL= ldap://inst.test.redhat.com:389/o=NetscapeRoot

[slapd]
SlapdConfigForMC= No
SecurityOn= No
UseExistingMC= Yes
UseExistingUG= No
ServerPort= 389
ServerIdentifier= corpldap
Suffix= dc=example,dc=com
RootDN= cn=Directory Manager
AddSampleEntries= No
InstallLdifFile= none
AddOrgEntries= No
DisableSchemaChecking= No
RootDNPwd= Secret123

[admin]
SysUser= ldap
Port= 9830
ServerAdminID= admin
ServerAdminPwd= Secret123

3. Run a silent upgrade from INF file. It should fail because FullMachineName is always being used:
[root@inst ~]# setup-ds-admin.pl -s -u -f /tmp/setup.inf
Updating instance (slapd-inst)...
Could not open a connection to bogus.example.com:389
Could not open a connection to the server at bogus.example.com port 389 as 'uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot'.
Please make sure the server is up and running before using online mode,
or use offline mode.

Could not reconfigure the admin server.
Exiting . . .
Log file is '/tmp/setupR1_LsQ.log'


Results:
FullMachineName is always being used. Marking as verified.

Comment 7 errata-xmlrpc 2017-05-25 15:53:06 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:1313