Bug 1449238
| Summary: | ipa-server install command fails | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Nikhil Dehadrai <ndehadra> | ||||
| Component: | gssproxy | Assignee: | Robbie Harwood <rharwood> | ||||
| Status: | CLOSED ERRATA | QA Contact: | Nikhil Dehadrai <ndehadra> | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | 7.4 | CC: | ajmitchell, chunwang, dpal, eguan, fs-qe, ksiddiqu, ndehadra, nsoman, pvoborni, rcritten, rharwood, ssorce, swhiteho, tscherf, xdong, yoyang | ||||
| Target Milestone: | rc | Keywords: | Regression | ||||
| Target Release: | --- | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | gssproxy-0.7.0-4.el7 | Doc Type: | If docs needed, set a value | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2017-08-01 20:55:26 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | 1452881 | ||||||
| Bug Blocks: | |||||||
| Attachments: |
|
||||||
|
Description
Nikhil Dehadrai
2017-05-09 13:15:44 UTC
Apologies, I see that you have. You need to reboot after upgrading the kernel/installing nfs-utils before this will work. You can alternately uninstall nfs-utils. If you consider this behavior incorrect, please retarget the bug to nfs-utils. In our case, where we run tests in CI, nfs-utils got installed after kernel got updated. Moving this to nfs-utils (In reply to Xiyang Dong from comment #8) > In our case, where we run tests in CI, nfs-utils got installed after kernel > got updated. > Moving this to nfs-utils Why is this an nfs-utils problem? Hi Robbie, could you please explain why nfs-utils can't work with gssproxy after kernel update? Thanks You need to restart the machine after installing nfs-utils before the socket will be exposed for gssproxy. As for why this is, I don't know; you need to ask nfs-utils that. Does that mean that this issue is resolved, or is there something reproducible that we can investigate? I'm not sure that I fully follow the above comments, so perhaps someone can summarize where we are with this one at the moment? I can reproduce this on 7.4-beta, and it only happens the first time you run ipa-server-install immediately after installing the nfs-utils rpm. If the system is rebooted, or gssproxy is restarted manually with systemctl between the installation of nfs-utils and the running of ipa-server-install then this bug does not appear. This smells like a systemd dependancy issue, but i haven't quite figured out where yet. The nub of the issue is that at the point where gssproxy is being started by ipa-server-install using systemctl the kernel module auth_rpcgss is not already loaded, and thus the access of /proc/net/rpc/gss-use-proxy fails. if you performed the same command from the cmdline then a dependancy causes the kernel module to be loaded and everything succeeds. and as above if there has been a reboot, or any other action that would have caused knfsd and the other modules to load, then the problem does not appear. I think we addressed this start problem in gss-proxy recently, but not sure it is in 7.4 (In reply to Simo Sorce from comment #17) > I think we addressed this start problem in gss-proxy recently, but not sure > it is in 7.4 If nfs-utils is installed, then the snippet is present, and gssproxy will try to use the proc file. If nfs-utils somehow isn't set up, there isn't really anything gssproxy can do about it. (In reply to Robbie Harwood from comment #18) > (In reply to Simo Sorce from comment #17) > > I think we addressed this start problem in gss-proxy recently, but not sure > > it is in 7.4 > > If nfs-utils is installed, then the snippet is present, and gssproxy will > try to use the proc file. If nfs-utils somehow isn't set up, there isn't > really anything gssproxy can do about it. I'm thinking the restart done by bug 1440887 probably took care of this problem... The addition of 'Wants: auth-rpcgss-module' to gssproxy.service seems to fix this, as the dependencies are then satisfied, but does doing that cause any knock on effects ? gssproxy-0.7.0-7 when built for rhel74 does appear to fix this (In reply to Justin Mitchell from comment #20) > The addition of 'Wants: auth-rpcgss-module' to gssproxy.service seems to fix > this, as the dependencies are then satisfied, but does doing that cause any > knock on effects ? gssproxy can't depend on nfs-utils, and to my understanding, that would cause gssproxy to fail to start when nfs-utils isn't installed. I was mistaken gssproxy-0.7.0-7 did not fix the fault, it only appeared to due to a bug in its spec file, the %triggerun section goes and deletes /etc/gssproxy/24-nfs-server.conf even if nfs-utils is still installed, such that when gssproxy is later started it then skips the check that should have failed. The patch posted on bug 1452881 does appear to work, at least ipa-server-install no longer fails. Per steved's request, gssproxy will work around this behavior. IPA: ipa-server-4.5.0-14.el7.x86_64 GSSPROXY: gssproxy-0.7.0-4.el7.x86_64 Verified that: 1. IPA-MASTER is successfully installed on system with 4GB RAM and 8CPU. 2. No error message is observed during installation. Refer attached log. Thus on the basis of above observations, marking status of bug to "VERIFIED". Created attachment 1285310 [details]
Console Output
Console Output
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:2033 |