Bug 1519206
Summary: | dbus.service failed to reload after IPA server upgrade to latest package. | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Nikhil Dehadrai <ndehadra> | ||||||
Component: | dbus | Assignee: | David King <dking> | ||||||
Status: | CLOSED WONTFIX | QA Contact: | Desktop QE <desktop-qa-list> | ||||||
Severity: | unspecified | Docs Contact: | |||||||
Priority: | unspecified | ||||||||
Version: | 7.5 | CC: | ayoung, cheimes, jikortus, pvoborni, rcritten, systemd-maint-list, tscherf, xdong | ||||||
Target Milestone: | rc | Keywords: | Regression | ||||||
Target Release: | --- | ||||||||
Hardware: | Unspecified | ||||||||
OS: | Unspecified | ||||||||
Whiteboard: | |||||||||
Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
Doc Text: | Story Points: | --- | |||||||
Clone Of: | Environment: | ||||||||
Last Closed: | 2018-02-27 15:58:50 UTC | Type: | Bug | ||||||
Regression: | --- | Mount Type: | --- | ||||||
Documentation: | --- | CRM: | |||||||
Verified Versions: | Category: | --- | |||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||
Embargoed: | |||||||||
Bug Depends On: | |||||||||
Bug Blocks: | 1477564 | ||||||||
Attachments: |
|
Description
Nikhil Dehadrai
2017-11-30 11:44:34 UTC
Additional info: 1. Upgrade of IPA server from following path is successful and no such error is observed. - 7.2.z > 7.5 - 7.3.z > 7.5 - 7.4-0day > 7.5 - 7.4.3 > 7.5 I was able to reproduce it:
# rpm -qa ipa-server
ipa-server-4.1.0-18.el7_1.4.x86_64
# cat > rhel75-candidate.repo << EOF
> [ipa-75c]
> name=ipa-latest-75c
> baseurl=http://download.eng.pnq.redhat.com/rel-eng/repos/rhel-7.5-candidate/x86_64/
> enabled=1
> gpgcheck=0
> EOF
# yum -y update 'ipa*' sssd
Loaded plugins: product-id, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
ipa-75c | 2.6 kB 00:00:00
ipa-75c/primary_db | 5.5 MB 00:00:11
Resolving Dependencies
--> Running transaction check
---> Package ipa-admintools.x86_64 0:4.1.0-18.el7_1.4 will be obsoleted
---> Package ipa-client.x86_64 0:4.1.0-18.el7_1.4 will be updated
---> Package ipa-client.x86_64 0:4.5.4-4.el7 will be obsoleting
.
.
.
Installing : pki-kra-10.5.1-4.el7.noarch 147/259
Updating : pki-ca-10.5.1-4.el7.noarch 148/259
Installing : ipa-server-4.5.4-4.el7.x86_64 149/259
Job for dbus.service failed because the control process exited with error code. See "systemctl status dbus.service" and "journalctl -xe" for details.
Installing : ipa-server-dns-4.5.4-4.el7.noarch 150/259
Installing : ipa-python-compat-4.5.4-4.el7.noarch
.
.
.
Installed:
389-ds-base.x86_64 0:1.3.7.5-10.el7 ipa-client.x86_64 0:4.5.4-4.el7 ipa-python-compat.noarch 0:4.5.4-4.el7 ipa-server.x86_64 0:4.5.4-4.el7
ipa-server-dns.noarch 0:4.5.4-4.el7 python-libipa_hbac.x86_64 0:1.16.0-8.el7 python2-pyasn1.noarch 0:0.1.9-7.el7
Dependency Installed:
GeoIP.x86_64 0:1.5.0-11.el7 bind-pkcs11.x86_64 32:9.9.4-58.el7 bind-pkcs11-libs.x86_64 32:9.9.4-58.el7
bind-pkcs11-utils.x86_64 32:9.9.4-58.el7 cal10n.noarch 0:0.7.7-4.el7 custodia.noarch 0:0.3.1-4.el7
cyrus-sasl-plain.x86_64 0:2.1.26-23.el7 gperftools-libs.x86_64 0:2.6.1-1.el7 http-parser.x86_64 0:2.7.1-5.el7_4
ipa-client-common.noarch 0:4.5.4-4.el7 ipa-common.noarch 0:4.5.4-4.el7 ipa-server-common.noarch 0:4.5.4-4.el7
jackson.noarch 0:1.9.4-7.el7 joda-convert.noarch 0:1.3-5.el7 joda-time.noarch 0:2.2-3.tzdata2013c.el7
jsr-311.noarch 0:1.1.1-6.el7 ldns.x86_64 0:1.6.16-10.el7 libitm.x86_64 0:4.8.5-25.el7
libkadm5.x86_64 0:1.15.1-18.el7 libsss_autofs.x86_64 0:1.16.0-8.el7 libsss_certmap.x86_64 0:1.16.0-8.el7
libsss_sudo.x86_64 0:1.16.0-8.el7 lz4.x86_64 0:1.7.5-2.el7 mod_auth_gssapi.x86_64 0:1.5.1-5.el7
mod_lookup_identity.x86_64 0:1.0.0-1.el7 mod_session.x86_64 0:2.4.6-79.el7 nss-pem.x86_64 0:1.0.3-4.el7
nuxwdog.x86_64 0:1.0.3-6.el7 nuxwdog-client-java.x86_64 0:1.0.3-6.el7 objectweb-asm.noarch 0:3.3.1-9.el7
opencryptoki.x86_64 0:3.7.0-1.el7 opencryptoki-libs.x86_64 0:3.7.0-1.el7 opencryptoki-swtok.x86_64 0:3.7.0-1.el7
opendnssec.x86_64 0:1.4.7-4.el7 pki-base-java.noarch 0:10.5.1-4.el7 pki-kra.noarch 0:10.5.1-4.el7
python-cffi.x86_64 0:1.6.0-5.el7 python-custodia.noarch 0:0.3.1-4.el7 python-enum34.noarch 0:1.0.4-1.el7
python-gssapi.x86_64 0:1.2.0-3.el7 python-idna.noarch 0:2.4-1.el7 python-ipaddress.noarch 0:1.0.16-2.el7
python-jwcrypto.noarch 0:0.4.2-1.el7 python-kdcproxy.noarch 0:0.3.2-1.el7 python-netifaces.x86_64 0:0.10.4-3.el7
python-ply.noarch 0:3.4-11.el7 python-pycparser.noarch 0:2.14-1.el7 python-sss-murmur.x86_64 0:1.16.0-8.el7
python2-cryptography.x86_64 0:1.7.2-2.el7 python2-ipaclient.noarch 0:4.5.4-4.el7 python2-ipalib.noarch 0:4.5.4-4.el7
python2-ipaserver.noarch 0:4.5.4-4.el7 python2-pyasn1-modules.noarch 0:0.1.9-7.el7 resteasy-base-client.noarch 0:3.0.6-4.el7
resteasy-base-jackson-provider.noarch 0:3.0.6-4.el7 slf4j.noarch 0:1.7.4-3.el7 softhsm.x86_64 0:2.1.0-2.el7
sssd-dbus.x86_64 0:1.16.0-8.el7
Updated:
dracut.x86_64 0:033-520.el7 initscripts.x86_64 0:9.49.40-2.el7 redhat-release-server.x86_64 0:7.5-3.el7 sssd.x86_64 0:1.16.0-8.el7
Dependency Updated:
389-ds-base-libs.x86_64 0:1.3.7.5-10.el7 bind.x86_64 32:9.9.4-58.el7 bind-dyndb-ldap.x86_64 0:11.1-4.el7
bind-libs.x86_64 32:9.9.4-58.el7 bind-libs-lite.x86_64 32:9.9.4-58.el7 bind-license.noarch 32:9.9.4-58.el7
bind-utils.x86_64 32:9.9.4-58.el7 certmonger.x86_64 0:0.78.4-3.el7 cyrus-sasl.x86_64 0:2.1.26-23.el7
cyrus-sasl-gssapi.x86_64 0:2.1.26-23.el7 cyrus-sasl-lib.x86_64 0:2.1.26-23.el7 cyrus-sasl-md5.x86_64 0:2.1.26-23.el7
dbus.x86_64 1:1.10.24-3.el7 dbus-libs.x86_64 1:1.10.24-3.el7 dracut-config-rescue.x86_64 0:033-520.el7
dracut-network.x86_64 0:033-520.el7 glib2.x86_64 0:2.54.2-2.el7 gssproxy.x86_64 0:0.7.0-13.el7
httpd.x86_64 0:2.4.6-79.el7 httpd-tools.x86_64 0:2.4.6-79.el7 jss.x86_64 0:4.4.0-10.el7
kmod.x86_64 0:20-20.el7 krb5-libs.x86_64 0:1.15.1-18.el7 krb5-pkinit.x86_64 0:1.15.1-18.el7
krb5-server.x86_64 0:1.15.1-18.el7 krb5-workstation.x86_64 0:1.15.1-18.el7 ldapjdk.noarch 0:4.19-5.el7
libcollection.x86_64 0:0.7.0-29.el7 libgudev1.x86_64 0:219-49.el7 libini_config.x86_64 0:1.3.1-29.el7
libipa_hbac.x86_64 0:1.16.0-8.el7 libnl3.x86_64 0:3.2.28-4.el7 libnl3-cli.x86_64 0:3.2.28-4.el7
libselinux.x86_64 0:2.5-12.el7 libselinux-python.x86_64 0:2.5-12.el7 libselinux-utils.x86_64 0:2.5-12.el7
libsemanage.x86_64 0:2.5-10.el7 libsemanage-python.x86_64 0:2.5-10.el7 libsepol.x86_64 0:2.5-8.1.el7
libsss_idmap.x86_64 0:1.16.0-8.el7 libsss_nss_idmap.x86_64 0:1.16.0-8.el7 mod_nss.x86_64 0:1.0.14-12.el7
nspr.x86_64 0:4.17.0-1.el7 nss.x86_64 0:3.34.0-1.el7 nss-softokn.x86_64 0:3.34.0-1.el7
nss-softokn-freebl.x86_64 0:3.34.0-1.el7 nss-sysinit.x86_64 0:3.34.0-1.el7 nss-tools.x86_64 0:3.34.0-1.el7
nss-util.x86_64 0:3.34.0-1.el7 openssl.x86_64 1:1.0.2k-10.el7 openssl-libs.x86_64 1:1.0.2k-10.el7
pki-base.noarch 0:10.5.1-4.el7 pki-ca.noarch 0:10.5.1-4.el7 pki-server.noarch 0:10.5.1-4.el7
pki-tools.x86_64 0:10.5.1-4.el7 policycoreutils.x86_64 0:2.5-20.el7 policycoreutils-python.x86_64 0:2.5-20.el7
python.x86_64 0:2.7.5-64.el7 python-augeas.noarch 0:0.5.0-2.el7 python-dns.noarch 0:1.12.0-4.20150617git465785f.el7
python-libs.x86_64 0:2.7.5-64.el7 python-netaddr.noarch 0:0.7.5-9.el7 python-six.noarch 0:1.9.0-2.el7
python-sssdconfig.noarch 0:1.16.0-8.el7 python-yubico.noarch 0:1.2.3-1.el7 selinux-policy.noarch 0:3.13.1-180.el7
selinux-policy-targeted.noarch 0:3.13.1-180.el7 setools-libs.x86_64 0:3.3.8-2.el7 slapi-nis.x86_64 0:0.56.0-7.el7
sssd-ad.x86_64 0:1.16.0-8.el7 sssd-client.x86_64 0:1.16.0-8.el7 sssd-common.x86_64 0:1.16.0-8.el7
sssd-common-pac.x86_64 0:1.16.0-8.el7 sssd-ipa.x86_64 0:1.16.0-8.el7 sssd-krb5.x86_64 0:1.16.0-8.el7
sssd-krb5-common.x86_64 0:1.16.0-8.el7 sssd-ldap.x86_64 0:1.16.0-8.el7 sssd-proxy.x86_64 0:1.16.0-8.el7
svrcore.x86_64 0:4.1.3-2.el7 systemd.x86_64 0:219-49.el7 systemd-libs.x86_64 0:219-49.el7
systemd-python.x86_64 0:219-49.el7 systemd-sysv.x86_64 0:219-49.el7 tomcat.noarch 0:7.0.76-6.el7
tomcat-el-2.2-api.noarch 0:7.0.76-6.el7 tomcat-jsp-2.2-api.noarch 0:7.0.76-6.el7 tomcat-lib.noarch 0:7.0.76-6.el7
tomcat-servlet-3.0-api.noarch 0:7.0.76-6.el7 tomcatjss.noarch 0:7.2.1-6.el7
Replaced:
389-ds-base.x86_64 0:1.3.3.1-23.el7_1 ipa-admintools.x86_64 0:4.1.0-18.el7_1.4 ipa-python.x86_64 0:4.1.0-18.el7_1.4 ipa-server.x86_64 0:4.1.0-18.el7_1.4
libipa_hbac-python.x86_64 0:1.12.2-58.el7_1.18 python-pyasn1.noarch 0:0.1.6-2.el7 redhat-access-plugin-ipa.noarch 0:0.9.1-2.el7
Complete!
# systemctl status dbus.service
● dbus.service - D-Bus System Message Bus
Loaded: loaded (/usr/lib/systemd/system/dbus.service; static; vendor preset: disabled)
Active: active (running) (Result: exit-code) since Thu 2017-11-30 21:28:47 IST; 4h 6min ago
Docs: man:dbus-daemon(1)
Main PID: 577 (dbus-daemon)
CGroup: /system.slice/dbus.service
└─577 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
Dec 01 01:15:49 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses
Dec 01 01:16:00 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses
Dec 01 01:16:01 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses
Dec 01 01:16:01 vm-idm-003.testrelm.test systemd[1]: dbus.service: control process exited, code=exited status=1
Dec 01 01:16:01 vm-idm-003.testrelm.test dbus-send[9935]: Error org.freedesktop.DBus.Error.Failed: Configuration file needs one or more <listen> elements giving addresses
Dec 01 01:16:01 vm-idm-003.testrelm.test systemd[1]: Reload failed for D-Bus System Message Bus.
Dec 01 01:19:19 vm-idm-003.testrelm.test dbus[577]: avc: received policyload notice (seqno=9)
Dec 01 01:19:19 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses
Dec 01 01:19:21 vm-idm-003.testrelm.test dbus[577]: avc: received policyload notice (seqno=10)
Dec 01 01:19:21 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses
What I found from /var/log/messages:
Dec 1 01:14:23 vm-idm-003 systemd: Stopping udev Control Socket.
Dec 1 01:14:23 vm-idm-003 systemd: Closed udev Control Socket.
Dec 1 01:14:23 vm-idm-003 systemd: Stopping udev Kernel Socket.
Dec 1 01:14:23 vm-idm-003 systemd: Closed udev Kernel Socket.
Dec 1 01:14:23 vm-idm-003 systemd: Stopping udev Kernel Device Manager...
Dec 1 01:14:23 vm-idm-003 systemd: Stopped udev Kernel Device Manager.
Dec 1 01:14:23 vm-idm-003 dbus-daemon: dbus[577]: Encountered error 'Failed to open "/etc/dbus-1/system.d/org.freedesktop.login1.conf": Permission denied' while parsing '/etc/dbus-1/system.d/org.freedesktop.login1.conf'
Dec 1 01:14:23 vm-idm-003 dbus[577]: Encountered error 'Failed to open "/etc/dbus-1/system.d/org.freedesktop.login1.conf": Permission denied' while parsing '/etc/dbus-1/system.d/org.freedesktop.login1.conf'
Dec 1 01:14:23 vm-idm-003 dbus-daemon: dbus[577]: [system] Reloaded configuration
Dec 1 01:14:23 vm-idm-003 dbus[577]: [system] Reloaded configuration
Dec 1 01:14:23 vm-idm-003 dbus-daemon: dbus[577]: [system] Reloaded configuration
Dec 1 01:14:23 vm-idm-003 dbus[577]: [system] Reloaded configuration
Dec 1 01:14:24 vm-idm-003 dbus-daemon: dbus[577]: [system] Reloaded configuration
Dec 1 01:14:24 vm-idm-003 dbus[577]: [system] Reloaded configuration
# ll /etc/dbus-1/system.d/org.freedesktop.login1.conf
-rw-r--r--. 1 root root 8534 Nov 24 15:37 /etc/dbus-1/system.d/org.freedesktop.login1.conf
Attached log files
Created attachment 1361206 [details]
/var/log/messages
Created attachment 1361208 [details]
/var/log/ipaupgrade.log
Workaround is to restart the dbus service: # systemctl status dbus.service ● dbus.service - D-Bus System Message Bus Loaded: loaded (/usr/lib/systemd/system/dbus.service; static; vendor preset: disabled) Active: active (running) (Result: exit-code) since Thu 2017-11-30 21:28:47 IST; 4h 44min ago Docs: man:dbus-daemon(1) Main PID: 577 (dbus-daemon) CGroup: /system.slice/dbus.service └─577 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation Dec 01 01:16:01 vm-idm-003.testrelm.test dbus-send[9935]: Error org.freedesktop.DBus.Error.Failed: Configuration file needs one or more <listen> elements giving addresses Dec 01 01:16:01 vm-idm-003.testrelm.test systemd[1]: Reload failed for D-Bus System Message Bus. Dec 01 01:19:19 vm-idm-003.testrelm.test dbus[577]: avc: received policyload notice (seqno=9) Dec 01 01:19:19 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses Dec 01 01:19:21 vm-idm-003.testrelm.test dbus[577]: avc: received policyload notice (seqno=10) Dec 01 01:19:21 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses Dec 01 01:38:49 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses Dec 01 01:38:53 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses Dec 01 02:03:20 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses Dec 01 02:04:39 vm-idm-003.testrelm.test dbus[577]: [system] Unable to reload configuration: Configuration file needs one or more <listen> elements giving addresses # systemctl stop dbus.service PolicyKit daemon disconnected from the bus. We are no longer a registered authentication agent. Warning: Stopping dbus.service, but it can still be activated by: dbus.socket # systemctl start dbus.service # systemctl status dbus.service ● dbus.service - D-Bus System Message Bus Loaded: loaded (/usr/lib/systemd/system/dbus.service; static; vendor preset: disabled) Active: active (running) since Fri 2017-12-01 02:18:28 IST; 5s ago Docs: man:dbus-daemon(1) Main PID: 13153 (dbus-daemon) CGroup: /system.slice/dbus.service └─13153 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation Dec 01 02:18:28 vm-idm-003.testrelm.test systemd[1]: Started D-Bus System Message Bus. Dec 01 02:18:28 vm-idm-003.testrelm.test systemd[1]: Starting D-Bus System Message Bus... Dec 01 02:18:31 vm-idm-003.testrelm.test dbus[13153]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' Dec 01 02:18:31 vm-idm-003.testrelm.test dbus[13153]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' It might be actually more general and not specific to IPA. E.g. bug 1428379 mentions it as well. So it might be systemd or dbus bug. I agree, the issues is not a IPA issue. Something is going on with systemd or dbus. moving based on comments 9-11. Based on the logs it really looks like a bug in dbus. I saw this on recent installs based on both RHEL7.3 and 7.4 On the 7.4 system I see: Jan 18 15:20:25 ipa.ayoung.rdu.salab.test dbus[537]: [system] Activated service 'com.redhat.SubscriptionManager' failed: Failed to execute program /lib64/dbus-1/dbus-daemon-launch-helper: No such file or directory Its been moved to /usr/libexec/dbus-1/dbus-daemon-launch-helper Note that making the symlink sudo ln -s /usr/libexec/dbus-1 /lib64/dbus-1 seems to have made it work. This feels very much like a duplicate of bug 1531506. In summary, dbus is not a service that can be easily upgraded and restarted on a running system, because it is low-level enough to be used by many systemd daemons, as well as extensively in a desktop session. A system restart is required after upgrading dbus for the system as a whole to work as expected. |