Bug 1534726

Summary: IPA 'Generate OTP' option in web gui does not show OTP code when no reverse zone is managed
Product: Red Hat Enterprise Linux 7 Reporter: Brian J. Atkisson <batkisso>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.4CC: cheimes, ndehadra, pasik, pvoborni, rcritten, sumenon, tscherf
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.6.4-1.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-10-30 10:57:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Screenshot of Host-OTP none

Description Brian J. Atkisson 2018-01-15 19:58:43 UTC 
Description of problem:

The OTP code is not displayed adding a host in the IPA web gui and selecting 'Generate OTP' if there is no reverse zone. It looks like the OTP code is lost after the reverse IP mapping warning: 

Version-Release number of selected component (if applicable):
ipa-client-common-4.5.0-22.el7_4.noarch
ipa-client-4.5.0-22.el7_4.x86_64
ipa-server-common-4.5.0-22.el7_4.noarch
ipa-server-4.5.0-22.el7_4.x86_64
ipa-server-dns-4.5.0-22.el7_4.noarch
ipa-common-4.5.0-22.el7_4.noarch

How reproducible:
Always


Steps to Reproduce:

0. Do not populate any reverse zones in IPA, forward zones only

1. Add host in web gui

2. Fill out:
- Hostname
- DNS zone
- IP Address
- check 'Generate OTP'

3. Warning is displayed "The host was added but the DNS update failed with: DNS reverse zone 1.2.3.in-addr.arpa. for IP address 1.2.3.4 is not managed by this server"

4. The OTP pop-up will then be displayed, but will not contain the actual OTP code:
Result
Generated OTP
Comment 2 Rob Crittenden 2018-01-18 14:10:05 UTC 
Reproducible. I suspect it should not raise a NonFatalError but instead use the message system to pass the error.
Comment 3 Rob Crittenden 2018-01-22 15:45:17 UTC 
Upstream ticket:
https://pagure.io/freeipa/issue/7374
Comment 4 Rob Crittenden 2018-02-12 11:55:11 UTC 
*** Bug 1544113 has been marked as a duplicate of this bug. ***
Comment 5 Christian Heimes 2018-02-23 13:40:34 UTC 
Fixed upstream
master:
https://pagure.io/freeipa/c/4295df17a42897f6f59be21c25c5dd03984e35d3
Comment 6 Christian Heimes 2018-02-26 09:08:22 UTC 
Fixed upstream
ipa-4-6:
https://pagure.io/freeipa/c/3022f5c030922122ef60b8543eedfac7add2cdc5
Comment 9 Sudhir Menon 2018-08-27 11:32:45 UTC 
Fix is seen. Verified on Red Hat Enterprise Linux Server release 7.6 Beta (Maipo)
using

[root@master ~]# rpm -q ipa-server sssd samba pki-server pki-ca  selinux-policy
ipa-server-4.6.4-6.el7.x86_64
sssd-1.16.2-12.el7.x86_64
package samba is not installed
pki-server-10.5.9-6.el7.noarch
pki-ca-10.5.9-6.el7.noarch
selinux-policy-3.13.1-220.el7.noarch

Attaching screenshot of the OTP code generated.
Comment 10 Sudhir Menon 2018-08-27 11:34:32 UTC 
Created attachment 1478932 [details]
Screenshot of Host-OTP
Comment 12 errata-xmlrpc 2018-10-30 10:57:12 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:3187