Bug 1626379

Summary: PKINIT configuration did not succeed message is received during Replica-install [rhel-7.5.z]
Product: Red Hat Enterprise Linux 7 Reporter: Oneata Mircea Teodor <toneata>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: high Docs Contact:
Priority: high    
Version: 7.6CC: frenaud, ipa-maint, myusuf, ndehadra, pvoborni, rcritten, tscherf, twoerner
Target Milestone: rcKeywords: Regression, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.5.4-10.el7_5.4.4 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1623486 Environment:
Last Closed: 2018-09-25 19:07:46 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1623486, 1633061    
Bug Blocks:    

Description Oneata Mircea Teodor 2018-09-07 08:01:33 UTC
This bug has been copied from bug #1623486 and has been proposed to be backported to 7.5 z-stream (EUS).

Comment 5 Mohammad Rizwan 2018-09-10 15:26:11 UTC
version:

Comment 6 Mohammad Rizwan 2018-09-10 15:33:21 UTC
version:
ipa-server-4.5.4-10.el7_5.4.4.x86_64

Steps:
Execute upstream test:

 IPATEST_YAML_CONFIG=/root/mh_cfg.yaml ipa-run-tests -v -r a --with-xunit test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1::test_one_command_installation --logging-level=DEBUG


Actual results:

[..]
[ipa.ipatests.pytest_plugins.integration.host.Host.master.cmd23] Configuring Kerberos KDC (krb5kdc)
[ipa.ipatests.pytest_plugins.integration.host.Host.master.cmd23]   [1/1]: installing X509 Certificate for PKINIT
[ipa.ipatests.pytest_plugins.integration.host.Host.master.cmd23] Done configuring Kerberos KDC (krb5kdc).
[ipa.ipatests.pytest_plugins.integration.host.Host.master.cmd23] Applying LDAP updates
[..]

[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd7] Configuring Kerberos KDC (krb5kdc)
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd7]   [1/1]: installing X509 Certificate for PKINIT
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd7] Done configuring Kerberos KDC (krb5kdc).
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd7] Applying LDAP updates
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd7] Upgrading IPA:. Estimated time: 1 minute 30 seconds
[..]

[ipa.ipatests.pytest_plugins.integration.host.Host.replica.OpenSSHTransport] RUN ['ipa-pkinit-manage', 'status']
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd8] RUN ['ipa-pkinit-manage', 'status']
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd8] PKINIT is enabled
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd8] The ipa-pkinit-manage command was successful
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd8] Exit code: 0

[..]
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd41] bash: line 1: cd: /root/ipatests: No such file or directory
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd41] bash: line 2: /root/ipatests/env.sh: No such file or directory
[ipa.ipatests.pytest_plugins.integration.host.Host.replica.cmd41] Exit code: 0

---------------------------------------------------- generated xml file: /root/nosetests.xml -----------------------------------------------------
========================================================== 1 xpassed in 819.65 seconds ===========================================================



No message related to PKIINIT failure seen in console logs and test case passed (xpassed marked due to some error in teardown of testcase, see full logs for more info).

Hence marking the bug as verified.

Comment 8 errata-xmlrpc 2018-09-25 19:07:46 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:2760