Bug 1733201

Summary: DS installer debug messages leaking to ipa-server-install
Product: Red Hat Enterprise Linux 8 Reporter: Martin Kosek <mkosek>
Component: 389-ds-baseAssignee: Simon Pichugin <spichugi>
Status: CLOSED ERRATA QA Contact: RHDS QE <ds-qe-bugs>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.1CC: lkrispen, mreynolds, nkinder, pasik, rcritten, spichugi, tbordaz, tscherf, vashirov
Target Milestone: rcFlags: vashirov: mirror+
Target Release: 8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 389-ds-base-1.4.2.4-1.module+el8.2.0+4699+cf2da360 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-04-28 16:01:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Martin Kosek 2019-07-25 12:04:44 UTC
Description of problem:

DS installer debug messages are now leaked in the main ipa-server-install output. This looks as a (very minor) regression, I did not see this text in the past.

# ipa-server-install
...
Configuring directory server (dirsrv). Estimated time: 30 seconds
  [1/44]: creating directory server instance

Starting installation...
Created symlink /etc/systemd/system/multi-user.target.wants/dirsrv → /usr/lib/systemd/system/dirsrv@.service.
Opening SELinux policy "//etc/selinux/targeted/policy/policy.31"
Successfully opened SELinux policy "//etc/selinux/targeted/policy/policy.31"
Allocate local instance <class 'lib389.DirSrv'> with ldapi://%2fvar%2frun%2fslapd-RHEL8-TEST.socket
  [2/44]: configure autobind for root
...

Version-Release number of selected component (if applicable):
ipa-server-4.8.0-4.module+el8.1.0+3696+eb4a1e69.x86_64
389-ds-base-1.4.1.3-3.module+el8.1.0+3533+f8225121.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Run ipa-server-install
2.
3.

Actual results:
Leaking DS installer in ipa-server-install

Expected results:
DS installer info is only present in the installer log file.

Additional info:

Comment 1 Simon Pichugin 2019-08-14 16:03:24 UTC
Looks like a valid issue from 389-ds-base side.
We have a couple more 'log.info()' lines there that should be replaced with 'log.debug()'. Also, 'systemctl enable' verbosity should be shown only in 'debug' mode.
I'll look into it.

Comment 2 Simon Pichugin 2019-08-19 10:52:37 UTC
Upstream issue: https://pagure.io/389-ds-base/issue/50550

Comment 5 Viktor Ashirov 2019-12-03 14:35:38 UTC
Builds tested:
ipa-server-4.8.3-1.module+el8.2.0+4944+db58f418.x86_64 
389-ds-base-1.4.2.4-4.module+el8.2.0+4930+d4051b3a.x86_64

# ipa-server-install
...
Configuring directory server (dirsrv). Estimated time: 30 seconds  
  [1/44]: creating directory server instance  
  [2/44]: configure autobind for root  
  [3/44]: stopping directory server  
  [4/44]: updating configuration in dse.ldif  
  [5/44]: starting directory server  
  [6/44]: adding default schema  
  [7/44]: enabling memberof plugin  
  [8/44]: enabling winsync plugin  
  [9/44]: configure password logging  
  [10/44]: configuring replication version plugin  
  [11/44]: enabling IPA enrollment plugin  
  [12/44]: configuring uniqueness plugin  
  [13/44]: configuring uuid plugin  
  [14/44]: configuring modrdn plugin  
  [15/44]: configuring DNS plugin  
  [16/44]: enabling entryUSN plugin  
  [17/44]: configuring lockout plugin  
  [18/44]: configuring topology plugin  
  [19/44]: creating indices  
  [20/44]: enabling referential integrity plugin
  [21/44]: configuring certmap.conf  
  [22/44]: configure new location for managed entries  
  [23/44]: configure dirsrv ccache and keytab  
  [24/44]: enabling SASL mapping fallback  
  [25/44]: restarting directory server  
  [26/44]: adding sasl mappings to the directory  
  [27/44]: adding default layout  
  [28/44]: adding delegation layout  
  [29/44]: creating container for managed entries  
  [30/44]: configuring user private groups  
  [31/44]: configuring netgroups from hostgroups  
  [32/44]: creating default Sudo bind user  
  [33/44]: creating default Auto Member layout  
  [34/44]: adding range check plugin  
  [35/44]: creating default HBAC rule allow_all  
  [36/44]: adding entries for topology management  
  [37/44]: initializing group membership  
  [38/44]: adding master entry  
  [39/44]: initializing domain level  
  [40/44]: configuring Posix uid/gid generation  
  [41/44]: adding replication acis  
  [42/44]: activating sidgen plugin  
  [43/44]: activating extdom plugin  
  [44/44]: configuring directory to start on boot  
...

No extraneous debug messages from DS installer are present in the output.
Marking as VERIFIED, SanityOnly.

Comment 7 errata-xmlrpc 2020-04-28 16:01:20 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:1703