Bug 1751374

Summary: [IDM] ipa-server-install fails when new packages installed on 7.6 system
Product: Red Hat Enterprise Linux 7 Reporter: anissley
Component: ipaAssignee: Florence Blanc-Renaud <frenaud>
Status: CLOSED NOTABUG QA Contact: ipa-qe <ipa-qe>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 7.6CC: pcech, rcritten, tscherf
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-09-20 13:10:11 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
From /var/log/pki/pki-tomcat/ca/debug
none
From ipa install log
none
Complete Install Log none

Description anissley 2019-09-11 20:41:18 UTC
Created attachment 1614229 [details]
From /var/log/pki/pki-tomcat/ca/debug

Description of problem:
If ipa-server and ipa-server-dns are installed using yum on a RHEL 7.6 system, which does not have the os release version set, or has the os release version set to 7Server, ipa-server-install will fail.

Version-Release number of selected component (if applicable):
ipa-server-4.6.5-11.el7.x86_64

How reproducible:
Every time

Steps to Reproduce:
1. Confirm that the system is running RHEL 7.6 (cat /etc/redhat-release)
2. Confirm that the os release version is not set, or set to 7Server (subscription-manager release --show)
3. yum install ipa-server ipa-server-dns
4. Check if the system needs to reboot (needs-restarting -r). Reboot if needed.
5. ipa-server-install

Actual results:
Install fails with the error "The ipa-server-install command failed, exception: RuntimeError: CA did not start in 300.0s"


Expected results:
Install completes successfully

Additional info:
excerpt from install log and pki ca debug log attached.

Comment 2 anissley 2019-09-11 20:43:01 UTC
Created attachment 1614230 [details]
From ipa install log

Comment 3 Rob Crittenden 2019-09-11 20:48:42 UTC
Can you provide the full logs instead of just the snippets?

Comment 4 Florence Blanc-Renaud 2019-09-12 07:01:03 UTC
As far as I know, the version of ipa-server shipped with RHEL 7.6 is ipa-4.6.4-10.el7, but the BZ is mentioning ipa-server-4.6.5-11.el7.x86_64 (shipped with RHEL 7.7). The recommendation is to upgrade the whole system to 7.7 in order to use the bits from ipa-server 4.6.5-11.

Comment 5 anissley 2019-09-12 13:22:50 UTC
Created attachment 1614520 [details]
Complete Install Log

Comment 6 anissley 2019-09-12 13:26:32 UTC
I reproduced the error on a generic system, and attached the complete install logs as requested.

Updating the system to 7.7 does result in a successful install.
Setting the OS release version to 7.6 (subscription-manager release --set 7.6) BEFORE yum install ipa-server also results in a successful install.

This bug is suggesting that it should not be possible to install mismatched packages, which result in a failed ipa-server-install.

Comment 7 Rob Crittenden 2019-09-12 18:48:07 UTC
Installing mixed packages in RHEL is not tested. This is not something that IPA can enforce.

Comment 8 Petr Čech 2019-09-20 13:10:11 UTC
I am afraid, we should close this BZ. Explanation is provided in Comment 7.