Bug 1918075
Summary: | FreeIPA replica deployment fails since Fedora-Rawhide-20210118.n.1 (389-ds-base-2.0.2-1.fc34) | ||||||
---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Adam Williamson <awilliam> | ||||
Component: | freeipa | Assignee: | IPA Maintainers <ipa-maint> | ||||
Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
Severity: | high | Docs Contact: | |||||
Priority: | unspecified | ||||||
Version: | rawhide | CC: | abokovoy, fdc, frenaud, ftrivino, ipa-maint, jcholast, jhrozek, ldap-maint, mhjacks, mreynolds, pvoborni, rcritten, spichugi, ssorce, tbordaz, twoerner, vashirov | ||||
Target Milestone: | --- | ||||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | openqa | ||||||
Fixed In Version: | freeipa-4.9.0-2.fc34 | Doc Type: | If docs needed, set a value | ||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2021-01-23 01:17:47 UTC | Type: | Bug | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Attachments: |
|
Description
Adam Williamson
2021-01-20 00:45:59 UTC
Created attachment 1748892 [details]
/var/log tarball from the replica
Full tarball of /var/log from the replica system (or the system that was *trying* to be a replica, anyway :>) If logs from the server it was trying to replicate are needed let me know and I'll try to extract them.
This is a regression from by a fix proposed by the Kerberos team: https://github.com/389ds/389-ds-base/issues/4537 https://bugzilla.redhat.com/show_bug.cgi?id=1868482 It had apparently gone through some FreeIPA tests, but it obviously is breaking here. We will need to revert that fix for now... Hi Mark, I can also reproduce the issue on rawhide, with the following pkgs: krb5-server-1.19-0.beta2.1.fc34.x86_64 389-ds-base-2.0.2-1.fc34.x86_64 freeipa-server-4.9.0-1.fc34.x86_64 If I apply the fix from this PR https://github.com/freeipa/freeipa/pull/5409, the installation of the replica completes successfully. The patch has already been committed upstream in master + ipa-4-9 branches but is not included in any build yet. RH folks from the last few comments: please don't make comments on Fedora bugs RH confidential unless there is actually some RH confidential information in them. AFAICS there is none in those comments; please change your comments to public unless there's some reason they need to be private. The comments say that https://github.com/freeipa/freeipa/pull/5409 fixes this, so re-assigning to freeipa and setting POST. There's now a build with the fix: https://koji.fedoraproject.org/koji/buildinfo?buildID=1671929 so setting MODIFIED. Next Rawhide compose should have it fixed, hopefully. Replica tests all passed in today's Rawhide, so looks good. |