Bug 2012911
| Summary: | named journalctl logs shows 'zone testrealm.test/IN: serial (serialnumber) write back to LDAP failed.' | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Sudhir Menon <sumenon> |
| Component: | ipa | Assignee: | Rob Crittenden <rcritten> |
| Status: | CLOSED ERRATA | QA Contact: | Sudhir Menon <sumenon> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 9.0 | CC: | abokovoy, frenaud, gkaihoro, myusuf, rcritten, ssidhaye, tscherf |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-4.9.10-1.el9 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-11-15 10:00:08 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2027125 | ||
|
Description
Sudhir Menon
2021-10-11 15:09:54 UTC
The message "write back to LDAP failed" comes from bind-dyndb-ldap when it tries to update the serial number. Unfortunately it doesn't log the LDAP error. We may be able to determine that if we have the 389-ds access log. Do you know if it's available? The ipa-healthcheck tests run after the IPA server is configured and the packages are installed/uninstalled during the test. This was failing in some environments which lacked full DNSSEC support. We disabled this for the healthcheck tests in upstream ticket https://pagure.io/freeipa/issue/9151 master: https://pagure.io/freeipa/c/92d8077304ad0847c42eca3d11c79d9e22a46335 ipa-4-9: https://pagure.io/freeipa/c/f11b7b3bf50f7ccf4689b1b0f80894b0b1247983 I think we can link them and move this into POST. Verification using latest RHEL9.1 nightly compose ipa-client-4.10.0-2.el9.x86_64 ipa-client-common-4.10.0-2.el9.noarch ipa-common-4.10.0-2.el9.noarch ipa-healthcheck-core-0.9-9.el9.noarch ipa-selinux-4.10.0-2.el9.noarch ipa-server-4.10.0-2.el9.x86_64 ipa-server-common-4.10.0-2.el9.noarch ipa-server-dns-4.10.0-2.el9.noarch ipa-server-trust-ad-4.10.0-2.el9.x86_64 "write back to LDAP failed" message is not seen named and journal logs. Attaching named and journal logs for reference. Marking Bugzilla based on above observations. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (ipa bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:7988 |