Bug 2051233
| Summary: | krb5-server-1.19.2-5 breaks IPA server installation | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Florence Blanc-Renaud <frenaud> | ||||
| Component: | krb5 | Assignee: | Alexander Bokovoy <abokovoy> | ||||
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | rawhide | CC: | abokovoy, antorres, contribs, ftrivino, j, npmccallum, sbose, ssorce | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2022-02-07 06:57:38 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
*** This bug has been marked as a duplicate of bug 2050921 *** |
Created attachment 1859444 [details] ipaserver-install.log Description of problem: With krb5-server-1.19.2-5, IPA server installation does not work. The command "ipa-server-install --domain ipa.test --realm IPA.TEST -a Secret123 -p Secret123 -U" returns with exit code 0 but any "kinit admin" command fails: # kinit admin kinit: Pre-authentication failed: Invalid argument while getting initial credentials The installation also reports: Unable to set admin password CalledProcessError(Command ['/usr/bin/ldappasswd', '-h', 'server.ipa.test', '-ZZ', '-x', '-D', 'cn=Directory Manager', '-y', '/var/lib/ipa/tmpp4tale3j', '-T', '/var/lib/ipa/tmpzznbx6s3', 'uid=admin,cn=users,cn=accounts,dc=ipa,dc=test'] Version-Release number of selected component (if applicable): ipa-server from master branch krb5-server-1.19.2-5 How reproducible: Systematic Steps to Reproduce: 1. install freeipa-server 2. ipa-server-install --domain ipa.test --realm IPA.TEST -a Secret123 -p Secret123 -U 3. kinit admin Actual results: # kinit admin kinit: Pre-authentication failed: Invalid argument while getting initial credentials Expected results: Server installation should succeed without any error and kinit admin should work. Additional info: