Bug 2117540

Summary: [abrt] freeipa-server-dns: run(): ipautil.py:599:run:ipapython.ipautil.CalledProcessError: CalledProcessError(Command ['/usr/sbin/dnssec-keyfromlabel', '-E', 'pkcs11', '-K', '/var/named/dyndb-ldap/ipa/master/lan.dojoao.pt/tmpfeikbgnb', '-a', ...
Product: [Fedora] Fedora Reporter: João Rodrigues <jvrodrigues>
Component: freeipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 36CC: abokovoy, frenaud, ftrivino, ipa-maint, jcholast, jhrozek, mhjacks, pvoborni, rcritten, ssorce, twoerner
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/20fd6aee13d65078ec23b4807e2427348c0738aa
Whiteboard: abrt_hash:a3eae4b2a3a7fc7d9a6cf9c99d549be07ffeb2a2;
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-08-11 09:42:03 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cpuinfo
none
File: environ
none
File: mountinfo
none
File: namespaces
none
File: open_fds none

Description João Rodrigues 2022-08-11 09:33:12 UTC 
Description of problem:
Noticed this in my freeipa's dc log. It tries to run every minute or so and it fails

Version-Release number of selected component:
freeipa-server-dns-4.9.10-3.fc36

Additional info:
reporter:       libreport-2.17.1
cgroup:         0::/system.slice/ipa-dnskeysyncd.service
cmdline:        /usr/bin/python3 -I /usr/libexec/ipa/ipa-dnskeysyncd
crash_function: run
exception_type: ipapython.ipautil.CalledProcessError
executable:     /usr/libexec/ipa/ipa-dnskeysyncd
interpreter:    python3-3.10.6-1.fc36.x86_64
kernel:         5.18.16-200.fc36.x86_64
runlevel:       N 3
type:           Python3
uid:            996

Truncated backtrace:
#1 [/usr/lib/python3.10/site-packages/ipapython/ipautil.py:599] run
#2 [/usr/lib/python3.10/site-packages/ipaserver/dnssec/bindmgr.py:146] install_key
#3 [/usr/lib/python3.10/site-packages/ipaserver/dnssec/bindmgr.py:205] sync_zone
#4 [/usr/lib/python3.10/site-packages/ipaserver/dnssec/bindmgr.py:232] sync
#5 [/usr/lib/python3.10/site-packages/ipaserver/dnssec/keysyncer.py:128] syncrepl_refreshdone
#6 [/usr/lib64/python3.10/site-packages/ldap/syncrepl.py:464] syncrepl_poll
#7 [/usr/libexec/ipa/ipa-dnskeysyncd:130] <module>
Comment 1 João Rodrigues 2022-08-11 09:33:15 UTC 
Created attachment 1904890 [details]
File: backtrace
Comment 2 João Rodrigues 2022-08-11 09:33:16 UTC 
Created attachment 1904891 [details]
File: cpuinfo
Comment 3 João Rodrigues 2022-08-11 09:33:17 UTC 
Created attachment 1904892 [details]
File: environ
Comment 4 João Rodrigues 2022-08-11 09:33:18 UTC 
Created attachment 1904893 [details]
File: mountinfo
Comment 5 João Rodrigues 2022-08-11 09:33:19 UTC 
Created attachment 1904894 [details]
File: namespaces
Comment 6 João Rodrigues 2022-08-11 09:33:20 UTC 
Created attachment 1904895 [details]
File: open_fds
Comment 7 Florence Blanc-Renaud 2022-08-11 09:42:03 UTC 
Hi,
thanks for your BZ report.
Based on the journal backtrace (dnssec-keyfromlabel: warning: ENGINE_load_private_key failed (not found)\ndnssec-keyfromlabel: fatal: failed to get key <domain removed>/RSASHA256: not found\n'), it can be closed as a duplicate of BZ #2115865.

There is already an update of openssl-pkcs11 (FEDORA-2022-2f6e9a0b6c has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2022-2f6e9a0b6c) that contains a fix. Can you try to update and confirm it properly solves your issue?

*** This bug has been marked as a duplicate of bug 2115865 ***