Bug 2127885

Summary:	[ansible-freeipa] ipaclient OTP without kinit on controller
Product:	Red Hat Enterprise Linux 8	Reporter:	Thomas Woerner <twoerner>
Component:	ansible-freeipa	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED ERRATA	QA Contact:	Varun Mylaraiah <mvarun>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.8	CC:	mvarun
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ansible-freeipa-1.9.0-1.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	2127887 (view as bug list)		Environment:
Last Closed:	2023-05-16 08:15:55 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2127887

Description Thomas Woerner 2022-09-19 09:59:19 UTC

Description of problem:

For OTP the client role deployment uses an action plugin and kinit on the controller. This is an additional requirement that makes the use of OTP with the client role in AAP impossible.

The action plugin altogether with the kinit call can be removed with a special task on the given or discovered server.

Comment 1 Thomas Woerner 2022-11-23 13:07:59 UTC

Upstream PR: https://github.com/freeipa/ansible-freeipa/pull/987

Comment 5 Varun Mylaraiah 2022-12-19 10:43:33 UTC

Verified
ansible-2.9.27-1.el8ae.noarch
ansible-freeipa-1.9.0-1.el8.noarch

Passed	ansible_freeipa_tests/client/test_idm_deploy_client.py::TestClientTC27::test_otp_without_krb5_pkgs

INFO     pytest_multihost.host.Host.ansible.ParamikoTransport:transport.py:318 RUN ['yum', 'remove', 'krb5-workstation', '-y']
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:519 RUN ['yum', 'remove', 'krb5-workstation', '-y']
DEBUG    paramiko.transport:channel.py:1212 [chan 27] Sesch channel 27 request ok
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 -bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Dependencies resolved.
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 ================================================================================
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563  Package              Arch       Version             Repository            Size
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 ================================================================================
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Removing:
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563  krb5-workstation     x86_64     1.18.2-22.el8       @rhel-8.8-BaseOS     3.3 M
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Removing unused dependencies:
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563  libkadm5             x86_64     1.18.2-22.el8       @rhel-8.8-BaseOS     219 k
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Transaction Summary
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 ================================================================================
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Remove  2 Packages
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Freed space: 3.5 M
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Running transaction check
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Transaction check succeeded.
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Running transaction test
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Transaction test succeeded.
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Running transaction
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563   Preparing        :                                                        1/1 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563   Erasing          : krb5-workstation-1.18.2-22.el8.x86_64                  1/2 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563   Erasing          : libkadm5-1.18.2-22.el8.x86_64                          2/2 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563   Running scriptlet: libkadm5-1.18.2-22.el8.x86_64                          2/2 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563   Verifying        : krb5-workstation-1.18.2-22.el8.x86_64                  1/2 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563   Verifying        : libkadm5-1.18.2-22.el8.x86_64                          2/2 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Removed:
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563   krb5-workstation-1.18.2-22.el8.x86_64      libkadm5-1.18.2-22.el8.x86_64     
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:563 Complete!
DEBUG    paramiko.transport:channel.py:1212 [chan 27] EOF received (27)
DEBUG    paramiko.transport:channel.py:1212 [chan 27] EOF sent (27)
DEBUG    pytest_multihost.host.Host.ansible.cmd27:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.ParamikoTransport:transport.py:293 WRITE inventory/clients.hosts
DEBUG    paramiko.transport.sftp:sftp.py:158 [chan 0] open(b'inventory/clients.hosts', 'wb')
DEBUG    paramiko.transport.sftp:sftp.py:158 [chan 0] open(b'inventory/clients.hosts', 'wb') -> 00000000
DEBUG    paramiko.transport.sftp:sftp.py:158 [chan 0] close(00000000)
INFO     pytest_multihost.host.Host.ansible.ParamikoTransport:transport.py:329 PUT install-clients.yaml
DEBUG    paramiko.transport.sftp:sftp.py:158 [chan 0] open(b'install-clients.yaml', 'wb')
DEBUG    paramiko.transport.sftp:sftp.py:158 [chan 0] open(b'install-clients.yaml', 'wb') -> 00000000
DEBUG    paramiko.transport.sftp:sftp.py:158 [chan 0] close(00000000)
DEBUG    paramiko.transport.sftp:sftp.py:158 [chan 0] stat(b'install-clients.yaml')
DEBUG    paramiko.transport:channel.py:1212 [chan 28] Max packet in: 32768 bytes
DEBUG    paramiko.transport:channel.py:1212 [chan 28] Max packet out: 32768 bytes
DEBUG    paramiko.transport:transport.py:1819 Secsh channel 28 opened.
INFO     pytest_multihost.host.Host.ansible.ParamikoTransport:transport.py:318 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/clients.hosts', 'install-clients.yaml']
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:519 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/clients.hosts', 'install-clients.yaml']
DEBUG    paramiko.transport:channel.py:1212 [chan 28] Sesch channel 28 request ok
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 -bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ansible-playbook 2.9.27
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563   config file = /etc/ansible/ansible.cfg
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563   configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563   ansible python module location = /usr/lib/python3.6/site-packages/ansible
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563   executable location = /usr/bin/ansible-playbook
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563   python version = 3.6.8 (default, Oct 25 2022, 12:51:08) [GCC 8.5.0 20210514 (Red Hat 8.5.0-17)]
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Using /etc/ansible/ansible.cfg as config file
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'actionable', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'counter_enabled', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'debug', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'dense', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'dense', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'full_skip', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'json', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'minimal', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'null', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'oneline', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'selective', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'skippy', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'stderr', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'unixy', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 Skipping callback 'yaml', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 PLAYBOOK: install-clients.yaml *************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 1 plays in install-clients.yaml
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 PLAY [Playbook to configure IPA clients] ***************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [Gathering Facts] *********************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /root/install-clients.yaml:2
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test]
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Import variables specific to distribution] *******************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:4
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test] => (item=/usr/share/ansible/roles/ipaclient/vars/RedHat-8.yml) => {"ansible_facts": {"ipaclient_packages": ["@idm:DL1/client"]}, "ansible_included_var_files": ["/usr/share/ansible/roles/ipaclient/vars/RedHat-8.yml"], "ansible_loop_var": "item", "changed": false, "item": "/usr/share/ansible/roles/ipaclient/vars/RedHat-8.yml"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install IPA client] ******************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:19
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 included: /usr/share/ansible/roles/ipaclient/tasks/install.yml for client1.ipadomain.test
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Ensure that IPA client packages are installed] *****
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:4
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [Install - Set ipaclient_servers] *****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:10
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [Install - Set ipaclient_servers from cluster inventory] ******************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:15
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Check that either password or keytab is set] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:21
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Set default principal if no keytab is given] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:25
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [Install - Fail on missing ipaclient_domain and ipaserver_domain] *********
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:33
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [Install - Fail on missing ipaclient_servers] *****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:37
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Configure DNS resolver] ****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:41
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - IPA client test] ***********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:50
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test] => {"basedn": "dc=ipadomain,dc=test", "changed": false, "client_already_configured": false, "client_domain": "ipadomain.test", "dnsok": true, "domain": "ipadomain.test", "hostname": "client1.ipadomain.test", "ipa_python_version": 40910, "kdc": "master.ipadomain.test", "nosssd_files": {}, "ntp_pool": null, "ntp_servers": null, "realm": "IPADOMAIN.TEST", "servers": ["master.ipadomain.test"], "sssd": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Cleanup leftover ccache] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:76
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "path": "/etc/ipa/.dns_ccache", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Configure NTP] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:81
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Make sure One-Time Password is enabled if it's already defined] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:93
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Disable One-Time Password for on_master] ***********
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:98
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Test if IPA client has working krb5.keytab] ********
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:103
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test] => {"ca_crt_exists": false, "changed": false, "krb5_conf_ok": false, "krb5_keytab_ok": false, "ping_test_ok": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Disable One-Time Password for client with working krb5.keytab] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:113
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Keytab or password is required for getting otp] ****
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:129
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Create temporary file for keytab] ******************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:134
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Copy keytab to server temporary file] **************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:143
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Get One-Time Password for client enrollment] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:151
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test -> master.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Report error for OTP generation] *******************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:161
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Store the previously obtained OTP] *****************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:167
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Remove keytab temporary file] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:177
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Store predefined OTP in admin_password] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:184
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Check if principal and keytab are set] *************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:200
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Check if one of password or keytabs are set] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:204
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Purge IPADOMAIN.TEST from host keytab] *************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:212
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true, "cmd": ["/usr/sbin/ipa-rmkeytab", "-k", "/etc/krb5.keytab", "-r", "IPADOMAIN.TEST"], "delta": "0:00:00.003751", "end": "2022-12-18 22:59:51.428798", "failed_when_result": false, "msg": "non-zero return code", "rc": 7, "start": "2022-12-18 22:59:51.425047", "stderr": "Failed to set cursor 'No such file or directory'", "stderr_lines": ["Failed to set cursor 'No such file or directory'"], "stdout": "", "stdout_lines": []}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Backup and set hostname] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:229
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Join IPA] ******************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:234
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"already_joined": false, "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : krb5 configuration not correct] ******************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:256
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : IPA test failed] *********************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:262
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : ca.crt file is missing] **************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:266
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Configure IPA default.conf] ************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:279
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Configure SSSD] ************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:288
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Configure krb5 for IPA realm] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:310
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - IPA API calls for remaining enrollment parts] ******
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:324
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"ca_enabled": true, "changed": true, "subject_base": "O=IPADOMAIN.TEST"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Fix IPA ca] ****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:332
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Create IPA NSS database] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:342
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"ca_enabled_ra": true, "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Configure SSH and SSHD] ****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:374
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Configure automount] *******************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:382
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Configure firefox] *********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:388
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Configure NIS] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:394
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Install - Restore original admin password if overwritten by OTP] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:412
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Cleanup leftover ccache] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:418
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "path": "/etc/ipa/.dns_ccache", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 TASK [ipaclient : Uninstall IPA client] ****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:23
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 PLAY RECAP *********************************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd28:transport.py:563 client1.ipadomain.test     : ok=23   changed=12   unreachable=0    failed=0    skipped=24   rescued=0    ignored=0



Based on the test result, marking the bug Verified

Comment 8 errata-xmlrpc 2023-05-16 08:15:55 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ansible-freeipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2023:2752