Bug 2132968

Summary: Creating a POSIX trust agreement using 'range_type: ipa-ad-trust-posix' in ansible playbook is not honoring 'range_type' [rhel-9.0.0.z]
Product: Red Hat Enterprise Linux 9 Reporter: RHEL Program Management Team <pgm-rhel-tools>
Component: ansible-freeipaAssignee: Thomas Woerner <twoerner>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: high Docs Contact:
Priority: high    
Version: 9.0CC: alsharma, ftrivino, ipa-qe, mjurasek, mvarun, rjeffman, tejones
Target Milestone: rcKeywords: Triaged, ZStream
Target Release: ---Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: ansible-freeipa-1.6.3-2.el9_0 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2132781 Environment:
Last Closed: 2022-11-02 14:34:49 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2132781    
Bug Blocks:    

Comment 4 Varun Mylaraiah 2022-10-17 11:11:41 UTC
Verified

ansible-core-2.12.2-2.el9_0.x86_64
ansible-freeipa-1.6.3-2.el9_0.noarch

Passed	ansible_freeipa_tests/trust/test_trust.py::TestTrust::test_trust_present_id_range_type_ad_trust_posix

------------------------------ Captured log call -------------------------------
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:433 PUT inventory/trust.hosts
DEBUG    pytest_multihost.host.Host.ansible.cmd52:transport.py:519 RUN ['tee', 'inventory/trust.hosts']
DEBUG    pytest_multihost.host.Host.ansible.cmd52:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:433 PUT trust_present.yml
DEBUG    pytest_multihost.host.Host.ansible.cmd53:transport.py:519 RUN ['tee', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd53:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:442 GET trust_present.yml
DEBUG    pytest_multihost.host.Host.ansible.cmd54:transport.py:519 RUN ['cat', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd54:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:433 PUT trust_present.yml
DEBUG    pytest_multihost.host.Host.ansible.cmd55:transport.py:519 RUN ['tee', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd55:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:397 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/trust.hosts', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:519 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/trust.hosts', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 ansible-playbook [core 2.12.2]
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563   config file = /etc/ansible/ansible.cfg
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563   configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563   ansible python module location = /usr/lib/python3.9/site-packages/ansible
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563   ansible collection location = /root/.ansible/collections:/usr/share/ansible/collections
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563   executable location = /usr/bin/ansible-playbook
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563   python version = 3.9.10 (main, Sep 23 2022, 00:00:00) [GCC 11.2.1 20220127 (Red Hat 11.2.1-9)]
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563   jinja version = 2.11.3
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563   libyaml = True
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 Using /etc/ansible/ansible.cfg as config file
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 Skipping callback 'default', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 Skipping callback 'minimal', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 Skipping callback 'oneline', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 PLAYBOOK: trust_present.yml ****************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 1 plays in trust_present.yml
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 PLAY [Playbook to ensure trust is present with range type ipa-ad-trust-posix.] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 TASK [Gathering Facts] *********************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 task path: /root/trust_present.yml:2
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 ok: [master.ipadomain.test]
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 TASK [ipatrust] ****************************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 task path: /root/trust_present.yml:7
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 changed: [master.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 PLAY RECAP *********************************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 master.ipadomain.test      : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd56:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.master.OpenSSHTransport:transport.py:397 RUN ['kinit', 'admin']
DEBUG    pytest_multihost.host.Host.master.cmd18:transport.py:519 RUN ['kinit', 'admin']
DEBUG    pytest_multihost.host.Host.master.cmd18:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.master.cmd18:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.master.cmd18:transport.py:563 Password for admin: 
DEBUG    pytest_multihost.host.Host.master.cmd18:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.master.OpenSSHTransport:transport.py:397 RUN ['ipa', 'idrange-show', 'WIN2019-2SZ4.TEST_id_range', '--all']
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:519 RUN ['ipa', 'idrange-show', 'WIN2019-2SZ4.TEST_id_range', '--all']
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563   dn: cn=WIN2019-2SZ4.TEST_id_range,cn=ranges,cn=etc,dc=ipadomain,dc=test
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563   Range name: WIN2019-2SZ4.TEST_id_range
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563   First Posix ID of the range: 628200000
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563   Number of IDs in the range: 200000
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563   Domain SID of the trusted domain: S-1-5-21-717111776-773018404-464052736
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563   Range type: Active Directory trust range with POSIX attributes
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563   iparangetyperaw: ipa-ad-trust-posix
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:563   objectclass: ipaIDrange, ipatrustedaddomainrange
DEBUG    pytest_multihost.host.Host.master.cmd19:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:433 PUT inventory/trust.hosts
DEBUG    pytest_multihost.host.Host.ansible.cmd57:transport.py:519 RUN ['tee', 'inventory/trust.hosts']
DEBUG    pytest_multihost.host.Host.ansible.cmd57:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:433 PUT trust_present.yml
DEBUG    pytest_multihost.host.Host.ansible.cmd58:transport.py:519 RUN ['tee', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd58:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:442 GET trust_present.yml
DEBUG    pytest_multihost.host.Host.ansible.cmd59:transport.py:519 RUN ['cat', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd59:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:433 PUT trust_present.yml
DEBUG    pytest_multihost.host.Host.ansible.cmd60:transport.py:519 RUN ['tee', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd60:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:397 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/trust.hosts', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:519 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/trust.hosts', 'trust_present.yml']
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 ansible-playbook [core 2.12.2]
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563   config file = /etc/ansible/ansible.cfg
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563   configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563   ansible python module location = /usr/lib/python3.9/site-packages/ansible
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563   ansible collection location = /root/.ansible/collections:/usr/share/ansible/collections
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563   executable location = /usr/bin/ansible-playbook
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563   python version = 3.9.10 (main, Sep 23 2022, 00:00:00) [GCC 11.2.1 20220127 (Red Hat 11.2.1-9)]
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563   jinja version = 2.11.3
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563   libyaml = True
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 Using /etc/ansible/ansible.cfg as config file
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 Skipping callback 'default', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 Skipping callback 'minimal', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 Skipping callback 'oneline', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 PLAYBOOK: trust_present.yml ****************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 1 plays in trust_present.yml
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 PLAY [Playbook to ensure trust is absent.] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 TASK [Gathering Facts] *********************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 task path: /root/trust_present.yml:2
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 ok: [master.ipadomain.test]
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 TASK [ipatrust] ****************************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 task path: /root/trust_present.yml:7
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 changed: [master.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 PLAY RECAP *********************************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 master.ipadomain.test      : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd61:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.master.OpenSSHTransport:transport.py:397 RUN ['ipa', 'idrange-del', 'WIN2019-2SZ4.TEST_id_range']
DEBUG    pytest_multihost.host.Host.master.cmd20:transport.py:519 RUN ['ipa', 'idrange-del', 'WIN2019-2SZ4.TEST_id_range']
DEBUG    pytest_multihost.host.Host.master.cmd20:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.master.cmd20:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.master.cmd20:transport.py:563 ---------------------------------------------
DEBUG    pytest_multihost.host.Host.master.cmd20:transport.py:563 Deleted ID range "WIN2019-2SZ4.TEST_id_range"
DEBUG    pytest_multihost.host.Host.master.cmd20:transport.py:563 ---------------------------------------------
DEBUG    pytest_multihost.host.Host.master.cmd20:transport.py:217 Exit code: 0

Based on the test result, marking the bug Verified

Comment 9 errata-xmlrpc 2022-11-02 14:34:49 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ansible-freeipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:7327