Bug 2188135

Summary: IPATrustCatalogCheck displays msg: Look up of {key} {error}
Product: Red Hat Enterprise Linux 9 Reporter: Rob Crittenden <rcritten>
Component: ipa-healthcheckAssignee: Rob Crittenden <rcritten>
Status: VERIFIED --- QA Contact: Michal Polovka <mpolovka>
Severity: low Docs Contact:
Priority: low    
Version: 9.2CC: abokovoy, aboscatt, atikhono, bthekkep, dcamilof, ekeck, fcami, frenaud, grajaiya, lslebodn, mpolovka, mzidek, nsuryawa, pbrezina, pkettman, rcritten, sbose, sumenon, tscherf, vmishra
Target Milestone: rcKeywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-healthcheck-0.12-2.el9 Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: 1775199 Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1775199    
Bug Blocks:    

Description Rob Crittenden 2023-04-19 20:10:42 UTC 
+++ This bug was initially created as a clone of Bug #1775199 +++

Description of problem: IPATrustCatalogCheck displays msg: Look up of {key} {error} 

Version-Release number of selected component (if applicable):
ipa-server-4.8.0-11.module+el8.1.0+4247+9f3fd721.x86_64
ipa-healthcheck-0.3-4.module+el8.1.0+4098+f286395e.noarch

How reproducible: Always

Steps to Reproduce:
1. Install IPA server and establish trust with AD
2. Run the command 
#ipa-healthcheck --source ipahealthcheck.ipa.trust
3. Check the IPATrustCatalogCheck output.

Actual results: 
[root@master ~]# ipa-healthcheck --source ipahealthcheck.ipa.trust
[
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustAgentCheck",
    "result": "SUCCESS",
    "uuid": "a9260ce9-2d2f-47b7-9850-f98fe334c633",
    "when": "20191121135331Z",
    "duration": "0.065208",
    "kw": {}
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustDomainsCheck",
    "result": "SUCCESS",
    "uuid": "4c23c517-ff95-457d-a9b6-5b3338f2025e",
    "when": "20191121135331Z",
    "duration": "0.216696",
    "kw": {
      "key": "domain-list",
      "sssd_domains": "win2k16.test",
      "trust_domains": "win2k16.test"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustDomainsCheck",
    "result": "SUCCESS",
    "uuid": "42a2ab36-2016-415c-a324-c1fd3c4f10f8",
    "when": "20191121135331Z",
    "duration": "0.249556",
    "kw": {
      "key": "domain-status",
      "domain": "win2k16.test"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustCatalogCheck",
    "result": "WARNING",
    "uuid": "5a974ae0-b3d8-4f6e-b642-6b49dabbd81d",
    "when": "20191121135331Z",
    "duration": "0.005240",
    "kw": {
      "key": "S-1-5-21-720774695-2048269649-614676435",
      "error": "returned nothing",
      "msg": "Look up of {key} {error}"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustCatalogCheck",
    "result": "SUCCESS",
    "uuid": "a7c99991-7b6a-4412-8890-70f827b928c7",
    "when": "20191121135331Z",
    "duration": "0.049028",
    "kw": {
      "key": "AD Global Catalog",
      "domain": "win2k16.test"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustCatalogCheck",
    "result": "SUCCESS",
    "uuid": "5fd7d270-4bc0-49b2-92de-0cf81cc7c343",
    "when": "20191121135331Z",
    "duration": "0.049066",
    "kw": {
      "key": "AD Domain Controller",
      "domain": "win2k16.test"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPAsidgenpluginCheck",
    "result": "SUCCESS",
    "uuid": "76a3fb31-360e-4e06-94f1-bdf123873d46",
    "when": "20191121135331Z",
    "duration": "0.001068",
    "kw": {
      "key": "IPA SIDGEN"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPAsidgenpluginCheck",
    "result": "SUCCESS",
    "uuid": "d05e8e4d-1466-4b89-a4ed-355007ed0649",
    "when": "20191121135331Z",
    "duration": "0.001447",
    "kw": {
      "key": "ipa-sidgen-task"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustAgentMemberCheck",
    "result": "SUCCESS",
    "uuid": "a7e3bc7e-5d8d-4fc8-8175-064fee1a5bc6",
    "when": "20191121135331Z",
    "duration": "0.001125",
    "kw": {
      "key": "master.rhel81.test"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustControllerPrincipalCheck",
    "result": "SUCCESS",
    "uuid": "c0f97127-fcdb-48f3-be85-42166caca717",
    "when": "20191121135331Z",
    "duration": "0.000465",
    "kw": {
      "key": "cifs/master.rhel81.test"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustControllerServiceCheck",
    "result": "SUCCESS",
    "uuid": "73e66bba-9c72-480a-b079-d81c569f5c1b",
    "when": "20191121135331Z",
    "duration": "0.000442",
    "kw": {
      "key": "ADTRUST"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustControllerConfCheck",
    "result": "SUCCESS",
    "uuid": "aa5f115e-7d61-4861-a4a4-825798f6c125",
    "when": "20191121135331Z",
    "duration": "0.061139",
    "kw": {
      "key": "net conf list"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustControllerGroupSIDCheck",
    "result": "SUCCESS",
    "uuid": "a059d062-d23d-41bb-9a05-110b3a07c798",
    "when": "20191121135331Z",
    "duration": "0.000714",
    "kw": {
      "rid": "S-1-5-21-3710514944-151342278-2953701344-512",
      "key": "ipantsecurityidentifier"
    }
  },
  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustPackageCheck",
    "result": "SUCCESS",
    "uuid": "025bb8ce-43d4-4db3-b5bb-1203807dd4bf",
    "when": "20191121135331Z",
    "duration": "0.000030",
    "kw": {}
  }
]

Expected results: Fix the look up key error.

Additional info:

--- Additional comment from Rob Crittenden on 2023-04-19 02:22:33 UTC ---

upstream 30471ebdc9fe5871c115ca06f78a415275a320e6 in tag 0.12.
Comment 5 Michal Polovka 2023-04-28 08:21:28 UTC 
Verified using nightly RHEL9.3 image with ipa-healthcheck-0.12-2.el9.noarch and automation present at  test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust::test_ipahealthcheck_trust_catalogcheck

Passed 	test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust::test_ipahealthcheck_trust_catalogcheck

Full log available at https://idm-artifacts.psi.redhat.com/idm-ci/idm-ci/trigger/prod/trigger/run/null/2109/report.html
Marking as Verified.