Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 442802

Summary:	ipa-server-install ldappasswd fail
Product:	[Retired] freeIPA	Reporter:	Harry Noble <hnoble>
Component:	ipa-server	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED WORKSFORME	QA Contact:	Chandrasekar Kannan <ckannan>
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	benl
Target Milestone:	---
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-05-29 14:41:53 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	429034

Description Harry Noble 2008-04-16 21:21:54 UTC

Description of problem:
During install ldappasswd fails to change admin password leaving kinit admin to
fail with Preauthentication failed due to password not being the same.

log message has: ldap_start_tls_s failed: (Can't connect to the LDAP server)
DEBUG Unable to set admin password Command '/usr/lib/mozldap/ldappasswd -D
cn=Directory Manager -w example -P /etc/dirsrv/slapd-EXAMPLE-COM//cert8.db -ZZZ
-s example uid=admin,cn=sysaccounts,cn=etc,dc=example,dc=com' returned non-zero
exit status 91

Version-Release number of selected component (if applicable):
current ipa-server version from testing.
ipa-server-install --version reports ipa-server-install .1


Additional info:
Fixed by adding "" around cn=Directory Manager

Comment 2 Rob Crittenden 2008-05-05 14:59:59 UTC

Just to be clear, you did something like this?

diff --git a/ipa-server/ipaserver/dsinstance.py b/ipa-server/ipaserver/dsinstanc
index a56a8a8..d217123 100644
--- a/ipa-server/ipaserver/dsinstance.py
+++ b/ipa-server/ipaserver/dsinstance.py
@@ -361,7 +361,7 @@ class DsInstance(service.Service):
         else:
             app = "/usr/lib/mozldap/ldappasswd"
         args = [app,
-                "-D", "cn=Directory Manager", "-w", self.dm_password,
+                "-D", "\"cn=Directory Manager\"", "-w", self.dm_password,
                 "-P", dirname+"/cert8.db", "-ZZZ", "-s", password,
                 "uid=admin,cn=sysaccounts,cn=etc,"+self.suffix]
         try:

Comment 3 Harry Noble 2008-05-05 19:22:11 UTC

No I run the code by itself did not patch the source.

Comment 4 Rob Crittenden 2008-05-05 19:58:36 UTC

What I meant was: did you make a similar change to dsinstance.py on your system
to make the installation successful?

Comment 5 Rob Crittenden 2008-05-09 18:09:08 UTC

I can't reproduce this behavior. Is it possible for you to try the install again
and see if it happens again for you?

Did you install this from source or from the Fedora repos?

Comment 6 Rob Crittenden 2008-05-14 02:57:56 UTC

Sorry, I had set the NEEDINFO wrong.

I can't reproduce this and need more details on what it is you changed to make
it work on your system.

Comment 7 Rob Crittenden 2008-05-29 14:41:53 UTC

Closing this for now, I can't reproduce this. It may have been fixed as a
side-effect of another change, I can't be sure.