Bug 675336

Summary: ipa-client RPM does not pull in proper dependencies
Product: Red Hat Enterprise Linux 6 Reporter: Erinn Looney-Triggs <erinn.looneytriggs>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: Chandrasekar Kannan <ckannan>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.0CC: benl, dpal, jgalipea, nsoman, syeghiay
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: ipa-2.0.0-12.el6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-05-19 13:44:24 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Erinn Looney-Triggs 2011-02-04 23:10:45 UTC
Description of problem:
I don't know RPMs all that well but it looks like the ipa-client rpm for RHLE 6 x64 (at least) doesn't require nss-tools which provides certutil which is required for ipa-client-install to run. 

Version-Release number of selected component (if applicable):

ipa-client-2.0-9.el6.x86_64

How reproducible:

Don't have nss-tools installed
Try to run ipa-client-install


Additional info:
Created /etc/ipa/default.conf
Configured /etc/sssd/sssd.conf
Traceback (most recent call last):
  File "/usr/sbin/ipa-client-install", line 756, in <module>
    sys.exit(main())
  File "/usr/sbin/ipa-client-install", line 675, in main
    run(["/usr/bin/certutil", "-A", "-d", "/etc/pki/nssdb", "-n", "IPA CA", "-t", "CT,C,C", "-a", "-i", "/etc/ipa/ca.crt"])
  File "/usr/lib/python2.6/site-packages/ipaclient/ipapython/ipautil.py", line 122, in run
    p = subprocess.Popen(args, stdout=subprocess.PIPE, stderr=subprocess.PIPE, close_fds=True)
  File "/usr/lib64/python2.6/subprocess.py", line 633, in __init__
    errread, errwrite)
  File "/usr/lib64/python2.6/subprocess.py", line 1139, in _execute_child
    raise child_exception

Comment 2 Dmitri Pal 2011-02-04 23:36:46 UTC
https://fedorahosted.org/freeipa/ticket/922

Comment 6 Namita Soman 2011-04-08 15:22:42 UTC
verified.

ran a yum install ipa-client
which resolved dependencies and installed nss-tools also

Installing:
 ipa-client                          x86_64                         2.0.0-20.el6                          beaker-Client                          87 k
Installing for dependencies:
 nss-tools                           x86_64                         3.12.9-8.el6                          beaker-Client                         748 k

Comment 7 errata-xmlrpc 2011-05-19 13:44:24 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHEA-2011-0631.html