Bug 676048

Summary: Installation within IPA hangs
Product: Red Hat Enterprise Linux 6 Reporter: Matthew Harmsen <mharmsen>
Component: pki-coreAssignee: Andrew Wnuk <awnuk>
Status: CLOSED ERRATA QA Contact: Chandrasekar Kannan <ckannan>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.1CC: aakkiang, alee, awnuk, benl, dpal, jgalipea, rcritten, syeghiay
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: pki-core-9.0.3-3.el6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 673638 Environment:
Last Closed: 2011-05-19 13:43:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 673638    
Bug Blocks:    
Attachments:
Description Flags
proposed patch
none
proposed patch none

Description Matthew Harmsen 2011-02-08 17:45:17 UTC 
+++ This bug was initially created as a clone of Bug #673638 +++

Description of problem:

I've only seen this twice but the symptoms have been the same. The last entry in the debug log is:

[28/Jan/2011:19:09:49][http-9445-2]: Checking wait_dn cn=index1160589769, cn=index, cn=tasks, cn=config

Version-Release number of selected component (if applicable):

pki-ca-9.0.1-2.svn.1762M.20110121T1347z.fc14.noarch

How reproducible:

Sometimes

Steps to Reproduce:
1. ipa-server-install

--- Additional comment from rcritten on 2011-01-28 22:34:37 EST ---

Created attachment 475915 [details]
IPA install log

--- Additional comment from rcritten on 2011-01-28 22:35:29 EST ---

Created attachment 475916 [details]
debug log

--- Additional comment from mharmsen on 2011-02-01 22:53:09 EST ---

Created attachment 476515 [details]
Check for 'undefined' variables . . .

Although we have been unable to replicate this issue, this fix should at least eliminate the following messages:


2011-01-28 19:08:33,539 INFO stderr=Use of uninitialized value $groupname in string ne at /usr/bin/pkicreate line 1183.
Use of uninitialized value $username in string ne at /usr/bin/pkicreate line 1217.

--- Additional comment from mharmsen on 2011-02-01 22:59:51 EST ---

Created attachment 476516 [details]
Check for 'undefined' variables . . .

Although we have been unable to replicate this issue, this fix should at least
eliminate the following messages:


2011-01-28 19:08:33,539 INFO stderr=Use of uninitialized value $groupname in
string ne at /usr/bin/pkicreate line 1183.
Use of uninitialized value $username in string ne at /usr/bin/pkicreate line
1217.

--- Additional comment from mharmsen on 2011-02-01 23:04:22 EST ---

# cd pki

# svn status | grep -v ^$ | grep -v ^P | grep -v ^X | grep -v ^?
M       base/setup/pkicreate

# svn commit
Sending        base/setup/pkicreate
Transmitting file data .
Committed revision 1808.
Comment 2 Ade Lee 2011-02-10 21:24:18 UTC 
So, whats going on here is that the database is being populated, and the VLV
indexes are being created. At this point, we wait for the VLV indexes to
complete before continuing.

We check as to whether the VLV indexes are complete by looking for a particular
entry and checking an attribute within that entry. If the entry does not exist,
then we sleep for 1 second and recheck.

In this case, its clear that something went wrong in the directory server to
prevent the index from being created. Unfortunately, there are no DS logs to
indicate what that might be.

So, there is insufficient information to reproduce this bug.  I will, however,
add a log message to this code to try to provide more information, should this
situation recur.
Comment 3 Andrew Wnuk 2011-02-13 23:14:20 UTC 
Created attachment 478520 [details]
proposed patch
Comment 4 Andrew Wnuk 2011-02-13 23:22:19 UTC 
Created attachment 478522 [details]
proposed patch

reviewed in bug #673638
Comment 5 Andrew Wnuk 2011-02-13 23:26:35 UTC 
svn commit
Sending        base/ca/shared/conf/vlvtasks.ldif
Sending        base/common/src/com/netscape/cms/servlet/csadmin/DatabasePanel.java
Transmitting file data ..
Committed revision 1846.
Comment 6 Andrew Wnuk 2011-02-13 23:29:38 UTC 
svn commit base/kra/shared/conf/vlvtasks.ldif
Sending        base/kra/shared/conf/vlvtasks.ldif
Transmitting file data .
Committed revision 1847.
Comment 10 Jenny Severance 2011-04-18 17:04:17 UTC 
Verified with both master and a slave

Version
pki-ca-9.0.3-10.el6.noarch
ipa-server-2.0.0-21.el6.x86_64


install_log:

2011-04-15 16:05:02,048 DEBUG   [2/17]: creating pki-ca instance
2011-04-15 16:05:48,212 DEBUG args=/usr/bin/pkicreate -pki_instance_root /var/lib -pki_instance_name pki-ca -subsystem_type ca -agent_secure_port 9443 -ee_secure_port 9444 -admin_secure_port 9445 -ee_secure_client_auth_port 9446 -unsecure_port 9180 -tomcat_server_port 9701 -redirect conf=/etc/pki-ca -redirect logs=/var/log/pki-ca
2011-04-15 16:05:48,213 DEBUG stdout=PKI instance creation Utility ...

Capturing installation information in /var/log/pki-ca-install.log

PKI instance creation completed ...

Installation information recorded in /var/log/pki-ca-install.log.
Before proceeding with the configuration, make sure 
the firewall settings of this machine permit proper 
access to this subsystem.
Comment 11 errata-xmlrpc 2011-05-19 13:43:58 UTC 
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHEA-2011-0627.html