Bug 704638

Summary: Intermittent Replica Install Failure - CA Cert Invalid
Product: Red Hat Enterprise Linux 6 Reporter: Jenny Severance <jgalipea>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED WORKSFORME QA Contact: Chandrasekar Kannan <ckannan>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 6.1CC: benl, dpal
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-08-16 17:02:25 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Jenny Severance 2011-05-13 20:05:52 UTC
Description of problem:

ipareplica_install.log

2011-05-13 08:55:29,641 DEBUG stderr=
2011-05-13 08:55:30,535 DEBUG args=/sbin/service pki-cad start 
2011-05-13 08:55:30,537 DEBUG stdout=Starting pki-ca: ESC[60G[ESC[0;32m  OK  ESC[0;39m]

2011-05-13 08:55:30,537 DEBUG stderr=
2011-05-13 08:55:30,745 DEBUG Can't contact LDAP server: TLS error -8172:Unknown code ___f 20
  File "/usr/sbin/ipa-replica-install", line 540, in <module>
    main()

  File "/usr/sbin/ipa-replica-install", line 489, in main
    install_dns_records(config, options)

  File "/usr/sbin/ipa-replica-install", line 314, in install_dns_records
    tls_cacertfile=CACERT)

  File "/usr/lib/python2.6/site-packages/ipalib/backend.py", line 62, in connect
    conn = self.create_connection(*args, **kw)

  File "/usr/lib/python2.6/site-packages/ipalib/encoder.py", line 188, in new_f
    return f(*new_args, **kwargs)

  File "/usr/lib/python2.6/site-packages/ipaserver/plugins/ldap2.py", line 336, in create_connection
    _handle_errors(e, **{})

  File "/usr/lib/python2.6/site-packages/ipaserver/plugins/ldap2.py", line 117, in _handle_errors
    raise errors.DatabaseError(desc=desc, info=info


Version-Release number of selected component (if applicable):
ipa-server-2.0.0-23.1.el6.x86_64

How reproducible:
I have only seen this once.

Steps to Reproduce:
1.  install master with integrated DNS
2.  create replica package
3.  install replica with integrated DNS
  
Actual results:


Expected results:


Additional info:

Comment 2 Dmitri Pal 2011-05-13 22:16:45 UTC
https://fedorahosted.org/freeipa/ticket/1230

Comment 5 Rob Crittenden 2011-08-16 17:02:25 UTC
Unable to duplicate, please re-open if it recurs.