Bug 746229

Summary: ipa-server-install fails with latest dev build
Product: Red Hat Enterprise Linux 6 Reporter: Namita Soman <nsoman>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: IDM QE LIST <seceng-idm-qe-list>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 6.1CC: jgalipea, mkosek
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-2.1.3-1.el6 Doc Type: Bug Fix
Doc Text:
Do not document
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-12-06 18:43:06 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 748554    

Description Namita Soman 2011-10-14 12:59:49 UTC
Description of problem:
Running an install using command:
ipa-server-install --setup-dns --forwarder=10.14.63.12 --hostname=qe-blade-01.testrelm -r TESTRELM -n testrelm -p <xxx> -P <xxx> -a <xxx> -U



throws error:
Configuring Kerberos KDC: Estimated time 30 seconds
  [1/14]: setting KDC account password
  [2/14]: adding sasl mappings to the directory
  [3/14]: adding kerberos entries to the DS
  [4/14]: adding default ACIs
  [5/14]: configuring KDC
Unexpected error - see ipaserver-install.log for details:
 'NoneType' object has no attribute 'find'



ipaserver-install.log has:
2011-10-14 08:18:54,618 DEBUG   [5/14]: configuring KDC
2011-10-14 08:18:54,619 DEBUG Backing up system configuration file '/var/kerberos/krb5kdc/kdc.conf'
2011-10-14 08:18:54,619 DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2011-10-14 08:18:54,620 DEBUG Backing up system configuration file '/etc/krb5.conf'
2011-10-14 08:18:54,620 DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2011-10-14 08:18:54,628 DEBUG Backing up system configuration file '/usr/share/ipa/html/krb5.ini'
2011-10-14 08:18:54,629 DEBUG   -> Not backing up - '/usr/share/ipa/html/krb5.ini' doesn't exist
2011-10-14 08:18:54,629 DEBUG Backing up system configuration file '/usr/share/ipa/html/krb.con'
2011-10-14 08:18:54,629 DEBUG   -> Not backing up - '/usr/share/ipa/html/krb.con' doesn't exist
2011-10-14 08:18:54,629 DEBUG Backing up system configuration file '/usr/share/ipa/html/krbrealm.con'
2011-10-14 08:18:54,629 DEBUG   -> Not backing up - '/usr/share/ipa/html/krbrealm.con' doesn't exist
2011-10-14 08:18:55,152 DEBUG args=kdb5_ldap_util -D uid=kdc,cn=sysaccounts,cn=etc,dc=testrelm create -s -r TESTRELM -subtrees dc=testrelm -sscope sub
2011-10-14 08:18:55,152 DEBUG stdout=Password for "uid=kdc,cn=sysaccounts,cn=etc,dc=testrelm": 
Initializing database for realm 'TESTRELM'
You will be prompted for the database Master Password.
It is important that you NOT FORGET this password.
Enter KDC database master key: 
Re-enter KDC database master key to verify: 

2011-10-14 08:18:55,152 DEBUG stderr=
2011-10-14 08:18:55,162 DEBUG args=klist -V
2011-10-14 08:18:55,162 DEBUG stdout=Kerberos 5 version 1.9

2011-10-14 08:18:55,162 DEBUG stderr=
2011-10-14 08:18:55,163 DEBUG Backing up system configuration file '/etc/sysconfig/krb5kdc'
2011-10-14 08:18:55,163 DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2011-10-14 08:18:55,171 DEBUG 'NoneType' object has no attribute 'find'
  File "/usr/sbin/ipa-server-install", line 1151, in <module>
    sys.exit(main())

  File "/usr/sbin/ipa-server-install", line 1036, in main
    subject_base=options.subject)

  File "/usr/lib/python2.6/site-packages/ipaserver/install/krbinstance.py", line 180, in create_instance
    self.start_creation("Configuring Kerberos KDC", 30)

  File "/usr/lib/python2.6/site-packages/ipaserver/install/service.py", line 248, in start_creation
    method()

  File "/usr/lib/python2.6/site-packages/ipaserver/install/krbinstance.py", line 371, in __create_instance
    appendvars=appendvars)

  File "/usr/lib/python2.6/site-packages/ipapython/ipautil.py", line 1281, in backup_config_and_replace_variables
    old_values = config_replace_variables(filepath, replacevars, appendvars)

  File "/usr/lib/python2.6/site-packages/ipapython/ipautil.py", line 1238, in config_replace_variables
    if value.find(appendvars[option]) == -1:



Version-Release number of selected component (if applicable):
ipa-server-2.1.2-100.20111014T0057zgit16fc9f8.el6.x86_64

How reproducible:
always

Steps to Reproduce:
1. ipa-server-install --setup-dns --forwarder=10.14.63.12 --hostname=qe-blade-01.testrelm -r TESTRELM -n testrelm -p <xxx> -P <xxx> -a <xxx> -U


Actual results:
throws error:
 'NoneType' object has no attribute 'find'

Expected results:
successful install

Additional info:

Comment 2 Rob Crittenden 2011-10-14 13:28:54 UTC
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/1983

Comment 3 Rob Crittenden 2011-10-14 13:56:28 UTC
fixed upstream

master: f4ec8a2fa45c630310d18cc36b8da459103b31cc

ipa-2-1: c75b177dc6de395a377e56d772fc0b0762ec4814

Comment 4 Rob Crittenden 2011-10-14 14:30:49 UTC
Found another issue. A python 2.7 feature is being used:

2011-10-14 10:09:34,803 DEBUG 'dict' object has no attribute 'viewkeys'
  File "/usr/sbin/ipa-server-install", line 1151, in <module>
    sys.exit(main())

  File "/usr/sbin/ipa-server-install", line 1036, in main
    subject_base=options.subject)

  File "/usr/lib/python2.6/site-packages/ipaserver/install/krbinstance.py", line 180, in create_instance
    self.start_creation("Configuring Kerberos KDC", 30)

  File "/usr/lib/python2.6/site-packages/ipaserver/install/service.py", line 248, in start_creation
    method()

  File "/usr/lib/python2.6/site-packages/ipaserver/install/krbinstance.py", line 371, in __create_instance
    appendvars=appendvars)

  File "/usr/lib/python2.6/site-packages/ipapython/ipautil.py", line 1283, in backup_config_and_replace_variables
    old_values = config_replace_variables(filepath, replacevars, appendvars)

  File "/usr/lib/python2.6/site-packages/ipapython/ipautil.py", line 1247, in config_replace_variables
    newvars_view = new_vars.viewkeys() - old_values.viewkeys()

Comment 5 Rob Crittenden 2011-10-14 15:36:31 UTC
Fixed upstream

master: 447ce62966b70a2af02f21cfd86e8d4886bd26cd

ipa-2-1: cc0e30a1bbab1ee9823a1a80fe75654df2049a47

Comment 7 Namita Soman 2011-10-26 11:41:42 UTC
Verified can install ipa server, using ipa-server-2.1.3-3.el6.x86_64

Comment 8 Martin Kosek 2011-10-31 16:24:55 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Do not document

Comment 9 errata-xmlrpc 2011-12-06 18:43:06 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2011-1533.html