Bug 746298

Summary: installation fails if sssd.conf exists and is already configured
Product: Red Hat Enterprise Linux 6 Reporter: Rob Crittenden <rcritten>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: IDM QE LIST <seceng-idm-qe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.1CC: jgalipea, mkosek
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-2.1.3-1.el6 Doc Type: Bug Fix
Doc Text:
Do not document
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-12-06 18:43:11 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 748554    

Description Rob Crittenden 2011-10-14 17:25:07 UTC
Description of problem:

Been messing with the client installer all morning including a lot of failures. I'm guessing some previous configuration got left hanging around.

# ipa-client-install 
Discovery was successful!
Hostname: panther.greyoak.com
Realm: GREYOAK.COM
DNS Domain: greyoak.com
IPA Server: doberman.greyoak.com
BaseDN: dc=greyoak,dc=com


Continue to configure the system with these values? [no]: y
User authorized to enroll computers: admin
Synchronizing time with KDC...
Unable to sync time with IPA NTP server, assuming the time is in sync.
Password for admin: 

Enrolled in IPA realm GREYOAK.COM
Created /etc/ipa/default.conf
Traceback (most recent call last):
  File "/usr/sbin/ipa-client-install", line 1271, in <module>
    sys.exit(main())
  File "/usr/sbin/ipa-client-install", line 1258, in main
    rval = install(options, env, fstore, statestore)
  File "/usr/sbin/ipa-client-install", line 1096, in install
    if configure_sssd_conf(fstore, cli_realm, cli_domain, cli_server, options):
  File "/usr/sbin/ipa-client-install", line 686, in configure_sssd_conf
    domain = sssdconfig.new_domain(cli_domain)
  File "/usr/lib/python2.7/site-packages/SSSDConfig.py", line 1564, in new_domain
    raise DomainAlreadyExistsError
SSSDConfig.DomainAlreadyExistsError

We should rename the bad sssd.conf and create a new one in this case. If the preserve option is set we should bail out.

Comment 1 Rob Crittenden 2011-10-14 17:30:28 UTC
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/1989

Comment 2 Rob Crittenden 2011-10-14 18:39:00 UTC
master: 470576a832b0cbb35a2ebdd565dca793f2c86b00

ipa-2-1: 3506dc8ed4e59f08c1094266482420744630f757

Comment 4 Jenny Severance 2011-10-26 19:28:03 UTC
verified:
had configured sssd.conf in place ...

# ipa-client-install --hostname ipaclient.testrelm
Discovery was successful!
Hostname: ipaclient.testrelm
Realm: TESTRELM
DNS Domain: testrelm
IPA Server: dhcp-100-18-170.testrelm
BaseDN: dc=testrelm


Continue to configure the system with these values? [no]: yes
User authorized to enroll computers: admin
Synchronizing time with KDC...
Password for admin@TESTRELM: 

Enrolled in IPA realm TESTRELM
Created /etc/ipa/default.conf
Domain testrelm is already configured in existing SSSD config, creating a new one.
The old /etc/sssd/sssd.conf is backed up and will be restored during uninstall.
Configured /etc/sssd/sssd.conf
Configured /etc/krb5.conf for IPA realm TESTRELM
Warning: Hostname (ipaclient.testrelm) not found in DNS
DNS server record set to: ipaclient.testrelm -> 10.16.18.183
SSSD enabled
NTP enabled
Client configuration complete.

verision:
ipa-client-2.1.3-4.el6.x86_64
ipa-server-2.1.3-4.el6.x86_64

ipa-client-install --uninstall  replaced sssd.conf with the one already configured.

Comment 5 Martin Kosek 2011-10-31 16:20:05 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Do not document

Comment 6 errata-xmlrpc 2011-12-06 18:43:11 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2011-1533.html