Bug 854325

Summary:	Time synchronization is disabled in ipa-client-install
Product:	Red Hat Enterprise Linux 6	Reporter:	Dmitri Pal <dpal>
Component:	ipa	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED ERRATA	QA Contact:	Namita Soman <nsoman>
Severity:	unspecified	Docs Contact:
Priority:	medium
Version:	6.4	CC:	mgregg, mkosek, nsoman
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ipa-3.0.0-6.el6	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-02-21 09:17:31 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Dmitri Pal 2012-09-04 16:08:28 UTC

This bug is created as a clone of upstream ticket:
https://fedorahosted.org/freeipa/ticket/3048

On client install, ntpdate is called in debug mode (-d), which disables its functionality. This means install will fail if clocks are not synced.

Comment 1 Martin Kosek 2012-09-04 16:35:35 UTC

Fixed upstream:
master: https://fedorahosted.org/freeipa/changeset/5bcbe1df3719eab06eebd930bef0077c34fc5b38
ipa-3-0: https://fedorahosted.org/freeipa/changeset/a98def863d03e4d978e63ab42eec570fb3629bf8

Comment 5 Rob Crittenden 2012-12-06 13:48:51 UTC

The version banner is printed when the -v (verbose) flag is used. This is expected.

Comment 6 Michael Gregg 2012-12-06 16:48:04 UTC

That does seem to be the case. 

Any ideas on how I would be able to detect when ntpdate is called with the debug flag? I am supposed to write a test to check.

Comment 7 Rob Crittenden 2012-12-06 19:14:04 UTC

You could modify the system time and see if it gets fixed after ipa-client-install. This wouldn't happen with the debug flag.

Comment 8 Michael Gregg 2012-12-06 23:06:47 UTC

That sounds like a good plan. I'll go implement it.

Comment 9 Michael Gregg 2012-12-14 03:08:17 UTC

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipa-client-install-33-A [Negative] Verify that ntpdate was not called with the -d option
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [19:54:05] ::  Current hour is 19, Machine time is Mon Dec 10 19:54:05 EST 2012
19
:: [   PASS   ] :: Make sure the machine time contains the current hour.
'71fd1967-add8-42fb-a0a8-87d6ce19d5a8'
ipa-client-install-33-A-Negative-Verify-that-ntpdate-was-not-called-with-the-d-option result: PASS
   metric: 0
   Log: /tmp/beakerlib-5661/journal.txt
    Info: Searching AVC errors produced since 1355187245.41 (Mon Dec 10 19:54:05 2012)
     Searching logs...
     Info: No AVC messages found.
 Writing to /mnt/testarea/tmp.S8JHEh
:
   AvcLog: /mnt/testarea/tmp.S8JHEh

Comment 11 errata-xmlrpc 2013-02-21 09:17:31 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2013-0528.html