Bug 881874

Summary:	Please remove /etc/request-key.d/id_resolver.conf from the installer image
Product:	[Fedora] Fedora	Reporter:	Orion Poplawski <orion>
Component:	lorax	Assignee:	Brian Lane <bcl>
Status:	CLOSED WONTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	18	CC:	bcl, g.kaviyarasu, jonathan, mgracik, sbueno, vanmeeuwen+fedora
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-02-04 18:46:44 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Orion Poplawski 2012-11-29 17:49:09 UTC

Description of problem:

The presence of /etc/request-key.d/id_resolver.conf in the installer image prevents one from running rpc.idmapd in the %post environment.  This is because requests for idmapping are sent to request-key running in the installer environment first.

Workaround is to remove it in %pre or in %post --nochroot.

Comment 1 Martin Gracik 2012-11-30 09:50:07 UTC

And isn't the file required by something else? I'm not sure if removing it won't break anything else.

Your workaround is simple enough, and I'm reluctant to removing files, if I'm not sure how important they are.

Comment 2 Orion Poplawski 2012-11-30 20:57:08 UTC

As I understand it, the sole purpose of the file is to configure name-id mapping for nfsv4.  For this to be of any practical value the nss configuration of the installer would need to match that of the target installed system.  Your options seem to be to make use of the installed system configuration (ie in the %post chroot) or to also configure the installer environment (e.g. running authconfig + sssd in that environment) and use that.  If the former, you need to remove the request-key configuration so that it doesn't intercept the kernel up calls.

The workaround is fairly simple, but it took me a long time to figure out what the issue was and why my previous configuration (running rpc.idmapd in %post) no longer worked.

Certainly worth some thought to get it right though.

Comment 3 Fedora Admin XMLRPC Client 2013-02-04 15:04:42 UTC

This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 4 Brian Lane 2013-02-04 18:46:44 UTC

I'd rather not depend on behavior requiring removal of config files. We're trying to keep the environment as close to normal as possible and in general the file removal actions are there to save space.