Red Hat Bugzilla – Bug 1167196
schema update on RHEL-6.6 using latest copy-schema-to-ca.py from RHEL-7.1 build fails
Last modified: 2015-03-05 05:15:45 EST
Description of problem: I found this while verifying https://bugzilla.redhat.com/show_bug.cgi?id=1108199 which requires a RHEL-7.1 replica install with a RHEL-6.6 based master. I copied latest copy-schema-to-ca.py from RHEL-7.1 to RHEL-6.6 master for schema update on RHEL-6.6 master and saw following. [root@dhcp207-202 ~]# python copy-schema-to-ca.py Traceback (most recent call last): File "copy-schema-to-ca.py", line 18, in <module> from ipaplatform import services ImportError: No module named ipaplatform [root@dhcp207-202 ~]# Version-Release number of selected component (if applicable): RHEL-7.1 machine: [root@dhcp207-194 ~]# rpm -q ipa-server ipa-server-4.1.0-7.el7.x86_64 [root@dhcp207-194 ~]# RHEL-6.6 machine: [root@dhcp207-202 ~]# rpm -q ipa-server ipa-server-3.0.0-42.el6.x86_64 [root@dhcp207-202 ~]# How reproducible: Always Steps to Reproduce: 1.Copy copy-schema-to-ca.py to RHEL-6.6 machine and execute it Actual results: [root@dhcp207-202 ~]# python copy-schema-to-ca.py Traceback (most recent call last): File "copy-schema-to-ca.py", line 18, in <module> from ipaplatform import services ImportError: No module named ipaplatform [root@dhcp207-202 ~]# Expected results: Schema should have been updated on RHEL-6.6 machine Additional info: [root@dhcp207-202 ~]# diff copy-schema-to-ca.py_old copy-schema-to-ca.py_new 1c1 < #! /usr/bin/python2 --- > #! /usr/bin/python 18,19c18 < from ipaplatform import services < from ipapython import ipautil, dogtag --- > from ipapython import services, ipautil, dogtag 34d32 < "65ipacertstore.ldif", [root@dhcp207-202 ~]#
Upstream ticket: https://fedorahosted.org/freeipa/ticket/4763
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/e57b7b5e87f6510cce5a56e3f050d93b0fefe760 ipa-4-1: https://fedorahosted.org/freeipa/changeset/f287378534c9b3607b08f71b0c3aa17d2e4008dd
Verified. [root@dhcp207-194 ~]# rpm -q ipa-server ipa-server-4.1.0-9.el7.x86_64 [root@dhcp207-194 ~]# [root@dhcp207-202 ~]# grep -r "from ipapython import services # pylint: disable=no-name-in-module" copy-schema-to-ca.py from ipapython import services # pylint: disable=no-name-in-module [root@dhcp207-202 ~]# [root@dhcp207-202 ~]# python copy-schema-to-ca.py ipa : INFO Installed /etc/dirsrv/slapd-PKI-IPA//schema/60kerberos.ldif ipa : INFO Installed /etc/dirsrv/slapd-PKI-IPA//schema/60samba.ldif ipa : INFO Installed /etc/dirsrv/slapd-PKI-IPA//schema/60ipaconfig.ldif ipa : INFO Installed /etc/dirsrv/slapd-PKI-IPA//schema/60basev2.ldif ipa : INFO Installed /etc/dirsrv/slapd-PKI-IPA//schema/60basev3.ldif ipa : INFO Installed /etc/dirsrv/slapd-PKI-IPA//schema/60ipadns.ldif ipa : INFO Installed /etc/dirsrv/slapd-PKI-IPA//schema/61kerberos-ipav3.ldif ipa : INFO Installed /etc/dirsrv/slapd-PKI-IPA//schema/65ipasudo.ldif ipa : INFO Installed /etc/dirsrv/slapd-PKI-IPA//schema/05rfc2247.ldif ipa : INFO Restarting CA DS ipa : INFO Schema updated successfully [root@dhcp207-202 ~]#
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0442.html