Created attachment 1079191 [details] crash detailed info Description of problem: Observed this crash while executing B&R automated regression run. Crash shows time that it occured at 08:45:45 AM but when i looked into the beaker logs, i found that at that time ipa installation was in progress. Point to note is that it was in second test case. In First test case, i did install/full backup/uninstall/install/full restore/uninstall. snip from crash: ================ time: Thu 01 Oct 2015 08:54:45 AM EDT cmdline: /usr/bin/python2 /usr/libexec/ipa/ipa-dnskeysync-replica uid: 993 (ods) abrt_version: 2.1.11 dso_list: ipa-python-4.2.0-12.el7.x86_64 event_log: executable: /usr/libexec/ipa/ipa-dnskeysync-replica hostname: ibm-dx360m4-01.testrelm.test kernel: 3.10.0-320.el7.x86_64 last_occurrence: 1443704085 pid: 16985 pkg_arch: x86_64 pkg_epoch: 0 pkg_name: ipa-server pkg_release: 12.el7 pkg_version: 4.2.0 runlevel: N 3 username: ods beaker log snip with timestamp: =============================== :: [ 08:49:57 ] :: ipa-server-4.2.0-12.el7.x86_64 :: [ BEGIN ] :: Running ' /usr/sbin/ipa-server-install --setup-dns --forwarder=10.16.36.29 --hostname=ibm-dx360m4-01.testrelm.test -r TESTRELM.TEST -n testrelm.test -p xxxxxxxx -a xxxxxxxx --ip-address=10.16.67.102 -U' .... Be sure to back up the CA certificates stored in /root/cacert.p12 These files are required to create replicas. The password for these files is the Directory Manager password :: [ PASS ] :: Command ' /usr/sbin/ipa-server-install --setup-dns --forwarder=10.16.36.29 --hostname=ibm-dx360m4-01.testrelm.test -r TESTRELM.TEST -n testrelm.test -p xxxxxxxx -a xxxxxxxx --ip-address=10.16.67.102 -U' (Expected 0, got 0) :: [ 08:56:29 ] :: Check ldap_sasl_authid is not added to sssd.conf :: [ 08:56:30 ] :: Verifying BZ 878420 Version-Release number of selected component (if applicable): ipa-server.x86_64 0:4.2.0-12.el7 How reproducible: Steps to Reproduce: 1.See description section Actual results: Crash seen Expected results: No crash Additional info: Please find the attached crash detailed info
Kaleem, could you attach a DS error and access log from the time of the crash?
This is most likely caused by weirness in IPA ldap2 class - DS did not respond in 2 second limit for configuration refresh and that caused this error. This issue will manifest itself randomly. To workaround that we can easily change DNSSEC daemons to use different code from IPA framework to avoid the problematic query from withing ldap2 class. Patch was sent to the ipa-devel list.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/5342
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/0b797da56095801bfa80653465c04bae0809df8d ipa-4-2: https://fedorahosted.org/freeipa/changeset/5841d495f081c635394cda09abe36be020d32d84
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions
Verified using IPA version:: ipa-server-4.4.0-11.el7.x86_64 Done SanityOnly using automation.
Crash no more seen with automated test suite.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-2404.html