Bug 1327627 - ipa-client-install --no-sssd: Unable to find 'admin' user with 'getent passwd admin@domainname'!
Summary: ipa-client-install --no-sssd: Unable to find 'admin' user with 'getent passw...
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: ipa
Version: 7.2
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: IPA Maintainers
QA Contact: Kaleem
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-15 13:51 UTC by Sudhir Menon
Modified: 2019-06-17 16:02 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-05-23 11:22:56 UTC
Target Upstream Version:


Attachments (Terms of Use)
Console Output (4.56 KB, text/plain)
2016-04-15 13:51 UTC, Sudhir Menon
no flags Details

Description Sudhir Menon 2016-04-15 13:51:00 UTC
Created attachment 1147654 [details]
Console Output

Description of problem: Fix the console message displayed when ipa-client-install is done with --no-sssd option.

Version-Release number of selected component (if applicable):

How reproducible: Always

Steps to Reproduce:
1. Ensure IPA server is installed.
2. Now install ipa-client using the below command e.g

ipa-client-install --domain=dhcp20797.in --realm=DHCP20797.IN -p admin -w labs_pwd -U --server=host2.dhcp20797.in --no-sssd


Actual results:
IPA client is installed without any errors but it displays message "Unable to find 'admin' user with 'getent passwd admin@domainname'! because appending domain name doesn't work it works only for 'getent passwd admin'


Expected results:
Although IPA client is installed without any errors, the message displayed on the console should be fixed.

Additional info: Attached the console output displaying the message.

Comment 2 Petr Vobornik 2016-04-28 13:44:01 UTC
Triage notes, 2016-04-26:

Sumit: it is expected in the sense that only SSSD is aware of fully-qualified names. So if --no-sssd is used only the short name should be used for testing.

If SSSD is configured, shouldn't it resolve the unqualified name as well? So perhaps do the getent passwd admin always, and getent passwd admin@domainname when SSSD got configured?

pv: close as not a bug
H: shouldn't we skip the getent check when --no-sssd is used?
ab: no, we should then ask for unqualified name
sumit: everything is working fine but there is an error message in install  log
dev mtg: mark as easyfix
dev mtg: clone to Future releases, so anybody can change it to unqualified if --no-ssdd is used

Comment 3 Petr Vobornik 2016-04-28 13:44:46 UTC
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/5859

Comment 5 Petr Vobornik 2018-05-23 11:22:56 UTC
Behavior of--no-sssd option won't be changed. Upstream already deprecated them in IPA 4.7+.


Note You need to log in before you can comment on or make changes to this bug.