Bug 1444722
| Summary: | ipa-server-install throws and unhandled exception when passing integer to `--domain` option | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Abhijeet Kasurde <akasurde> |
| Component: | ipa | Assignee: | IPA Maintainers <ipa-maint> |
| Status: | CLOSED DUPLICATE | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 7.4 | CC: | akasurde, pasik, pvoborni, rcritten, tscherf |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-05-15 13:50:44 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Abhijeet Kasurde
2017-04-24 06:10:41 UTC
Abhijeet, `--domain` options sets/checks the name of primary DNS domain, correct option to set domain level is `--domain-level`. The reported bug is actually an error in the `--domain` option validator stemming from incorrect usage of installer options. I would suggest to retry with correct options and if it passes drop the TestBlocker keyword and reword the bug. INterestingly, on freeipa-server-4.4.4-1.fc25.x86_64 I see the same error when passing an integer as domain name. With ipa-server-4.4.0-12.el7.x86_64 the validator happily sets the DNS domain to '0' and proceeds with installation. ''' # ipa-server-install -U --domain 0 -p Secret123 -a Secret123 --realm IPA.TEST The log file for this installation can be found in /var/log/ipaserver-install.log ============================================================================== This program will set up the IPA Server. This includes: * Configure a stand-alone CA (dogtag) for certificate management * Configure the Network Time Daemon (ntpd) * Create and configure an instance of Directory Server * Create and configure a Kerberos Key Distribution Center (KDC) * Configure Apache (httpd) WARNING: conflicting time&date synchronization service 'chronyd' will be disabled in favor of ntpd The IPA Master Server will be configured with: Hostname: vm-103.abc.idm.lab.eng.brq.redhat.com IP address(es): 10.34.78.103, 2620:52:0:224e:21a:4aff:fe23:14d9 Domain name: 0 Realm name: IPA.TEST WARNING: Realm name does not match the domain name. You will not be able to estabilish trusts with Active Directory unless the realm name of the IPA server matches its domain name. Configuring NTP daemon (ntpd) [1/4]: stopping ntpd [2/4]: writing configuration [3/4]: configuring ntpd to start on boot [4/4]: starting ntpd Done configuring NTP daemon (ntpd). Configuring directory server (dirsrv). Estimated time: 1 minute [1/47]: creating directory server user [2/47]: creating directory server instance ^C [error] KeyboardInterrupt: ''' I have aborted it but it would be interesting to see how the system will behave with domain name '0'. Please read `--domain' for `domain' rather than for domain level. Also, drop FIPS configuration steps as this bug is reproducible irrespective of FIPS setup. # rpm -q ipa-server ipa-server-4.4.0-14.el7_3.4.x86_64 #ipa-server-install --domain 1 <snip> ipa.ipapython.install.cli.install_tool(Server): ERROR 'int' object has no attribute '__getitem__' ipa.ipapython.install.cli.install_tool(Server): ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information I.e. is on RHEL 7.3 -> not a regression in last version. Upstream ticket: https://pagure.io/freeipa/issue/6932 Fixed in Bug 1497334 [root@vm-042 pvoborni]# ipa-replica-install -n 1234 Usage: ipa-replica-install [options] [REPLICA_FILE] ipa-replica-install: error: option --domain: single label domains are not supported ipapython.admintool: ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information [root@vm-042 pvoborni]# rpm -q freeipa-server freeipa-server-4.6.90.pre1.dev201805020815+gitc925b44f4-0.fc27.x86_64 [root@vm-042 pvoborni]# ipa-replica-install -n 1 Usage: ipa-replica-install [options] [REPLICA_FILE] ipa-replica-install: error: option --domain: single label domains are not supported ipapython.admintool: ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information *** This bug has been marked as a duplicate of bug 1497334 *** |