Red Hat Bugzilla – Bug 1465390
python3-pyldap break FreeIPA WebUI
Last modified: 2017-09-09 00:11:07 EDT
Description of problem:
Latest package of python3-pyldap breaks FreeIPA WebUI as it contains python3-incompatible code.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Install latest master of FreeIPA with some patches that are not currently available (sorry, guys!)
2. Try to log in to the WebUI
Internal server error.
Getting the page after login.
The fixes below seem to fix the issues:
Will wait how that PR resolves upstream.
Will update to https://pypi.python.org/pypi/pyldap/2.4.37
The tests are failing with Can't contact LDAP server
Would it be possible to try and test with a newer python-ldap version, then? I noticed upstream had some more python3 fixes.
My bad, there are no newer versions than that, sorry.
Tests are failing for the new version, but also for the old one (which built successfully before). Probably due to a change in Koji or a dependency.
Investigating this is on my TODO list, but unfortunately, modularity has higher priority now.
The test failures seem to be somewhat randomized; for each recent attempt to build, it's worked on some arches but not on others. Interestingly the test *order* doesn't always seem to be the same, which may have something to do with why the tests sometimes fail.
Proposing this as a Fedora 27 Beta blocker. A Beta criterion states:
"The core functional requirements for all Featured Server Roles must be met, without any workarounds being necessary."
And one of the 'core functional requirements' for the domain controller role, which is a featured role, is:
"The FreeIPA configuration web UI must be available and allow at least basic configuration of user accounts and permissions"
See https://fedoraproject.org/wiki/Domain_controller_role_requirements and https://fedoraproject.org/wiki/Fedora_27_Beta_Release_Criteria#Server_Product_requirements .
I'm going to keep poking this a bit more, but it looks like Igor Gnatenko just went ahead and ran a Rawhide build with the tests turned off...we might have to do the same for F27.
So I'm pretty sure the ordering problem here is: if the t_cext tests run after the t_ldapobject tests, they will fail. I verified this by simply adjusting the spec to remove the t_ldapobject tests entirely, and running a scratch build - it passes on all arches. I'm now trying to narrow it down a bit more specifically.
OK, I believe I figured out the problem. PR sent upstream:
and I've applied the fix to the package, re-enabled the tests, and sent builds for Rawhide and F27. I'll be adding the F27 package to the pending FreeIPA 3.6.0 update.
389-ds-base-126.96.36.199-1.fc27 freeipa-4.6.0-1.fc27 python-pyldap-2.4.37-2.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-a79e85e4d3
Indeed, the openQA webui test passes with the edited update:
there seems to still be an issue with password changing, though. Will investigate that next.
389-ds-base-188.8.131.52-1.fc27, freeipa-4.6.0-2.fc27, python-pyldap-2.4.37-2.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-a79e85e4d3
389-ds-base-184.108.40.206-1.fc27, freeipa-4.6.0-2.fc27, python-pyldap-2.4.37-2.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.