With the latest incarnation of the FreeIPA 4.6.0 update for Fedora 27, tests are looking much better, but there is still a failure in the test which tries to change a user's password via the web UI: https://openqa.stg.fedoraproject.org/tests/154667#step/freeipa_password_change/18 when the test clicks 'Reset Password' after filling in the dialog, this error appears: IPA Error 905: CommandError unknown command 'undefined' In the Apache error log, I see this: [Tue Sep 05 18:21:52.809837 2017] [wsgi:error] [pid 7181:tid 140266895476480] [remote 10.0.2.102:39228] ipa: INFO: [jsonserver_session] test3: undefined: CommandError I suspect this may relate to the changes to get_whoami_command in this commit: https://github.com/freeipa/freeipa/commit/ceedc3f7ecb1300ed5bfaf5db8ef1b1450c6288e but I'm not 100% sure. It involves javascript, and I hate javascript (plus I can't quite grok the interface between JS and python in the FreeIPA web UI code).
Proposing as a Beta blocker. This is part of the https://fedoraproject.org/wiki/QA:Testcase_FreeIPA_password_change test, which is marked as Beta in the matrices. The relevant Beta criterion would be "The core functional requirements for all Featured Server Roles must be met, without any workarounds being necessary.", with the requirements for the domain controller role defined here: https://fedoraproject.org/wiki/Domain_controller_role_requirements "The FreeIPA configuration web UI must be available and allow at least basic configuration of user accounts and permissions"
ab suggested this might be https://pagure.io/freeipa/c/76f217b2893b0604ed0adf372422c685c2febbe8 , but it can't be, because that's already in 4.6.0 release.
Upstream ticket: https://pagure.io/freeipa/issue/7143
Note, some info was requested: <ab> adamw: can you show an output from the browser inspection of network traffic sent by the web UI with that 'undefined' command? <ab> adamw: e.g. ctrl+shift+I in Firefox, then network tab <ab> I would be interested in seeing what is being sent as json request before and with this call doing this in openQA is a bit more work than doing it manually, but I'll try and set it up today.
Adam, we found the bug, it is now tracked with https://github.com/freeipa/freeipa/pull/1044 pull request
Awesome, thanks, that saves me some work...
389-ds-base-1.3.7.3-1.fc27 freeipa-4.6.0-2.fc27 python-pyldap-2.4.37-2.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-a79e85e4d3
So at ab's request I backported the patch to the Fedora package and built a 4.6.0-2 and put that into the update; with 4.6.0-2 all the FreeIPA tests pass! So the patch does fix this, thanks. https://openqa.stg.fedoraproject.org/tests/overview?distri=fedora&version=27&build=Update-FEDORA-2017-a79e85e4d3&groupid=2 the base_services_start failure is unrelated.
master: https://pagure.io/freeipa/c/755a50044cd2eefef3d365cc42c76a6ed4715afe https://pagure.io/freeipa/c/a7ab63b84cb07c2a09a271b2bb598fcbf0d144f9
Fixed upstream ipa-4-6: https://pagure.io/freeipa/c/47c7a192a6a96e89bd714854ed35466e48299cfe https://pagure.io/freeipa/c/44b012cc01cd6a543ba460cdc723eb469f22ffd4
389-ds-base-1.3.7.3-1.fc27, freeipa-4.6.0-2.fc27, python-pyldap-2.4.37-2.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-a79e85e4d3
389-ds-base-1.3.7.3-1.fc27, freeipa-4.6.0-2.fc27, python-pyldap-2.4.37-2.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.