Bug 1488823 - novajoin.errors.ConfigurationError: get_ca_certs_from_ldap() error: 'module' object has no attribute 'IPAdmin'
Summary: novajoin.errors.ConfigurationError: get_ca_certs_from_ldap() error: 'module' ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: python-novajoin
Version: 12.0 (Pike)
Hardware: x86_64
OS: Linux
urgent
urgent
Target Milestone: beta
: 12.0 (Pike)
Assignee: Ade Lee
QA Contact: Prasanth Anbalagan
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-09-06 09:34 UTC by Artem Hrechanychenko
Modified: 2018-02-05 19:12 UTC (History)
6 users (show)

Fixed In Version: python-novajoin-1.0.17-1.el7ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-12-13 22:02:49 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 501473 0 None MERGED Improve compatibility with IPA v4.5.0+ 2020-07-09 19:35:09 UTC
OpenStack gerrit 502130 0 None MERGED Fix IPA v4.5.0 import issue with kinit_keytab 2020-07-09 19:35:08 UTC
Red Hat Product Errata RHEA-2017:3462 0 normal SHIPPED_LIVE Red Hat OpenStack Platform 12.0 Enhancement Advisory 2018-02-16 01:43:25 UTC

Description Artem Hrechanychenko 2017-09-06 09:34:27 UTC
Description of problem:
[stack@undercloud-0 ~]$ sudo /usr/libexec/novajoin-ipa-setup     --principal admin     --password 12345678 --server ipa.redhat.local     --realm REDHAT.LOCAL     --domain redhat.local     --hostname undercloud-0.redhat.local     --precreate
Traceback (most recent call last):
  File "/usr/libexec/novajoin-ipa-setup", line 92, in <module>
    nss_db = novajoin.create_nssdb(opts.server, opts.realm)
  File "/usr/lib/python2.7/site-packages/novajoin/configure_ipa.py", line 154, in create_nssdb
    ca_certs = self._get_ca_certs(server, realm)
  File "/usr/lib/python2.7/site-packages/novajoin/configure_ipa.py", line 143, in _get_ca_certs
    raise ConfigurationError("get_ca_certs_from_ldap() error: %s" % e)
novajoin.errors.ConfigurationError: get_ca_certs_from_ldap() error: 'module' object has no attribute 'IPAdmin'


Version-Release number of selected component (if applicable):
[stack@undercloud-0 ~]$ rpm -qa "*novajoin*"
python-novajoin-1.0.15-0.20170821155702.dbafbd6.el7ost.noarch


How reproducible:
always

Steps to Reproduce:
1.install python novajoin
2.try to create some extra privileges/permissions to be used by the novajoin services

Actual results:
ConfigurationError


Red Hat Enterprise Linux Server rLinux undercloud-0.redhat.local 3.10.0-693.2.1.el7.x86_64 #1 SMP Fri Aug 11 04:58:43 EDT 2017 x86_64 x86_64 x86_64 GNU/Linux
elease 7.4 (Maipo)

Comment 2 Rob Crittenden 2017-09-06 17:28:06 UTC
Reproduced, working on it.

Comment 4 Artem Hrechanychenko 2017-09-08 13:30:50 UTC
Yep, tried your fixed rpm and I got OTP.
Thx!

Comment 6 Rob Crittenden 2017-09-20 13:15:59 UTC
Fixed upstream:

70173f38eeb149ef9f1987d918c96f262f6ffd34
5ab8dac221ed7acdf767e40feff250ab31785cce

Comment 8 Artem Hrechanychenko 2017-11-06 13:38:53 UTC
VERIFIED

[stack@undercloud-0 ~]$ rpm -qa "*novajoin*"
python-novajoin-1.0.17-1.el7ost.noarch


[stack@undercloud-0 ~]$ /usr/libexec/novajoin-ipa-setup     --principal admin     --password 12345678 --server ipa.redhat.local     --realm REDHAT.LOCAL     --domain redhat.local     --hostname undercloud-0.redhat.local     --precreate
ipa: INFO: trying https://ipa.redhat.local/ipa/json
ipa: INFO: [try 1]: Forwarding 'schema' to json server 'https://ipa.redhat.local/ipa/json'
ipa: INFO: trying https://ipa.redhat.local/ipa/session/json
ipa: INFO: [try 1]: Forwarding 'host_add/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'service_add/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'permission_add/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'permission_add/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'permission_add/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'permission_add/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'privilege_add/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'privilege_add_permission/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'role_add/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'role_add_privilege/1' to json server 'https://ipa.redhat.local/ipa/session/json'
ipa: INFO: [try 1]: Forwarding 'role_add_member/1' to json server 'https://ipa.redhat.local/ipa/session/json'
1OayIVwSveNgN5Ij40m5HAXOVcNVp1JpJWw0SXToEBUQ

Comment 12 errata-xmlrpc 2017-12-13 22:02:49 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:3462


Note You need to log in before you can comment on or make changes to this bug.