Bug 1530074 - ipa-client-install uses wrong cert8.db and key3.db files
Summary: ipa-client-install uses wrong cert8.db and key3.db files
Keywords:
Status: CLOSED DUPLICATE of bug 1496562
Alias: None
Product: Fedora
Classification: Fedora
Component: freeipa
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: IPA Maintainers
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-01-01 18:52 UTC by Tomasz Torcz
Modified: 2018-01-01 18:57 UTC (History)
8 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2018-01-01 18:57:15 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Tomasz Torcz 2018-01-01 18:52:09 UTC
Description of problem:
I can't enroll fresh rawhide host into freeipa. At the end of registration process, there's an error:

2018-01-01T18:26:59Z DEBUG The ipa-client-install command failed, exception: FileNotFoundError: [Errno 2] No such file or directory: '/etc/ipa/nssdb/cert8.db'
2018-01-01T18:26:59Z ERROR [Errno 2] No such file or directory: '/etc/ipa/nssdb/cert8.db'

This is true, because:
# ls -l /etc/ipa/nssdb/
-rw-------. 1 root root 28672 01-01 19:26 cert9.db
-rw-------. 1 root root 36864 01-01 19:26 key4.db
-rw-------. 1 root root   417 01-01 19:26 pkcs11.txt
-rw-------. 1 root root    41 01-01 19:26 pwdfile.txt


 The file is called "cert9.db", and NOT "cert8.db".
I see that "cert8" is hardcoded in few places in /usr/lib/python3.6/site-packages/ipaclient/install/client.py.

Similarly, the code hardcodes "key3.db", while the actual name of created file is "key4.db".

Unfortunately, simple search&replace of file names in client.py doesn't work, enrolling further fails with missing /etc/ipa/nssdb/secmod.db.

Version-Release number of selected component (if applicable):
freeipa-client-4.6.1-4.fc28.x86_64

How reproducible:
Always.

Steps to Reproduce:
1. Install rawhide
2. Install freeipa-client
3. issue ipa-client-install --mkhomedir

Comment 1 Tomasz Torcz 2018-01-01 18:57:15 UTC

*** This bug has been marked as a duplicate of bug 1496562 ***


Note You need to log in before you can comment on or make changes to this bug.