Red Hat Bugzilla – Bug 1535390
[Improvement] ipa-plugin - add missing log files and differentiate between IPA v3 and v4 installations
Last modified: 2018-04-10 14:07:13 EDT
Description of problem: - Several logs have been missing in ipa plugin. - The PKI subsystem uses different fpaths in IPA v3 and v4. The following PRs have been created: https://github.com/sosreport/sos/pull/1010 https://github.com/sosreport/sos/pull/1163 Please merge and backport to RHEL-7.5 when this is feasible. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
There was a typo in one of the PRs, fixed via PR 1195.
posted to upsetram business justification for 7.5 inclusion: - It adds missing log files to the sosreport. At the moment there is a lot of ping-pong because people need to manually request those log files from customers. We could save time by having this log files already available as part of the sosreport. This would ultimately help to reduce the time it takes to resolve a case. - The BZ also resolves an issue with certutil where the utility is using a wrong path in *all* RHEL7 installations and the sosreport only contains an empty file rather than the output from certutil which is supposed to show all certificates stored in the PKI NSS database. Since certificate related issues produce the highest load on CEE (from IdM perspective), having this BZ resolves would mitigate the need for support engineers to ask customers to run the certutil command manually. This would ultimately also help to reduce the time it takes to resolve a case.
Steve, could you pls. pm_ack and add exception to this bug to 7.5.0? business justification in c#4, technically it isnt RFE but improvement with biggest code change only in: https://github.com/sosreport/sos/pull/1163/files (i.e. no new feature, just typical sosreport plugin enhancement)
Thorsten, could you please verify the BZ against sos-3.5-5 ? A yum repository for the build of sos-3.5-5.el7 (task 15272478) is available at: http://brew-task-repos.usersys.redhat.com/repos/official/sos/3.5/5.el7/ You can install the rpms locally by putting this .repo file in your /etc/yum.repos.d/ directory: http://brew-task-repos.usersys.redhat.com/repos/official/sos/3.5/5.el7/sos-3.5-5.el7.repo RPMs and build logs can be found in the following locations: http://brew-task-repos.usersys.redhat.com/repos/official/sos/3.5/5.el7/noarch/
If neither v3 or v4 is installed, sosreport -o ipa raises exception: Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/sos/sosreport.py", line 1252, in setup plug.setup() File "/usr/lib/python2.7/site-packages/sos/plugins/ipa.py", line 129, in setup if ipa_version == "v4": UnboundLocalError: local variable 'ipa_version' referenced before assignment Fixed via PR 1214
Thorsten, could you verify against this - hopefully proper - build ? A yum repository for the build of sos-3.5-6.el7 (task 15274052) is available at: http://brew-task-repos.usersys.redhat.com/repos/official/sos/3.5/6.el7/ You can install the rpms locally by putting this .repo file in your /etc/yum.repos.d/ directory: http://brew-task-repos.usersys.redhat.com/repos/official/sos/3.5/6.el7/sos-3.5-6.el7.repo RPMs and build logs can be found in the following locations: http://brew-task-repos.usersys.redhat.com/repos/official/sos/3.5/6.el7/noarch/
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2018:0963