Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: Trying to setup a FreeIPA replica with the --setup-adtrust command line option setup, makes the setup fail due to the missing freeipa-server-trust-ad package (not pulled automatically for any package) Version-Release number of selected component (if applicable): freeipa-server-4.6.90.pre2 How reproducible: Steps to Reproduce: 1. dnf install freeipa-server 2. ipa-replica-install --setup-adtrust Actual results: It fails in the end when it tries to restart smb, and the logs show "No builtin nor plugin backend for ipasam found" Expected results: Replica should be installed sucessfully
We do the check at https://pagure.io/freeipa/blob/master/f/ipaserver/install/adtrustinstance.py#_67-77 but it doesn't include checking for 'freeipa-server-trust-ad' package being installed -- like we supposed to do with 'freeipa-server-dns' in https://pagure.io/freeipa/blob/master/f/ipaserver/install/dns.py#_118-120 A freeipa-server-trust-ad package has following content: --- $ rpm -ql freeipa-server-trust-ad /etc/dbus-1/system.d/oddjob-ipa-trust.conf /etc/oddjobd.conf.d/oddjobd-ipa-trust.conf /usr/lib/.build-id /usr/lib/.build-id/10 /usr/lib/.build-id/10/d4038f6015541ee8685be9238d46328c7d869e /usr/lib64/krb5/plugins/libkrb5/winbind_krb5_locator.so /usr/lib64/samba/pdb/ipasam.so /usr/libexec/ipa/oddjob/com.redhat.idm.trust-fetch-domains /usr/sbin/ipa-adtrust-install /usr/share/doc/freeipa-server-trust-ad /usr/share/doc/freeipa-server-trust-ad/Contributors.txt /usr/share/doc/freeipa-server-trust-ad/README.md /usr/share/ipa/smb.conf.empty /usr/share/licenses/freeipa-server-trust-ad /usr/share/licenses/freeipa-server-trust-ad/COPYING /usr/share/man/man1/ipa-adtrust-install.1.gz --- In a way similar to DNS check, we can depend on /usr/share/ipa/smb.conf.empty which is only packaged in freeipa-server-trust-ad.
Upstream ticket: https://pagure.io/freeipa/issue/7602
Fixed upstream master: https://pagure.io/freeipa/c/4600e62b6b4547c16eee085e216a56478dd8dd50
Fixed upstream ipa-4-7: https://pagure.io/freeipa/c/be968ea01adf1721b0afd7393872a8d311d89d0c ipa-4-6: https://pagure.io/freeipa/c/0c2bdcb1184cf034f62e523c88045f9efcb8c302
This message is a reminder that Fedora 28 is nearing its end of life. On 2019-May-28 Fedora will stop maintaining and issuing updates for Fedora 28. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a Fedora 'version' of '28'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora 28 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged change the 'version' to a later Fedora version prior this bug is closed as described in the policy above. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete.
$ git tag --contains be968ea01adf1721b0afd7393872a8d311d89d0c release-4-7-2 => the patch is present in freeipa-server 4.7.2 Fedora 28 provides freeipa-server.x86_64 4.7.2-1.1.fc28 @updates hence the patch is available in Fedora 28.