Bug 1656758
| Summary: | ipa-migrate command fails over ldaps | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Nikhil Dehadrai <ndehadra> |
| Component: | 389-ds-base | Assignee: | mreynolds |
| Status: | CLOSED NOTABUG | QA Contact: | RHDS QE <ds-qe-bugs> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 8.0 | CC: | ksiddiqu, lkrispen, mhonek, nkinder, rmeggins, spichugi, tbordaz, vashirov |
| Target Milestone: | rc | Keywords: | Regression |
| Target Release: | 8.0 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-12-13 12:21:28 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Nikhil Dehadrai
2018-12-06 09:30:58 UTC
As per suggestion from Viktor, the setupds.pl used in the ds-migration test suite is not supported in RHEL8, thus used 'dscreate' to install directory server and the ds-migration over lpdas was successful Thus closing the bug LOG: :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: migration over ldaps :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ 07:11:34 ] :: [ BEGIN ] :: Running 'sed -i 's/ca.crt/remoteds.crt/g' /etc/openldap/ldap.conf' :: [ 07:11:34 ] :: [ PASS ] :: Command 'sed -i 's/ca.crt/remoteds.crt/g' /etc/openldap/ldap.conf' (Expected 0, got 0) :: [ 07:11:34 ] :: [ BEGIN ] :: Restarting httpd :: actually running 'service httpd restart' Redirecting to /bin/systemctl restart httpd.service :: [ 07:11:37 ] :: [ PASS ] :: Restarting httpd (Expected 0, got 0) :: [ 07:11:38 ] :: [ BEGIN ] :: Running 'ipa config-mod --enable-migration=TRUE' Maximum username length: 32 Home directory base: /home Default shell: /bin/sh Default users group: ipausers Default e-mail domain: testrelm.test Search time limit: 2 Search size limit: 100 User search fields: uid,givenname,sn,telephonenumber,ou,title Group search fields: cn,description Enable migration mode: TRUE Certificate Subject base: O=TESTRELM.TEST Password Expiration Notification (days): 4 Password plugin features: AllowNThash, KDC:Disable Last Success SELinux user map order: guest_u:s0$xguest_u:s0$user_u:s0$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023 Default SELinux user: unconfined_u:s0-s0:c0.c1023 Default PAC types: MS-PAC, nfs:NONE IPA masters: auto-hv-01-guest03.testrelm.test IPA CA servers: auto-hv-01-guest03.testrelm.test IPA CA renewal master: auto-hv-01-guest03.testrelm.test IPA master capable of PKINIT: auto-hv-01-guest03.testrelm.test :: [ 07:11:47 ] :: [ PASS ] :: Command 'ipa config-mod --enable-migration=TRUE' (Expected 0, got 0) :: [ 07:11:47 ] :: [ LOG ] :: EXECUTING: ipa migrate-ds --with-compat --user-container="ou=People,dc=example,dc=com" --group-container="ou=groups,dc=example,dc=com" ldaps://hp-dl380pgen8-02-vm-13.testrelm.test:636 --ca-cert-file=/etc/ipa/remoteds.crt --with-compat :: [ 07:11:47 ] :: [ BEGIN ] :: Running 'echo Secret123 | ipa migrate-ds --user-container="ou=People,dc=example,dc=com" --group-container="ou=groups,dc=example,dc=com" ldaps://hp-dl380pgen8-02-vm-13.testrelm.test:636 --ca-cert-file=/etc/ipa/remoteds.crt --with-compat' ----------- migrate-ds: ----------- Migrated: user: puser1, puser2, philomena_hazen group: demo_group, group1, group2 Failed user: Failed group: ---------- Passwords have been migrated in pre-hashed format. IPA is unable to generate Kerberos keys unless provided with clear text passwords. All migrated users need to login at https://your.domain/ipa/migration/ before they can use their Kerberos accounts. :: [ 07:11:48 ] :: [ PASS ] :: Command 'echo Secret123 | ipa migrate-ds --user-container="ou=People,dc=example,dc=com" --group-container="ou=groups,dc=example,dc=com" ldaps://hp-dl380pgen8-02-vm-13.testrelm.test:636 --ca-cert-file=/etc/ipa/remoteds.crt --with-compat' (Expected 0, got 0) :: [ 07:11:48 ] :: [ BEGIN ] :: Verifying puser1 was migrated :: actually running 'ipa user-show puser1' User login: puser1 Last name: User1 Home directory: /home/puser1 Login shell: /bin/bash Principal name: puser1 Principal alias: puser1 UID: 1001 GID: 1001 Account disabled: False Password: True Member of groups: ipausers Kerberos keys available: False :: [ 07:11:49 ] :: [ PASS ] :: Verifying puser1 was migrated (Expected 0, got 0) :: [ 07:11:49 ] :: [ BEGIN ] :: Verifying 'puser2' was migrated :: actually running 'ipa user-show puser2' User login: puser2 Last name: User2 Home directory: /home/puser2 Login shell: /bin/bash Principal name: puser2 Principal alias: puser2 UID: 1002 GID: 1002 Account disabled: False Password: True Member of groups: ipausers Kerberos keys available: False :: [ 07:11:50 ] :: [ PASS ] :: Verifying 'puser2' was migrated (Expected 0, got 0) :: [ 07:11:51 ] :: [ BEGIN ] :: Verifying 'philomena_hazen' was migrated :: actually running 'ipa user-show philomena_hazen' User login: philomena_hazen First name: Philomena Last name: Hazen Home directory: /home/Philomena_Hazen Login shell: /bin/sh Principal name: philomena_hazen Principal alias: philomena_hazen Email address: Philomena_Hazen UID: 18795 GID: 28795 Telephone Number: +1 206 660-3641 Org. Unit: Human Resources Job Title: Senior Human Resources Accountant Account disabled: False Password: True Member of groups: ipausers Kerberos keys available: False :: [ 07:11:51 ] :: [ PASS ] :: Verifying 'philomena_hazen' was migrated (Expected 0, got 0) :: [ 07:11:52 ] :: [ BEGIN ] :: Verifying group 'group1' was migrated :: actually running 'ipa group-show group1' Group name: group1 GID: 1001 :: [ 07:11:52 ] :: [ PASS ] :: Verifying group 'group1' was migrated (Expected 0, got 0) :: [ 07:11:52 ] :: [ BEGIN ] :: Verifying group 'group2' was migrated :: actually running 'ipa group-show group2' Group name: group2 GID: 1002 :: [ 07:11:53 ] :: [ PASS ] :: Verifying group 'group2' was migrated (Expected 0, got 0) :: [ 07:11:53 ] :: [ LOG ] :: Cleaning up migrated users -------------------------------------------- Deleted user "puser1,puser2,philomena_hazen" -------------------------------------------- ipa: ERROR: hr managers: group not found Redirecting to /bin/systemctl restart httpd.service :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: Duration: 25s :: Assertions: 9 good, 0 bad :: RESULT: PASS ** migration-over-ldaps PASS Score:0 Uploading resultoutputfile.log .done /usr/bin/rhts-sync-set -s DONE :: [ 07:12:03 ] :: [ LOG ] :: Machine in recipe in not a SLAVE :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: Duration: 107s :: Assertions: 19 good, 0 bad :: RESULT: PASS |