Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1726668

Summary: [ansible-freeipa] Proper failed ipa installation error is showing in the back trace
Product: Red Hat Enterprise Linux 8 Reporter: Varun Mylaraiah <mvarun>
Component: ansible-freeipaAssignee: Thomas Woerner <twoerner>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.1Flags: pm-rhel: mirror+
Target Milestone: rc   
Target Release: 8.0   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: ansible-freeipa-0.1.4-2 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-11-05 21:08:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Varun Mylaraiah 2019-07-03 11:39:31 UTC
Description of problem:
In ansible-freeipa, ipa installation failure reported in the backtrace. 
Proper failure report should be shown as an error.

Version-Release number of selected component (if applicable):
ansible-freeipa-0.1.4-1.el8.noarch
ipa-server-4.7.90.pre1-3.module+el8.1.0+3389+a3c612fa.x86_64

How reproducible:
100%

Steps to Reproduce:
1. Add broken DNS server in /etc/resolv.conf 
2. Run playbook


# cat inventory/hosts.server 
[ipaserver]
ipaserver.test.local

[ipaserver:vars]
ipaserver_setup_dns=yes
ipaserver_auto_forwarders=yes
ipaserver_no_firewalld=no

ipaadmin_password=Secret123
ipadm_password=Secret123
ipaserver_domain=test.local
ipaserver_realm=TEST.LOCAL


# cat install-server.yml
---
- name: Playbook to configure IPA servers
  hosts: ipaserver
  become: true

  roles:
  - role: ipaserver
    state: present

# ansible-playbook -vvv -i inventory/hosts.server install-server.yml
ansible-playbook 2.8.1
  config file = None
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/lib/python3.6/site-packages/ansible
  executable location = /usr/local/bin/ansible-playbook
  python version = 3.6.8 (default, Jun  7 2019, 12:46:56) [GCC 8.3.1 20190507 (Red Hat 8.3.1-4)]
No config file found; using defaults
host_list declined parsing /root/inventory/hosts.server as it did not pass it's verify_file() method
script declined parsing /root/inventory/hosts.server as it did not pass it's verify_file() method
auto declined parsing /root/inventory/hosts.server as it did not pass it's verify_file() method
yaml declined parsing /root/inventory/hosts.server as it did not pass it's verify_file() method
Parsed /root/inventory/hosts.server inventory source with ini plugin

PLAYBOOK: install-server.yml ****************************************************************************************
1 plays in install-server.yml

*
*
*
TASK [ipaserver : Install - Server preparation] *********************************************************************
task path: /usr/share/ansible/roles/ipaserver/tasks/install.yml:116
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d ipaserver.test.local '/bin/sh -c '"'"'echo ~ && sleep 0'"'"''
<ipaserver.test.local> (0, b'/root\n', b'')
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d ipaserver.test.local '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487 `" && echo ansible-tmp-1561985492.6110508-246671766937487="` echo /root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487 `" ) && sleep 0'"'"''
<ipaserver.test.local> (0, b'ansible-tmp-1561985492.6110508-246671766937487=/root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487\n', b'')
Using module file /usr/share/ansible/roles/ipaserver/library/ipaserver_prepare.py
<ipaserver.test.local> PUT /root/.ansible/tmp/ansible-local-26020v_7jqis3/tmpoy89o26y TO /root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py
<ipaserver.test.local> SSH: EXEC sftp -b - -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d '[ipaserver.test.local]'
<ipaserver.test.local> (0, b'sftp> put /root/.ansible/tmp/ansible-local-26020v_7jqis3/tmpoy89o26y /root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py\n', b'')
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d ipaserver.test.local '/bin/sh -c '"'"'chmod u+x /root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/ /root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py && sleep 0'"'"''
<ipaserver.test.local> (0, b'', b'')
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d -tt ipaserver.test.local '/bin/sh -c '"'"'sudo -H -S -n -u root /bin/sh -c '"'"'"'"'"'"'"'"'echo BECOME-SUCCESS-djhxrondymvlptuygeuekkquuecguinp ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py'"'"'"'"'"'"'"'"' && sleep 0'"'"''
<ipaserver.test.local> (1, b'BECOME-SUCCESS-djhxrondymvlptuygeuekkquuecguinp\r\nDNS server 10.19.34.7: query \'. SOA\': The DNS operation timed out after 10.000096082687378 seconds\r\nTraceback (most recent call last):\r\n File "/usr/lib/python3.6/site-packages/ipalib/util.py", line 800, in validate_edns0_forwarder\r\n _resolve_record(owner, rtype, nameserver_ip=ip_addr, timeout=timeout)\r\n File "/usr/lib/python3.6/site-packages/ipalib/util.py", line 788, in _resolve_record\r\n return res.query(owner, rtype)\r\n File "/usr/lib/python3.6/site-packages/dns/resolver.py", line 949, in query\r\n timeout = self._compute_timeout(start)\r\n File "/usr/lib/python3.6/site-packages/dns/resolver.py", line 858, in _compute_timeout\r\n raise Timeout(timeout=duration)\r\ndns.exception.Timeout: The DNS operation timed out after 10.000096082687378 seconds\r\n\r\nDuring handling of the above exception, another exception occurred:\r\n\r\nTraceback (most recent call last):\r\n File "/usr/lib/python3.6/site-packages/ipaserver/install/bindinstance.py", line 539, in check_forwarders\r\n validate_dnssec_global_forwarder(forwarder)\r\n File "/usr/lib/python3.6/site-packages/ipalib/util.py", line 829, in validate_dnssec_global_forwarder\r\n _validate_edns0_forwarder(owner, rtype, ip_addr, timeout=timeout)\r\n File "/usr/lib/python3.6/site-packages/ipalib/util.py", line 804, in _validate_edns0_forwarder\r\n error=e)\r\nipalib.util.UnresolvableRecordError: query \'. SOA\': The DNS operation timed out after 10.000096082687378 seconds\r\n\r\nDuring handling of the above exception, another exception occurred:\r\n\r\nTraceback (most recent call last):\r\n File "/root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py", line 114, in <module>\r\n _ansiballz_main()\r\n File "/root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py", line 106, in _ansiballz_main\r\n invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)\r\n File "/root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py", line 49, in invoke_module\r\n imp.load_module(\'main\', mod, module, MOD_DESC)\r\n File "/usr/lib64/python3.6/imp.py", line 235, in load_module\r\n return load_source(name, filename, file)\r\n File "/usr/lib64/python3.6/imp.py", line 170, in load_source\r\n module = _exec(spec, sys.modules[name])\r\n File "<frozen importlib._bootstrap>", line 618, in _exec\r\n File "<frozen importlib._bootstrap_external>", line 678, in exec_module\r\n File "<frozen importlib._bootstrap>", line 219, in _call_with_frames_removed\r\n File "/tmp/ansible_ipaserver_prepare_payload_ciylonze/main.py", line 304, in <module>\r\n File "/tmp/ansible_ipaserver_prepare_payload_ciylonze/main_.py", line 242, in main\r\n File "/usr/lib/python3.6/site-packages/ipaserver/install/dns.py", line 296, in install_check\r\n and not bindinstance.check_forwarders(options.forwarders):\r\n File "/usr/lib/python3.6/site-packages/ipaserver/install/bindinstance.py", line 561, in check_forwarders\r\n raise RuntimeError("DNS server %s: %s" % (forwarder, e))\r\nRuntimeError: DNS server 10.19.34.7: query \'. SOA\': The DNS operation timed out after 10.000096082687378 seconds\r\n', b'Shared connection to ipaserver.test.local closed.\r\n')
<ipaserver.test.local> Failed to connect to the host via ssh: Shared connection to ipaserver.test.local closed.
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d ipaserver.test.local '/bin/sh -c '"'"'rm -f -r /root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/ > /dev/null 2>&1 && sleep 0'"'"''
<ipaserver.test.local> (0, b'', b'')
fatal: [ipaserver.test.local]: FAILED! =>

{ "changed": false, "module_stderr": "Shared connection to ipaserver.test.local closed.\r\n", "module_stdout": "DNS server 10.19.34.7: query '. SOA': The DNS operation timed out after 10.000096082687378 seconds\r\nTraceback (most recent call last):\r\n File \"/usr/lib/python3.6/site-packages/ipalib/util.py\", line 800, in _validate_edns0_forwarder\r\n _resolve_record(owner, rtype, nameserver_ip=ip_addr, timeout=timeout)\r\n File \"/usr/lib/python3.6/site-packages/ipalib/util.py\", line 788, in _resolve_record\r\n return res.query(owner, rtype)\r\n File \"/usr/lib/python3.6/site-packages/dns/resolver.py\", line 949, in query\r\n timeout = self._compute_timeout(start)\r\n File \"/usr/lib/python3.6/site-packages/dns/resolver.py\", line 858, in _compute_timeout\r\n raise Timeout(timeout=duration)\r\ndns.exception.Timeout: The DNS operation timed out after 10.000096082687378 seconds\r\n\r\nDuring handling of the above exception, another exception occurred:\r\n\r\nTraceback (most recent call last):\r\n File \"/usr/lib/python3.6/site-packages/ipaserver/install/bindinstance.py\", line 539, in check_forwarders\r\n validate_dnssec_global_forwarder(forwarder)\r\n File \"/usr/lib/python3.6/site-packages/ipalib/util.py\", line 829, in validate_dnssec_global_forwarder\r\n _validate_edns0_forwarder(owner, rtype, ip_addr, timeout=timeout)\r\n File \"/usr/lib/python3.6/site-packages/ipalib/util.py\", line 804, in _validate_edns0_forwarder\r\n error=e)\r\nipalib.util.UnresolvableRecordError: query '. SOA': The DNS operation timed out after 10.000096082687378 seconds\r\n\r\nDuring handling of the above exception, another exception occurred:\r\n\r\nTraceback (most recent call last):\r\n File \"/root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py\", line 114, in <module>\r\n _ansiballz_main()\r\n File \"/root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py\", line 106, in _ansiballz_main\r\n invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)\r\n File \"/root/.ansible/tmp/ansible-tmp-1561985492.6110508-246671766937487/AnsiballZ_ipaserver_prepare.py\", line 49, in invoke_module\r\n imp.load_module('__main__', mod, module, MOD_DESC)\r\n File \"/usr/lib64/python3.6/imp.py\", line 235, in load_module\r\n return load_source(name, filename, file)\r\n File \"/usr/lib64/python3.6/imp.py\", line 170, in load_source\r\n module = _exec(spec, sys.modules[name])\r\n File \"<frozen importlib._bootstrap>\", line 618, in _exec\r\n File \"<frozen importlib._bootstrap_external>\", line 678, in exec_module\r\n File \"<frozen importlib._bootstrap>\", line 219, in _call_with_frames_removed\r\n File \"/tmp/ansible_ipaserver_prepare_payload_ciylonze/__main__.py\", line 304, in <module>\r\n File \"/tmp/ansible_ipaserver_prepare_payload_ciylonze/__main__.py\", line 242, in main\r\n File \"/usr/lib/python3.6/site-packages/ipaserver/install/dns.py\", line 296, in install_check\r\n and not bindinstance.check_forwarders(options.forwarders):\r\n File \"/usr/lib/python3.6/site-packages/ipaserver/install/bindinstance.py\", line 561, in check_forwarders\r\n raise RuntimeError(\"DNS server %s: %s\" % (forwarder, e))\r\nRuntimeError: DNS server 10.19.34.7: query '. SOA': The DNS operation timed out after 10.000096082687378 seconds\r\n", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1 }

Comment 1 Varun Mylaraiah 2019-07-03 11:43:12 UTC
Upstream fix from Thomas Woerner https://github.com/freeipa/ansible-freeipa/commit/115f96d0be1780d0c877b9d06e0d7cefdc3c58cd

Comment 2 Thomas Woerner 2019-07-03 11:49:49 UTC
Here is the upstream fix: https://github.com/freeipa/ansible-freeipa/commit/115f96d0be1780d0c877b9d06e0d7cefdc3c58cd

Comment 6 Varun Mylaraiah 2019-07-11 11:43:54 UTC
VERIFIED

Versions:
ansible-freeipa-0.1.4-2.el8.noarch
ipa-server-4.7.90.pre1-3.module+el8.1.0+3389+a3c612fa.x86_64
ipa-client-4.7.90.pre1-3.module+el8.1.0+3389+a3c612fa.x86_64

[root@auto-hv-02-guest02 ~]# ansible-playbook -vvv -i inventory/hosts.server install-server.yml
ansible-playbook 2.8.1
  config file = None
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/lib/python3.6/site-packages/ansible
  executable location = /usr/local/bin/ansible-playbook
  python version = 3.6.8 (default, Jun  7 2019, 12:46:56) [GCC 8.3.1 20190507 (Red Hat 8.3.1-4)]
No config file found; using defaults
host_list declined parsing /root/inventory/hosts.server as it did not pass it's verify_file() method
script declined parsing /root/inventory/hosts.server as it did not pass it's verify_file() method
auto declined parsing /root/inventory/hosts.server as it did not pass it's verify_file() method
yaml declined parsing /root/inventory/hosts.server as it did not pass it's verify_file() method
Parsed /root/inventory/hosts.server inventory source with ini plugin

PLAYBOOK: install-server.yml ****************************************************************************************
1 plays in install-server.yml

PLAY [Playbook to configure IPA servers] ****************************************************************************

TASK [Gathering Facts] **********************************************************************************************
task path: /root/install-server.yml:2
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d ipaserver.test.local '/bin/sh -c '"'"'echo ~ && sleep 0'"'"''
<ipaserver.test.local> (0, b'/root\n', b'')
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o
*

*

*
TASK [ipaserver : Install - Server preparation] *********************************************************************
task path: /usr/share/ansible/roles/ipaserver/tasks/install.yml:116
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d ipaserver.test.local '/bin/sh -c '"'"'echo ~ && sleep 0'"'"''
<ipaserver.test.local> (0, b'/root\n', b'')
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d ipaserver.test.local '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /root/.ansible/tmp/ansible-tmp-1562845126.6486783-274886570715833 `" && echo ansible-tmp-1562845126.6486783-274886570715833="` echo /root/.ansible/tmp/ansible-tmp-1562845126.6486783-274886570715833 `" ) && sleep 0'"'"''
<ipaserver.test.local> (0, b'ansible-tmp-1562845126.6486783-274886570715833=/root/.ansible/tmp/ansible-tmp-1562845126.6486783-274886570715833\n', b'')
Using module file /usr/share/ansible/roles/ipaserver/library/ipaserver_prepare.py
<ipaserver.test.local> PUT /root/.ansible/tmp/ansible-local-774pp2pwwqs/tmps_x4b5m4 TO /root/.ansible/tmp/ansible-tmp-1562845126.6486783-274886570715833/AnsiballZ_ipaserver_prepare.py
<ipaserver.test.local> SSH: EXEC sftp -b - -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d '[ipaserver.test.local]'
<ipaserver.test.local> (0, b'sftp> put /root/.ansible/tmp/ansible-local-774pp2pwwqs/tmps_x4b5m4 /root/.ansible/tmp/ansible-tmp-1562845126.6486783-274886570715833/AnsiballZ_ipaserver_prepare.py\n', b'')
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d ipaserver.test.local '/bin/sh -c '"'"'chmod u+x /root/.ansible/tmp/ansible-tmp-1562845126.6486783-274886570715833/ /root/.ansible/tmp/ansible-tmp-1562845126.6486783-274886570715833/AnsiballZ_ipaserver_prepare.py && sleep 0'"'"''
<ipaserver.test.local> (0, b'', b'')
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d -tt ipaserver.test.local '/bin/sh -c '"'"'sudo -H -S -n  -u root /bin/sh -c '"'"'"'"'"'"'"'"'echo BECOME-SUCCESS-tppistspetgkvtrcrcxobnlszynevwej ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1562845126.6486783-274886570715833/AnsiballZ_ipaserver_prepare.py'"'"'"'"'"'"'"'"' && sleep 0'"'"''
<ipaserver.test.local> (1, b'BECOME-SUCCESS-tppistspetgkvtrcrcxobnlszynevwej\r\nDNS server 10.19.34.7: query \'. SOA\': The DNS operation timed out after 10.000571012496948 seconds\r\n\r\n{"msg": "DNS server 10.19.34.7: query \'. SOA\': The DNS operation timed out after 10.000571012496948 seconds", "failed": true, "exception": "  File \\"/tmp/ansible_ipaserver_prepare_payload_toydljhk/__main__.py\\", line 244, in main\\n    dns.install_check(False, api, False, options, options.host_name)\\n  File \\"/usr/lib/python3.6/site-packages/ipaserver/install/dns.py\\", line 296, in install_check\\n    and not bindinstance.check_forwarders(options.forwarders):\\n  File \\"/usr/lib/python3.6/site-packages/ipaserver/install/bindinstance.py\\", line 561, in check_forwarders\\n    raise RuntimeError(\\"DNS server %s: %s\\" % (forwarder, e))\\n", "invocation": {"module_args": {"dm_password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER", "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER", "ip_addresses": [], "domain": "test.local", "realm": "TEST.LOCAL", "hostname": "ipaserver.test.local", "no_host_dns": true, "setup_adtrust": false, "setup_kra": false, "setup_dns": true, "allow_zone_overlap": false, "reverse_zones": [], "no_reverse": false, "auto_reverse": false, "forwarders": [], "no_forwarders": false, "auto_forwarders": true, "no_dnssec_validation": false, "enable_compat": false, "setup_ca": true, "_hostname_overridden": true, "force": false, "ca_cert_files": [], "external_cert_files": [], "external_ca": null, "subject_base": null, "ca_subject": null, "forward_policy": null, "netbios_name": null, "rid_base": null, "secondary_rid_base": null}}}\r\n', b'Shared connection to ipaserver.test.local closed.\r\n')
<ipaserver.test.local> Failed to connect to the host via ssh: Shared connection to ipaserver.test.local closed.
<ipaserver.test.local> ESTABLISH SSH CONNECTION FOR USER: None
<ipaserver.test.local> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/30376f136d ipaserver.test.local '/bin/sh -c '"'"'rm -f -r /root/.ansible/tmp/ansible-tmp-1562845126.6486783-274886570715833/ > /dev/null 2>&1 && sleep 0'"'"''
<ipaserver.test.local> (0, b'', b'')
The full traceback is:
  File "/tmp/ansible_ipaserver_prepare_payload_toydljhk/__main__.py", line 244, in main
    dns.install_check(False, api, False, options, options.host_name)
  File "/usr/lib/python3.6/site-packages/ipaserver/install/dns.py", line 296, in install_check
    and not bindinstance.check_forwarders(options.forwarders):
  File "/usr/lib/python3.6/site-packages/ipaserver/install/bindinstance.py", line 561, in check_forwarders
    raise RuntimeError("DNS server %s: %s" % (forwarder, e))

fatal: [ipaserver.test.local]: FAILED! => {
    "changed": false,
    "invocation": {
        "module_args": {
            "_hostname_overridden": true,
            "allow_zone_overlap": false,
            "auto_forwarders": true,
            "auto_reverse": false,
            "ca_cert_files": [],
            "ca_subject": null,
            "dm_password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
            "domain": "test.local",
            "enable_compat": false,
            "external_ca": null,
            "external_cert_files": [],
            "force": false,
            "forward_policy": null,
            "forwarders": [],
            "hostname": "ipaserver.test.local",
            "ip_addresses": [],
            "netbios_name": null,
            "no_dnssec_validation": false,
            "no_forwarders": false,
            "no_host_dns": true,
            "no_reverse": false,
            "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
            "realm": "TEST.LOCAL",
            "reverse_zones": [],
            "rid_base": null,
            "secondary_rid_base": null,
            "setup_adtrust": false,
            "setup_ca": true,
            "setup_dns": true,
            "setup_kra": false,
            "subject_base": null
        }
    },
    "msg": "DNS server 10.19.34.7: query '. SOA': The DNS operation timed out after 10.000571012496948 seconds"
}

PLAY RECAP **********************************************************************************************************
ipaserver.test.local       : ok=8    changed=1    unreachable=0    failed=1    skipped=1    rescued=0    ignored=0

Comment 8 errata-xmlrpc 2019-11-05 21:08:48 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:3418