Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1791304

Summary:	python3-novajoin package should require python3-nss package
Product:	Red Hat OpenStack	Reporter:	Brian J. Atkisson <batkisso>
Component:	python-novajoin	Assignee:	Ade Lee <alee>
Status:	CLOSED DUPLICATE	QA Contact:	Pavan <pkesavar>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	16.0 (Train)	CC:	msalmanmasood, rcritten
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-01-20 19:20:32 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Brian J. Atkisson 2020-01-15 13:46:26 UTC

Description of problem:

Following the directions on https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.0-beta/html/integrate_with_identity_service/idm-novajoin results in the following error:

    Traceback (most recent call last):
      File "/bin/novajoin-ipa-setup", line 101, in <module>
        cafile = novajoin.create_cafile(opts.server, opts.realm)
      File "/usr/lib/python3.6/site-packages/novajoin/configure_ipa.py", line 205, in create_cafile
        ca_certs = self._get_ca_certs(server, realm)
      File "/usr/lib/python3.6/site-packages/novajoin/configure_ipa.py", line 149, in _get_ca_certs
        raise ConfigurationError("get_ca_certs() error: %s" % e)
    novajoin.errors.ConfigurationError: get_ca_certs() error: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (No Kerberos credentials available (default cache: FILE:/tmp/krb5cc_0))

Upon investigation, the python3-nss package was not installed on the host. If the /usr/libexec/novajoin-ipa-setup script cannot run without python3-nss being installed, there should be a RPM specfile requirement for python3-nss to ensure dnf installs it.

Version-Release number of selected component (if applicable):

python3-novajoin-1.2.1-0.20191031223218.c9299d5.el8ost.noarch
python3-novaclient-15.1.0-0.20190919143437.cd396b8.el8ost.noarch
puppet-nova-15.4.1-0.20191126042922.b1bb388.el8ost.noarch

How reproducible:


Steps to Reproduce:
1. Install a minimal host and attach subscriptions
2. sudo yum install python3-novajoin
3. Execute /usr/libexec/novajoin-ipa-setup

Actual results:


Expected results:


Additional info:

Comment 1 Ade Lee 2020-01-20 19:20:32 UTC

https://bugzilla.redhat.com/show_bug.cgi?id=1758771

*** This bug has been marked as a duplicate of bug 1758771 ***

Comment 2 Ade Lee 2020-01-20 19:21:58 UTC

Just FYI.  I believe that the above bz is already built and being verified.  Will confirm status and build number.

Comment 3 Salman Khan 2020-03-27 20:58:40 UTC

Ok thanks