1803370 – Missing required dependency on /usr/bin/c_rehash

Bug 1803370 - Missing required dependency on /usr/bin/c_rehash

Summary: Missing required dependency on /usr/bin/c_rehash

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Fedora
Classification:	Fedora
Component:	389-ds-base
Sub Component:
Version:	32
Hardware:	Unspecified
OS:	Unspecified
Priority:	unspecified
Severity:	unspecified
Target Milestone:	---
Assignee:	mreynolds
QA Contact:	Fedora Extras Quality Assurance
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2020-02-15 15:31 UTC by Lukas Slebodnik
Modified:	2020-02-27 17:28 UTC (History)
CC List:	5 users (show)
Fixed In Version:	389-ds-base-1.4.2.8-3.fc31
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:	2020-02-27 17:28:21 UTC
Type:	Bug
Embargoed:
Dependent Products:

Attachments	(Terms of Use)

Description Lukas Slebodnik 2020-02-15 15:31:09 UTC

Description of problem:
The latest update of 389-ds-base broke installation of freeIPA server 

Version-Release number of selected component (if applicable):
sh$ rpm -qf /usr/lib/python3.8/site-packages/lib389/nss_ssl.py /usr/bin/c_rehash
python3-lib389-1.4.3.3-2.fc33.noarch
error: file /usr/bin/c_rehash: No such file or directory

How reproducible:
Deterministic

Steps to Reproduce:
1. dnf install -y freeipa-server
2. # install freeIPA servier with /usr/sbin/ipa-server-install


Actual results:
The log file for this installation can be found in /var/log/ipaserver-install.log
==============================================================================
This program will set up the FreeIPA Server.
Version 4.8.4

This includes:
  * Configure a stand-alone CA (dogtag) for certificate management
  * Configure the NTP client (chronyd)
  * Create and configure an instance of Directory Server
  * Create and configure a Kerberos Key Distribution Center (KDC)
  * Configure Apache (httpd)
  * Configure the KDC to enable PKINIT


The IPA Master Server will be configured with:
Hostname:       ipahost.testrelm.test
IP address(es): 10.37.153.115
Domain name:    testrelm.test
Realm name:     TESTRELM.TEST

The CA will be configured with:
Subject DN:   CN=Certificate Authority,O=TESTRELM.TEST
Subject base: O=TESTRELM.TEST
Chaining:     self-signed

Disabled p11-kit-proxy
Using default chrony configuration.
Configuring directory server (dirsrv). Estimated time: 30 seconds
  [1/44]: creating directory server instance
  [error] FileNotFoundError: [Errno 2] No such file or directory: '/usr/bin/c_rehash'
[Errno 2] No such file or directory: '/usr/bin/c_rehash'
The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information

Expected results:
freeIPA server is istaled without any issue

Additional info:
sh-5.0# rpm -q freeipa-server python3-lib389
freeipa-server-4.8.4-6.fc32.x86_64
python3-lib389-1.4.3.3-2.fc33.noarch
sh-5.0# grep -RniI c_rehash /usr/lib/python3.8/
/usr/lib/python3.8/site-packages/lib389/cli_idm/client_config.py:45:# /usr/bin/c_rehash /etc/openldap/certs
/usr/lib/python3.8/site-packages/lib389/cli_idm/client_config.py:129:# /usr/bin/c_rehash /etc/openldap/certs
/usr/lib/python3.8/site-packages/lib389/nss_ssl.py:272:        cmd = ['/usr/bin/c_rehash', self._certdb]
/usr/lib/python3.8/site-packages/lib389/nss_ssl.py:354:        cmd = ['/usr/bin/c_rehash', self._certdb]
/usr/lib/python3.8/site-packages/lib389/nss_ssl.py:612:            cmd = ['/usr/bin/c_rehash', self._certdb]

lib389 should either require /usr/bin/c_rehash in the spec file or it should not use it at all

Comment 1 Lukas Slebodnik 2020-02-15 15:33:34 UTC

Part of /var/log/ipaserver-install.log

2020-02-15T10:32:26Z DEBUG READY: Beginning installation for TESTRELM-TEST...
2020-02-15T10:32:26Z DEBUG ACTION: Creating dse.ldif
2020-02-15T10:32:26Z DEBUG ACTION: creating /var/lib/dirsrv/slapd-TESTRELM-TEST/bak
2020-02-15T10:32:26Z DEBUG ACTION: creating /etc/dirsrv/slapd-TESTRELM-TEST
2020-02-15T10:32:26Z DEBUG ACTION: creating /var/lib/dirsrv/slapd-TESTRELM-TEST/db
2020-02-15T10:32:26Z DEBUG ACTION: creating /var/lib/dirsrv/slapd-TESTRELM-TEST/ldif
2020-02-15T10:32:26Z DEBUG ACTION: creating /var/lock/dirsrv/slapd-TESTRELM-TEST
2020-02-15T10:32:26Z DEBUG ACTION: creating /var/log/dirsrv/slapd-TESTRELM-TEST
2020-02-15T10:32:26Z DEBUG ACTION: creating /var/run/dirsrv
2020-02-15T10:32:27Z DEBUG CMD: systemctl enable dirsrv@TESTRELM-TEST ; STDOUT:  ; STDERR: Created symlink /etc/systemd/system/multi-user.target.wants/dirsrv → /usr/lib/systemd/system/dirsrv@.service.

2020-02-15T10:32:27Z DEBUG ACTION: Creating certificate database is /etc/dirsrv/slapd-TESTRELM-TEST
2020-02-15T10:32:27Z DEBUG Allocate <class 'lib389.DirSrv'> with None
2020-02-15T10:32:27Z DEBUG Allocate <class 'lib389.DirSrv'> with kvm-01-guest02.testrelm.test:389
2020-02-15T10:32:27Z DEBUG Allocate <class 'lib389.DirSrv'> with kvm-01-guest02.testrelm.test:389
2020-02-15T10:32:27Z DEBUG nss cmd: /usr/bin/certutil -N -d /etc/dirsrv/slapd-TESTRELM-TEST -f /etc/dirsrv/slapd-TESTRELM-TEST/pwdfile.txt
2020-02-15T10:32:27Z DEBUG nss output: 
2020-02-15T10:32:27Z DEBUG nss cmd: /usr/bin/certutil -N -d /etc/dirsrv/ssca/ -f /etc/dirsrv/ssca//pwdfile.txt
2020-02-15T10:32:27Z DEBUG nss output: 
2020-02-15T10:32:28Z DEBUG nss cmd: /usr/bin/certutil -S -n Self-Signed-CA -s CN=ssca.389ds.example.com,O=testing,L=389ds,ST=Queensland,C=AU -x -g 4096 -t CT,, -v 24 --keyUsage certSigning -d /etc/dirsrv/ssca/ -z /etc/dirsrv/ssca//noise.txt -f /etc/dirsrv/ssca//pwdfile.txt
2020-02-15T10:32:30Z DEBUG nss output: 

Generating key.  This may take a few moments...


2020-02-15T10:32:30Z DEBUG nss cmd: /usr/bin/certutil -L -n Self-Signed-CA -d /etc/dirsrv/ssca/ -a
2020-02-15T10:32:30Z DEBUG nss cmd: /usr/bin/c_rehash /etc/dirsrv/ssca/
2020-02-15T10:32:30Z DEBUG Traceback (most recent call last):
  File "/usr/lib/python3.8/site-packages/ipaserver/install/service.py", line 603, in start_creation
    run_step(full_msg, method)
  File "/usr/lib/python3.8/site-packages/ipaserver/install/service.py", line 589, in run_step
    method()
  File "/usr/lib/python3.8/site-packages/ipaserver/install/dsinstance.py", line 559, in __create_instance
    sds.create_from_args(general, slapd, backends, None)
  File "/usr/lib/python3.8/site-packages/lib389/instance/setup.py", line 655, in create_from_args
    self._install_ds(general, slapd, backends)
  File "/usr/lib/python3.8/site-packages/lib389/instance/setup.py", line 840, in _install_ds
    ssca.create_rsa_ca(months=slapd['self_sign_cert_valid_months'])
  File "/usr/lib/python3.8/site-packages/lib389/nss_ssl.py", line 274, in create_rsa_ca
    check_output(cmd, stderr=subprocess.STDOUT)
  File "/usr/lib64/python3.8/subprocess.py", line 411, in check_output
    return run(*popenargs, stdout=PIPE, timeout=timeout, check=True,
  File "/usr/lib64/python3.8/subprocess.py", line 489, in run
    with Popen(*popenargs, **kwargs) as process:
  File "/usr/lib64/python3.8/subprocess.py", line 854, in __init__
    self._execute_child(args, executable, preexec_fn, close_fds,
  File "/usr/lib64/python3.8/subprocess.py", line 1702, in _execute_child
    raise child_exception_type(errno_num, err_msg, err_filename)
FileNotFoundError: [Errno 2] No such file or directory: '/usr/bin/c_rehash'

Comment 2 Fedora Update System 2020-02-18 02:15:44 UTC

389-ds-base-1.4.2.8-3.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-e31f4f86de

Comment 3 Fedora Update System 2020-02-27 17:28:21 UTC

389-ds-base-1.4.2.8-3.fc31 has been pushed to the Fedora 31 stable repository. If problems still persist, please make note of it in this bug report.

Note You need to log in before you can comment on or make changes to this bug.