Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1855299

Summary: ipareplica: Failure while deploying KRA
Product: Red Hat Enterprise Linux 8 Reporter: Thomas Woerner <twoerner>
Component: ansible-freeipaAssignee: Thomas Woerner <twoerner>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.3CC: mvarun
Target Milestone: rcKeywords: Regression
Target Release: 8.0Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ansible-freeipa-0.1.12-5 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-11-04 02:46:57 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Thomas Woerner 2020-07-09 13:48:22 UTC
Description of problem:
ipareplica deployment with KRA fails:


HTTPError: 404 Client Error: Not Found for url: https://xxx/ipa/keys/ca/auditSigningCert%20cert-pki-kra

DEBUG Starting new HTTPS connection (1): xxx:443
DEBUG https://xxx:443 "GET /ipa/keys/ca/auditSigningCert%20cert-pki-kra?type=
Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. Deploy server with adtrust and KRA
2. Deploy replica with adtrust an KRA
3.

Actual results:
Failure while setting up KRA

Expected results:
No failure

Additional info:
This is a clone of https://github.com/freeipa/ansible-freeipa/issues/314

Comment 2 Thomas Woerner 2020-07-09 13:49:59 UTC
Here is the upstream PR: https://github.com/freeipa/ansible-freeipa/pull/317

Comment 3 Thomas Woerner 2020-07-09 17:21:29 UTC
The upstream PR has been merged.

Comment 6 Varun Mylaraiah 2020-07-17 15:36:30 UTC
Verified:
ansible-freeipa-0.1.12-5.el8.noarch

Automation test result 
ansible_freeipa_tests/test_idm_deploy_replica.py::test_server_replica_with_kra
------------------------------ Captured log call -------------------------------
transport.py               293 INFO     WRITE inventory/replicas.hosts
sftp.py                    158 DEBUG    [chan 0] open(b'inventory/replicas.hosts', 'wb')
sftp.py                    158 DEBUG    [chan 0] open(b'inventory/replicas.hosts', 'wb') -> 00000000
sftp.py                    158 DEBUG    [chan 0] close(00000000)
transport.py               329 INFO     PUT install-replicas.yaml
sftp.py                    158 DEBUG    [chan 0] open(b'install-replicas.yaml', 'wb')
sftp.py                    158 DEBUG    [chan 0] open(b'install-replicas.yaml', 'wb') -> 00000000
sftp.py                    158 DEBUG    [chan 0] close(00000000)
sftp.py                    158 DEBUG    [chan 0] stat(b'install-replicas.yaml')
channel.py                1212 DEBUG    [chan 9] Max packet in: 32768 bytes
channel.py                1212 DEBUG    [chan 9] Max packet out: 32768 bytes
transport.py              1819 DEBUG    Secsh channel 9 opened.
transport.py               318 INFO     RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/replicas.hosts', 'install-replicas.yaml']
transport.py               519 DEBUG    RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/replicas.hosts', 'install-replicas.yaml']
channel.py                1212 DEBUG    [chan 9] Sesch channel 9 request ok
transport.py               563 DEBUG    -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py               563 DEBUG    -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
transport.py               563 DEBUG    ansible-playbook 2.9.10
transport.py               563 DEBUG      config file = /root/ansible.cfg
transport.py               563 DEBUG      configured module search path = ['/root/ansible-freeipa/plugins/modules', '/usr/share/ansible/plugins/modules']
transport.py               563 DEBUG      ansible python module location = /usr/lib/python3.6/site-packages/ansible
transport.py               563 DEBUG      executable location = /usr/bin/ansible-playbook
transport.py               563 DEBUG      python version = 3.6.8 (default, Jun 26 2020, 12:10:09) [GCC 8.3.1 20191121 (Red Hat 8.3.1-5)]
transport.py               563 DEBUG    Using /root/ansible.cfg as config file
transport.py               563 DEBUG    
transport.py               563 DEBUG    PLAYBOOK: install-replicas.yaml ************************************************
transport.py               563 DEBUG    2 plays in install-replicas.yaml
transport.py               563 DEBUG    
transport.py               563 DEBUG    PLAY [Playbook to configure IPA server] ****************************************
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [Gathering Facts] *********************************************************
transport.py               563 DEBUG    task path: /root/install-replicas.yaml:2
transport.py               563 DEBUG    ok: [master.ipadomain.test]
transport.py               563 DEBUG    META: ran handlers
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Import variables specific to distribution] *******************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/main.yml:4
transport.py               563 DEBUG    ok: [master.ipadomain.test] => (item=/usr/share/ansible/roles/ipaserver/vars/RedHat-8.yml) => {"ansible_facts": {"ipaserver_packages": ["@idm:DL1/server"], "ipaserver_packages_adtrust": ["@idm:DL1/adtrust"], "ipaserver_packages_dns": ["@idm:DL1/dns"], "ipaserver_packages_firewalld": ["firewalld"]}, "ansible_included_var_files": ["/usr/share/ansible/roles/ipaserver/vars/RedHat-8.yml"], "ansible_loop_var": "item", "changed": false, "item": "/usr/share/ansible/roles/ipaserver/vars/RedHat-8.yml"}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Install IPA server] ******************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/main.yml:12
transport.py               563 DEBUG    included: /usr/share/ansible/roles/ipaserver/tasks/install.yml for master.ipadomain.test
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Install - Ensure that IPA server packages are installed] *****
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/install.yml:5
transport.py               563 DEBUG    ok: [master.ipadomain.test] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []}
*
*
*
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Install - Setup KRA] *****************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/install.yml:339
transport.py               563 DEBUG    changed: [master.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Install - Setup DNS] *****************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/install.yml:350
transport.py               563 DEBUG    skipping: [master.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Install - Setup ADTRUST] *************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/install.yml:367
transport.py               563 DEBUG    changed: [master.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Install - Set DS password] ************************************
*
*
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Install - Configure firewalld] *******************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/install.yml:427
transport.py               563 DEBUG    changed: [master.ipadomain.test] => {"changed": true, "cmd": ["firewall-cmd", "--permanent", "--add-service=freeipa-ldap", "--add-service=freeipa-ldaps", "--add-service=freeipa-trust", "--add-service=ntp"], "delta": "0:00:00.338942", "end": "2020-07-16 08:11:16.832981", "rc": 0, "start": "2020-07-16 08:11:16.494039", "stderr": "Warning: ALREADY_ENABLED: freeipa-ldap\nWarning: ALREADY_ENABLED: freeipa-ldaps\nWarning: ALREADY_ENABLED: ntp", "stderr_lines": ["Warning: ALREADY_ENABLED: freeipa-ldap", "Warning: ALREADY_ENABLED: freeipa-ldaps", "Warning: ALREADY_ENABLED: ntp"], "stdout": "success", "stdout_lines": ["success"]}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Install - Configure firewalld runtime] ***********************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/install.yml:439
transport.py               563 DEBUG    changed: [master.ipadomain.test] => {"changed": true, "cmd": ["firewall-cmd", "--add-service=freeipa-ldap", "--add-service=freeipa-ldaps", "--add-service=freeipa-trust", "--add-service=ntp"], "delta": "0:00:00.325152", "end": "2020-07-16 08:11:17.638726", "rc": 0, "start": "2020-07-16 08:11:17.313574", "stderr": "Warning: ALREADY_ENABLED: 'freeipa-ldap' already in 'public'\nWarning: ALREADY_ENABLED: 'freeipa-ldaps' already in 'public'\nWarning: ALREADY_ENABLED: 'ntp' already in 'public'", "stderr_lines": ["Warning: ALREADY_ENABLED: 'freeipa-ldap' already in 'public'", "Warning: ALREADY_ENABLED: 'freeipa-ldaps' already in 'public'", "Warning: ALREADY_ENABLED: 'ntp' already in 'public'"], "stdout": "success", "stdout_lines": ["success"]}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Cleanup temporary files] *************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/install.yml:453
transport.py               563 DEBUG    ok: [master.ipadomain.test] => (item=/etc/ipa/.tmp_pkcs12_dirsrv) => {"ansible_loop_var": "item", "changed": false, "item": "/etc/ipa/.tmp_pkcs12_dirsrv", "path": "/etc/ipa/.tmp_pkcs12_dirsrv", "state": "absent"}
transport.py               563 DEBUG    ok: [master.ipadomain.test] => (item=/etc/ipa/.tmp_pkcs12_http) => {"ansible_loop_var": "item", "changed": false, "item": "/etc/ipa/.tmp_pkcs12_http", "path": "/etc/ipa/.tmp_pkcs12_http", "state": "absent"}
transport.py               563 DEBUG    ok: [master.ipadomain.test] => (item=/etc/ipa/.tmp_pkcs12_pkinit) => {"ansible_loop_var": "item", "changed": false, "item": "/etc/ipa/.tmp_pkcs12_pkinit", "path": "/etc/ipa/.tmp_pkcs12_pkinit", "state": "absent"}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipaserver : Uninstall IPA server] ****************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipaserver/tasks/main.yml:16
transport.py               563 DEBUG    skipping: [master.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
transport.py               563 DEBUG    META: ran handlers
transport.py               563 DEBUG    META: ran handlers
transport.py               563 DEBUG    
transport.py               563 DEBUG    PLAY [Playbook to configure IPA replicas] **************************************
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [Gathering Facts] *********************************************************
transport.py               563 DEBUG    task path: /root/install-replicas.yaml:21
transport.py               563 DEBUG    ok: [replica1.ipadomain.test]
transport.py               563 DEBUG    META: ran handlers
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Import variables specific to distribution] ******************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/main.yml:4
transport.py               563 DEBUG    ok: [replica1.ipadomain.test] => (item=/usr/share/ansible/roles/ipareplica/vars/RedHat-8.yml) => {"ansible_facts": {"ipareplica_packages": ["@idm:DL1/server"], "ipareplica_packages_adtrust": ["@idm:DL1/adtrust"], "ipareplica_packages_dns": ["@idm:DL1/dns"], "ipareplica_packages_firewalld": ["firewalld"]}, "ansible_included_var_files": ["/usr/share/ansible/roles/ipareplica/vars/RedHat-8.yml"], "ansible_loop_var": "item", "changed": false, "item": "/usr/share/ansible/roles/ipareplica/vars/RedHat-8.yml"}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install IPA replica] ****************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/main.yml:12
transport.py               563 DEBUG    included: /usr/share/ansible/roles/ipareplica/tasks/install.yml for replica1.ipadomain.test
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Ensure IPA replica packages are installed] ********
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:6
transport.py               563 DEBUG    ok: [replica1.ipadomain.test] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Ensure IPA replica packages for dns are installed] ***
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:11
transport.py               563 DEBUG    skipping: [replica1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Ensure IPA replica packages for adtrust are installed] ***
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:17
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true, "msg": "", "rc": 0, "results": ["Installed: libtalloc-devel-2.3.1-2.el8.x86_64", "Installed: libldb-devel-2.1.3-2.el8.x86_64", "Installed: python3-ldb-2.1.3-2.el8.x86_64", "Installed: libtdb-devel-1.4.3-1.el8.x86_64", "Installed: python3-samba-4.12.3-10.el8.3.x86_64", "Installed: ipa-server-trust-ad-4.8.7-4.module+el8.3.0+7221+eedbd403.x86_64", "Installed: libtevent-devel-0.10.2-2.el8.x86_64", "Installed: python3-libsss_nss_idmap-2.3.0-4.el8.x86_64", "Installed: samba-4.12.3-10.el8.3.x86_64", "Installed: samba-common-tools-4.12.3-10.el8.3.x86_64", "Installed: samba-libs-4.12.3-10.el8.3.x86_64", "Installed: libsmbclient-4.12.3-10.el8.3.x86_64", "Installed: python3-talloc-2.3.1-2.el8.x86_64", "Installed: samba-winbind-4.12.3-10.el8.3.x86_64", "Installed: python3-tdb-1.4.3-1.el8.x86_64", "Installed: python3-tevent-0.10.2-2.el8.x86_64", "Installed: samba-winbind-modules-4.12.3-10.el8.3.x86_64"]}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Ensure that firewall packages installed] **********
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:23*
*
*
*
transport.py               563 DEBUG    TASK [ipareplica : Install - Create IPA conf] **********************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:300
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Setup KRB] ****************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:339
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true, "config_master_host_name": "master.ipadomain.test"}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Create override IPA conf] *************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:358
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - DS enable SSL] ************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:400
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Setup http] ***************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:421
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Create original IPA conf again] *******************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:442
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Setup otpd] ***************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:482
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Setup custodia] ***********************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:499
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Setup CA] *****************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:520
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - KRB enable SSL] ***********************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:549
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - DS apply updates] *********************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:567
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Setup kra] ****************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:588
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Restart KDC] **************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:628
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Custodia import dm password] **********************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:645
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Promote SSSD] *************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:667
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Promote openldap.conf] ****************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:680
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Setup DNS] ****************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:693
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Setup adtrust] ************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:717
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Enable IPA] ***************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:739
transport.py               563 DEBUG    changed: [replica1.ipadomain.test] => {"changed": true}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Install - Cleanup root IPA cache] ***************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:756
transport.py               563 DEBUG    ok: [replica1.ipadomain.test] => {"changed": false, "path": "/root/.ipa_cache", "state": "absent"}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Cleanup temporary files] ************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/install.yml:763
transport.py               563 DEBUG    ok: [replica1.ipadomain.test] => (item=/etc/ipa/.tmp_pkcs12_dirsrv) => {"ansible_loop_var": "item", "changed": false, "item": "/etc/ipa/.tmp_pkcs12_dirsrv", "path": "/etc/ipa/.tmp_pkcs12_dirsrv", "state": "absent"}
transport.py               563 DEBUG    ok: [replica1.ipadomain.test] => (item=/etc/ipa/.tmp_pkcs12_http) => {"ansible_loop_var": "item", "changed": false, "item": "/etc/ipa/.tmp_pkcs12_http", "path": "/etc/ipa/.tmp_pkcs12_http", "state": "absent"}
transport.py               563 DEBUG    ok: [replica1.ipadomain.test] => (item=/etc/ipa/.tmp_pkcs12_pkinit) => {"ansible_loop_var": "item", "changed": false, "item": "/etc/ipa/.tmp_pkcs12_pkinit", "path": "/etc/ipa/.tmp_pkcs12_pkinit", "state": "absent"}
transport.py               563 DEBUG    
transport.py               563 DEBUG    TASK [ipareplica : Uninstall IPA replica] **************************************
transport.py               563 DEBUG    task path: /usr/share/ansible/roles/ipareplica/tasks/main.yml:16
transport.py               563 DEBUG    skipping: [replica1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
transport.py               563 DEBUG    META: ran handlers
transport.py               563 DEBUG    META: ran handlers
transport.py               563 DEBUG    
transport.py               563 DEBUG    PLAY RECAP *********************************************************************
transport.py               563 DEBUG    master.ipadomain.test      : ok=40   changed=22   unreachable=0    failed=0    skipped=31   rescued=0    ignored=0   
transport.py               563 DEBUG    replica1.ipadomain.test    : ok=57   changed=39   unreachable=0    failed=0    skipped=25   rescued=0    ignored=0   
transport.py               563 DEBUG    
channel.py                1212 DEBUG    [chan 9] EOF received (9)
channel.py                1212 DEBUG    [chan 9] EOF sent (9)
transport.py               217 DEBUG    Exit code: 0

Comment 9 errata-xmlrpc 2020-11-04 02:46:57 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ansible-freeipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2020:4663