Bug 1907481
| Summary: | ipa: establishing trust fails on fetching domains from AD - oddjob locale issue | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Petr Vobornik <pvoborni> |
| Component: | oddjob | Assignee: | Alexander Bokovoy <abokovoy> |
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 8.4 | CC: | abokovoy, ksiddiqu, rcritten, tscherf |
| Target Milestone: | rc | Keywords: | Triaged |
| Target Release: | 8.0 | Flags: | pm-rhel:
mirror+
|
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | oddjob-0.34.7-1.el8 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-05-18 15:21:04 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Calling: # systemctl edit oddjobd And adding: ``` [Service] Environment=LC_ALL=C.UTF-8 ``` Then: # systemctl restart oddjobd Seems to fix the issue. verified with nightly compose based on following details
IPA version: (snip from runner.log):
------------------------------------
2020-12-18T10:52:28+0000 ok: [master.testrelm.test] => (item=ipa-server) =>
2020-12-18T10:52:28+0000 msg:
2020-12-18T10:52:28+0000 - arch: x86_64
2020-12-18T10:52:28+0000 epoch: null
2020-12-18T10:52:28+0000 name: ipa-server
2020-12-18T10:52:28+0000 release: 0.5.rc3.module+el8.4.0+9124+ced20601
2020-12-18T10:52:28+0000 source: rpm
2020-12-18T10:52:28+0000 version: 4.9.0
oddjob version:
---------------
oddjob-0.34.7-1.el8.x86_64
Test results: (snip from test-result.txt):
-----------------------------------------
test_establish_nonposix_trust is successful now, error not seen any other tests. One failed test is due AD env issue which is being investigated.
============================= test session starts ==============================
platform linux -- Python 3.6.8, pytest-3.10.1, py-1.10.0, pluggy-0.13.1 -- /usr/libexec/platform-python
cachedir: /home/cloud-user/.pytest_cache
metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-262.el8.x86_64-x86_64-with-redhat-8.4-Ootpa', 'Packages': {'pytest': '3.10.1', 'py': '1.10.0', 'pluggy': '0.13.1'}, 'Plugins': {'metadata': '1.11.0', 'html': '1.22.1', 'multihost': '3.0', 'sourceorder': '0.5'}}
rootdir: /usr/lib/python3.6/site-packages/ipatests, inifile:
plugins: metadata-1.11.0, html-1.22.1, multihost-3.0, sourceorder-0.5
collecting ... collected 45 items
test_integration/test_trust.py::TestTrust::test_establish_nonposix_trust PASSED [ 2%]
test_integration/test_trust.py::TestTrust::test_trustdomains_found_in_nonposix_trust PASSED [ 4%]
test_integration/test_trust.py::TestTrust::test_range_properties_in_nonposix_trust PASSED [ 6%]
test_integration/test_trust.py::TestTrust::test_user_gid_uid_resolution_in_nonposix_trust PASSED [ 8%]
test_integration/test_trust.py::TestTrust::test_ipa_commands_run_as_aduser PASSED [ 11%]
test_integration/test_trust.py::TestTrust::test_ipa_management_run_as_aduser PASSED [ 13%]
test_integration/test_trust.py::TestTrust::test_password_login_as_aduser PASSED [ 15%]
test_integration/test_trust.py::TestTrust::test_ipauser_authentication_with_nonposix_trust PASSED [ 17%]
test_integration/test_trust.py::TestTrust::test_upn_in_nonposix_trust PASSED [ 20%]
test_integration/test_trust.py::TestTrust::test_upn_user_resolution_in_nonposix_trust PASSED [ 22%]
test_integration/test_trust.py::TestTrust::test_upn_user_authentication_in_nonposix_trust PASSED [ 24%]
test_integration/test_trust.py::TestTrust::test_remove_nonposix_trust PASSED [ 26%]
test_integration/test_trust.py::TestTrust::test_subordinate_suffix FAILED [ 28%]
test_integration/test_trust.py::TestTrust::test_remove_subordinate_suffixes_trust PASSED [ 31%]
test_integration/test_trust.py::TestTrust::test_establish_posix_trust PASSED [ 33%]
test_integration/test_trust.py::TestTrust::test_trustdomains_found_in_posix_trust PASSED [ 35%]
test_integration/test_trust.py::TestTrust::test_range_properties_in_posix_trust PASSED [ 37%]
test_integration/test_trust.py::TestTrust::test_user_uid_gid_resolution_in_posix_trust PASSED [ 40%]
test_integration/test_trust.py::TestTrust::test_user_without_posix_attributes_not_visible PASSED [ 42%]
test_integration/test_trust.py::TestTrust::test_override_homedir PASSED [ 44%]
test_integration/test_trust.py::TestTrust::test_extdom_plugin PASSED [ 46%]
test_integration/test_trust.py::TestTrust::test_remove_posix_trust PASSED [ 48%]
test_integration/test_trust.py::TestTrust::test_invalid_range_types PASSED [ 51%]
test_integration/test_trust.py::TestTrust::test_establish_external_subdomain_trust PASSED [ 53%]
test_integration/test_trust.py::TestTrust::test_trustdomains_found_in_external_subdomain_trust PASSED [ 55%]
test_integration/test_trust.py::TestTrust::test_user_gid_uid_resolution_in_external_subdomain_trust PASSED [ 57%]
test_integration/test_trust.py::TestTrust::test_remove_external_subdomain_trust PASSED [ 60%]
test_integration/test_trust.py::TestTrust::test_establish_nonexternal_subdomain_trust PASSED [ 62%]
test_integration/test_trust.py::TestTrust::test_establish_external_treedomain_trust PASSED [ 64%]
test_integration/test_trust.py::TestTrust::test_trustdomains_found_in_external_treedomain_trust PASSED [ 66%]
test_integration/test_trust.py::TestTrust::test_user_gid_uid_resolution_in_external_treedomain_trust PASSED [ 68%]
test_integration/test_trust.py::TestTrust::test_remove_external_treedomain_trust PASSED [ 71%]
test_integration/test_trust.py::TestTrust::test_establish_nonexternal_treedomain_trust PASSED [ 73%]
test_integration/test_trust.py::TestTrust::test_establish_external_rootdomain_trust PASSED [ 75%]
test_integration/test_trust.py::TestTrust::test_trustdomains_found_in_external_rootdomain_trust PASSED [ 77%]
test_integration/test_trust.py::TestTrust::test_remove_external_rootdomain_trust PASSED [ 80%]
test_integration/test_trust.py::TestTrust::test_establish_forest_trust_with_shared_secret PASSED [ 82%]
test_integration/test_trust.py::TestTrust::test_trustdomains_found_in_forest_trust_with_shared_secret PASSED [ 84%]
test_integration/test_trust.py::TestTrust::test_user_gid_uid_resolution_in_forest_trust_with_shared_secret PASSED [ 86%]
test_integration/test_trust.py::TestTrust::test_remove_forest_trust_with_shared_secret PASSED [ 88%]
test_integration/test_trust.py::TestTrust::test_establish_external_trust_with_shared_secret PASSED [ 91%]
test_integration/test_trust.py::TestTrust::test_trustdomains_found_in_external_trust_with_shared_secret PASSED [ 93%]
test_integration/test_trust.py::TestTrust::test_user_uid_resolution_in_external_trust_with_shared_secret PASSED [ 95%]
test_integration/test_trust.py::TestTrust::test_remove_external_trust_with_shared_secret PASSED [ 97%]
test_integration/test_trust.py::TestTrust::test_server_option_with_unreachable_ad PASSED [100%]
=================================== FAILURES ===================================
FAIL test_integration/test_trust.py::TestTrust::()::test_subordinate_suffix
==================== 1 failed, 44 passed in 2809.77 seconds ====================
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (oddjob bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:1759 |
Description of problem: Found in FreeIPA upstream test_trust suite. Test, e.g.: test_integration/test_trust.py::TestTrust::()::test_establish_nonposix_trust Version-Release number of selected component (if applicable): ipa-server-4.9.0-0.5.rc3.module+el8.4.0+9124+ced20601.x86_64 How reproducible: Run the test suite with the given version of package. Expected results: tests succeed (creation of trust works) Additional info: The test says: E AssertionError: Command: ipa trust-add --type ad ad.test --range-type ipa-ad-trust --admin Administrator --password repeatedly failed 15 times, exceeding the timeout of 30 seconds. Command: RUN ['ipa', 'trust-add', '--type', 'ad', 'ad.test', '--range-type', 'ipa-ad-trust', '--admin', 'Administrator', '--password'] transport.py 558 DEBUG ipa: ERROR: error on server 'master.testrelm.test': Fetching domains from trusted forest failed. See details in the error_log transport.py 217 DEBUG Exit code: 1 httpd error_log entry on master: ``` ipa: ERROR: Helper fetch_domains was called for forest ad.test, return code is 1 ipa: ERROR: Standard output from the helper: --- ipa: ERROR: Error output from the helper: Traceback (most recent call last): File "/usr/libexec/ipa/oddjob/com.redhat.idm.trust-fetch-domains", line 168, in <module> in_server=True, log=None, context="server", confdir=paths.ETC_IPA File "/usr/lib/python3.6/site-packages/ipalib/plugable.py", line 503, in bootstrap raise errors.SystemEncodingError(encoding=fse) ipalib.errors.SystemEncodingError: System encoding must be UTF-8, 'iso8859-1' is not supported. Set LC_ALL="C.UTF-8", or LC_ALL="" and LC_CTYPE="C.UTF-8". -- ipa: INFO: [jsonserver_session] admin: trust_add/1('ad.test', trust_type='ad', realm_admin='Administrator', realm_passwd='********', ```