RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1955440 - ipa installation fails to configure chrony
Summary: ipa installation fails to configure chrony
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: ipa
Version: 9.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: beta
: ---
Assignee: Florence Blanc-Renaud
QA Contact: ipa-qe
URL:
Whiteboard:
Depends On: 1931787
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-04-30 06:58 UTC by Florence Blanc-Renaud
Modified: 2021-12-07 21:32 UTC (History)
4 users (show)

Fixed In Version: ipa-4.9.6-2.el9
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-12-07 21:30:47 UTC
Type: Bug
Target Upstream Version:
Embargoed:
pm-rhel: mirror+

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FREEIPA-7430 0 None None None 2021-12-02 14:29:40 UTC

Description Florence Blanc-Renaud 2021-04-30 06:58:27 UTC 
This bug is created as a clone of upstream ticket:
https://pagure.io/freeipa/issue/8676

`[testing_ipa-4.8_latest_selinux]` - [PR646](https://github.com/freeipa-pr-ci2/freeipa/pull/646)
[report](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/31a0fc8c-5751-11eb-9bed-fa163e7519b4/report.html)
```
test_integration/test_ntp_options.py::TestNTPoptions::test_server_client_install_with_multiple_ntp_srv
test_integration/test_ntp_options.py::TestNTPoptions::test_server_replica_client_install_with_pool_and_srv
test_integration/test_ntp_options.py::TestNTPoptions::test_server_promoted_replica_client_install_with_srv
test_integration/test_ntp_options.py::TestNTPoptions::test_replica_promotion_without_ntp 
```

failed with unexpected message:

```
>       assert self.exp_change_msg in server_install.stderr_text
E       AssertionError: assert 'Configuration of chrony was changed by installer.' in 'Synchronizing time\nAugeas failed to configure file /etc/chrony.conf\nAttempting to sync time with chronyc.\nProcess ...onfiguration complete.\nThe ipa-client-install command was successful\nThe ipa-server-install command was successful\n'
E        +  where 'Configuration of chrony was changed by installer.' = <ipatests.test_integration.test_ntp_options.TestNTPoptions object at 0x7ff35f6fcf10>.exp_change_msg
E        +  and   'Synchronizing time\nAugeas failed to configure file /etc/chrony.conf\nAttempting to sync time with chronyc.\nProcess ...onfiguration complete.\nThe ipa-client-install command was successful\nThe ipa-server-install command was successful\n' = <pytest_multihost.transport.SSHCommand object at 0x7ff35f7bc7f0>.stderr_text
```

and `test_integration/test_ntp_options.py::TestNTPoptions::test_interactive_ntp_set_opt` failed with unexpected response: 

```
>       assert self.ntp_server1 in cmd.stdout_text
E       AssertionError: assert '1.pool.ntp.org' in '# Use public servers from the pool.ntp.org project.\n# Please consider joining the pool (https://www.pool.ntp.org/joi...r log files.\nlogdir /var/log/chrony\n\n# Select which information is logged.\n#log measurements statistics tracking\n'
E        +  where '1.pool.ntp.org' = <ipatests.test_integration.test_ntp_options.TestNTPoptions object at 0x7ff35f6be910>.ntp_server1
E        +  and   '# Use public servers from the pool.ntp.org project.\n# Please consider joining the pool (https://www.pool.ntp.org/joi...r log files.\nlogdir /var/log/chrony\n\n# Select which information is logged.\n#log measurements statistics tracking\n' = <pytest_multihost.transport.SSHCommand object at 0x7ff35f6abdf0>.stdout_text
```
Comment 1 Florence Blanc-Renaud 2021-04-30 07:13:50 UTC 
ipa relies on Augeas to perform the chrony configuration. In RHEL9, chrony has been updated to 4.0 and provides new options that are set by default in /etc/chrony.conf (sourcedir and ntsdumpdir).
Augeas doesn't understand these options and fails to configure chrony:

# ipa-server-install [...] --ntp-server=1.pool.ntp.org
...
NTP server:	1.pool.ntp.org
Disabled p11-kit-proxy
Synchronizing time
Augeas failed to configure file /etc/chrony.conf
Using default chrony configuration.
...

An upstream fix + fedora fix is already available and needs to be backported to RHEL9 (see BZ #1931787 reported against augeas / RHEL9).
When the augeas issue is fixed, ipa needs to bump the Requires version of augeas in its spec file.
Comment 2 Florence Blanc-Renaud 2021-04-30 07:15:16 UTC 
Adding TestCaseProvided label as the upstream test test_integration/test_ntp_options/TestNTPoptions already find the BZ.
Comment 3 Rob Crittenden 2021-05-06 19:39:33 UTC 
Fixed upstream
master:
https://pagure.io/freeipa/c/d8f246d8e3ef12d79d89a048fe305a7cfed5b76f
Comment 4 Florence Blanc-Renaud 2021-05-07 09:01:54 UTC 
Fixed upstream
ipa-4-9:
https://pagure.io/freeipa/c/4dd9d079fbc190ebcce54c427898c67d83066d1e
Comment 5 Florence Blanc-Renaud 2021-07-07 09:15:00 UTC 
This BZ depends on https://bugzilla.redhat.com/show_bug.cgi?id=1931787 which just moved to VERIFIED => we can bump the augeas version on rhel9.
Upstream PR https://github.com/freeipa/freeipa/pull/5877

@ksiddiqu can you provide qa_ack and set ITM?
Comment 6 Florence Blanc-Renaud 2021-07-08 09:09:21 UTC 
Additional fix for the rhel9 spec file (now that augeas 1.12.1-0.1 is available):

Fixed upstream
master:
https://pagure.io/freeipa/c/8d83ebde3ad235c1c59ff40d396a01f0f331fc8f
Comment 7 Florence Blanc-Renaud 2021-07-08 15:34:12 UTC 
Fixed upstream
ipa-4-9:
https://pagure.io/freeipa/c/076e499f6f1223458cb896f1e90296e511c922d7
Comment 10 Michal Polovka 2021-07-30 13:35:35 UTC 
Verified using RHEL9 machine with ipa-4.9.6-4.el9.src.rpm


============================= test session starts ==============================
platform linux -- Python 3.9.6, pytest-6.2.2, py-1.10.0, pluggy-0.13.1 -- /usr/bin/python3
cachedir: /home/cloud-user/.pytest_cache
metadata: {'Python': '3.9.6', 'Platform': 'Linux-5.14.0-0.rc3.29.el9.x86_64-x86_64-with-glibc2.33.9000', 'Packages': {'pytest': '6.2.2', 'py': '1.10.0', 'pluggy': '0.13.1'}, 'Plugins': {'metadata': '1.7.0', 'multihost': '3.0', 'sourceorder': '0.5', 'html': '3.1.1'}}
rootdir: /usr/lib/python3.9/site-packages/ipatests
plugins: metadata-1.7.0, multihost-3.0, sourceorder-0.5, html-3.1.1
collecting ... collected 11 items
 
test_integration/test_ntp_options.py::TestNTPoptions::test_server_client_install_without_options PASSED [  9%]
test_integration/test_ntp_options.py::TestNTPoptions::test_server_client_install_no_ntp PASSED [ 18%]
test_integration/test_ntp_options.py::TestNTPoptions::test_server_client_install_with_multiple_ntp_srv PASSED [ 27%]
test_integration/test_ntp_options.py::TestNTPoptions::test_server_replica_client_install_with_pool_and_srv PASSED [ 36%]
test_integration/test_ntp_options.py::TestNTPoptions::test_server_promoted_replica_client_install_with_srv PASSED [ 45%]
test_integration/test_ntp_options.py::TestNTPoptions::test_server_client_install_mixed_options PASSED [ 54%]
test_integration/test_ntp_options.py::TestNTPoptions::test_replica_promotion_with_ntp_options PASSED [ 63%]
test_integration/test_ntp_options.py::TestNTPoptions::test_replica_promotion_without_ntp PASSED [ 72%]
test_integration/test_ntp_options.py::TestNTPoptions::test_interactive_ntp_set_opt PASSED [ 81%]
test_integration/test_ntp_options.py::TestNTPoptions::test_interactive_ntp_no_opt PASSED [ 90%]
test_integration/test_ntp_options.py::TestNTPoptions::test_interactive_ntp_no_conf PASSED [100%]

Therefore marking as verified. Automation is present in downstream test package.
Note You need to log in before you can comment on or make changes to this bug.