Bug 1976878
| Summary: | IPATrustControllerServiceCheck doesn't handle HIDDEN_SERVICE | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Rob Crittenden <rcritten> |
| Component: | ipa-healthcheck | Assignee: | Rob Crittenden <rcritten> |
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 9.0 | CC: | fcami, ksiddiqu, mpolovka, pvoborni, sumenon |
| Target Milestone: | beta | Keywords: | Triaged |
| Target Release: | --- | Flags: | pm-rhel:
mirror+
|
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-healthcheck-0.9-3.el9 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-05-17 13:01:12 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Rob Crittenden
2021-06-28 12:56:01 UTC
Fixed upstream: master: de2032487c73151e13812db78866ddd85d0f541c If trust was a hidden service ipa-healthcheck would flag it as an error: ADTRUST service is not enabled. Pre-verified using ipa-healthcheck-0.9-3.el9.noarch
Main server:
1. install ipa-server-trust-ad and ipa-healthcheck
2. configure ipa-server
3. ipa-healthcheck --source ipahealthcheck.ipa.trust --all
...
{
"source": "ipahealthcheck.ipa.trust",
"check": "IPATrustControllerServiceCheck",
"result": "SUCCESS",
"uuid": "fb2c8376-d303-4588-9d7c-535de883a8cf",
"when": "20211112152551Z",
"duration": "0.000012",
"kw": {}
},
...
4. set server to be hidden:
ipa server-state --state=hidden
Server name: <main server>
----------------------------------------------------------------------------
Changed server state of "<main server>".
----------------------------------------------------------------------------
5. ipa-healthcheck --source ipahealthcheck.ipa.trust --all
...
{
"source": "ipahealthcheck.ipa.trust",
"check": "IPATrustControllerServiceCheck",
"result": "SUCCESS",
"uuid": "c3b0c6ed-ecc7-4b3e-9966-b32f6944287e",
"when": "20211112153801Z",
"duration": "0.000016",
"kw": {}
},
...
Replica:
1. install ipa-server-trust-ad
2. configure ipa-server, certificate authority
ipa-healthcheck treats HIDDEN_SERVICE state as SUCCESS, therefore marking as verified tested.
Verified using automation present in freeipa-healthcheck/tests/test_ipa_trust.py::::TestControllerService::test_service_enabled System: RHEL9.0 Package version: ipa-healthcheck-0.9-3.el9.noarch # pytest -vvv test_ipa_trust.py ... test_ipa_trust.py::TestControllerService::test_service_enabled PASSED [ 71%] ... Full test log is an attachment of this BZ. Therefore marking as verified and covered by automation. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (new packages: ipa-healthcheck), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:2437 |