Description of problem: Client couldn't do: (overcloud) [stack@undercloud tasks]$ openstack user list --domain domain.tld An unexpected error prevented the server from fulfilling your request. (HTTP 500) (Request-ID: req-f818366a-e606-4225-a489-8b0e3bd8ccf1) (overcloud) [stack@undercloud tasks]$ openstack user show test01 --domain domain.tld get() takes 1 positional argument but 2 were given An empty CA database was found in /etc/openldap/certs on the controller nodes. We don't know who/what/when this was created. Once the dir was moved to /etc/openldap/certs.bak, everything started working correctly. This patch could detect and prevent this from happening: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/827573 Version-Release number of selected component (if applicable): OSP16.1 How reproducible: 100% Steps to Reproduce: 1. have an empty CA database in /etc/openldap/certs. 2. ldapsearch command doesn't work 3. Actual results: keystone integrated with LDAP stop working Expected results: keystone works fine. Additional info: Some output in next private comment
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat OpenStack Platform 17.0.1 bug fix and enhancement advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2023:0271