Bug 2051233 - krb5-server-1.19.2-5 breaks IPA server installation
Summary: krb5-server-1.19.2-5 breaks IPA server installation
Keywords:
Status: CLOSED DUPLICATE of bug 2050921
Alias: None
Product: Fedora
Classification: Fedora
Component: krb5
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Alexander Bokovoy
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-02-06 16:39 UTC by Florence Blanc-Renaud
Modified: 2022-02-07 06:57 UTC (History)
8 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2022-02-07 06:57:38 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
ipaserver-install.log (4.14 MB, text/plain)
2022-02-06 16:39 UTC, Florence Blanc-Renaud
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FREEIPA-7806 0 None None None 2022-02-06 16:51:43 UTC

Description Florence Blanc-Renaud 2022-02-06 16:39:07 UTC
Created attachment 1859444 [details]
ipaserver-install.log

Description of problem:
With krb5-server-1.19.2-5, IPA server installation does not work.
The command "ipa-server-install --domain ipa.test --realm IPA.TEST -a Secret123 -p Secret123 -U" returns with exit code 0 but any "kinit admin" command fails:
# kinit admin
kinit: Pre-authentication failed: Invalid argument while getting initial credentials

The installation also reports:
Unable to set admin password CalledProcessError(Command ['/usr/bin/ldappasswd', '-h', 'server.ipa.test', '-ZZ', '-x', '-D', 'cn=Directory Manager', '-y', '/var/lib/ipa/tmpp4tale3j', '-T', '/var/lib/ipa/tmpzznbx6s3', 'uid=admin,cn=users,cn=accounts,dc=ipa,dc=test']

Version-Release number of selected component (if applicable):
ipa-server from master branch
krb5-server-1.19.2-5

How reproducible:
Systematic

Steps to Reproduce:
1. install freeipa-server
2. ipa-server-install --domain ipa.test --realm IPA.TEST -a Secret123 -p Secret123 -U
3. kinit admin

Actual results:
# kinit admin
kinit: Pre-authentication failed: Invalid argument while getting initial credentials

Expected results:
Server installation should succeed without any error and kinit admin should work.

Additional info:

Comment 2 Alexander Bokovoy 2022-02-07 06:57:38 UTC

*** This bug has been marked as a duplicate of bug 2050921 ***


Note You need to log in before you can comment on or make changes to this bug.