2127887 – [ansible-freeipa] ipaclient OTP without kinit on controller

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 2127887 - [ansible-freeipa] ipaclient OTP without kinit on controller

Summary: [ansible-freeipa] ipaclient OTP without kinit on controller

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Red Hat Enterprise Linux 9
Classification:	Red Hat
Component:	ansible-freeipa
Sub Component:
Version:	9.2
Hardware:	Unspecified
OS:	Unspecified
Priority:	unspecified
Severity:	unspecified
Target Milestone:	rc
Target Release:	---
Assignee:	Thomas Woerner
QA Contact:	Varun Mylaraiah
Docs Contact:
URL:
Whiteboard:
Depends On:	2127885
Blocks:
TreeView+	depends on / blocked

Reported:	2022-09-19 10:00 UTC by Thomas Woerner
Modified:	2023-05-09 08:03 UTC (History)
CC List:	2 users (show)
Fixed In Version:	ansible-freeipa-1.9.0-1.el9
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:	2127885
Environment:
Last Closed:	2023-05-09 07:25:35 UTC
Type:	Bug
Target Upstream Version:
Embargoed:
Dependent Products:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Issue Tracker	FREEIPA-8766	None	None	None	2022-09-19 10:05:07 UTC
Red Hat Issue Tracker	RHELPLAN-134287	None	None	None	2022-09-19 10:05:18 UTC
Red Hat Product Errata	RHEA-2023:2168	None	None	None	2023-05-09 07:25:50 UTC

Description Thomas Woerner 2022-09-19 10:00:41 UTC

+++ This bug was initially created as a clone of Bug #2127885 +++

Description of problem:

For OTP the client role deployment uses an action plugin and kinit on the controller. This is an additional requirement that makes the use of OTP with the client role in AAP impossible.

The action plugin altogether with the kinit call can be removed with a special task on the given or discovered server.

Comment 1 Thomas Woerner 2022-11-23 13:08:49 UTC

Upstream PR: https://github.com/freeipa/ansible-freeipa/pull/987

Comment 6 Varun Mylaraiah 2022-12-20 13:36:56 UTC

Verified
ansible-core-2.14.1-1.el9.x86_64
ansible-freeipa-1.9.0-1.el9.noarch

Passed	ansible_freeipa_tests/client/test_idm_deploy_client.py::TestClientTC27::test_otp_without_krb5_pkgs

INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:397 RUN ['yum', 'remove', 'krb5-workstation', '-y']
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:519 RUN ['yum', 'remove', 'krb5-workstation', '-y']
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Dependencies resolved.
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 ================================================================================
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563  Package              Arch       Version             Repository            Size
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 ================================================================================
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Removing:
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563  krb5-workstation     x86_64     1.19.1-24.el9_1     @rhel-9.2-BaseOS     3.1 M
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Removing unused dependencies:
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563  krb5-pkinit          x86_64     1.19.1-24.el9_1     @rhel-9.2-BaseOS     130 k
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563  libkadm5             x86_64     1.19.1-24.el9_1     @rhel-9.2-BaseOS     222 k
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Transaction Summary
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 ================================================================================
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Remove  3 Packages
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Freed space: 3.5 M
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Running transaction check
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Transaction check succeeded.
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Running transaction test
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Transaction test succeeded.
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Running transaction
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   Preparing        :                                                        1/1 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   Erasing          : krb5-workstation-1.19.1-24.el9_1.x86_64                1/3 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   Erasing          : krb5-pkinit-1.19.1-24.el9_1.x86_64                     2/3 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   Erasing          : libkadm5-1.19.1-24.el9_1.x86_64                        3/3 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   Running scriptlet: libkadm5-1.19.1-24.el9_1.x86_64                        3/3 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   Verifying        : krb5-pkinit-1.19.1-24.el9_1.x86_64                     1/3 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   Verifying        : krb5-workstation-1.19.1-24.el9_1.x86_64                2/3 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   Verifying        : libkadm5-1.19.1-24.el9_1.x86_64                        3/3 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Removed:
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   krb5-pkinit-1.19.1-24.el9_1.x86_64   krb5-workstation-1.19.1-24.el9_1.x86_64  
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563   libkadm5-1.19.1-24.el9_1.x86_64     
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:563 Complete!
DEBUG    pytest_multihost.host.Host.ansible.cmd71:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:433 PUT inventory/clients.hosts
DEBUG    pytest_multihost.host.Host.ansible.cmd72:transport.py:519 RUN ['tee', 'inventory/clients.hosts']
DEBUG    pytest_multihost.host.Host.ansible.cmd72:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:433 PUT install-clients.yaml
DEBUG    pytest_multihost.host.Host.ansible.cmd73:transport.py:519 RUN ['tee', 'install-clients.yaml']
DEBUG    pytest_multihost.host.Host.ansible.cmd73:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:397 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/clients.hosts', 'install-clients.yaml']
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:519 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/clients.hosts', 'install-clients.yaml']
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ansible-playbook [core 2.14.1]
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563   config file = /etc/ansible/ansible.cfg
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563   configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563   ansible python module location = /usr/lib/python3.9/site-packages/ansible
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563   ansible collection location = /root/.ansible/collections:/usr/share/ansible/collections
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563   executable location = /usr/bin/ansible-playbook
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563   python version = 3.9.16 (main, Dec  8 2022, 00:00:00) [GCC 11.3.1 20221121 (Red Hat 11.3.1-4)] (/usr/bin/python3.9)
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563   jinja version = 3.1.2
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563   libyaml = True
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 Using /etc/ansible/ansible.cfg as config file
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 Skipping callback 'default', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 Skipping callback 'minimal', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 Skipping callback 'oneline', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 PLAYBOOK: install-clients.yaml *************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 1 plays in install-clients.yaml
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 PLAY [Playbook to configure IPA clients] ***************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [Gathering Facts] *********************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /root/install-clients.yaml:2
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test]
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Import variables specific to distribution] *******************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:4
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test] => (item=/usr/share/ansible/roles/ipaclient/vars/default.yml) => {"ansible_facts": {"ipaclient_packages": ["ipa-client", "python3-libselinux"]}, "ansible_included_var_files": ["/usr/share/ansible/roles/ipaclient/vars/default.yml"], "ansible_loop_var": "item", "changed": false, "item": "/usr/share/ansible/roles/ipaclient/vars/default.yml"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install IPA client] ******************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:19
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 included: /usr/share/ansible/roles/ipaclient/tasks/install.yml for client1.ipadomain.test
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Ensure that IPA client packages are installed] *****
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:4
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Set ipaclient_servers] *****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:10
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Set ipaclient_servers from cluster inventory] ******
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:15
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Check that either password or keytab is set] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:21
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Set default principal if no keytab is given] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:25
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Fail on missing ipaclient_domain and ipaserver_domain] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:33
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Fail on missing ipaclient_servers] *****************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:37
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Configure DNS resolver] ****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:41
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - IPA client test] ***********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:50
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test] => {"basedn": "dc=ipadomain,dc=test", "changed": false, "client_already_configured": false, "client_domain": "ipadomain.test", "dnsok": true, "domain": "ipadomain.test", "hostname": "client1.ipadomain.test", "ipa_python_version": 41001, "kdc": "master.ipadomain.test", "nosssd_files": {}, "ntp_pool": null, "ntp_servers": null, "realm": "IPADOMAIN.TEST", "servers": ["master.ipadomain.test"], "sssd": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Cleanup leftover ccache] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:76
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "path": "/etc/ipa/.dns_ccache", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Configure NTP] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:81
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Make sure One-Time Password is enabled if it's already defined] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:93
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Disable One-Time Password for on_master] ***********
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:98
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Test if IPA client has working krb5.keytab] ********
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:103
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test] => {"ca_crt_exists": false, "changed": false, "krb5_conf_ok": false, "krb5_keytab_ok": false, "ping_test_ok": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Disable One-Time Password for client with working krb5.keytab] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:113
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Keytab or password is required for getting otp] ****
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:129
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Create temporary file for keytab] ******************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:134
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Copy keytab to server temporary file] **************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:143
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Get One-Time Password for client enrollment] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:151
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test -> master.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Report error for OTP generation] *******************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:161
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Store the previously obtained OTP] *****************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:167
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Remove keytab temporary file] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:177
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Store predefined OTP in admin_password] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:184
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Check if principal and keytab are set] *************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:200
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Check if one of password or keytabs are set] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:204
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Purge IPADOMAIN.TEST from host keytab] *************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:212
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true, "cmd": ["/usr/sbin/ipa-rmkeytab", "-k", "/etc/krb5.keytab", "-r", "IPADOMAIN.TEST"], "delta": "0:00:00.004774", "end": "2022-12-18 23:00:28.252582", "failed_when_result": false, "msg": "non-zero return code", "rc": 7, "start": "2022-12-18 23:00:28.247808", "stderr": "Failed to set cursor 'No such file or directory'", "stderr_lines": ["Failed to set cursor 'No such file or directory'"], "stdout": "", "stdout_lines": []}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Backup and set hostname] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:229
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Join IPA] ******************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:234
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"already_joined": false, "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : krb5 configuration not correct] ******************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:256
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : IPA test failed] *********************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:262
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : ca.crt file is missing] **************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:266
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Configure IPA default.conf] ************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:279
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Configure SSSD] ************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:288
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Configure krb5 for IPA realm] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:310
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - IPA API calls for remaining enrollment parts] ******
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:324
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"ca_enabled": true, "changed": true, "subject_base": "O=IPADOMAIN.TEST"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Fix IPA ca] ****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:332
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Create IPA NSS database] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:342
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"ca_enabled_ra": true, "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Configure SSH and SSHD] ****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:374
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Configure automount] *******************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:382
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Configure firefox] *********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:388
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Configure NIS] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:394
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Install - Restore original admin password if overwritten by OTP] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:412
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Cleanup leftover ccache] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:418
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "path": "/etc/ipa/.dns_ccache", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 TASK [ipaclient : Uninstall IPA client] ****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:23
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 PLAY RECAP *********************************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd74:transport.py:563 client1.ipadomain.test     : ok=23   changed=12   unreachable=0    failed=0    skipped=24   rescued=0    ignored=0   



Based on the test result, marking the bug Verified

Comment 9 errata-xmlrpc 2023-05-09 07:25:35 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ansible-freeipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2023:2168

Note You need to log in before you can comment on or make changes to this bug.