2127894 – [ansible-freeipa] [RFE] ipaclient: Also configure DNS resolver

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 2127894 - [ansible-freeipa] [RFE] ipaclient: Also configure DNS resolver

Summary: [ansible-freeipa] [RFE] ipaclient: Also configure DNS resolver

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Red Hat Enterprise Linux 8
Classification:	Red Hat
Component:	ansible-freeipa
Sub Component:
Version:	8.8
Hardware:	Unspecified
OS:	Unspecified
Priority:	unspecified
Severity:	unspecified
Target Milestone:	rc
Target Release:	---
Assignee:	Thomas Woerner
QA Contact:	Varun Mylaraiah
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:	2127895
TreeView+	depends on / blocked

Reported:	2022-09-19 10:16 UTC by Thomas Woerner
Modified:	2023-05-16 08:53 UTC (History)
CC List:	1 user (show)
Fixed In Version:	ansible-freeipa-1.9.0-1.el8
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:
Clones:	2127895 (view as bug list)
Environment:
Last Closed:	2023-05-16 08:15:55 UTC
Type:	Bug
Target Upstream Version:
Embargoed:
Dependent Products:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Github	freeipa ansible-freeipa issues 902	None	open	[RFE] Consider adding support for client DNS resolver configuration	2022-09-19 10:18:45 UTC
Red Hat Issue Tracker	FREEIPA-8767	None	None	None	2022-09-19 10:20:53 UTC
Red Hat Issue Tracker	RHELPLAN-134289	None	None	None	2022-09-19 10:21:04 UTC
Red Hat Product Errata	RHEA-2023:2752	None	None	None	2023-05-16 08:16:24 UTC

Description Thomas Woerner 2022-09-19 10:16:03 UTC

While deploying the server with ipaserver role, the DNS resolver is configured. If a client (or replica) is deployed (for example in a cluster deployment) it is up to the user to configure the DNS resolver on the client and replica nodes to be able to deploy successfully afterwards. 

The client role could use the same mechanisms to configure the DNS resolver (resolv.conf, NetworkManager and also systemd-reolved) that the server role is using. This would simplify the deployment a lot.

Comment 2 Thomas Woerner 2022-11-23 13:07:22 UTC

Upstream PR: https://github.com/freeipa/ansible-freeipa/pull/988

Comment 3 Thomas Woerner 2022-11-29 15:30:09 UTC

Additional change: https://github.com/freeipa/ansible-freeipa/pull/996

Comment 7 Varun Mylaraiah 2022-12-19 12:10:52 UTC

Verified
ansible-2.9.27-1.el8ae.noarch
ansible-freeipa-1.9.0-1.el8.noarch

Passed	ansible_freeipa_tests/client/test_idm_deploy_client.py::TestDNSResolver::test_config_dns_resolver
Passed	ansible_freeipa_tests/client/test_idm_deploy_client.py::TestDNSResolver::test_cleanup_dns_resolver


ansible_freeipa_tests/client/test_idm_deploy_client.py::TestDNSResolver::test_config_dns_resolve

DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install IPA client] ******************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:19
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 included: /usr/share/ansible/roles/ipaclient/tasks/install.yml for client3.ipadomain.test
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Ensure that IPA client packages are installed] *****
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:4
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 ok: [client3.ipadomain.test] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [Install - Set ipaclient_servers] *****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:10
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [Install - Set ipaclient_servers from cluster inventory] ******************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:15
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Check that either password or keytab is set] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:21
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Set default principal if no keytab is given] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:25
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [Install - Fail on missing ipaclient_domain and ipaserver_domain] *********
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:33
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [Install - Fail on missing ipaclient_servers] *****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:37
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Configure DNS resolver] ****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:41
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - IPA client test] ***********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:50
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 ok: [client3.ipadomain.test] => {"basedn": "dc=ipadomain,dc=test", "changed": false, "client_already_configured": false, "client_domain": "ipadomain.test", "dnsok": true, "domain": "ipadomain.test", "hostname": "client3.ipadomain.test", "ipa_python_version": 40910, "kdc": "master.ipadomain.test,replica1.ipadomain.test", "nosssd_files": {}, "ntp_pool": null, "ntp_servers": null, "realm": "IPADOMAIN.TEST", "servers": ["master.ipadomain.test"], "sssd": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Cleanup leftover ccache] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:76
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 ok: [client3.ipadomain.test] => {"changed": false, "path": "/etc/ipa/.dns_ccache", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Configure NTP] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:81
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 ok: [client3.ipadomain.test] => {"changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Make sure One-Time Password is enabled if it's already defined] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:93
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Disable One-Time Password for on_master] ***********
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:98
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Test if IPA client has working krb5.keytab] ********
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:103
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 ok: [client3.ipadomain.test] => {"ca_crt_exists": false, "changed": false, "krb5_conf_ok": false, "krb5_keytab_ok": false, "ping_test_ok": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Disable One-Time Password for client with working krb5.keytab] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:113
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Keytab or password is required for getting otp] ****
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:129
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Create temporary file for keytab] ******************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:134
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Copy keytab to server temporary file] **************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:143
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Get One-Time Password for client enrollment] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:151
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Report error for OTP generation] *******************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:161
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Store the previously obtained OTP] *****************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:167
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Remove keytab temporary file] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:177
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Store predefined OTP in admin_password] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:184
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Check if principal and keytab are set] *************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:200
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Check if one of password or keytabs are set] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:204
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Purge IPADOMAIN.TEST from host keytab] *************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:212
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Backup and set hostname] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:229
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Join IPA] ******************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:234
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"already_joined": false, "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : krb5 configuration not correct] ******************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:256
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : IPA test failed] *********************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:262
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : ca.crt file is missing] **************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:266
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Configure IPA default.conf] ************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:279
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Configure SSSD] ************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:288
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Configure krb5 for IPA realm] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:310
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - IPA API calls for remaining enrollment parts] ******
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:324
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"ca_enabled": true, "changed": true, "subject_base": "O=IPADOMAIN.TEST"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Fix IPA ca] ****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:332
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Create IPA NSS database] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:342
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"ca_enabled_ra": true, "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Configure SSH and SSHD] ****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:374
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Configure automount] *******************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:382
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Configure firefox] *********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:388
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Configure NIS] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:394
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Install - Restore original admin password if overwritten by OTP] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:412
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Cleanup leftover ccache] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:418
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 ok: [client3.ipadomain.test] => {"changed": false, "path": "/etc/ipa/.dns_ccache", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 TASK [ipaclient : Uninstall IPA client] ****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:23
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 PLAY RECAP *********************************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 client3.ipadomain.test     : ok=20   changed=11   unreachable=0    failed=0    skipped=27   rescued=0    ignored=0   
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:563 
DEBUG    paramiko.transport:channel.py:1212 [chan 31] EOF received (31)
DEBUG    paramiko.transport:channel.py:1212 [chan 31] EOF sent (31)
DEBUG    pytest_multihost.host.Host.ansible.cmd31:transport.py:217 Exit code: 0
DEBUG    paramiko.transport:transport.py:1819 starting thread (client mode): 0x1c617790
DEBUG    paramiko.transport:transport.py:1819 Local version/idstring: SSH-2.0-paramiko_2.7.1
DEBUG    paramiko.transport:transport.py:1819 Remote version/idstring: SSH-2.0-OpenSSH_8.0
INFO     paramiko.transport:transport.py:1819 Connected (version 2.0, client OpenSSH_8.0)
DEBUG    paramiko.transport:transport.py:1819 kex algos:['curve25519-sha256', 'curve25519-sha256', 'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384', 'ecdh-sha2-nistp521', 'diffie-hellman-group-exchange-sha256', 'diffie-hellman-group14-sha256', 'diffie-hellman-group16-sha512', 'diffie-hellman-group18-sha512', 'diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1'] server key:['rsa-sha2-512', 'rsa-sha2-256', 'ssh-rsa', 'ecdsa-sha2-nistp256', 'ssh-ed25519'] client encrypt:['aes256-gcm', 'chacha20-poly1305', 'aes256-ctr', 'aes256-cbc', 'aes128-gcm', 'aes128-ctr', 'aes128-cbc'] server encrypt:['aes256-gcm', 'chacha20-poly1305', 'aes256-ctr', 'aes256-cbc', 'aes128-gcm', 'aes128-ctr', 'aes128-cbc'] client mac:['hmac-sha2-256-etm', 'hmac-sha1-etm', 'umac-128-etm', 'hmac-sha2-512-etm', 'hmac-sha2-256', 'hmac-sha1', 'umac-128', 'hmac-sha2-512'] server mac:['hmac-sha2-256-etm', 'hmac-sha1-etm', 'umac-128-etm', 'hmac-sha2-512-etm', 'hmac-sha2-256', 'hmac-sha1', 'umac-128', 'hmac-sha2-512'] client compress:['none', 'zlib'] server compress:['none', 'zlib'] client lang:[''] server lang:[''] kex follows?False
DEBUG    paramiko.transport:transport.py:1819 Kex agreed: curve25519-sha256
DEBUG    paramiko.transport:transport.py:1819 HostKey agreed: ssh-ed25519
DEBUG    paramiko.transport:transport.py:1819 Cipher agreed: aes128-ctr
DEBUG    paramiko.transport:transport.py:1819 MAC agreed: hmac-sha2-256
DEBUG    paramiko.transport:transport.py:1819 Compression agreed: none
DEBUG    paramiko.transport:transport.py:1819 kex engine KexCurve25519 specified hash_algo <built-in function openssl_sha256>
DEBUG    paramiko.transport:transport.py:1819 Switch to new keys ...
DEBUG    pytest_multihost.host.Host.client3.ParamikoTransport:transport.py:245 Authenticating with private RSA key using user root
DEBUG    paramiko.transport:transport.py:1819 userauth is OK
INFO     paramiko.transport:transport.py:1819 Authentication (publickey) successful!
DEBUG    paramiko.transport:channel.py:1212 [chan 0] Max packet in: 32768 bytes
DEBUG    paramiko.transport:transport.py:1819 Received global request "hostkeys-00"
DEBUG    paramiko.transport:transport.py:1819 Rejecting "hostkeys-00" global request from server.
DEBUG    paramiko.transport:transport.py:1819 Debug msg: b'/root/.ssh/authorized_keys:1: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding'
DEBUG    paramiko.transport:channel.py:1212 [chan 0] Max packet out: 32768 bytes
DEBUG    paramiko.transport:transport.py:1819 Secsh channel 0 opened.
INFO     pytest_multihost.host.Host.client3.ParamikoTransport:transport.py:318 RUN ['kinit', 'admin']
DEBUG    pytest_multihost.host.Host.client3.cmd1:transport.py:519 RUN ['kinit', 'admin']
DEBUG    paramiko.transport:channel.py:1212 [chan 0] Sesch channel 0 request ok
DEBUG    pytest_multihost.host.Host.client3.cmd1:transport.py:563 Activate the web console with: systemctl enable --now cockpit.socket
DEBUG    pytest_multihost.host.Host.client3.cmd1:transport.py:563 
DEBUG    pytest_multihost.host.Host.client3.cmd1:transport.py:563 Register this system with Red Hat Insights: insights-client --register
DEBUG    pytest_multihost.host.Host.client3.cmd1:transport.py:563 Create an account or view all your systems at https://red.ht/insights-dashboard
DEBUG    pytest_multihost.host.Host.client3.cmd1:transport.py:563 -bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.client3.cmd1:transport.py:563 -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.client3.cmd1:transport.py:563 Password for admin: 
DEBUG    paramiko.transport:channel.py:1212 [chan 0] EOF received (0)
DEBUG    paramiko.transport:channel.py:1212 [chan 0] EOF sent (0)
DEBUG    pytest_multihost.host.Host.client3.cmd1:transport.py:217 Exit code: 0
DEBUG    paramiko.transport:channel.py:1212 [chan 1] Max packet in: 32768 bytes
DEBUG    paramiko.transport:channel.py:1212 [chan 1] Max packet out: 32768 bytes
DEBUG    paramiko.transport:transport.py:1819 Secsh channel 1 opened.
INFO     pytest_multihost.host.Host.client3.ParamikoTransport:transport.py:318 RUN ['nslookup', 'client3.ipadomain.test']
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:519 RUN ['nslookup', 'client3.ipadomain.test']
DEBUG    paramiko.transport:channel.py:1212 [chan 1] Sesch channel 1 request ok
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:563 -bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:563 -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:563 Server:		10.0.191.24
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:563 Address:	10.0.191.24#53
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:563 
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:563 Name:	client3.ipadomain.test
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:563 Address: 10.0.198.101
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:563 Name:	client3.ipadomain.test
DEBUG    pytest_multihost.host.Host.client3.cmd2:transport.py:563 Address: 2620:52:0:c6:f816:3eff:fea5:cefc



ansible_freeipa_tests/client/test_idm_deploy_client.py::TestDNSResolver::test_cleanup_dns_resolver

DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 PLAYBOOK: install-clients.yaml *************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 1 plays in install-clients.yaml
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 PLAY [Playbook to configure IPA clients] ***************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 TASK [Gathering Facts] *********************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 task path: /root/install-clients.yaml:2
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 ok: [client3.ipadomain.test]
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 TASK [ipaclient : Import variables specific to distribution] *******************
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:4
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 ok: [client3.ipadomain.test] => (item=/usr/share/ansible/roles/ipaclient/vars/RedHat-8.yml) => {"ansible_facts": {"ipaclient_packages": ["@idm:DL1/client"]}, "ansible_included_var_files": ["/usr/share/ansible/roles/ipaclient/vars/RedHat-8.yml"], "ansible_loop_var": "item", "changed": false, "item": "/usr/share/ansible/roles/ipaclient/vars/RedHat-8.yml"}
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 TASK [ipaclient : Install IPA client] ******************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:19
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 skipping: [client3.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 TASK [ipaclient : Uninstall IPA client] ****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:23
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 included: /usr/share/ansible/roles/ipaclient/tasks/uninstall.yml for client3.ipadomain.test
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 TASK [ipaclient : Uninstall - Uninstall IPA client] ****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/uninstall.yml:4
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true, "cmd": ["/usr/sbin/ipa-client-install", "--uninstall", "-U"], "delta": "0:00:04.548420", "end": "2022-12-18 23:07:34.649376", "failed_when_result": false, "rc": 0, "start": "2022-12-18 23:07:30.100956", "stderr": "Unenrolling client from IPA server\nRemoving Kerberos service principals from /etc/krb5.keytab\nDisabling client Kerberos and LDAP configurations\nRedundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted\nRestoring client configuration files\nRestoring ipadomain.test as NIS domain.\nnscd daemon is not installed, skip configuration\nnslcd daemon is not installed, skip configuration\nSystemwide CA database updated.\nClient uninstall complete.\nThe ipa-client-install command was successful", "stderr_lines": ["Unenrolling client from IPA server", "Removing Kerberos service principals from /etc/krb5.keytab", "Disabling client Kerberos and LDAP configurations", "Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted", "Restoring client configuration files", "Restoring ipadomain.test as NIS domain.", "nscd daemon is not installed, skip configuration", "nslcd daemon is not installed, skip configuration", "Systemwide CA database updated.", "Client uninstall complete.", "The ipa-client-install command was successful"], "stdout": "", "stdout_lines": []}
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 TASK [ipaclient : Uninstall - Unconfigure DNS resolver] ************************
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/uninstall.yml:14
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 changed: [client3.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 PLAY RECAP *********************************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 client3.ipadomain.test     : ok=5    changed=2    unreachable=0    failed=0    skipped=1    rescued=0    ignored=0   
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:563 
DEBUG    paramiko.transport:channel.py:1212 [chan 32] EOF received (32)
DEBUG    paramiko.transport:channel.py:1212 [chan 32] EOF sent (32)
DEBUG    pytest_multihost.host.Host.ansible.cmd32:transport.py:217 Exit code: 0
DEBUG    paramiko.transport:channel.py:1212 [chan 2] Max packet in: 32768 bytes
DEBUG    paramiko.transport:channel.py:1212 [chan 2] Max packet out: 32768 bytes
DEBUG    paramiko.transport:transport.py:1819 Secsh channel 2 opened.
INFO     pytest_multihost.host.Host.client3.ParamikoTransport:transport.py:318 RUN ['nslookup', 'client3.ipadomain.test']
DEBUG    pytest_multihost.host.Host.client3.cmd3:transport.py:519 RUN ['nslookup', 'client3.ipadomain.test']
DEBUG    paramiko.transport:channel.py:1212 [chan 2] Sesch channel 2 request ok
DEBUG    pytest_multihost.host.Host.client3.cmd3:transport.py:563 -bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.client3.cmd3:transport.py:563 -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.client3.cmd3:transport.py:563 ;; Got recursion not available from 10.0.199.56, trying next server
DEBUG    pytest_multihost.host.Host.client3.cmd3:transport.py:563 Server:		10.11.5.19
DEBUG    pytest_multihost.host.Host.client3.cmd3:transport.py:563 Address:	10.11.5.19#53
DEBUG    pytest_multihost.host.Host.client3.cmd3:transport.py:563 
DEBUG    pytest_multihost.host.Host.client3.cmd3:transport.py:563 ** server can't find client3.ipadomain.test: NXDOMAIN

Comment 10 errata-xmlrpc 2023-05-16 08:15:55 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ansible-freeipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2023:2752

Note You need to log in before you can comment on or make changes to this bug.