2175766 – [ansible-freeipa] ipaclient should provide option to enable subid in /etc/nsswitch.conf

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 2175766 - [ansible-freeipa] ipaclient should provide option to enable subid in /etc/nsswitch.conf

Summary: [ansible-freeipa] ipaclient should provide option to enable subid in /etc/nss...

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Red Hat Enterprise Linux 8
Classification:	Red Hat
Component:	ansible-freeipa
Sub Component:
Version:	8.9
Hardware:	Unspecified
OS:	Unspecified
Priority:	unspecified
Severity:	unspecified
Target Milestone:	rc
Target Release:	---
Assignee:	Denis Karpelevich
QA Contact:	Varun Mylaraiah
Docs Contact:	Filip Hanzelka
URL:
Whiteboard:
Depends On:
Blocks:	2175767
TreeView+	depends on / blocked

Reported:	2023-03-06 13:36 UTC by Thomas Woerner
Modified:	2024-03-14 04:25 UTC (History)
CC List:	4 users (show)
Fixed In Version:	ansible-freeipa-1.10.0-1.el8
Doc Type:	Enhancement
Doc Text:	.The `ipaclient` role now allows configuring user subID ranges on the IdM level With this update, the `ipaclient` role provides the `ipaclient_subid` option, using which you can configure subID ranges on the Identity Management (IdM) level. Without the new option set explicitly to `true`, the `ipaclient` role keeps the default behavior and installs the client without subID ranges configured for IdM users. Previously, the role configured the `sssd` `authselect` profile that in turn customized the `/etc/nsswitch.conf` file. The subID database did not use IdM and relied only on the local files of `/etc/subuid` and `/etc/subgid`.
Clone Of:
Clones:	2175767 (view as bug list)
Environment:
Last Closed:	2023-11-14 15:26:23 UTC
Type:	Bug
Target Upstream Version:
Embargoed:
Dependent Products:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Issue Tracker	FREEIPA-9537	None	None	None	2023-03-06 13:36:58 UTC
Red Hat Issue Tracker	RHELPLAN-150773	None	None	None	2023-03-06 13:37:02 UTC
Red Hat Product Errata	RHBA-2023:6926	None	None	None	2023-11-14 15:26:56 UTC

Description Thomas Woerner 2023-03-06 13:36:16 UTC

Description of problem:
ipaclient should provide an option allowing to configure subid managed at IPA level.
Currently, ipaclient configures the sssd profile which in turns customizes /etc/nsswitch.conf but the subid database does not use IPA and relies only on the local files /etc/subuid and /etc/subgid.

This is the ansible-freeipa implementation.

Version-Release number of selected component (if applicable):
ansible-freeipa-1.9.2

Additional info:
FreeIPA issue: https://pagure.io/freeipa/issue/9159
ipa bug: https://bugzilla.redhat.com/show_bug.cgi?id=2068088

Comment 1 Thomas Woerner 2023-03-06 13:38:24 UTC

Upstream PR: https://github.com/freeipa/ansible-freeipa/pull/974

Comment 6 Varun Mylaraiah 2023-04-19 16:31:55 UTC

Verified

ansible-2.9.27-1.el8ae.noarch
ansible-freeipa-1.10.0-1.el8.noarch

Passed	ansible_freeipa_tests/client/test_idm_deploy_client.py::TestClientTC28::test_nss_setup


INFO     pytest_multihost.host.Host.ansible.OpenSSHTransport:transport.py:397 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/clients.hosts', 'install-clients.yaml']
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:519 RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/clients.hosts', 'install-clients.yaml']
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ansible-playbook 2.9.27
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563   config file = /etc/ansible/ansible.cfg
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563   configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563   ansible python module location = /usr/lib/python3.6/site-packages/ansible
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563   executable location = /usr/bin/ansible-playbook
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563   python version = 3.6.8 (default, Jan 23 2023, 22:31:05) [GCC 8.5.0 20210514 (Red Hat 8.5.0-18)]
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Using /etc/ansible/ansible.cfg as config file
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'actionable', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'counter_enabled', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'debug', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'dense', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'dense', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'full_skip', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'json', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'minimal', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'null', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'oneline', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'selective', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'skippy', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'stderr', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'unixy', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 Skipping callback 'yaml', as we already have a stdout callback.
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 PLAYBOOK: install-clients.yaml *************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 1 plays in install-clients.yaml
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 PLAY [Playbook to configure IPA clients] ***************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [Gathering Facts] *********************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /root/install-clients.yaml:2
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test]
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Import variables specific to distribution] *******************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:4
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test] => (item=/usr/share/ansible/roles/ipaclient/vars/RedHat-8.yml) => {"ansible_facts": {"ipaclient_packages": ["@idm:DL1/client"]}, "ansible_included_var_files": ["/usr/share/ansible/roles/ipaclient/vars/RedHat-8.yml"], "ansible_loop_var": "item", "changed": false, "item": "/usr/share/ansible/roles/ipaclient/vars/RedHat-8.yml"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install IPA client] ******************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:19
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 included: /usr/share/ansible/roles/ipaclient/tasks/install.yml for client1.ipadomain.test
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Ensure that IPA client packages are installed] *****
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:4
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [Install - Set ipaclient_servers] *****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:10
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [Install - Set ipaclient_servers from cluster inventory] ******************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:15
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Check that either password or keytab is set] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:21
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Set default principal if no keytab is given] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:26
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [Install - Fail on missing ipaclient_domain and ipaserver_domain] *********
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:36
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [Install - Fail on missing ipaclient_servers] *****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:41
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure DNS resolver] ****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:46
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - IPA client test] ***********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:52
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test] => {"basedn": "dc=ipadomain,dc=test", "changed": false, "client_already_configured": false, "client_domain": "ipadomain.test", "dnsok": true, "domain": "ipadomain.test", "hostname": "client1.ipadomain.test", "ipa_python_version": 40911, "kdc": "replica1.ipadomain.test,master.ipadomain.test", "nosssd_files": {}, "ntp_pool": null, "ntp_servers": null, "realm": "IPADOMAIN.TEST", "servers": ["replica1.ipadomain.test"], "sssd": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Cleanup leftover ccache] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:82
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "path": "/etc/ipa/.dns_ccache", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure NTP] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:87
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Make sure One-Time Password is enabled if it's already defined] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:99
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Disable One-Time Password for on_master] ***********
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:104
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Test if IPA client has working krb5.keytab] ********
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:109
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test] => {"ca_crt_exists": false, "changed": false, "krb5_conf_ok": false, "krb5_keytab_ok": false, "ping_test_ok": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Disable One-Time Password for client with working krb5.keytab] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:119
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Keytab or password is required for getting otp] ****
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:137
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Create temporary file for keytab] ******************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:142
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Copy keytab to server temporary file] **************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:151
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Get One-Time Password for client enrollment] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:159
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Report error for OTP generation] *******************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:169
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Store the previously obtained OTP] *****************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:175
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Remove keytab temporary file] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:182
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Store predefined OTP in admin_password] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:189
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Check if principal and keytab are set] *************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:207
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Check if one of password or keytabs are set] *******
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:212
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - From host keytab, purge IPADOMAIN.TEST] ************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:220
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Backup and set hostname] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:237
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Create temporary krb5 configuration] ***************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:242
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "krb_name": "/tmp/tmpeff4ntph"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Join IPA] ******************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:251
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"already_joined": false, "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : The krb5 configuration is not correct] ***********************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:279
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : IPA test failed] *********************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:285
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Fail due to missing ca.crt file] *****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:289
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure IPA default.conf] ************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:303
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure SSSD] ************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:312
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - IPA API calls for remaining enrollment parts] ******
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:334
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"ca_enabled": true, "changed": true, "subject_base": "O=IPADOMAIN.TEST"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Fix IPA ca] ****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:343
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Create IPA NSS database] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:354
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"ca_enabled_ra": true, "changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure SSH and SSHD] ****************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:388
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure automount] *******************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:396
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure firefox] *********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:402
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure NIS] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:408
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Remove temporary krb5.conf] **********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:414
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true, "path": "/tmp/tmpeff4ntph", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure krb5 for IPA realm] **********************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:420
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Configure certmonger] ******************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:434
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Install - Restore original admin password if overwritten by OTP] ***
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:444
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Cleanup leftover ccache] *************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:450
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "path": "/etc/ipa/.dns_ccache", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Remove temporary krb5.conf] **********************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:455
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 ok: [client1.ipadomain.test] => {"changed": false, "path": "/tmp/tmpeff4ntph", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Remove temporary krb5.conf backup] ***************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/install.yml:461
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 changed: [client1.ipadomain.test] => {"changed": true, "path": "/tmp/tmpeff4ntph.ipabkp", "state": "absent"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 TASK [ipaclient : Uninstall IPA client] ****************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 task path: /usr/share/ansible/roles/ipaclient/tasks/main.yml:23
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 skipping: [client1.ipadomain.test] => {"changed": false, "skip_reason": "Conditional result was False"}
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 META: ran handlers
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 PLAY RECAP *********************************************************************
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 client1.ipadomain.test     : ok=24   changed=13   unreachable=0    failed=0    skipped=28   rescued=0    ignored=0   
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:563 
DEBUG    pytest_multihost.host.Host.ansible.cmd98:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.client1.OpenSSHTransport:transport.py:397 RUN grep "subid:" /etc/nsswitch.conf
DEBUG    pytest_multihost.host.Host.client1.cmd8:transport.py:519 RUN grep "subid:" /etc/nsswitch.conf
DEBUG    pytest_multihost.host.Host.client1.cmd8:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.client1.cmd8:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
DEBUG    pytest_multihost.host.Host.client1.cmd8:transport.py:563 subid:      sss
DEBUG    pytest_multihost.host.Host.client1.cmd8:transport.py:217 Exit code: 0
INFO     pytest_multihost.host.Host.client1:util.py:79 The source "sss" for the database "subid" found in /etc/nsswitch.conf.
INFO     pytest_multihost.host.Host.client1.OpenSSHTransport:transport.py:397 RUN grep "sudoers:" /etc/nsswitch.conf
DEBUG    pytest_multihost.host.Host.client1.cmd9:transport.py:519 RUN grep "sudoers:" /etc/nsswitch.conf
DEBUG    pytest_multihost.host.Host.client1.cmd9:transport.py:563 bash: line 1: cd: /root/multihost_tests: No such file or directory
DEBUG    pytest_multihost.host.Host.client1.cmd9:transport.py:563 bash: line 2: /root/multihost_tests/env.sh: No such file or directory
ERROR    pytest_multihost.host.Host.client1.cmd9:transport.py:214 Exit code: 1
INFO     pytest_multihost.host.Host.client1:util.py:85 The database "sudoers" wasn't found in /etc/nsswitch.conf as expected.

Comment 11 errata-xmlrpc 2023-11-14 15:26:23 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ansible-freeipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:6926

Comment 12 Red Hat Bugzilla 2024-03-14 04:25:24 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days

Note You need to log in before you can comment on or make changes to this bug.