Bug 516853 - New DS 9.0 Schema Changes causing IPA Server Installation to Fail adding Default Schema
Summary: New DS 9.0 Schema Changes causing IPA Server Installation to Fail adding Defa...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: freeIPA
Classification: Retired
Component: ipa-server
Version: 2.0
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Rob Crittenden
QA Contact: Chandrasekar Kannan
URL:
Whiteboard:
: 524311 (view as bug list)
Depends On:
Blocks: 431020
TreeView+ depends on / blocked
 
Reported: 2009-08-11 16:55 UTC by Jenny Severance
Modified: 2015-01-04 23:39 UTC (History)
5 users (show)

Fixed In Version: freeipa-2.0.0-1.fc15
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-03-27 07:16:41 UTC
Embargoed:


Attachments (Terms of Use)

Description Jenny Severance 2009-08-11 16:55:11 UTC
Description of problem:

Installing IPA Server with RHDS 9.0 and new Schema Changes is causing installation to fail with:

Unexpected error - see ipaserver-install.log for details:
[Errno 2] No such file or directory: '/etc/dirsrv/slapd-BOS-REDHAT-COM//schema/05rfc2247.ldif'

ipaserver-install.log:

2009-08-11 10:44:27,544 DEBUG done restarting ds instance
2009-08-11 10:44:27,544 DEBUG   [3/17]: adding default schema
2009-08-11 10:44:27,549 DEBUG [Errno 2] No such file or directory: '/etc/dirsrv/slapd-BOS-REDHAT-COM//schema/05rfc2247.ldif'
 File "/usr/sbin/ipa-server-install", line 653, in ?
   sys.exit(main())

 File "/usr/sbin/ipa-server-install", line 540, in main
   ds.create_instance(ds_user, realm_name, host_name, domain_name, dm_password, self_signed_ca=not options.ca)

 File "/usr/lib/python2.4/site-packages/ipaserver/install/dsinstance.py", line 189, in create_instance
   self.start_creation("Configuring directory server:")

 File "/usr/lib/python2.4/site-packages/ipaserver/install/service.py", line 171, in start_creation
   method()

 File "/usr/lib/python2.4/site-packages/ipaserver/install/dsinstance.py", line 273, in __add_default_schemas
   schema_dirname(self.serverid) + "05rfc2247.ldif.old")

 File "/usr/lib/python2.4/shutil.py", line 193, in move
   copy2(src,dst)

 File "/usr/lib/python2.4/shutil.py", line 92, in copy2
   copyfile(src, dst)

 File "/usr/lib/python2.4/shutil.py", line 47, in copyfile
   fsrc = open(src, 'rb')


Version-Release number of selected component (if applicable):
v2.0

How reproducible:
always with RHDS 9.0

Steps to Reproduce:
1. add RHDS 9.0 repo to ipa.repo file for yum install
2. yum install bind-dyndb-ldap ipa-server ipa-client
3. run ipa-server-install --setup-dns
  
Actual results:
Above

Expected results:
Installation should not fail if the file does not exist.

Additional info:

Comment 1 Rob Crittenden 2009-08-11 18:48:32 UTC
Fix #1 is to make renaming this file optional. This file contains some oldish DNS schema which is why we rename it. It is gone in DS 9.

The next problem is that pilotObject was removed from the schema. We can rename the info attribute in boot.ldif to description.

The last and biggest problem is that empty groups are not allowed and we create a ton of them.

Comment 2 Rob Crittenden 2009-10-01 13:47:03 UTC
*** Bug 524311 has been marked as a duplicate of this bug. ***

Comment 3 Rob Crittenden 2010-02-03 20:24:46 UTC
This has been resolved. Part of the pilotObject was added back into DS.

Comment 4 Jenny Severance 2011-06-10 19:06:31 UTC
verified

install log:
<snip>

2011-06-03 16:53:02,127 DEBUG stderr=
2011-06-03 16:53:02,128 DEBUG done restarting ds instance
2011-06-03 16:53:02,129 DEBUG   duration: 15 seconds
2011-06-03 16:53:02,129 DEBUG   [3/32]: adding default schema
2011-06-03 16:53:02,149 DEBUG   duration: 0 seconds
2011-06-03 16:53:02,149 DEBUG   [4/32]: enabling memberof plugin
2011-06-03 16:53:02,204 DEBUG args=/usr/bin/ldapmodify -h dhcp-100-19-202.testrelm -v -f /usr/share/ipa/memberof-conf.ldif -x -D cn=Directory Manager -y /tmp/tmp1QjbLw
2011-06-03 16:53:02,205 DEBUG stdout=replace nsslapd-pluginenabled:
        on
add memberofgroupattr:
        memberUser
add memberofgroupattr:
        memberHost
modifying entry "cn=MemberOf Plugin,cn=plugins,cn=config"
modify complete

</snip>

# rpm -qi ipa-server | head
Name        : ipa-server                   Relocations: (not relocatable)
Version     : 2.0.0                             Vendor: Red Hat, Inc.
Release     : 23.el6                        Build Date: Wed 20 Apr 2011 09:57:13 AM EDT
Install Date: Thu 19 May 2011 12:47:52 PM EDT      Build Host: x86-003.build.bos.redhat.com
Group       : System Environment/Base       Source RPM: ipa-2.0.0-23.el6.src.rpm
Size        : 2565882                          License: GPLv3+
Signature   : RSA/8, Thu 21 Apr 2011 03:48:25 PM EDT, Key ID 199e2f91fd431d51
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://www.freeipa.org/
Summary     : The IPA authentication server


Note You need to log in before you can comment on or make changes to this bug.