RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 676048 - Installation within IPA hangs
Summary: Installation within IPA hangs
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: pki-core
Version: 6.1
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Andrew Wnuk
QA Contact: Chandrasekar Kannan
URL:
Whiteboard:
Depends On: 673638
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-02-08 17:45 UTC by Matthew Harmsen
Modified: 2015-01-04 23:46 UTC (History)
8 users (show)

Fixed In Version: pki-core-9.0.3-3.el6
Doc Type: Bug Fix
Doc Text:
Clone Of: 673638
Environment:
Last Closed: 2011-05-19 13:43:58 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
proposed patch (52 bytes, text/plain)
2011-02-13 23:14 UTC, Andrew Wnuk
no flags Details
proposed patch (2.32 KB, patch)
2011-02-13 23:22 UTC, Andrew Wnuk
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHEA-2011:0627 0 normal SHIPPED_LIVE new package: pki-core 2011-05-18 17:56:00 UTC

Description Matthew Harmsen 2011-02-08 17:45:17 UTC
+++ This bug was initially created as a clone of Bug #673638 +++

Description of problem:

I've only seen this twice but the symptoms have been the same. The last entry in the debug log is:

[28/Jan/2011:19:09:49][http-9445-2]: Checking wait_dn cn=index1160589769, cn=index, cn=tasks, cn=config

Version-Release number of selected component (if applicable):

pki-ca-9.0.1-2.svn.1762M.20110121T1347z.fc14.noarch

How reproducible:

Sometimes

Steps to Reproduce:
1. ipa-server-install

--- Additional comment from rcritten on 2011-01-28 22:34:37 EST ---

Created attachment 475915 [details]
IPA install log

--- Additional comment from rcritten on 2011-01-28 22:35:29 EST ---

Created attachment 475916 [details]
debug log

--- Additional comment from mharmsen on 2011-02-01 22:53:09 EST ---

Created attachment 476515 [details]
Check for 'undefined' variables . . .

Although we have been unable to replicate this issue, this fix should at least eliminate the following messages:


2011-01-28 19:08:33,539 INFO stderr=Use of uninitialized value $groupname in string ne at /usr/bin/pkicreate line 1183.
Use of uninitialized value $username in string ne at /usr/bin/pkicreate line 1217.

--- Additional comment from mharmsen on 2011-02-01 22:59:51 EST ---

Created attachment 476516 [details]
Check for 'undefined' variables . . .

Although we have been unable to replicate this issue, this fix should at least
eliminate the following messages:


2011-01-28 19:08:33,539 INFO stderr=Use of uninitialized value $groupname in
string ne at /usr/bin/pkicreate line 1183.
Use of uninitialized value $username in string ne at /usr/bin/pkicreate line
1217.

--- Additional comment from mharmsen on 2011-02-01 23:04:22 EST ---

# cd pki

# svn status | grep -v ^$ | grep -v ^P | grep -v ^X | grep -v ^?
M       base/setup/pkicreate

# svn commit
Sending        base/setup/pkicreate
Transmitting file data .
Committed revision 1808.

Comment 2 Ade Lee 2011-02-10 21:24:18 UTC
So, whats going on here is that the database is being populated, and the VLV
indexes are being created. At this point, we wait for the VLV indexes to
complete before continuing.

We check as to whether the VLV indexes are complete by looking for a particular
entry and checking an attribute within that entry. If the entry does not exist,
then we sleep for 1 second and recheck.

In this case, its clear that something went wrong in the directory server to
prevent the index from being created. Unfortunately, there are no DS logs to
indicate what that might be.

So, there is insufficient information to reproduce this bug.  I will, however,
add a log message to this code to try to provide more information, should this
situation recur.

Comment 3 Andrew Wnuk 2011-02-13 23:14:20 UTC
Created attachment 478520 [details]
proposed patch

Comment 4 Andrew Wnuk 2011-02-13 23:22:19 UTC
Created attachment 478522 [details]
proposed patch

reviewed in bug #673638

Comment 5 Andrew Wnuk 2011-02-13 23:26:35 UTC
svn commit
Sending        base/ca/shared/conf/vlvtasks.ldif
Sending        base/common/src/com/netscape/cms/servlet/csadmin/DatabasePanel.java
Transmitting file data ..
Committed revision 1846.

Comment 6 Andrew Wnuk 2011-02-13 23:29:38 UTC
svn commit base/kra/shared/conf/vlvtasks.ldif
Sending        base/kra/shared/conf/vlvtasks.ldif
Transmitting file data .
Committed revision 1847.

Comment 10 Jenny Severance 2011-04-18 17:04:17 UTC
Verified with both master and a slave

Version
pki-ca-9.0.3-10.el6.noarch
ipa-server-2.0.0-21.el6.x86_64


install_log:

2011-04-15 16:05:02,048 DEBUG   [2/17]: creating pki-ca instance
2011-04-15 16:05:48,212 DEBUG args=/usr/bin/pkicreate -pki_instance_root /var/lib -pki_instance_name pki-ca -subsystem_type ca -agent_secure_port 9443 -ee_secure_port 9444 -admin_secure_port 9445 -ee_secure_client_auth_port 9446 -unsecure_port 9180 -tomcat_server_port 9701 -redirect conf=/etc/pki-ca -redirect logs=/var/log/pki-ca
2011-04-15 16:05:48,213 DEBUG stdout=PKI instance creation Utility ...

Capturing installation information in /var/log/pki-ca-install.log

PKI instance creation completed ...

Installation information recorded in /var/log/pki-ca-install.log.
Before proceeding with the configuration, make sure 
the firewall settings of this machine permit proper 
access to this subsystem.

Comment 11 errata-xmlrpc 2011-05-19 13:43:58 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHEA-2011-0627.html


Note You need to log in before you can comment on or make changes to this bug.