Bug 704638 - Intermittent Replica Install Failure - CA Cert Invalid
Summary: Intermittent Replica Install Failure - CA Cert Invalid
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: ipa
Version: 6.1
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: rc
: ---
Assignee: Rob Crittenden
QA Contact: Chandrasekar Kannan
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-05-13 20:05 UTC by Jenny Severance
Modified: 2015-01-04 23:48 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-08-16 17:02:25 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Jenny Severance 2011-05-13 20:05:52 UTC
Description of problem:

ipareplica_install.log

2011-05-13 08:55:29,641 DEBUG stderr=
2011-05-13 08:55:30,535 DEBUG args=/sbin/service pki-cad start 
2011-05-13 08:55:30,537 DEBUG stdout=Starting pki-ca: ESC[60G[ESC[0;32m  OK  ESC[0;39m]

2011-05-13 08:55:30,537 DEBUG stderr=
2011-05-13 08:55:30,745 DEBUG Can't contact LDAP server: TLS error -8172:Unknown code ___f 20
  File "/usr/sbin/ipa-replica-install", line 540, in <module>
    main()

  File "/usr/sbin/ipa-replica-install", line 489, in main
    install_dns_records(config, options)

  File "/usr/sbin/ipa-replica-install", line 314, in install_dns_records
    tls_cacertfile=CACERT)

  File "/usr/lib/python2.6/site-packages/ipalib/backend.py", line 62, in connect
    conn = self.create_connection(*args, **kw)

  File "/usr/lib/python2.6/site-packages/ipalib/encoder.py", line 188, in new_f
    return f(*new_args, **kwargs)

  File "/usr/lib/python2.6/site-packages/ipaserver/plugins/ldap2.py", line 336, in create_connection
    _handle_errors(e, **{})

  File "/usr/lib/python2.6/site-packages/ipaserver/plugins/ldap2.py", line 117, in _handle_errors
    raise errors.DatabaseError(desc=desc, info=info


Version-Release number of selected component (if applicable):
ipa-server-2.0.0-23.1.el6.x86_64

How reproducible:
I have only seen this once.

Steps to Reproduce:
1.  install master with integrated DNS
2.  create replica package
3.  install replica with integrated DNS
  
Actual results:


Expected results:


Additional info:

Comment 2 Dmitri Pal 2011-05-13 22:16:45 UTC
https://fedorahosted.org/freeipa/ticket/1230

Comment 5 Rob Crittenden 2011-08-16 17:02:25 UTC
Unable to duplicate, please re-open if it recurs.


Note You need to log in before you can comment on or make changes to this bug.