Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Description of problem:
occasionally sssd is left running after an ipa-server-install --uninstall. On an attempted re-install using ipa-replica-install, I am seeing ipa-replica-conncheck errors.
Version-Release number of selected component (if applicable):
ipa-server-2.2.0-16.el6.x86_64
How reproducible:
Very but not always. I'm seeing this in automated testing.
Steps to Reproduce:
1. <Install IPA on RHEL 6.3 Master>
2. <Create Replica package file>
3. <Install IPA on RHEL 6.3 Replica>
4. ipa-replica-manage del $REPLICA # on master
5. ipa-server-install --uninstall -U # on replica
6. ipa-replica-install -U --setup-dns --no-forwarders -w $ADMINPW -p $ADMINPW /path/to/replica-info-$REPLICA.gpg
Actual results:
Error seen at end of ipa-replica-conneck from ipa-replica-install:
# tail ipareplica-conncheck.log
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
2012-06-10T18:16:32Z DEBUG args=/usr/bin/kinit admin
2012-06-10T18:16:32Z DEBUG stdout=
2012-06-10T18:16:32Z DEBUG stderr=kinit: Invalid message type while getting initial credentials
Then checking to see what's running:
[root@qe-blade-06 log]# ps -ef|grep sssd
root 12741 12699 0 14:13 pts/0 00:00:00 grep sssd
root 17255 1 0 Jun09 ? 00:00:02 /usr/sbin/sssd -f -D
root 17279 17255 0 Jun09 ? 00:00:03 /usr/libexec/sssd/sssd_be --domain testrelm.com --debug-to-files
root 17288 17255 0 Jun09 ? 00:00:00 /usr/libexec/sssd/sssd_nss --debug-to-files
root 17289 17255 0 Jun09 ? 00:00:00 /usr/libexec/sssd/sssd_pam --debug-to-files
root 17290 17255 0 Jun09 ? 00:00:00 /usr/libexec/sssd/sssd_ssh --debug-to-files
Expected results:
ipa uninstall cleanly stops sssd.
Additional info:
If I stop sssd, ipa-replica-conncheck works though:
# service sssd stop
Stopping sssd: [ OK ]
# /usr/sbin/ipa-replica-conncheck --master qe-blade-09.testrelm.com --auto-master-check --realm TESTRELM.COM --principal admin --hostname qe-blade-06.testrelm.com --password Secret123
Check connection from replica to remote master 'qe-blade-09.testrelm.com':
Directory Service: Unsecure port (389): OK
Directory Service: Secure port (636): OK
Kerberos KDC: TCP (88): OK
Kerberos Kpasswd: TCP (464): OK
HTTP Server: Unsecure port (80): OK
HTTP Server: Secure port (443): OK
The following list of ports use UDP protocol and would need to be
checked manually:
Kerberos KDC: UDP (88): SKIPPED
Kerberos Kpasswd: UDP (464): SKIPPED
Connection from replica to master is OK.
Start listening on required ports for remote master check
Get credentials to log in to remote master
Execute check on remote master
Check connection from master to remote replica 'qe-blade-06.testrelm.com':
Directory Service: Unsecure port (389): OK
Directory Service: Secure port (636): OK
Kerberos KDC: TCP (88): OK
Kerberos KDC: UDP (88): OK
Kerberos Kpasswd: TCP (464): OK
Kerberos Kpasswd: UDP (464): OK
HTTP Server: Unsecure port (80): OK
HTTP Server: Secure port (443): OK
Connection from master to replica is OK.
# ps -ef|grep sssd
root 12844 12699 0 15:58 pts/0 00:00:00 grep sssd
Verified:
Version ::
sssd-1.9.1-0.20120926T2039Zgit1ea72a4.el6.x86_64
ipa-server-3.0.0-2.el6.x86_64
Manual Test Results ::
[root@vm2 ~]# ipa-server-install --uninstall -U
Shutting down all IPA services
Removing IPA client configuration
Unconfiguring ntpd
Unconfiguring named
Unconfiguring web server
Unconfiguring krb5kdc
Unconfiguring kadmin
Unconfiguring directory server
Unconfiguring ipa_memcached
[root@vm2 ~]# ps -ef|grep sssd
root 3672 1308 0 08:39 pts/0 00:00:00 grep sssd
[root@vm2 ~]#
I ran this test 20+ times with the same results every time. It appears that the issue has been resolved.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
http://rhn.redhat.com/errata/RHSA-2013-0528.html
Description of problem: occasionally sssd is left running after an ipa-server-install --uninstall. On an attempted re-install using ipa-replica-install, I am seeing ipa-replica-conncheck errors. Version-Release number of selected component (if applicable): ipa-server-2.2.0-16.el6.x86_64 How reproducible: Very but not always. I'm seeing this in automated testing. Steps to Reproduce: 1. <Install IPA on RHEL 6.3 Master> 2. <Create Replica package file> 3. <Install IPA on RHEL 6.3 Replica> 4. ipa-replica-manage del $REPLICA # on master 5. ipa-server-install --uninstall -U # on replica 6. ipa-replica-install -U --setup-dns --no-forwarders -w $ADMINPW -p $ADMINPW /path/to/replica-info-$REPLICA.gpg Actual results: Error seen at end of ipa-replica-conneck from ipa-replica-install: # tail ipareplica-conncheck.log ticket_lifetime = 36000 renew_lifetime = 36000 forwardable = true krb4_convert = false } 2012-06-10T18:16:32Z DEBUG args=/usr/bin/kinit admin 2012-06-10T18:16:32Z DEBUG stdout= 2012-06-10T18:16:32Z DEBUG stderr=kinit: Invalid message type while getting initial credentials Then checking to see what's running: [root@qe-blade-06 log]# ps -ef|grep sssd root 12741 12699 0 14:13 pts/0 00:00:00 grep sssd root 17255 1 0 Jun09 ? 00:00:02 /usr/sbin/sssd -f -D root 17279 17255 0 Jun09 ? 00:00:03 /usr/libexec/sssd/sssd_be --domain testrelm.com --debug-to-files root 17288 17255 0 Jun09 ? 00:00:00 /usr/libexec/sssd/sssd_nss --debug-to-files root 17289 17255 0 Jun09 ? 00:00:00 /usr/libexec/sssd/sssd_pam --debug-to-files root 17290 17255 0 Jun09 ? 00:00:00 /usr/libexec/sssd/sssd_ssh --debug-to-files Expected results: ipa uninstall cleanly stops sssd. Additional info: If I stop sssd, ipa-replica-conncheck works though: # service sssd stop Stopping sssd: [ OK ] # /usr/sbin/ipa-replica-conncheck --master qe-blade-09.testrelm.com --auto-master-check --realm TESTRELM.COM --principal admin --hostname qe-blade-06.testrelm.com --password Secret123 Check connection from replica to remote master 'qe-blade-09.testrelm.com': Directory Service: Unsecure port (389): OK Directory Service: Secure port (636): OK Kerberos KDC: TCP (88): OK Kerberos Kpasswd: TCP (464): OK HTTP Server: Unsecure port (80): OK HTTP Server: Secure port (443): OK The following list of ports use UDP protocol and would need to be checked manually: Kerberos KDC: UDP (88): SKIPPED Kerberos Kpasswd: UDP (464): SKIPPED Connection from replica to master is OK. Start listening on required ports for remote master check Get credentials to log in to remote master Execute check on remote master Check connection from master to remote replica 'qe-blade-06.testrelm.com': Directory Service: Unsecure port (389): OK Directory Service: Secure port (636): OK Kerberos KDC: TCP (88): OK Kerberos KDC: UDP (88): OK Kerberos Kpasswd: TCP (464): OK Kerberos Kpasswd: UDP (464): OK HTTP Server: Unsecure port (80): OK HTTP Server: Secure port (443): OK Connection from master to replica is OK. # ps -ef|grep sssd root 12844 12699 0 15:58 pts/0 00:00:00 grep sssd