Bug 952686
| Summary: | ipa-client-install fails when /etc/ipa/ is missing | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Dmitri Pal <dpal> |
| Component: | ipa | Assignee: | Rob Crittenden <rcritten> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | IDM QE LIST <seceng-idm-qe-list> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.0 | CC: | ksiddiqu, mkosek, nsoman, spoore |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-3.2.1-1.el7 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2014-06-13 12:46:08 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Dmitri Pal
2013-04-16 13:11:22 UTC
Fixed upstream. master: 2a8f1b0b16bb1a0af3906c06cffcd96bf152227a ipa-3-1: 69332d943f39dadf26bd6851b2e4cda6c794dcbd /etc/ipa directory owner group fixed upstream: master: https://fedorahosted.org/freeipa/changeset/cc3c54326502ab90d37cae58ccee719f227f1156 ipa-3-1: https://fedorahosted.org/freeipa/changeset/6e443eb0d1673d6ffe2c3cd638108d5769916d29 *** Bug 961483 has been marked as a duplicate of this bug. *** Seems that still not fixed completely. [root@rhel70-client2 ~]# ls /etc/ipa/ ls: cannot access /etc/ipa/: No such file or directory [root@rhel70-client2 ~]# [root@rhel70-client2 ~]# ipa-client-install -U --domain=testrelm.com --realm=TESTRELM.COM -p admin -w xxxxxxxx --server=rhel70-master.testrelm.com Hostname: rhel70-client2.testrelm.com Realm: TESTRELM.COM DNS Domain: testrelm.com IPA Server: rhel70-master.testrelm.com BaseDN: dc=testrelm,dc=com Synchronizing time with KDC... cannot write certificate file '/etc/ipa/ca.crt.new': [Errno 2] No such file or directory: '/etc/ipa/ca.crt.new' Installation failed. Rolling back changes. IPA client is not configured on this system. [root@rhel70-client2 ~]# [root@rhel70-client2 ~]# rpm -q ipa-client ipa-client-3.3.3-8.el7.x86_64 [root@rhel70-client2 ~]# I think that the bug description may be misleading. What this fix does is that it moves /etc/ipa/ directory ownership from ipa-server to ipa-python which is installed both on client and server. The original reproduction in Fedora was following (https://fedorahosted.org/freeipa/ticket/3551#comment:3): 1. Install a clean VM 2. Install ipa-client and ipa-python --> /etc/ipa/ was not created 3. Run ipa-client-install --> crashed I do not think that a package is supposed to work correctly when some of it's owned files or directories are removed. In your case above, of you reinstalled ipa-* packages, the directory should be created again. Moving back to ON_QA for reconsideration. Verified. IPA client version: =================== -------------[RPMs & OS: [RedHat - x86_64]--------------------------- | ipa-client-3.3.3-11.el7.x86_64 | sssd-ipa-1.11.2-19.el7.x86_64 --------------------------------------------------------------------- Snip from automation log: ========================= :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: BZ952686 ipa-client-install fails when /etc/ipa/ is missing :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Removing ipa-python (Expected 0, got 0) :: [ PASS ] :: Removing directory /etc/ipa/ (Expected 0, got 0) :: [ PASS ] :: Installing ipa-client (Expected 0, got 0) :: [ PASS ] :: Listing /etc/ipa (Expected 0, got 0) :: [ PASS ] :: File '/tmp/bz-952686.txt' should contain 'root root' :: [ PASS ] :: File '/tmp/bz-952686.txt' should not contain 'root apache' :: [ PASS ] :: Installing ipa-client (Expected 0, got 0) :: [ PASS ] :: permission on /etc/ipa/ is correct and ipa client installation is successful :: [ PASS ] :: uninstall ipa client success :: [ LOG ] :: Duration: 40s :: [ LOG ] :: Assertions: 9 good, 0 bad :: [ PASS ] :: RESULT: BZ952686 ipa-client-install fails when /etc/ipa/ is missing :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: This request was resolved in Red Hat Enterprise Linux 7.0. Contact your manager or support representative in case you have further questions about the request. |