Bug 11491

Summary:	ipa-server не устанавливается
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Dmitry Postnikov <pastordidi>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	VERIFIED FIXED
Severity:	normal	CC:	a.proklov, m.novosyolov, v.potapov
Priority:	Normal	Flags:	v.potapov: qa_verified+ v.potapov: published+
Version:	Server
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Platform:	2021.1	ROSA Vulnerability identifier:
RPM Package:		Upstream:
Bug Depends on:
Bug Blocks:	11461
Attachments:	ipasrv1.png ipasrv2.png ipasrv3.png ipasrv1_log.txt ipasrv2_log.txt

Description Dmitry Postnikov 2021-09-09 11:32:13 MSK

Created attachment 5508 [details]
ipasrv1.png

freeipa сервер не ставится
======================
[root@dc1 ~]# ipa-server-install -p 12345678 -a 12345678
Traceback (most recent call last):
  File "/usr/sbin/ipa-server-install", line 23, in <module>
    from ipaserver.install import ipa_server_install
  File "/usr/lib/python3.8/site-packages/ipaserver/install/ipa_server_install.py", line 7, in <module>
    from ipapython.install import cli
  File "/usr/lib/python3.8/site-packages/ipapython/install/cli.py", line 17, in <module>
    from ipapython import admintool
  File "/usr/lib/python3.8/site-packages/ipapython/admintool.py", line 33, in <module>
    from ipapython import config
  File "/usr/lib/python3.8/site-packages/ipapython/config.py", line 35, in <module>
    from ipapython.dnsutil import query_srv
  File "/usr/lib/python3.8/site-packages/ipapython/dnsutil.py", line 35, in <module>
    from ipapython.ipautil import UnsafeIPAddress
  File "/usr/lib/python3.8/site-packages/ipapython/ipautil.py", line 56, in <module>
    from ipaplatform.constants import User, Group
  File "<frozen importlib._bootstrap>", line 991, in _find_and_load
  File "<frozen importlib._bootstrap>", line 975, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 655, in _load_unlocked
  File "<frozen importlib._bootstrap>", line 618, in _load_backward_compatible
  File "/usr/lib/python3.8/site-packages/ipaplatform/_importhook.py", line 34, in load_module
    platform_mod = importlib.import_module(alias)
  File "/usr/lib64/python3.8/importlib/__init__.py", line 127, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
  File "/usr/lib/python3.8/site-packages/ipaplatform/rosa/constants.py", line 11, in <module>
    class RosaConstantsNamespace(BaseConstantsNamespace):
  File "/usr/lib/python3.8/site-packages/ipaplatform/rosa/constants.py", line 14, in RosaConstantsNamespace
    HTTPD_USER = User("apache")
NameError: name 'User' is not defined
[root@dc1 ~]#
=================================

[root@dc1 ~]# rpm -qa | grep ipa
python3-ipaclient-4.9.6-1.noarch
ipa-common-4.9.6-1.noarch
ipa-server-4.9.6-1.x86_64
ipa-client-common-4.9.6-1.noarch
python3-ipalib-4.9.6-1.noarch
freeipa-healthcheck-core-0.5-2.noarch
ipa-server-common-4.9.6-1.noarch
ipa-client-4.9.6-1.x86_64
python3-ipaserver-4.9.6-1.noarch
ipa-server-dns-4.9.6-1.noarch
lib64sss_ipa_hbac0-2.3.0-2.x86_64

Comment 1 Dmitry Postnikov 2021-09-09 13:45:18 MSK

Created attachment 5509 [details]
ipasrv2.png

При удалении ipa-server, удаляется ipa-client, но в пакете ipa-client ошибка.

====================
  Удаление         : ipa-client-4.9.6-1.x86_64                                                                                                                      16/451
  Запуск скриптлета: ipa-client-4.9.6-1.x86_64                                                                                                                      16/451
/var/tmp/rpm-tmp.N9U9se: строка 10: синтаксическая ошибка: неожиданный конец файла
предупреждение: %postun(ipa-client-4.9.6-1.x86_64) scriptlet failed, exit status 2

Error in POSTUN scriptlet in rpm package ipa-client
====================

Comment 2 Aleksandr Proklov 2021-09-10 06:53:07 MSK

https://abf.io/import/ipa/commit/5a7fd9c7067f8acbbeff2845963eb97960197835

%postun почему не отрабатывает, я не смог установить, на вид все нормально в нем

Comment 3 Dmitry Postnikov 2021-09-13 11:52:19 MSK

Created attachment 5519 [details]
ipasrv3.png

Сейчас вот такую ошибку выдает. Как нас скрине.

=========================
Configuring ipa-custodia
  [1/5]: Making sure custodia container exists
  [2/5]: Generating ipa-custodia config file
  [3/5]: Generating ipa-custodia keys
  [4/5]: starting ipa-custodia
  [5/5]: configuring ipa-custodia to start on boot
Done configuring ipa-custodia.
Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
  [1/28]: configuring certificate server instance
Failed to configure CA instance
See the installation logs and the following files/directories for more information:
  /var/log/pki/pki-tomcat
  [error] RuntimeError: CA configuration failed.
CA configuration failed.
The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
[root@dc1 ~]#
=============================

Comment 4 Dmitry Postnikov 2021-09-13 11:55:16 MSK

Created attachment 5520 [details]
ipasrv1_log.txt

Вот что в логах при этом.

Comment 5 Aleksandr Proklov 2021-09-14 09:04:10 MSK

https://abf.io/import/ipa/commit/6bfef44ba75677c1b45af11ff08e1a7945d938a6

pkispawn теперь без опции --debug видимо

Comment 6 Dmitry Postnikov 2021-10-05 15:14:53 MSK

Created attachment 5537 [details]
ipasrv2_log.txt

Прошло 2 недели (пока в отпуске был).

Ипа не ставится до сих пор. Лог установки приаттачил.

Comment 7 Aleksandr Proklov 2021-10-14 13:26:01 MSK

починилось?

Comment 8 Aleksandr Proklov 2021-12-21 10:28:03 MSK

кто будет закрывать?

Comment 9 Aleksandr Proklov 2021-12-28 09:28:23 MSK

(In reply to Dmitry Postnikov from comment #6)
> Created attachment 5537 [details]
> ipasrv2_log.txt
> 
> Прошло 2 недели (пока в отпуске был).
> 
> Ипа не ставится до сих пор. Лог установки приаттачил.

No such file or directory: 'pki-server' 
Куда делся?

Comment 10 Dmitry Postnikov 2021-12-28 14:49:24 MSK

https://bugzilla.rosalinux.ru/show_bug.cgi?id=11735#c3
C этими контейнерами Ипа ставится и работает.

Comment 11 Dmitry Postnikov 2021-12-28 16:34:06 MSK

slapi-nis 0.56.7-1
- updated
- fixed dependencies from sssd
https://abf.io/build_lists/3966943
https://abf.io/build_lists/3966944
https://abf.io/build_lists/3966945

ipa 4.8.10-3
- fixed sh syntax in scriptlet
https://abf.io/build_lists/3966949
https://abf.io/build_lists/3966950
https://abf.io/build_lists/3966951

389-ds-base 1.4.4.4-7
- removed not existing systemd unit from scriptlet
https://abf.io/build_lists/3966952
https://abf.io/build_lists/3966953
https://abf.io/build_lists/3966954

Comment 12 Dmitry Postnikov 2021-12-28 16:34:54 MSK

(In reply to Dmitry Postnikov from comment #11)
> slapi-nis 0.56.7-1
> - updated
> - fixed dependencies from sssd
> https://abf.io/build_lists/3966943
> https://abf.io/build_lists/3966944
> https://abf.io/build_lists/3966945
> 
> ipa 4.8.10-3
> - fixed sh syntax in scriptlet
> https://abf.io/build_lists/3966949
> https://abf.io/build_lists/3966950
> https://abf.io/build_lists/3966951
> 
> 389-ds-base 1.4.4.4-7
> - removed not existing systemd unit from scriptlet
> https://abf.io/build_lists/3966952
> https://abf.io/build_lists/3966953
> https://abf.io/build_lists/3966954

Проверено, отправлено в тестинг
***********************************

Comment 13 Aleksandr Proklov 2021-12-28 16:53:09 MSK

> ipa 4.8.10-3
> - fixed sh syntax in scriptlet
> https://abf.io/build_lists/3966949
> https://abf.io/build_lists/3966950
> https://abf.io/build_lists/3966951
> 
> 389-ds-base 1.4.4.4-7
> - removed not existing systemd unit from scriptlet
> https://abf.io/build_lists/3966952
> https://abf.io/build_lists/3966953
> https://abf.io/build_lists/3966954

------------------------------------
published and + tevent