Description of problem:

Saw abrt crash report:

keysyncer.py:92:application_sync:AssertionError: modrdn operation is not
supported

Traceback (most recent call last):
File "/usr/libexec/ipa/ipa-dnskeysyncd", line 112, in <module>
while ldap_connection.syncrepl_poll(all=1, msgid=ldap_search):
File "/usr/lib64/python2.7/site-packages/ldap/syncrepl.py", line 376, in
syncrepl_poll
self.syncrepl_entry(dn, attrs, c.entryUUID)
File "/usr/lib/python2.7/site-packages/ipapython/dnssec/syncrepl.py", line
75, in syncrepl_entry
self.application_sync(uuid, dn, attributes, previous_attributes)
File "/usr/lib/python2.7/site-packages/ipapython/dnssec/keysyncer.py", line
92, in application_sync
assert olddn == newdn, 'modrdn operation is not supported'
AssertionError: modrdn operation is not supported

Local variables in innermost frame:
dn: 'ipk11UniqueID=56e05fdc-3985-11e5-b5fe-a02bb81f3758,cn=keys,cn=sec,cn=dns,d
c=testrelm,dc=test'
uuid: '4d0003c8-7c7f-0000-2c31-5d2e6d616e61'
self: <ipapython.dnssec.keysyncer.KeySyncer instance at 0x25e34d0>
objclass: 'idnszone'
newdn: [[('ipk11UniqueID', '56e05fdc-3985-11e5-b5fe-a02bb81f3758', 1)], [('cn',
'keys', 1)], [('cn', 'sec', 1)], [('cn', 'dns', 1)], [('dc', 'testrelm', 1)],
[('dc', 'test', 1)]]
newattrs: {'dn': 'ipk11UniqueID=56e05fdc-3985-11e5-b5fe-a02bb81f3758,cn=keys,cn
=sec,cn=dns,dc=testrelm,dc=test', 'objectclass': ['ipk11PublicKey',
'ipk11Object', 'top', 'ipaPublicKeyObject', 'ipk11Key', 'ipk11StorageObject'],
'ipk11wrap': ['TRUE'], 'ipk11label':
['dnssec-replica:idm-qe-03.testrelm.test.'], 'ipk11id':
['\xcer\xfe\xefo\xee\x04\xa9\x03u\xc3\x16\x9bes\xce'], 'ipk11verify':
['FALSE'], 'ipapublickey': ['0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x0
5\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc7\x0f\xad\xe3\xf1@\x
bcP\xac\x13\x91q\xb6J6on.\x9e\xa2\xa5\x8f\x08\xfa\xaa\xb8N:\xc2\xc9\xe9\x92\x1f
\r\xbb\xaa\xa2\xba\x96\x9dg\x94?\xacu+\xdb\x01\x13N=i\xbd<k+\xb1\xef\xcc\xcc"[\
xaa\xb4\xc9\n\x06]<\xe29\x13\xd2\x81\x81\xdbA\xb8Z\x1e\x01\x1e:\x19\x89\x1e\xbe
?t\xde\x83\xcf\x12\xd9~/\x03\xc2c\x0b\xd0\x1aD\x12\xad{\xb5NJ\xb2Y\xde\xc9\xde \x07\x8f\xebh:v\x05G\xfa\x05\xf5\xd0\x1d:y>\x85H\x7f\x14\x8f\xf6C\xbae\xf43\xa4 <\x9f\xd6 \xb3\xda\xd2<L,\xe8\xc4\xdf\xe2tD\x01\xf3\xffw}\x86.\xedk>Az[f\xbex\x a9\xed\x01\xdbF\x16\xc6\xfd\x9a\xcf\xde\xfa\x13t{\xb36\xa9\x03\x9f\xc2\x95m\x8
4\xeb\x88N\xd0r\x9a\x18\x83\xb8\xd0f\x9d.\x8a\x14\xe2Hk\xd8\xf3\x12\xf7\xe6\xc9
\xee\xe0\x868!x&0\xaf\n\xee\xef\xa0\x16\xcf\xb3\x97!\xc6\x13J\x8d\xd9\xef\xac\x
a5^\x80\xed\xd4\x13?\x02\x03\x01\x00\x01'], 'ipk11verifyrecover': ['FALSE'],
'ipk11uniqueid': ['56e05fdc-3985-11e5-b5fe-a02bb81f3758']}
olddn: [[('idnsname', 'testrelm.test.', 1)], [('cn', 'dns', 1)], [('dc',
'testrelm', 1)], [('dc', 'test', 1)]]
oldattrs: {'idnszoneactive': ['TRUE'], 'idnssoaexpire': ['1209600'],
'nsrecord': ['idm-qe-03.testrelm.test.'], 'objectclass': ['idnszone', 'top',
'idnsrecord'], 'idnsallowtransfer': ['none;'], 'idnssoaretry': ['900'],
'idnssoaserial': ['1438568051'], 'idnssoaminimum': ['3600'], 'dn':
'idnsname=testrelm.test.,cn=dns,dc=testrelm,dc=test', 'idnsupdatepolicy':
['grant TESTRELM.TEST krb5-self * A; grant TESTRELM.TEST krb5-self * AAAA;
grant TESTRELM.TEST krb5-self * SSHFP;'], 'idnssoarefresh': ['3600'],
'idnsallowquery': ['any;'], 'idnsname': ['testrelm.test.'], 'idnssoamname':
['idm-qe-03.testrelm.test.'], 'idnssoarname': ['hostmaster.testrelm.test.'],
'idnsallowdynupdate': ['TRUE']}

Comment by thierry bordaz

• This is a DS bug.