#4108 UnicodeDecodeError: 'ascii' codec can't decode byte 0xe
Opened 4 months ago by rcritten. Modified 4 months ago

Originally reported as https://pagure.io/freeipa/issue/8078

Request for enhancement

As an IT administrator, I want to enroll an Ubuntu 18.04 so that it will be an IPA client


A python error while ipa-client-install is working. The exact command is:

sudo ipa-client-install --unattended --ip-address= --domain=<my.domain> --realm=<MY.DOMAIN> --hostname=ipaclientlan.my.domain --principal=admin --password=adminpwd --mkhomedir --force-join

The error is:

2019-09-25T08:09:53Z DEBUG The ipa-client-install command failed, exception: UnicodeDecodeError: 'ascii' codec can't decode byte 0xe2 in position 1316: ordinal not in range(128)
2019-09-25T08:09:53Z ERROR 'ascii' codec can't decode byte 0xe2 in position 1316: ordinal not in range(128)

Steps to Reproduce

  1. Setup an IPA server
  2. Install separately Ubuntu 18.04
  3. Enroll Ubuntu 18.04 with ipa-client-install

Actual behavior

Enrollment seems to be ok because kinit is working. Also web UI on IPA server shows Ubuntu 18.04 client enrolled

Expected behavior

No error during enrollment, a positive message at the end


IPA server:


IPA client:

ii freeipa-client 4.7.0~pre1+git20180411-2ubuntu2
ii freeipa-common 4.7.0~pre1+git20180411-2ubuntu2
ii libipa-hbac0 1.16.1-1ubuntu1.4
ii python-ipaclient 4.7.0~pre1+git20180411-2ubuntu2
ii python-ipaddr 2.2.0-1
ii python-ipaddress 1.0.17-1
ii python-ipalib 4.7.0~pre1+git20180411-2ubuntu2
ii python-libipa-hbac 1.16.1-1ubuntu1.4
ii sssd-ipa 1.16.1-1ubuntu1.4

Additional info:

IPA server is OK.
IPA clients Debian 10 and Centos 7 are OK too

I also tried to set Python3 by default but no luck Python2.7 is in use

The root of the problem was:

The problem came from bad caracters in my original /etc/sssd/sssd.conf

Faulty line was:
# uncomment below if the SME is a “iPasserelle”

As you see there are 2 specials double quotes...I guess IPA client install script try to backup the file before making any change in it.

There is a traceback in ipaclient-install.log attached to the freeIPA case.

@mzidek, is this SSSD or dings-libs?

Login to comment on this ticket.