freeipa

#4317 Allow --ip-address even when not present in local interface
Closed: fixed Opened by mkosek.

Closed: fixed
Reopen Issue

Cloud VM instances (in OpenStack or EC2) often have a concept of private IP address assigned to it's network interfaces and a public IP address that can be assigned to a VM. The public IP is just routed to the VM and thus not present in the interfaces.

ipa-server-install --ip-address=PUBLIC_IP fails in that case and the IP address of the server needs to be reassigned after the installation:

# ipa-server-install --setup-dns --ip-address 1.2.3.4
Usage: ipa-server-install [options]
ipa-server-install: error: option --ip-address: invalid IP address 1.2.3.4: No network interface matches the provided IP address and netmask

It would be better to turn the error just in a warning and let Administrator use the value when sure it is the right address.

Moving to OpenStack integration bucket. As discussed on the triage, it would be preferred if a --force option is added, instead of just a warning.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1377973 (Red Hat Enterprise Linux 7)

Metadata Update from @mkosek:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA OpenStack Integration

Metadata Update from @mbasti:
- Issue close_status updated to: None
- Issue set to the milestone: FreeIPA 4.5.2 (was: FreeIPA OpenStack Integration)

master:

  • 6637980af6069623d944d9d592cbadba20b610a2 Only warn when specified server IP addresses don't match intf

ipa-4-5:

  • 6206ac8bd23250bda0f8eb628f422671b9b99ad1 Only warn when specified server IP addresses don't match intf

Metadata Update from @mbasti:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Reopening, fix for this causes additional issues

Metadata Update from @mbasti:
- Issue status updated to: Open (was: Closed)

Metadata Update from @tkrizek:
- Issue set to the milestone: FreeIPA 4.5.3 (was: FreeIPA 4.5.2)

master:

  • 82ad586f6cbf6e707add3c866ed4e37ade69b045 Fix local IP address validation
  • cb48a49c80f4a11d2d16511e0f1366867320f153 ipa-dns-install: remove check for local ip address
  • 0b69e44f16fbba6ab7ddef5a3e55bdabcfd6a8a6 refactor CheckedIPAddress class
  • 6024165101677c844dc3bbb337e290df2e66eaf1 CheckedIPAddress: remove match_local param
  • f9cba7d161f788c32336b66ff7c641f4a1ed2754 Remove ip_netmask from option parser
  • 1b8dc1131c9ca7218efb8fe16dcce97f9f960be9 replica install: add missing check for non-local IP address
  • f3537297bee2890c6b839750bb7a0a2cf904cdf9 Remove network and broadcast address warnings

ipa-4-5:

  • d010191d170c0ebb5f46bac2fc528f788e8ffc41 Fix local IP address validation
  • 4d06f0c52200a4345db36dae3fdbc178f18f2f01 ipa-dns-install: remove check for local ip address
  • 0aa0041149f359f1954409baf886d4b31fdadc16 refactor CheckedIPAddress class
  • 9a924dd8cc27507a70f4ec5020d97417e149e350 CheckedIPAddress: remove match_local param
  • 217905a20071b55b50568e8fbb36a8ecde974432 Remove ip_netmask from option parser
  • 93ef10292ca674842c79da0dab6de6fb63261881 replica install: add missing check for non-local IP address
  • 1c961161873c37cb29a51baeeed0e782cd4a1d4d Remove network and broadcast address warnings

Metadata Update from @dkupka:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
Normal
defect
Installation
integration openstack
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.