This is a regression in master:
============================================================================== [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: This program will setup components needed to establish trust to AD domains for [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: the FreeIPA Server. [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: This includes: [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: * Configure Samba [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: * Add trust related objects to FreeIPA LDAP server [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: To accept the default shown in brackets, press the Enter key. [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: Configuring CIFS [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [1/21]: stopping smbd [2014-06-17T18:32:26Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [2/21]: creating samba domain object [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [3/21]: creating samba config registry [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [4/21]: writing samba config file [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [5/21]: adding cifs Kerberos principal [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [6/21]: check for cifs services defined on other replicas [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [7/21]: adding cifs principal to S4U2Proxy targets [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [8/21]: adding admin(group) SIDs [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [9/21]: adding RID bases [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [10/21]: updating Kerberos config [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: 'dns_lookup_kdc' already set to 'true', nothing to do. [2014-06-17T18:32:27Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [11/21]: activating CLDAP plugin [2014-06-17T18:32:28Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [12/21]: activating sidgen plugin and task [2014-06-17T18:32:28Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [13/21]: activating extdom plugin [2014-06-17T18:32:28Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [14/21]: configuring smbd to start on boot [2014-06-17T18:32:28Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.out] <DEBUG>: [15/21]: adding special DNS service records [2014-06-17T18:32:28Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.err] <DEBUG>: Unexpected error - see /var/log/ipaserver-install.log for details: [2014-06-17T18:32:28Z ipa.ipatests.test_integration.host.Host.vm-227.cmd22.err] <DEBUG>: ConversionError: invalid 'name': domain name '_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs' and normalized domain name '_ldap._tcp.default-first-site-name._sites.dc._msdcs' do not match. Please use only normalized domains
From the install log:
2014-06-17T18:32:29Z DEBUG raw: dnsrecord_find(u'dom227.jenkinsad.idm.lab.eng.brq.redhat.com', u'_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs', version=u'2.89') 2014-06-17T18:32:29Z DEBUG dnsrecord_find(<DNS name dom227.jenkinsad.idm.lab.eng.brq.redhat.com.>, u'_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs', structured=False, all=False, raw=False, version=u'2.89', pkey_only=False) 2014-06-17T18:32:29Z DEBUG raw: dnsrecord_add(u'dom227.jenkinsad.idm.lab.eng.brq.redhat.com', u'_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs', srvrecord=u'0 100 389 vm-227', version=u'2.89') 2014-06-17T18:32:29Z DEBUG File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 639, in run_script return_value = main_function() File "/usr/sbin/ipa-adtrust-install", line 414, in main smb.create_instance() File "/usr/lib/python2.7/site-packages/ipaserver/install/adtrustinstance.py", line 882, in create_instance self.start_creation(show_service_name=False) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 367, in start_creation method() File "/usr/lib/python2.7/site-packages/ipaserver/install/adtrustinstance.py", line 607, in __add_dns_service_records add_rr(zone, win_srv, "SRV", rec) File "/usr/lib/python2.7/site-packages/ipaserver/install/bindinstance.py", line 332, in add_rr api.Command.dnsrecord_add(unicode(zone), unicode(name), **addkw) File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 433, in __call__ params = self.convert(**params) File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 631, in convert (k, self.params[k].convert(v)) for (k, v) in kw.iteritems() File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 631, in <genexpr> (k, self.params[k].convert(v)) for (k, v) in kw.iteritems() File "/usr/lib/python2.7/site-packages/ipalib/parameters.py", line 797, in convert return self._convert_scalar(value) File "/usr/lib/python2.7/site-packages/ipalib/parameters.py", line 1976, in _convert_scalar error=error) 2014-06-17T18:32:29Z DEBUG The ipa-adtrust-install command failed, exception: ConversionError: invalid 'name': domain name '_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs' and normalized domain name '_ldap._tcp.default-first-site-name._sites.dc._msdcs' do not match. Please use only normalized domains
DNS plugin should do this validation only for IDN domains
Adding to list of tickets required for 4.0 release.
master:
Metadata Update from @tbabej: - Issue assigned to mbasti - Issue set to the milestone: FreeIPA 4.0 GA
Login to comment on this ticket.