#4833 IPA replica missing data after master upgraded
Closed: Fixed None Opened 8 years ago by pvoborni.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1176995

Description of problem:

In an IPA RHEL7 environment, I'm seeing data missing from replica after master
is upgraded from 7.0 to 7.1.

After upgade, DNS data is missing:

[root@vm2 ~]# ipa dnszone-find
Number of entries returned 0

As is host data:

[root@vm2 ~]# ipa host-find
0 hosts matched
Number of entries returned 0

During (or right after)

I even tried using copy-schema-to-ca.py after the upgrade but, that didn't

[root@vm2 ~]# python /root/copy-schema-to-ca.py
ipa         : WARNING  Could not install
/etc/dirsrv/slapd-PKI-IPA//schema/60kerberos.ldif: [Errno 2] No such file or
Traceback (most recent call last):
  File "/root/copy-schema-to-ca.py", line 91, in <module>
  File "/root/copy-schema-to-ca.py", line 85, in main
  File "/root/copy-schema-to-ca.py", line 66, in add_ca_schema
    os.chmod(target_fname, 0440)    # read access for dirsrv user/group
OSError: [Errno 2] No such file or directory:

Similar to bug #1167964 but, I don't know if it's the same.

Version-Release number of selected component (if applicable):
On RHEL7.1 Master:

On RHEL7.0 Replica:

How reproducible:

Steps to Reproduce:
1.  install RHEL7.0 master and replica with dns support
2.  point master yum configs to RHEL7.1 repos
3.  yum -y update ipa-server sssd  # on master
4.  ipa dnszone-find # on replica

Actual results:
nothing returned as shown above.

Expected results:
shows configured DNS zones.

Additional info:
Will attach dirsrv logs shortly.

FreeIPA part of this fix is done:


  • fe4b319 Revert "Make all ipatokenTOTP attributes mandatory"


  • 5b99024 Revert "Make all ipatokenTOTP attributes mandatory"


  • 370a5b2 Revert "Make all ipatokenTOTP attributes mandatory"

Note that we are still waiting for the DS part of the fix: https://fedorahosted.org/389/ticket/47988.

Metadata Update from @pvoborni:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.0.6

6 years ago

Login to comment on this ticket.