steps to reproduce: 1. install kra 2. uninstall kra 3. install kra 4. try to uninstall it (bonus step)
Result:
[root@vm-058-083 ~]# ipa-kra-install Directory Manager password: =================================================================== This program will setup Dogtag KRA for the FreeIPA Server. Your system may be partly configured. Run ipa-kra-install --uninstall to clean up. KRA is not installed on the master system The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log for more information [root@vm-058-083 ~]# ipa-kra-install --uninstall Usage: ipa-kra-install [options] [replica_file] ipa-kra-install: error: Cannot uninstall. There is no KRA installed on this system. The ipa-kra-install command failed. See /var/log/ipaserver-kra-uninstall.log for more information
This happens on both domain levels 1 and 0
Dogtag ticket: https://fedorahosted.org/pki/ticket/1704
If pki guys will not be able to fix it in time, it is possible to rewrite check and just rely on IPA command kra_is_enabled (but this would be quite big change).
Moving, 4.3 was released.
"[PATCH 027] Require Dogtag 10.2.6-13 to fix KRA uninstall" bumps requirements to Dogtag pki >= 10.2.6-13.
master:
ipa-4-3:
should be also backported to 4.2.4
ipa-4-2:
Metadata Update from @mbasti: - Issue assigned to mbasti - Issue set to the milestone: FreeIPA 4.2.4
Login to comment on this ticket.