#5834 Vault command tests failed (sha256 is not supported for PBKDF2 by this backend)
Closed: Invalid None Opened 8 years ago by mbasti.

On F23 with master branch:

/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipatests/test_xmlrpc/xmlrpc_test.py:313: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipatests/test_xmlrpc/xmlrpc_test.py:325: in check
    self.check_output(nice, cmd, args, options, expected, extra_check)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipatests/test_xmlrpc/xmlrpc_test.py:366: in check_output
    got = api.Command[cmd](*args, **options)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipalib/frontend.py:434: in __call__
    return self.__do_call(*args, **options)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipalib/frontend.py:460: in __do_call
    ret = self.run(*args, **options)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipalib/frontend.py:1126: in run
    return self.forward(*args, **options)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipalib/plugins/vault.py:1372: in forward
    self.api.Command.vault_archive(*args, **opts)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipalib/frontend.py:434: in __call__
    return self.__do_call(*args, **options)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipalib/frontend.py:460: in __do_call
    ret = self.run(*args, **options)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipalib/frontend.py:1126: in run
    return self.forward(*args, **options)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipalib/plugins/vault.py:1612: in forward
    password, salt)
/var/lib/jenkins/workspace/freeipa-intree-tests-f23master/ipalib/plugins/vault.py:822: in generate_symmetric_key
    backend=default_backend()
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <cryptography.hazmat.primitives.kdf.pbkdf2.PBKDF2HMAC object at 0x7f24f405de10>
algorithm = <cryptography.hazmat.primitives.hashes.SHA256 object at 0x7f24f405d910>
length = 32, salt = '\xd0\x1f\xdc\xcb\x1b\xdf\xa3\x94\xdf\xa5\xc0e\xca\x8dnN'
iterations = 100000
backend = <cryptography.hazmat.backends.multibackend.MultiBackend object at 0x7f24f57e8d90>

    def __init__(self, algorithm, length, salt, iterations, backend):
        if not isinstance(backend, PBKDF2HMACBackend):
            raise UnsupportedAlgorithm(
                "Backend object does not implement PBKDF2HMACBackend.",
                _Reasons.BACKEND_MISSING_INTERFACE
            )

        if not backend.pbkdf2_hmac_supported(algorithm):
            raise UnsupportedAlgorithm(
                "{0} is not supported for PBKDF2 by this backend.".format(
                    algorithm.name),
>               _Reasons.UNSUPPORTED_HASH
            )
E           UnsupportedAlgorithm: sha256 is not supported for PBKDF2 by this backend.

Can you add the attached test file to Jenkins and run it with the rest of the test suite?

Please also check if the Jenkins machine has FIPS enabled. FIPS can affect available algorithms.

UPDATE: FIPS is not enabled on the machine.

After some investigation it seems like an issue related to test environment that happen with batch run.
ATM it doesn't seem like ipa bug but please don't close the ticket yet.

closing, per ticket triage on Jun 21

Reopen if it happens again.

Metadata Update from @mbasti:
- Issue assigned to someone
- Issue set to the milestone: 0.0 NEEDS_TRIAGE

7 years ago

Login to comment on this ticket.

Metadata