Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1355753
Created attachment 1178890 error log Description of problem: adding two way transitive trust gives internal error on the console Version-Release number of selected component (if applicable): ipa-server-trust-ad-4.4.0-1.el7.x86_64 ipa-server-dns-4.4.0-1.el7.noarch ipa-server-common-4.4.0-1.el7.noarch ipa-server-4.4.0-1.el7.x86_64 How reproducible: Always. Steps to Reproduce: 1. Install ipa-server 2. ipa-adtrust-install 3. add forward-zone for the domain to be trusted. 4. now add two-way trust [root@server]# ipa trust-add test.qa --external='true' --two-way=true Actual results: [root@server]# ipa trust-add test.qa --external='true' --two-way=true Active Directory domain administrator: administrator Active Directory domain administrator's password: ipa: ERROR: an internal error has occurred [root@server ~]# ipa trust-find --------------- 1 trust matched --------------- Realm name: test.qa Domain NetBIOS name: TEST Domain Security Identifier: S-1-5-21-4204873575-1158510886-1449965812 Trust type: Non-transitive external trust to a domain in another Active Directory forest ---------------------------- Number of entries returned 1 ---------------------------- [root@server ~]# ipa idrange-find ---------------- 2 ranges matched ---------------- Range name: TEST.QA_id_range First Posix ID of the range: 330800000 Number of IDs in the range: 200000 First RID of the corresponding RID range: 0 Domain SID of the trusted domain: S-1-5-21-4204873575-1158510886-1449965812 Range type: Active Directory domain range Range name: TESTRELM.TEST_id_range First Posix ID of the range: 160600000 Number of IDs in the range: 200000 First RID of the corresponding RID range: 1000 First RID of the secondary RID range: 100000000 Range type: local domain range ---------------------------- Number of entries returned 2 ---------------------------- Expected results: Although the trust gets added successfully the message displayed on the console should be fixed. Additional info: Attaching httpd error_log file
master:
populate_remote_domain
ipa-4-4:
Metadata Update from @pvoborni: - Issue assigned to mbabinsk - Issue set to the milestone: FreeIPA 4.4.2
Log in to comment on this ticket.