#6095 ipa command stuck forever on higher versioned client with lower versioned server
Closed: Fixed None Opened 7 years ago by pvoborni.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1357488

Description of problem:
Install IPA Server 4.2 and join client with IPA Client 4.4
If user invoke any unsupported command on client, then it triggers following
error message

# kdestroy -A

# kinit admin
Password for admin@TESTRELM.TEST:

# klist
Ticket cache: KEYRING:persistent:0:0
Default principal: admin@TESTRELM.TEST

Valid starting       Expires              Service principal
07/18/2016 16:05:10  07/19/2016 16:05:08  krbtgt/TESTRELM.TEST@TESTRELM.TEST

# ipa -vvv ca-add
ipa: INFO: trying https://dhcp201-172.testrelm.test/ipa/json
ipa: INFO: Forwarding 'schema' to json server
'https://dhcp201-172.testrelm.test/ipa/json'
ipa: INFO: trying https://dhcp201-172.testrelm.test/ipa/json
ipa: INFO: Forwarding 'env' to json server
'https://dhcp201-172.testrelm.test/ipa/json'
<snip>
</snip>
ipa: INFO: operation aborted

# rpm -q ipa-client
ipa-client-4.4.0-2.1.el7.x86_64


File /var/log/httpd/error_log on Server contains

[Mon Jul 18 06:34:01.725121 2016] [:error] [pid 7030] ipa: INFO:
[jsonserver_kerb] admin@TESTRELM.TEST: env((u'api_version',), version=u'2.0'):
SUCCESS
[Mon Jul 18 06:34:08.872626 2016] [:error] [pid 7023] ipa: INFO:
[jsonserver_kerb] admin@TESTRELM.TEST: schema: CommandError
[Mon Jul 18 06:34:08.958584 2016] [:error] [pid 7030] ipa: INFO:
[jsonserver_kerb] admin@TESTRELM.TEST: env((u'api_version',), version=u'2.0'):
SUCCESS
[Mon Jul 18 06:34:17.307152 2016] [:error] [pid 7023] ipa: INFO:
[jsonserver_kerb] admin@TESTRELM.TEST: schema: CommandError
[Mon Jul 18 06:34:17.392404 2016] [:error] [pid 7030] ipa: INFO:
[jsonserver_kerb] admin@TESTRELM.TEST: env((u'api_version',), version=u'2.0'):
SUCCESS
[Mon Jul 18 06:34:37.415954 2016] [:error] [pid 7023] ipa: INFO:
[jsonserver_kerb] admin@TESTRELM.TEST: schema: CommandError
[Mon Jul 18 06:34:37.666269 2016] [:error] [pid 7030] ipa: INFO:
[jsonserver_kerb] admin@TESTRELM.TEST: env((u'api_version',), version=u'2.0'):
SUCCESS
[Mon Jul 18 06:34:45.663847 2016] [:error] [pid 7023] ipa: INFO:
[jsonserver_kerb] admin@TESTRELM.TEST: schema: CommandError
[Mon Jul 18 06:34:45.765081 2016] [:error] [pid 7030] ipa: INFO:
[jsonserver_kerb] admin@TESTRELM.TEST: env((u'api_version',), version=u'2.0'):
SUCCESS




Version-Release number of selected component (if applicable):
IPA Server = ipa-server-4.2.0-15.el7_2.17.x86_64
IPA Client = ipa-client-4.4.0-2.1.el7.x86_64

How reproducible:
100%

Actual results:
Command goes in infinite loop.

Expected results:
Command should warn about non-availability of feature or command

ipa: ERROR: unknown command 'ca-add' or something similar

In fact the command is not stuck but is looping on all the available commands. If the user lets it run long enough, it finally exits with ipa: ERROR: unknown command 'ca-add'. See the output:

$ time sudo ipa ca-add
ipa: ERROR: unknown command 'ca-add'

real 4m32.880s
user 0m7.461s
sys 0m2.130s

Note that if the command is run with at least one argument, this does not happen and the CLI exits quickly:
$ time sudo ipa ca-add myca
ipa: ERROR: unknown command 'ca-add'

real 0m4.509s
user 0m1.504s
sys 0m0.202s

The issue is not fixed completely, reopening the ticket.

master:

  • 6e6cbda compat: Fix ping command call

Metadata Update from @pvoborni:
- Issue assigned to dkupka
- Issue set to the milestone: FreeIPA 4.4.2

7 years ago

Login to comment on this ticket.

Metadata