#7410 ipa-replica-install --add-agents option doesn't install trust-agent on replica
Closed: fixed 6 years ago Opened 6 years ago by sumenon.

Issue

ipa-replica-install --add-agents doesn't install trust-agent on replica

Steps to Reproduce

  1. install IPA server
  2. Install replica using the below command
    ipa-replica-install -w *** -n pytest.test -r PYTEST.TEST -P admin --setup-dns --forwarder=<ip-addr> --add-agents
  3. run ipa server-show command on master

Actual behavior

Replica installed is not showing the server role as: AD trust agent since the option was used.
[root@master ~]# ipa server-show
Server name: replica3.pytest.test
Server name: replica3.pytest.test
Managed suffixes: domain
Min domain level: 0
Max domain level: 1
Enabled server roles: DNS server, NTP server

Expected behavior

Replica server should be added as trust-agent sicne the option is used.
Also need to check various other options specified in ipa-replica-install help
AD trust options:
--add-sids Add SIDs for existing users and groups as the final
step
--add-agents Add IPA masters to a list of hosts allowed to serve
information about users from trusted forests
--enable-compat Enable support for trusted domains for old clients
--netbios-name=NETBIOS_NAME
NetBIOS name of the IPA domain
--rid-base=RID_BASE
Start value for mapping UIDs and GIDs to RIDs
--secondary-rid-base=SECONDARY_RID_BASE
Start value of the secondary range for mapping UIDs
and GIDs to RIDs

Version/Release/Distribution

[root@master ~]# rpm -q ipa-server 389-ds-base ipa-server-trust-ad
ipa-server-4.5.4-10.el7.x86_64
389-ds-base-1.3.7.5-16.el7.x86_64
ipa-server-trust-ad-4.5.4-10.el7.x86_64

Additional info:

Attached log


I think any of the trust-related options should an cause error if no --setup-adtrust was provided to ipa-replica-install. You weren't specified --setup-adtrust, so no trust setup install happened, thus no action on --add-agents.

Metadata Update from @stlaz:
- Issue priority set to: normal
- Issue set to the milestone: FreeIPA 4.8

6 years ago

Metadata Update from @abbra:
- Issue assigned to abbra

6 years ago

Metadata Update from @cheimes:
- Issue set to the milestone: FreeIPA 4.7 (was: FreeIPA 4.8)

6 years ago

master:

  • 64ffd11 install: validate AD trust-related options in installers

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

6 years ago

Login to comment on this ticket.

Metadata
Attachments 2
Attached 6 years ago View Comment
Attached 6 years ago View Comment