When ipa-server-install fails to create the kerberos container (i.e. when kdb5_util create returns with status > 0), the installer goes on and fails later. It makes it harder to diagnose the issue. The failure of kdb5_util should make the installer exit.
It is difficult to manually reproduce. I had to put a breakpoint just before calling kdb5_util create, stop 389-ds and make the debugger resume server installation.
A customer actually hit this issue, see Bugzilla 1550146
Metadata Update from @frenaud: - Issue assigned to frenaud
Metadata Update from @frenaud: - Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/1664
Metadata Update from @frenaud: - Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1550146
Metadata Update from @frenaud: - Issue set to the milestone: FreeIPA 4.5.5
master:
ipa-4-5:
ipa-4-6:
Metadata Update from @frenaud: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.