#8036 (flapping) test failure in test_dnssec.py::TestInstallNoDnssecValidation::test_install_withDnssecValidation
Closed: fixed 10 months ago by frenaud. Opened a year ago by fcami.

Issue

Sometimes test_dnssec.py::test_install_withDnssecValidation fails.
ipa-server-install is expected to fail, yet succeeds:
http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/f5f6c4c8-b83c-11e9-8157-fa163eb4190c/

transport.py               513 DEBUG    RUN ['ipa-server-install', '-n', 'ipa.test', '-r', 'IPA.TEST', '-p', 'Secret.123', '-a', 'Secret.123', '-U', '--setup-dns', '--forwarder', '192.168.121.33', '--auto-reverse']
transport.py               558 DEBUG    Checking DNS domain ipa.test, please wait ...
transport.py               558 DEBUG    Checking DNS domain ipa.test., please wait ...
transport.py               558 DEBUG    Checking DNS domain 121.168.192.in-addr.arpa., please wait ...
transport.py               558 DEBUG    Reverse zone 121.168.192.in-addr.arpa. will be created
transport.py               558 DEBUG    Synchronizing time
transport.py               558 DEBUG    No SRV records of NTP servers found and no NTP server or pool address was provided.
transport.py               558 DEBUG    Attempting to sync time with chronyc.
transport.py               558 DEBUG    Process chronyc waitsync failed to sync time!
transport.py               558 DEBUG    Unable to sync time with chrony server, assuming the time is in sync. Please check that 123 UDP port is opened, and any time server is on network.
transport.py               558 DEBUG    Checking DNS domain ipa.test, please wait ...
transport.py               558 DEBUG    
transport.py               558 DEBUG    The log file for this installation can be found in /var/log/ipaserver-install.log
transport.py               558 DEBUG    ==============================================================================
transport.py               558 DEBUG    This program will set up the FreeIPA Server.
transport.py               558 DEBUG    Version 4.9.0.dev
transport.py               558 DEBUG    
transport.py               558 DEBUG    This includes:
transport.py               558 DEBUG      * Configure a stand-alone CA (dogtag) for certificate management
transport.py               558 DEBUG      * Configure the NTP client (chronyd)
transport.py               558 DEBUG      * Create and configure an instance of Directory Server
transport.py               558 DEBUG      * Create and configure a Kerberos Key Distribution Center (KDC)
transport.py               558 DEBUG      * Configure Apache (httpd)
transport.py               558 DEBUG      * Configure DNS (bind)
transport.py               558 DEBUG      * Configure the KDC to enable PKINIT
transport.py               558 DEBUG    
transport.py               558 DEBUG    Warning: skipping DNS resolution of host master.ipa.test
transport.py               558 DEBUG    Checking DNS forwarders, please wait ...
transport.py               558 DEBUG    Using reverse zone(s) 121.168.192.in-addr.arpa.
transport.py               558 DEBUG    
transport.py               558 DEBUG    The IPA Master Server will be configured with:
transport.py               558 DEBUG    Hostname:       master.ipa.test
transport.py               558 DEBUG    IP address(es): 192.168.121.44
transport.py               558 DEBUG    Domain name:    ipa.test
transport.py               558 DEBUG    Realm name:     IPA.TEST
transport.py               558 DEBUG    
transport.py               558 DEBUG    The CA will be configured with:
transport.py               558 DEBUG    Subject DN:   CN=Certificate Authority,O=IPA.TEST
transport.py               558 DEBUG    Subject base: O=IPA.TEST
transport.py               558 DEBUG    Chaining:     self-signed
transport.py               558 DEBUG    
transport.py               558 DEBUG    BIND DNS server will be configured to serve IPA domain with:
transport.py               558 DEBUG    Forwarders:       192.168.121.33
transport.py               558 DEBUG    Forward policy:   only
transport.py               558 DEBUG    Reverse zone(s):  121.168.192.in-addr.arpa.
transport.py               558 DEBUG    
transport.py               558 DEBUG    Disabled p11-kit-proxy
transport.py               558 DEBUG    Using default chrony configuration.
transport.py               558 DEBUG    Warning: IPA was unable to sync time with chrony!
transport.py               558 DEBUG             Time synchronization is required for IPA to work correctly
transport.py               558 DEBUG    Configuring directory server (dirsrv). Estimated time: 30 seconds
transport.py               558 DEBUG    
transport.py               558 DEBUG    Starting installation...
(...)

Need to investigate if it's a regression or a test issue. The installer is expected to fail when the forwarder does not answer.

Good run: http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/f357da2e-b632-11e9-b633-fa163eb4190c/


Metadata Update from @fcami:
- Issue tagged with: test-failure

a year ago

Metadata Update from @pcech:
- Custom field blocking adjusted to 8037
- Issue tagged with: Falcon

a year ago

The failure does not happen any more. It was fixed as part of PR #3943 and #3978.
Fixed on master branch and ipa-4-8.

master:

7dfc6e0 ipatests: generic uninstall should call ipa server-del
8cf4271 ipatests: fix teardown
b3d6503 ipatests: fix test_crlgen_manage
c1272e4 ipatests: fix TestMigrateDNSSECMaster teardown

ipa-4-8:

c77b062 ipatests: generic uninstall should call ipa server-del
ab67e0e ipatests: fix teardown
dd06dfc ipatests: fix test_crlgen_manage
bb8da7d ipatests: fix TestMigrateDNSSECMaster teardown

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

10 months ago

Metadata Update from @frenaud:
- Issue set to the milestone: FreeIPA 4.8.4

10 months ago

Login to comment on this ticket.

Metadata