#8252 Nightly test failure in test_pkinit_manage::TestPkinitInstall: 'PKINIT is disabled'
Closed: worksforme 3 years ago by frenaud. Opened 3 years ago by fcami.

The nightly test test_pkinit_manage::TestPkinitInstall failed with:
AssertionError: assert 'PKINIT is enabled' in 'PKINIT is disabled\n'

testing_master_previous: PR, logs


Metadata Update from @fcami:
- Issue tagged with: test-failure, tests

3 years ago

install logs contain:

DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd28:transport.py:558   [1/1]: installing X509 Certificate for PKINIT
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd28:transport.py:558 PKINIT certificate request failed: Certificate issuance failed (TIMEOUT: None)
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd28:transport.py:558 Full PKINIT configuration did not succeed
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd28:transport.py:558 The setup will only install bits essential to the server functionality
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd28:transport.py:558 You can enable PKINIT after the setup completed using 'ipa-pkinit-manage'
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd28:transport.py:558 Failed to configure PKINIT
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd28:transport.py:558 Done configuring Kerberos KDC (krb5kdc).

As pointed out by @rcritten it's unclear what happens in the 5-min period in the journal:

Apr 01 01:22:47 master.ipa.test certmonger[26805]: 2020-04-01 01:22:47 [26805] Certificate issued (0 chain certificates, 0 roots).
Apr 01 01:22:47 master.ipa.test certmonger[26805]: 2020-04-01 01:22:47 [26805] No hooks set for pre-save command.
Apr 01 01:22:54 master.ipa.test audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 01 01:22:54 master.ipa.test systemd[1]: NetworkManager-dispatcher.service: Succeeded.
Apr 01 01:27:55 master.ipa.test certmonger[26805]: 2020-04-01 01:27:55 [28601] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard".

This issue already happened in the past, please see https://pagure.io/freeipa/issue/8210 (that I closed as duplicate) for additional logs.

The last 10+ runs were successful, closing as worksforme. Feel free to re-open if the issue happens.

Metadata Update from @frenaud:
- Issue close_status updated to: worksforme
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata