#9290 idm:client is missing dependency on krb5-pkinit.
Closed: fixed a year ago by frenaud. Opened a year ago by frenaud.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 2149889

Description of problem: idm:client is missing dependency on krb5-pkinit

Version-Release number of selected component (if applicable):
ipa-server-4.9.10-8.module+el8.8.0+17351+9a3fb056.x86_64
ipa-client-4.9.10-8.module+el8.8.0+17351+9a3fb056.x86_64  

How reproducible: Always


Steps to Reproduce:
1. dnf module install -y idm:DL1/client
2. [root@client tls]# ipa-client-install --domain testrelm.test --realm TESTRELM.TEST  
--server=master.testrelm.test 
--pkinit-identity=FILE:/etc/pki/tls/certs/client.pem,/etc/pki/tls/private/client.key 
-U --pkinit-anchor=FILE:/tmp/kdc.pem -d

Actual results:
ipa-client-install fails with the error due to missing krb5-pkinit package.
'dnf module install -y idm:DL1/{client,dns}' is run the package is installed and ipa-client-install with pkinit passed.

Client uninstall complete.
Kerberos PKINIT authentication failed: CalledProcessError(Command ['/usr/bin/kinit', '-c', '/tmp/krbccjsckiuc2/ccache', '-X', 'X509_anchors=FILE:/tmp/kdc.pem', '-X', 'X509_user_identity=FILE:/etc/pki/tls/certs/client.pem,/etc/pki/tls/private/client.key', 'host/client.testrelm.test@TESTRELM.TEST'] returned non-zero exit status 1: 'kinit: Generic preauthentication failure while getting initial credentials\n')
The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information

Expected results:
ipa-client-install is successful.

Additional info:

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2149889

a year ago

Metadata Update from @frenaud:
- Issue assigned to frenaud

a year ago

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6586

a year ago

master:

  • 827dc9a Spec file: ipa-client depends on krb5-pkinit-openssl

ipa-4-9:

  • d7c5fe5 Spec file: ipa-client depends on krb5-pkinit-openssl

ipa-4-10:

  • 2d0a0cc Spec file: ipa-client depends on krb5-pkinit-openssl

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

a year ago

Issue linked to RHEL9.2 bug 2150335

Login to comment on this ticket.

Metadata