#9446 Nightly test failure for replica installation with --setup-ca
Closed: fixed 2 years ago by frenaud. Opened 2 years ago by amore.

The replica-installation with --setup-ca is failing on multiple latest branches:
The nightly tests are failing in [testing_master_latest] Nightly PR #2965 with an error

E subprocess.CalledProcessError: Command '['ipa-replica-install', '--admin-password', 'Secret.123', '--password', 'Secret.123', '-U', '--setup-ca', '--ip-address', '192.168.122.188', '--realm', 'IPA.TEST', '--domain', 'ipa.test', '--dirsrv-config-file', '/ipatests/ipatests_dse.ldif']' returned non-zero exit status 1.
Full log is available in log report


The failure also happens for replicas installed without the --setup-ca option, see for instance test_replication_layouts_TestLineTopologyWithoutCA (PR #2971, report).

The error happens in this portion of promote_check: https://github.com/freeipa/freeipa/blob/953c7cc0762c4b50e9fb30701be663e1da40607d/ipaserver/install/server/replicainstall.py#L1195-L1202

I haven't been able to reproduce this yet but as Flo states, the root cause seems pretty obvious: I'll work up a fix and run these CA-related tests in a PR.

File "/usr/lib/python3.11/site-packages/ipapython/install/common.py", line 65, in _install
for unused in self._installer(self.parent):
File "/usr/lib/python3.11/site-packages/ipaserver/install/server/init.py", line 597, in main
replica_promote_check(self)
File "/usr/lib/python3.11/site-packages/ipaserver/install/server/replicainstall.py", line 383, in decorated
func(installer)
File "/usr/lib/python3.11/site-packages/ipaserver/install/server/replicainstall.py", line 405, in decorated
func(installer)
File "/usr/lib/python3.11/site-packages/ipaserver/install/server/replicainstall.py", line 1200, in promote_check
del os.environ['KRB5CCNAME']
~~^^^^^^^^^^^^^^
File "<frozen os>", line 695, in delitem

2023-09-07T06:38:16Z DEBUG The ipa-replica-install command failed, exception: KeyError: 'KRB5CCNAME'
2023-09-07T06:38:16Z ERROR 'KRB5CCNAME'

Metadata Update from @rcritten:
- Issue assigned to rcritten

2 years ago

master:

  • f248b22 Don't assume KRB5CCNAME is in the environment in replica install

ipa-4-9:

  • 3af7747 Configure affinity during server installation
  • 0cf6292 Don't assume KRB5CCNAME is in the environment in replica install

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2149344

2 years ago

ipa-4-11:

  • 54a251b Configure affinity during server installation
  • 169f9ab Don't assume KRB5CCNAME is in the environment in replica install

ipa-4-10:

  • 08dad8f Configure affinity during server installation
  • 74f6646 Don't assume KRB5CCNAME is in the environment in replica install

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Log in to comment on this ticket.

Metadata