Bug 33513

Summary: cannot create replica
Product: Branch p8 Reporter: nbr <nbr>
Component: freeipa-serverAssignee: Andrey Cherepanov <cas>
Status: CLOSED FIXED QA Contact: qa-p8 <qa-p8>
Severity: critical    
Priority: P3 CC: aen, cas, jenya, rider
Version: не указана   
Hardware: all   
OS: Linux   

Description nbr 2017-05-30 16:35:49 MSK
When do  server role upgrade from ipa-client to ipa-server via ipa-replica-install
a dirsrv service fails to restart after obtaining keytab from main server.
Previous dirsrv service restart in the same script was OK.
Comment 1 nbr 2017-06-21 19:53:35 MSK
possible reason:
file freeipa/ipaplatform/altlinux/tasks.py doesn't contain all of the
extensions of classes defined in freeipa/ipaplatform/base/tasks.py
Especially undefined are:
  def insert_ca_certs_into_systemwide_ca_store(self, ca_certs):
        """
        Adds CA certificates from 'ca_certs' to the systemwide CA store
        (if available on the platform).

        Returns True if the operation succeeded, False otherwise.
        """

        return True

    def remove_ca_certs_from_systemwide_ca_store(self):
        """
        Removes IPA CA certificates from the systemwide CA store
        (if available on the platform).

        Returns True if the operation succeeded, False otherwise.
        """

        return True
Comment 2 Repository Robot 2017-08-10 16:48:47 MSK
freeipa-4.3.3-alt4 -> sisyphus:

Thu Aug 10 2017 Mikhail Efremov <sem@altlinux.org> 4.3.3-alt4
- Add %apache_conf_dir macro.
- Move ipa_configured script to server-common subpackage.
- Init argument for slapi_pblock_get() (closes: #33538).
- Fix httpd2 configuration (closes: #33513, #33466).
Comment 3 nbr 2017-09-21 15:02:54 MSK
На p8 по состоянию на 21.09 у jenya@ не получается запустить репликацию.
Comment 4 Repository Robot 2017-09-27 18:49:50 MSK
freeipa-4.3.3-alt8 -> sisyphus:

Wed Sep 27 2017 Mikhail Efremov <sem@altlinux.org> 4.3.3-alt8
- Fix replica creation (closes: #33513):
    + Don't try to use bundled urllib3 in the python-module-request.
    + Use ipa CA certificate for https checks.
Comment 5 AEN 2017-09-27 18:54:31 MSK
Бага на p8, а исправлена пока в Sisyphus. Ждем исправленя в p8
Comment 6 Mikhail Efremov 2017-09-27 20:35:19 MSK
[#188974] p8 TESTED freeipa.git=4.3.3-alt7.M80P.1
Comment 7 Repository Robot 2017-09-28 18:42:31 MSK
freeipa-4.3.3-alt7.M80P.1 -> p8:

Wed Sep 27 2017 Mikhail Efremov <sem@altlinux.org> 4.3.3-alt7.M80P.1
- Build for p8.

Wed Sep 27 2017 Mikhail Efremov <sem@altlinux.org> 4.3.3-alt8
- Fix replica creation (closes: #33513):
    + Don't try to use bundled urllib3 in the python-module-request.
    + Use ipa CA certificate for https checks.