Issue #6012: Multiple issues while uninstalling ipa-server - freeipa

freeipa

#6012 Multiple issues while uninstalling ipa-server

Closed: Fixed Opened Jun 29, 2016 by pvoborni.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1351119

Description of problem:
Seen following three issues while uninstalling ipa-server
1. Uninstallation complains about missing 'ipa.conf'
2. Uninstallation complains about ipa-client-automount --uninstall as command
unable to get Kerberos Credentials
3. Uninstallation complains while removing '/etc/krb5.keytab' file
Version-Release number of selected component (if applicable):
ipa-server-4.4.0-0.el7.2.alpha1.x86_64
How reproducible:
100%
Steps to Reproduce:
1. ipa-server-install --uninstall -U
Actual results:
Uninstallation complains about above mentioned errors
Expected results:
Uninstallation should be successful.

pvoborni commented Jun 29, 2016

Some parts may be already fixed.

pvoborni commented Jun 29, 2016

the keytab part is handled in #5978

frenaud commented Jun 29, 2016

Not able to reproduce this issue with master 95191e1612f93823bd0e325ef9b97fa9a4d7869c, probably fixed between the tag alpha_1-4-4-0 for 4.4.1 alpha and latest commits.

mbasti commented Jun 29, 2016

2016-06-29T09:57:22Z ERROR Error removing /etc/systemd/system/httpd.d/ipa.conf: [Errno 2] No such file or directory: '/etc/systemd/system/httpd.d/ipa.conf'

We should not print error when this file does not exists, this is happening during uninstall when server has not been properly installed IMO. so we should catch the right errno and don't print error when file does not exist

mbasti commented Jun 29, 2016

    try:
        os.remove(filename)
    except OSError as e:
        if e.errno != 2:
            <error>

frenaud commented Jun 30, 2016

attachment
freeipa-frenaud-0009-Do-not-log-error-when-removing-a-non-existing-file.patch

mbasti commented Jul 1, 2016

master:

d9ae9ee1b5397765ba7f184c7647bd36708ca0e8 Do not log error when removing a non-existing file

frenaud commented Jul 8, 2016

The issue 3) is still present. When ipa-server-install --uninstall is executed, it restores the files first (including /etc/krb5.keytab), then as latest steps calls ipa-client-install --uninstall.
ipa-client uninstallation calls ipa-rmkeytab in order to remove all the principals associated to the domain from /etc/krb5.keytab. But the keytab does not contain any more the principals and returns exit code 5, which could be ignored.

frenaud commented Jul 11, 2016

attachment
freeipa-frenaud-0011-server-uninstall-fails-to-remove-krb-principals.patch

mbasti commented Jul 20, 2016

master: