#7081 [ipatests] - installutils.is_ipa_configured() - users other then root cannot check if IPA is configured
Closed: fixed Opened by mreznik.

After PR#910 some of ours "xmlrpc" tests are failing because user "jenkins" is not able to check whether ipa-server is installed with installutils.is_ipa_configured(). We got "False" because "/var/lib/ipa/sysrestore/" is not world readable.

The question is how we can deal with this. It looks like it would not be good idea to make the directory world readable as there are system configurations backed up.

Leaving this as it is and change permissions before testing might not be good either as this can hit users when testing - http://www.freeipa.org/page/Testing

Tests fails with:

test_xmlrpc/test_attr.py:26: in <module>
    from ipatests.test_xmlrpc.xmlrpc_test import XMLRPC_test, raises_exact
test_xmlrpc/xmlrpc_test.py:134: in <module>
    if not api.Backend.rpcclient.isconnected():
E   AttributeError: 'API' object has no attribute 'Backend'

As we do not finalize API:

if ipaserver is not None and installutils.is_ipa_configured():
         api.finalize()

Metadata Update from @pvoborni:
- Issue priority set to: critical
- Issue set to the milestone: FreeIPA 4.6

Metadata Update from @tkrizek:
- Issue set to the milestone: FreeIPA 4.6.1 (was: FreeIPA 4.6)

Metadata Update from @rcritten:
- Issue assigned to rcritten

I suppose if uid != 0 we could relax the test a bit and go on the existence of /etc/ipa/default.conf and for double-checking ensure there is an ldapi-based ldap_uri.

https://github.com/freeipa/freeipa/pull/1084

master:

  • 62e72c2a53e7b92dfd4eb62cf0da9196d75f774a Add exec to /var/lib/ipa/sysrestore for install status inquiries

ipa-4-6:

  • 1b642245b96ed4afc26ac9e499bf1c87c02524c0 Add exec to /var/lib/ipa/sysrestore for install status inquiries

Metadata Update from @tkrizek:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata