freeipa

#7728 RFE: Validation and better error messages when novajoin fails because of SSL errors
Closed: fixed Opened by rcritten.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1637717

The command "openstack undercloud install" fails with:
2018-10-02T18:38:49Z DEBUG args=/usr/sbin/ipa-join -s
ipa.example.test -b dc=example,dc=test -w XXXXXXXX
2018-10-02T18:38:49Z DEBUG Process finished, return code=15
2018-10-02T18:38:49Z DEBUG stdout=
2018-10-02T18:38:49Z DEBUG stderr=Incorrect password.

However we found that the root cause was that the certificate downloaded from
IPA server (http://ipa.example.test/ipa/config/ca.crt) was an
intermediate certificate, not the root certificate.

The problem is that the error is misleading. The password was fine, but the
problem was that the certificate validation failed.

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1637717

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1637717, https://bugzilla.redhat.com/show_bug.cgi?id=1637719 (was: https://bugzilla.redhat.com/show_bug.cgi?id=1637717)

Metadata Update from @rcritten:
- Issue assigned to rcritten

PR https://github.com/freeipa/freeipa/pull/2447

master:

  • 1e76f100a596cfd22c84f873e832f22752f31be0 Enable LDAP debug output in client to display TLS errors in join

ipa-4-6:

  • 7cf7a7451b5fd2f2fe08086e0a4695e1754398b6 Enable LDAP debug output in client to display TLS errors in join

ipa-4-7:

  • be5513ba7d70cecba5aa7654b66c1aa4015f7de2 Enable LDAP debug output in client to display TLS errors in join

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.