freeipa

#7742 External CA installer removes Dogtag's client DB after step 1
Closed: fixed Opened by cheimes.

Closed: fixed
Reopen Issue

Issue

FreeIPA removes Dogtag's client db in /root/.dogtag/pki-tomcat after every CA and KRA installation. This includes step 1 of external CA installation process. Dogtag 10.6.7 has changed behavior and willl no longer going to re-recreate the DB. Dogtag also requires the client DB to continue installation in step 2.

Steps to Reproduce

  1. Install Dogtag 10.6.7
  2. Install FreeIPA with external CA
    3.

Actual behavior

http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/400b483c-d903-11e8-af62-fa163e2cb727/

Step two fails with

2018-10-26 08:59:22 pkispawn      : DEBUG    ....... Error Message: [Errno 2] No such file or directory: '/root/.dogtag/pki-tomcat/ca/alias/noise'
2018-10-26 08:59:22 pkispawn      : DEBUG    .......   File "/usr/lib/python3.6/site-packages/pki/server/pkispawn.py", line 534, in main
    scriptlet.spawn(deployer)
  File "/usr/lib/python3.6/site-packages/pki/server/deployment/scriptlets/configuration.py", line 702, in spawn
    admin_setup_request = deployer.config_client.create_admin_setup_request()
  File "/usr/lib/python3.6/site-packages/pki/server/deployment/pkihelper.py", line 4093, in create_admin_setup_request
    self.set_admin_parameters(request)
  File "/usr/lib/python3.6/site-packages/pki/server/deployment/pkihelper.py", line 4532, in set_admin_parameters
    with open(noise_file, 'w') as f:

Expected behavior

No error

Additional info:

See https://pagure.io/dogtagpki/issue/3076

Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/2497

master:

  • ec54fa771220409783b70e7ebca35f91cc652c4a Keep Dogtag's client db in external CA step 1
  • 204353e4dc8e44006dfed3d0cd6dc6d12cf41aa4 Use tasks.install_master() in external_ca tests

ipa-4-7:

  • 78bf80e55dd74fc0279cf6a76345865b0d5e5d32 Keep Dogtag's client db in external CA step 1
  • 6214fc51789dcfc70d4df18c0153877b92625ad2 Use tasks.install_master() in external_ca tests

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

regression

None
None
Lowest
https://github.com/freeipa/freeipa/pull/2497
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.