freeipa

#8311 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
Closed: fixed by cheimes. Opened by frenaud.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1825829

Description of problem:
ipa-advise on a RHEL7 IdM server generate a configuration script for client
having hardcoded python3
As a result, if client machine does not have python3 installed, it gives error
like:
/root/config-client-for-smart-card-auth.sh: line 90: python3: command not found
Version-Release number of selected component (if applicable):
ipa-server-4.6.8-2.el7.x86_64
How reproducible:
always.
Steps to Reproduce:
1. Install RHEL7.8 IPA server and configure to user smart card
2. Install RHEL8 client against RHEL7 server and configure to user smart
card[1]
3. The bash script should run successfully on RHEL8 client
[1] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/ht
ml/configuring_and_managing_identity_management/configuring-idm-for-smart-card-
auth_configuring-and-managing-idm
Actual results:
/root/config-client-for-smart-card-auth.sh: line 90: python3: command not found
Expected results:
No error
Additional info:
https://github.com/freeipa/freeipa/blob/ipa-4-6/ipaserver/advise/plugins/smart_
card_auth.py#L353

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1825829

Metadata Update from @frenaud:
- Issue assigned to frenaud

In ipa-4-6 branch, the generated client script is harcoding python3. In the master and ipa-4-8 branches, the script is using sys.executable for python3 path.
Both approaches have issues as the client script may get executed on a client system with a path to python3 different from the path on the server where the script was generated.

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4647

master:

  • edcfba6010c0b6a81841ca6e1e478835ce76191b ipa-advise: fallback to /usr/libexec/platform-python if python3 not found

ipa-4-8:

  • 787ce4555a203bd3f31c1f6cc577855f779fe6cf ipa-advise: fallback to /usr/libexec/platform-python if python3 not found

ipa-4-6:

  • 3754f686d1ac609b98c35e8c2aa9f0450b08287e ipa-advise: fallback to /usr/libexec/platform-python if python3 not found

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
https://github.com/freeipa/freeipa/pull/4647
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.