freeipa

#8384 Provide reliable way to know if a server installation is complete
Closed: fixed by frenaud. Opened by sumenon.

Closed: fixed
Reopen Issue

Request for enhancement

ipa-healthcheck tool should skip for an incomplete IPA installation

Issue

Steps to Reproduce

  1. Setup IPA server with --external-ca with only Step1 installation completed
  2. Run ipa-healtcheck tool

Actual behavior

ipa-healthcheck tool runs

Expected behavior

ipa-healthcheck tool should rather skip saying that IPA installation is not completed since only
Step-1 of the two step installation is completed.

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server

Additional info:

Any additional information, configuration, data or log snippets that is needed for reproduction or investigation of the issue.

Log file locations: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/config-files-logs.html
Troubleshooting guide: https://www.freeipa.org/page/Troubleshooting

Raised the issue based on https://github.com/freeipa/freeipa/pull/4854

Or we may need to change how we detect that IPA is configured in general. Typically we use the existence of /etc/ipa/default.conf and/or files/state in sysrestore. Both are likely satisfied in the interim between stage 1 and stage 2 of an external CA installation and in a blow install.

Metadata Update from @rcritten:
- Issue assigned to rcritten

https://github.com/freeipa/freeipa/pull/4895

master:

  • 0fa8686918f6b79d09ac8fa959fe988f6db633b2 Simplify determining if an IPA server installation is complete
  • 4758db121ea0c555dab89bc1781c8752f188e414 Simplify determining if IPA client configuration is complete
  • d7a4756dac5140d4416312ed92270eb3249c83e3 Create a common place to retrieve facts about an IPA installation
  • 5e027134815512862ad6ae77867e74a83aee2b59 Don't use the has_files() to know if client/server is configured
  • 2c3a042c06b919ff754bfce2ce6e40b9f1827e97 Update check_client_configuration to use new client fact

ipa-4-8:

  • 1a47748499256544e6692ef0578073938015f7ea Simplify determining if an IPA server installation is complete
  • 80a7e346a514530ea3af75d2cc338c18ec211537 Simplify determining if IPA client configuration is complete
  • ee755a580c1f136b2501a395116ddf7e43c913b6 Create a common place to retrieve facts about an IPA installation
  • cb6c48b21118abb198066126647709b7c9e26e10 Don't use the has_files() to know if client/server is configured
  • b9e4c686634f5ba41f50f0aa0f75b5e214e25a4d Update check_client_configuration to use new client fact
  • 4454af4bf31b73550eb5be2ed14be3e15c585ca3 Address legacy pylint issues in sysrestore.py

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 0dc084a34fbc6d86348a3a381cb8fa4fd4af43f1 Address legacy pylint issues in sysrestore.py
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.