freeipa

#8550 Uninstallation of server with KRA diplays error but proceeds successfully (unable to access security domain)
Closed: fixed by frenaud. Opened by fcami.

Closed: fixed
Reopen Issue

testing_master_testing Nightly PR #481 failed at installing KRA at 'ipa-server-install', '--uninstall', '-U'

2020-10-18 03:41:44 ERROR: unable to access security domain. Continuing .. HTTPSConnectionPool(host='master.ipa.test', port=443): Max retries exceeded with url: /ca/rest/securityDomain/domainInfo (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f7095d6afa0>: Failed to establish a new connection: [Errno 111] Connection refused')) 
2020-10-18 03:41:44 WARNING: this 'KRA' entry will NOT be deleted from security domain 'IPA'!
2020-10-18 03:41:44 WARNING: security domain 'IPA' may be offline or unreachable!
2020-10-18 03:41:44 ERROR: subprocess.CalledProcessError:  Command '['/usr/bin/sslget', '-n', 'subsystemCert cert-pki-ca', '-p', '5Iz^j3t1B/F$Qk(M*d.O+M9G;N-5,0X/hfW;vx(JQ', '-d', '/etc/pki/pki-tomcat/alias', '-e', 'name="/var/lib/pki/pki-tomcat"&type=KRA&list=kraList&host=master.ipa.test&sport=443&ncsport=443&adminsport=443&agentsport=443&operation=remove', '-v', '-r', '/ca/agent/ca/updateDomainXML', 'master.ipa.test:443']' returned non-zero exit status 6.!
2020-10-18 03:43:17 ERROR: CalledProcessError: Command '['systemctl', 'start', 'pki-tomcatd@pki-tomcat.service']' returned non-zero exit status 1.
  File "/usr/lib/python3.8/site-packages/pki/server/pkidestroy.py", line 261, in main
    scriptlet.destroy(deployer)
  File "/usr/lib/python3.8/site-packages/pki/server/deployment/scriptlets/finalization.py", line 90, in destroy
    instance.start()
  File "/usr/lib/python3.8/site-packages/pki/server/__init__.py", line 261, in start
    subprocess.check_call(cmd)
  File "/usr/lib64/python3.8/subprocess.py", line 364, in check_call
    raise CalledProcessError(retcode, cmd)

DS version: 389-ds-base-1.4.3.13-1.fc32.x86_64

This is similar to https://pagure.io/freeipa/issue/7642

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1902173

Issue linked to Bugzilla: Bug 1902173

Metadata Update from @rcritten:
- Issue assigned to rcritten

https://github.com/freeipa/freeipa/pull/5485

master:

  • 62521edcd17f2d24393377513afc9acb3e397410 Change CA profile migration message from info to debug
  • daf2ca3ead0f529dd3bcfd2aba97a410638dba7d Use the new API introduced in PKI 10.8
  • 928ab51be669d7af7a28205acb9eb7e9b46e189e ipactl: support script status 3, program is not running
  • 1870c933542d41766dd9e2076deb7db758726864 Ensure IPA is running (ideally) before uninstalling the KRA
  • ed21787190382707f9d80559967f71637c8bf408 Add exit status to the ipactl man page
  • 8082a2d9eb96c4d5471b72e6a008cd273ec743cd ipatests: Handle non-zero return code in test_ipactl_scenario_check

ipa-4-9:

  • b99bc2d8b1e5226f61a7c980cfb7576dac222466 Change CA profile migration message from info to debug
  • 4d26ce5061c5b7f9383286a108fc48b19b5bc65a Use the new API introduced in PKI 10.8
  • ddb5414d56f57fdd18ad66fbc6a53410725dd9cd ipactl: support script status 3, program is not running
  • 87ede26cc2bcbe543cb970a5e55cf1901791a100 Ensure IPA is running (ideally) before uninstalling the KRA
  • 302f9377e5c760bcf38be2b0503915ccadef8b67 Add exit status to the ipactl man page
  • 00226adaa68935fbc1d85508eadafa420027edb5 ipatests: Handle non-zero return code in test_ipactl_scenario_check

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 5e49910bcf015f14533cfd7a788364aba7a7cbd3 ipatests: error message check in uninstall log for KRA

ipa-4-9:

  • 6b25cd3241a5609b4d903d5697b8947fab403c90 ipatests: error message check in uninstall log for KRA
Metadata

test-failure tests

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.