#8572 Nightly failure in test_acme.py::TestACMECALess::test_enable_caless_to_cafull_replica
Closed: fixed by rcritten. Opened by frenaud.

Issue

The nightly test test_acme.py::TestACMECALess::test_enable_caless_to_cafull_replica is failing in the master branch with updates-testing enabled, see PR #521.

Logs and report:

self = <ipatests.test_integration.test_acme.TestACMECALess object at 0x7f9739354ac0>
test_setup_teardown = None
    def test_enable_caless_to_cafull_replica(self, test_setup_teardown):
        """Test ACME with CA-less replica when converted to CA-full
        Deployment have one ca-less replica and ACME is not enabled.
        After converting ca-less replica to ca-full, ACME can be
        enabled or disabled.
        related: https://pagure.io/freeipa/issue/8524
        """
        tasks.kinit_admin(self.master)
        # check status of acme server on master
        status = check_acme_status(self.master, 'disabled')
        assert status == 'disabled'
        tasks.kinit_admin(self.replicas[0])
        # check status of acme on replica, result: CA is not installed
        result = self.replicas[0].run_command(['ipa-acme-manage', 'status'],
                                              raiseonerr=False)
>       assert result.returncode == 1
E       assert 3 == 1
E         +3
E         -1

Test scenario:
- install master with CA + DNS
- install replica without CA
- enable acme on the master
- check acme status on master: enabled
- check acme status on repiica using ipa-acme-manage status: gets 3 while 1 is expected.

According to the man page of ipa-acme-manage, I would expect the command to return 3:

EXIT STATUS
       0 if the command was successful
       1 if an error occurred
       2 if the host is not a FreeIPA server
       3 if the host is not a CA server

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/5242

master:

  • 3d2a4f25f777db69f5b314bf62bee6ec95fb3317 ipatests: ipa-acme-manage status returns 3 on a CA-less server

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata