freeipa

#8619 [Tracker] ipa-replica-install fails with 389ds nightly build
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

Issue

When using 389ds/389-ds-base-nightly copr repo, ipa-replica-install fails with an error related to single-valued attribute "entryUUID" has multiple values.

Package Version and Platform:
- Platform: Fedora32
- Package and version: 389-ds-base-2.0.1-20201212git429c2f85a.fc32.x86_64

Steps to reproduce the behavior:
1. install ipa on the first server: ipa-server-install --domain ipa.test --realm IPA.TEST --setup-dns --auto-forwarder -a $PASSWORD -p $PASSWORD -U
2. install ipa client on the replica: ipa-client-install --domain ipa.test --realm IPA.TEST --server server.ipa.test --principal admin --password $PASSWORD -U
3. promote client to replica: kinit admin; ipa-replica-install -U
4. See error:

[...]
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58] Configuring the web interface (httpd)
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [1/21]: stopping httpd
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [2/21]: backing up ssl.conf
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [3/21]: disabling nss.conf
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [4/21]: configuring mod_ssl certificate paths
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [5/21]: setting mod_ssl protocol list
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [6/21]: configuring mod_ssl log directory
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [7/21]: disabling mod_ssl OCSP
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [8/21]: adding URL rewriting rules
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [9/21]: configuring httpd
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [10/21]: setting up httpd keytab
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [11/21]: configuring Gssproxy
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [12/21]: setting up ssl
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58]   [error] RuntimeError: Certificate issuance failed (CA_UNREACHABLE: Server at https://master.ipa.test/ipa/json failed request, will retry: 4205 (single-valued attribute "entryUUID" has multiple values).)
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58] Certificate issuance failed (CA_UNREACHABLE: Server at https://master.ipa.test/ipa/json failed request, will retry: 4205 (single-valued attribute "entryUUID" has multiple values).)
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58] The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58] Your system may be partly configured.
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58] Run /usr/sbin/ipa-server-install --uninstall to clean up.
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58] 
[ipatests.pytest_ipa.integration.host.Host.replica0.cmd58] Exit code: 1

Expected results
ipa-replica-install should succeed.

Additional context
The logs are available in PR#587, for instance for the test customized_ds_config_install: report, logs.

Metadata Update from @frenaud:
- Issue tagged with: test-failure, tests, tracker

Companion issue opened against 389ds: https://github.com/389ds/389-ds-base/issues/4498

Issue fixed on 389ds master branch, see PR#601.

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None

test-failure tests tracker

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.