freeipa

#8686 Resubmitting KDC cert fails with internal server error
Closed: fixed by frenaud. Opened by cheimes.

Closed: fixed
Reopen Issue

Issue

Resubmitting the KDC cert fails with an internal server error.

Steps to Reproduce

  1. ipa-getcert resubmit -f /var/kerberos/krb5kdc/kdc.crt

Actual behavior

Request ID '20210129073342':
        status: CA_UNREACHABLE
        ca-error: Server at https://vm-023.abc.idm.lab.eng.brq.redhat.com/ipa/json failed request, will retry: 903 (an internal error has occurred).
        stuck: no
        key pair storage: type=FILE,location='/var/kerberos/krb5kdc/kdc.key'
        certificate: type=FILE,location='/var/kerberos/krb5kdc/kdc.crt'
        CA: IPA

  File "/usr/lib/python3.9/site-packages/ipaserver/plugins/cert.py", line 878, in execute
    ca_kdc_check(ldap, alt_principal.hostname)
  File "/usr/lib/python3.9/site-packages/ipaserver/plugins/cert.py", line 301, in ca_kdc_check
    master_dn = api_instance.Object.server.get_dn(unicode(hostname))
AttributeError: 'ldap2' object has no attribute 'Object'

Expected behavior

No error

Version/Release/Distribution

freeipa-server-4.10.0.dev202101260524+git30f82e2c8d-0.fc33

The issue is present in 4.6, 4.8, 4.9, and master.

Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/5496
- Issue set to the milestone: FreeIPA 4.6.9
- Issue tagged with: bug

master:

  • 98a88bd71976919d52e5806daf887e42ef3eb320 Fix cert_request for KDC cert

ipa-4-9:

  • 2c48897ed1700725d3cd07a4a106e40f62d76c47 Fix cert_request for KDC cert

ipa-4-6:

  • ad8556beff19e15fdefbbc3b7655e6b63d8e1d04 Fix cert_request for KDC cert

ipa-4-8:

  • f45a79c437fa9e774940913b6ae2b091590bcf37 Fix cert_request for KDC cert

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @cheimes:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1922955

Issue linked to Bugzilla: Bug 1922955
Metadata
None

bug

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.