freeipa

#8853 Nightly test suite failure in test_integration/test_backup_and_restore.py/TestBackupRoles
Closed: invalid by frenaud. Opened by mpolovka.

Closed: invalid
Reopen Issue

Tests
- test_rolecheck_DNS_CA
- test_rolecheck_KRA
- test_rolecheck_Trust

are failing in [testing_ipa-4.9_latest] Nightly PR #905
with an error

ipapython.admintool: DEBUG:   File "/usr/lib/python3.9/site-packages/ipapython/admintool.py", line 180, in execute
    return_value = self.run()
  File "/usr/lib/python3.9/site-packages/ipaserver/install/ipa_backup.py", line 325, in run
    self.check_roles(raiseonerr=options.rolecheck)
  File "/usr/lib/python3.9/site-packages/ipaserver/install/ipa_backup.py", line 422, in check_roles
    raise admintool.ScriptError(
ipapython.admintool: DEBUG: The ipa-backup command failed, exception: ScriptError: Error: Local roles CA do not match globally used roles CA, DNS, DNSKeySync. A backup done on this host would not be complete enough to restore a fully functional, identical cluster.
ipapython.admintool: ERROR: Error: Local roles CA do not match globally used roles CA, DNS, DNSKeySync. A backup done on this host would not be complete enough to restore a fully functional, identical cluster.
ipapython.admintool: ERROR: The ipa-backup command failed. See /var/log/ipabackup.log for more information

Full logs

The first error happens in test_integration/test_backup_and_restore.py::TestBackupRoles::test_rolecheck_DNS_CA and is a failure to install the DNS on the replica:

NFO     ipatests.pytest_ipa.integration.host.Host.replica0.IPAOpenSSHTransport:transport.py:391 RUN ['ipa-dns-install', '--forwarder', '192.168.122.1', '-U']
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:513 RUN ['ipa-dns-install', '--forwarder', '192.168.122.1', '-U']
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 ipaserver.install.bindinstance: ERROR    DNS server 192.168.122.1: query '. SOA': The DNS operation timed out after 11.603187799453735 seconds
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 The log file for this installation can be found in /var/log/ipaserver-dns-install.log
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 ==============================================================================
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 This program will setup DNS for the IPA Server.
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 This includes:
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557   * Configure DNS (bind)
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557   * Configure SoftHSM (required by DNSSEC)
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557   * Configure ipa-dnskeysyncd (required by DNSSEC)
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 NOTE: DNSSEC zone signing is not enabled by default
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 To accept the default shown in brackets, press the Enter key.
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 Checking DNS forwarders, please wait ...
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:557 DNS server 192.168.122.1: query '. SOA': The DNS operation timed out after 11.603187799453735 seconds
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd87:transport.py:217 Exit code: 1

This is an infra issue, the replica is unable to contact the DNS forwarder 192.168.122.1 (=the test runner).

The subsequent failures are expected since a backup of the replica would not contain the DNS.

Metadata Update from @frenaud:
- Issue close_status updated to: invalid
- Issue status updated to: Closed (was: Open)
Metadata
None

test-failure tests

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.