freeipa

#8981 Nightly test failure (389ds copr) in ipa-server-install with CA
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

The nightly tests using the copr repo for 389ds (https://copr.fedorainfracloud.org/coprs/g/389ds/389-ds-base-nightly/) are failing in the step configuring the CA. See for instance PR #1152 with the test 389ds-fedora/simple_replication: logs.

2021-09-05 12:06:14,866    DEBUG  [ipatests.pytest_ipa.integration.host.Host.master.cmd38] Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
2021-09-05 12:06:14,866    DEBUG  [ipatests.pytest_ipa.integration.host.Host.master.cmd38]   [1/29]: configuring certificate server instance
2021-09-05 12:59:48,504 CRITICAL  Terminating execution, runtime exceeded 3600s

The installation of the server is failing during the CA installation (pkispawn step). The last LDAP call seen in the access log is the addition of a cert in the LDAP db:

[06/Sep/2021:04:50:52.400736673 -0400] conn=53 op=9 ADD dn="cn=1,ou=certificateRepository,ou=ca,o=ipaca"

(no result is logged).

Attaching the pstack generated with

gdb -ex 'set confirm off' -ex 'set pagination off' -ex 'thread apply all bt full' -ex 'quit' /usr/sbin/ns-slapd `pidof ns-slapd` > stacktrace.`date +%s`.txt 2>&1

stacktrace.1630918744.txt

Companion issue on 389ds side: https://github.com/389ds/389-ds-base/issues/4900

The issue was a duplicate of 389ds #4889, already fixed on 389-ds-base master branch.
There was an additional problem: the 389ds copr repo wasn't updated with the latest build. Should be addressed by PR https://github.com/389ds/389-ds-base/pull/4902

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None

test-failure tracker

None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.