#9050 Nightly test failure in test_integration/test_server_del.py/TestServerDel
Closed: duplicate by frenaud. Opened by mpolovka.

The tests:
- test_ignore_topology_disconnect_replica1
- test_ignore_topology_disconnect_replica2

are failing in [testing_ipa-4.9_latest] Nightly PR #1320

with an error

E           subprocess.CalledProcessError: Command '['ipa-replica-install', '--admin-password', 'Secret.123', '--password', 'Secret.123', '-U', '--setup-ca', '--ip-address', '192.168.122.57', '--realm', 'IPA.TEST', '--domain', 'ipa.test', '--dirsrv-config-file', '/ipatests/ipatests_dse.ldif']' returned non-zero exit status 1.
pytest_ipa/integration/host.py:202: CalledProcessError
----------------------------- Captured stderr call -----------------------------
ipa: WARNING: ipa: ERROR: DNS zone with name "122.168.192.in-addr.arpa." already exists
ipa: ERROR: stderr: Lookup failed: Preferred host replica0.ipa.test does not provide DNS.
Validate installation settings ...
Create file system structures ...
Perform SELinux labeling ...
Create database backend: dc=ipa,dc=test ...
Perform post-installation tasks ...
Replica DNS records could not be added on master: Insufficient access: Insufficient 'add' privilege to add the entry 'idnsname=replica0,idnsname=ipa.test.,cn=dns,dc=ipa,dc=test'.
Custodia uses 'master.ipa.test' as master peer.
Failed to configure CA instance
See the installation logs and the following files/directories for more information:
  /var/log/pki/pki-tomcat
CA configuration failed.
The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information

furthermore, /var/log/ipareplica-install.log shows

com.netscape.certsrv.base.ConflictingOperationException: Entry already exists.
    at com.netscape.certsrv.ldap.LDAPExceptionConverter.toPKIException(LDAPExceptionConverter.java:45)
    at com.netscape.cmscore.usrgrp.UGSubsystem.addUser(UGSubsystem.java:720)
    at org.dogtagpki.server.cli.SubsystemUserAddCLI.execute(SubsystemUserAddCLI.java:180)
    at org.dogtagpki.cli.CommandCLI.execute(CommandCLI.java:58)
    at org.dogtagpki.cli.CLI.execute(CLI.java:357)
    at org.dogtagpki.cli.CLI.execute(CLI.java:357)
    at org.dogtagpki.cli.CLI.execute(CLI.java:357)
    at org.dogtagpki.server.cli.PKIServerCLI.execute(PKIServerCLI.java:93)
    at org.dogtagpki.server.cli.PKIServerCLI.main(PKIServerCLI.java:123)
Caused by: netscape.ldap.LDAPException: error result (68); Already exists
    at netscape.ldap.LDAPConnection.checkMsg(Unknown Source)
    at netscape.ldap.LDAPConnection.add(Unknown Source)
    at netscape.ldap.LDAPConnection.add(Unknown Source)
    at netscape.ldap.LDAPConnection.add(Unknown Source)
    at com.netscape.cmscore.usrgrp.UGSubsystem.addUser(UGSubsystem.java:717)
    ... 7 more
CalledProcessError: Command '['/usr/sbin/runuser', '-u', 'pkiuser', '--', '/usr/lib/jvm/jre-11-openjdk/bin/java', '-classpath', '/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/tomcat-servlet-api.jar:/usr/share/pki/ca/webapps/ca/WEB-INF/lib/*:/var/lib/pki/pki-tomcat/common/lib/*:/usr/share/pki/lib/*', '-Djavax.sql.DataSource.Factory=org.apache.commons.dbcp.BasicDataSourceFactory', '-Dcatalina.base=/var/lib/pki/pki-tomcat', '-Dcatalina.home=/usr/share/tomcat', '-Djava.endorsed.dirs=', '-Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp', '-Djava.util.logging.config.file=/etc/pki/pki-tomcat/logging.properties', '-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager', '-Dcom.redhat.fips=false', 'org.dogtagpki.server.cli.PKIServerCLI', 'ca-user-add', '--full-name', 'CA-replica1.ipa.test-8443', '--type', 'agentType', '--state', '1', '--debug', 'CA-replica1.ipa.test-8443']' returned non-zero exit status 255.
  File "/usr/lib/python3.10/site-packages/pki/server/pkispawn.py", line 585, in main
    scriptlet.spawn(deployer)
  File "/usr/lib/python3.10/site-packages/pki/server/deployment/scriptlets/configuration.py", line 740, in spawn
    deployer.setup_subsystem_user(instance, subsystem, system_certs['subsystem'])
  File "/usr/lib/python3.10/site-packages/pki/server/deployment/__init__.py", line 1072, in setup_subsystem_user
    subsystem.add_user(
  File "/usr/lib/python3.10/site-packages/pki/server/subsystem.py", line 1519, in add_user
    self.run(
  File "/usr/lib/python3.10/site-packages/pki/server/subsystem.py", line 1650, in run
    return subprocess.run(
  File "/usr/lib64/python3.10/subprocess.py", line 524, in run
    raise CalledProcessError(retcode, process.args,

full report


@mpolovka the issue now happens on [testing_ipa-4.9_latest] because we moved the images from fedora34 to fedora35. Already reported at https://pagure.io/freeipa/issue/8865, hence closing as duplicate.

Metadata Update from @frenaud:
- Issue close_status updated to: duplicate
- Issue status updated to: Closed (was: Open)

Metadata