The tests: - test_ignore_topology_disconnect_replica1 - test_ignore_topology_disconnect_replica2
test_ignore_topology_disconnect_replica1
test_ignore_topology_disconnect_replica2
are failing in [testing_ipa-4.9_latest] Nightly PR #1320
with an error
E subprocess.CalledProcessError: Command '['ipa-replica-install', '--admin-password', 'Secret.123', '--password', 'Secret.123', '-U', '--setup-ca', '--ip-address', '192.168.122.57', '--realm', 'IPA.TEST', '--domain', 'ipa.test', '--dirsrv-config-file', '/ipatests/ipatests_dse.ldif']' returned non-zero exit status 1. pytest_ipa/integration/host.py:202: CalledProcessError ----------------------------- Captured stderr call ----------------------------- ipa: WARNING: ipa: ERROR: DNS zone with name "122.168.192.in-addr.arpa." already exists ipa: ERROR: stderr: Lookup failed: Preferred host replica0.ipa.test does not provide DNS. Validate installation settings ... Create file system structures ... Perform SELinux labeling ... Create database backend: dc=ipa,dc=test ... Perform post-installation tasks ... Replica DNS records could not be added on master: Insufficient access: Insufficient 'add' privilege to add the entry 'idnsname=replica0,idnsname=ipa.test.,cn=dns,dc=ipa,dc=test'. Custodia uses 'master.ipa.test' as master peer. Failed to configure CA instance See the installation logs and the following files/directories for more information: /var/log/pki/pki-tomcat CA configuration failed. The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information
furthermore, /var/log/ipareplica-install.log shows
/var/log/ipareplica-install.log
com.netscape.certsrv.base.ConflictingOperationException: Entry already exists. at com.netscape.certsrv.ldap.LDAPExceptionConverter.toPKIException(LDAPExceptionConverter.java:45) at com.netscape.cmscore.usrgrp.UGSubsystem.addUser(UGSubsystem.java:720) at org.dogtagpki.server.cli.SubsystemUserAddCLI.execute(SubsystemUserAddCLI.java:180) at org.dogtagpki.cli.CommandCLI.execute(CommandCLI.java:58) at org.dogtagpki.cli.CLI.execute(CLI.java:357) at org.dogtagpki.cli.CLI.execute(CLI.java:357) at org.dogtagpki.cli.CLI.execute(CLI.java:357) at org.dogtagpki.server.cli.PKIServerCLI.execute(PKIServerCLI.java:93) at org.dogtagpki.server.cli.PKIServerCLI.main(PKIServerCLI.java:123) Caused by: netscape.ldap.LDAPException: error result (68); Already exists at netscape.ldap.LDAPConnection.checkMsg(Unknown Source) at netscape.ldap.LDAPConnection.add(Unknown Source) at netscape.ldap.LDAPConnection.add(Unknown Source) at netscape.ldap.LDAPConnection.add(Unknown Source) at com.netscape.cmscore.usrgrp.UGSubsystem.addUser(UGSubsystem.java:717) ... 7 more CalledProcessError: Command '['/usr/sbin/runuser', '-u', 'pkiuser', '--', '/usr/lib/jvm/jre-11-openjdk/bin/java', '-classpath', '/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/tomcat-servlet-api.jar:/usr/share/pki/ca/webapps/ca/WEB-INF/lib/*:/var/lib/pki/pki-tomcat/common/lib/*:/usr/share/pki/lib/*', '-Djavax.sql.DataSource.Factory=org.apache.commons.dbcp.BasicDataSourceFactory', '-Dcatalina.base=/var/lib/pki/pki-tomcat', '-Dcatalina.home=/usr/share/tomcat', '-Djava.endorsed.dirs=', '-Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp', '-Djava.util.logging.config.file=/etc/pki/pki-tomcat/logging.properties', '-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager', '-Dcom.redhat.fips=false', 'org.dogtagpki.server.cli.PKIServerCLI', 'ca-user-add', '--full-name', 'CA-replica1.ipa.test-8443', '--type', 'agentType', '--state', '1', '--debug', 'CA-replica1.ipa.test-8443']' returned non-zero exit status 255. File "/usr/lib/python3.10/site-packages/pki/server/pkispawn.py", line 585, in main scriptlet.spawn(deployer) File "/usr/lib/python3.10/site-packages/pki/server/deployment/scriptlets/configuration.py", line 740, in spawn deployer.setup_subsystem_user(instance, subsystem, system_certs['subsystem']) File "/usr/lib/python3.10/site-packages/pki/server/deployment/__init__.py", line 1072, in setup_subsystem_user subsystem.add_user( File "/usr/lib/python3.10/site-packages/pki/server/subsystem.py", line 1519, in add_user self.run( File "/usr/lib/python3.10/site-packages/pki/server/subsystem.py", line 1650, in run return subprocess.run( File "/usr/lib64/python3.10/subprocess.py", line 524, in run raise CalledProcessError(retcode, process.args,
full report
@mpolovka the issue now happens on [testing_ipa-4.9_latest] because we moved the images from fedora34 to fedora35. Already reported at https://pagure.io/freeipa/issue/8865, hence closing as duplicate.
Metadata Update from @frenaud: - Issue close_status updated to: duplicate - Issue status updated to: Closed (was: Open)