freeipa

#9616 Nightly test failure in test_backup_and_restore_TestReplicaInstallAfterRestore
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

Issue

The nightly test test_backup_and_restore.py::TestReplicaInstallAfterRestore::test_replica_install_after_restore is failing, see for instance PR #3793 with the following logs and report

Steps to Reproduce

  1. install IPA server, backup, uninstall
  2. Restore IPA server
  3. kinit admin; ipa user-find
  4. wait for sssd-kcm client idle timeout (5minutes by default)
  5. ipa user-find

Actual behavior

In step 5, the kerberos ticket should still be valid, but we have the following error:

# ipa user-find
ipa: ERROR: did not receive Kerberos credentials

Expected behavior

In step 5 the ipa user-find command should succeed

Version/Release/Distribution

freeipa from @freeipa/freeipa-master-nightly repo

Additional info:

After the uninstallation of the IPA server, the sssd kcm cache file is removed (/var/lib/sss/secrets/secrets.ldb) and the sssd-kcm.socket and service are not restarted.
After the restore operation, the file /var/lib/sss/secrets/secrets.ldb is not re-created. The missing file is likely the reason for ipa command failure.

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7411

master:

  • 9110050517b6f1059a29ad578963f0f53c58dbd3 ipa-ods-enforcer: stop must also stop the socket
  • 88a392cf840a0ca8eae527863e925ca0b4167513 Uninstall: stop sssd-kcm before removing KCM ccaches database
  • 0be8d040a7e385c17c8ff98fdee805ccab142ca4 test_replica_install_after_restore: kinit after restore

ipa-4-12:

  • 2f902efd0e47eb2461429ce658f89d2a11f0891e ipa-ods-enforcer: stop must also stop the socket
  • 6fe268af5bc6c5296f7a380917e3134f8fa46fda Uninstall: stop sssd-kcm before removing KCM ccaches database
  • d635d701100c9d3bdc179bae1f0d715fce30b461 test_replica_install_after_restore: kinit after restore

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

ipa-4-11:

  • 5c09ac927b2c5f4cc6d316cc37cc5c43ae313be9 ipa-ods-enforcer: stop must also stop the socket
  • c4ba0774fe44011a0365ab3ad9d8578f0356b1ec Uninstall: stop sssd-kcm before removing KCM ccaches database
  • 3b927bbb6fe8205cb3298d606cdcadad7e531964 test_replica_install_after_restore: kinit after restore
Metadata

test-failure

None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.