freeipa

#9636 misleading warning for missing ipa-selinux-nfast package on luna hsm
Closed: fixed by frenaud. Opened by rcritten.

Closed: fixed
Reopen Issue

Issue

Cloned from https://issues.redhat.com/browse/RHEL-49602

When installing an HSM using a Thales Luna device it warns that the nCipher nfast SELinux policy is not installed.

WARNING: The associated SELinux module ,ipa-selinux-nfast, for this HSM was not detected.

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-49602

Metadata Update from @rcritten:
- Issue assigned to rcritten

master:

  • c40ce0e1ff01cbecf2d83377f48c0ace55fd1ed9 Fix a copy/paste issue when detecting the HSM SELinux subpackage

ipa-4-12:

  • fdd471d55c73503456683b1dea55769700730b16 Fix a copy/paste issue when detecting the HSM SELinux subpackage

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-49602, https://issues.redhat.com/browse/RHEL-49805 (was: https://issues.redhat.com/browse/RHEL-49602)

Metadata Update from @frenaud:
- Issue status updated to: Open (was: Closed)

The module name (visible with semodule -l) is ipa-nfast or ipa-luna, not ipa-selinux-nfast or ipa-selinux-luna (the name is defined in https://pagure.io/freeipa/blob/c40ce0e1ff01cbecf2d83377f48c0ace55fd1ed9/f/freeipa.spec.in#_1350-1354 as %{modulename}-nfast and modulename is ipa (https://pagure.io/freeipa/blob/c40ce0e1ff01cbecf2d83377f48c0ace55fd1ed9/f/freeipa.spec.in#_63)

Upstream PR https://github.com/freeipa/freeipa/pull/7491

master:

  • 995c4f3597ccd754c5c329eb190691947808faca HSM: fix the module name

ipa-4-12:

  • 1fc63e2b5150548edb3e910aa270e49c8b35223b HSM: fix the module name

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.