freeipa

#9655 upstream-adtrust-install: SSSD offline causing test-adtrust-install failure
Closed: fixed by frenaud. Opened by ebelko.

Closed: fixed
Reopen Issue

Issue

While investigating FreeIPA test failure I noticed it is failing due SSSD being offline. After further look into it, it seems like this happens because everything is not settled down after ipa-adtrust-install command. It is a race condition, waiting after ipa-adtrust-install needed

Actual behavior

Section from audit.log with faced issue:

node=replica1.testrelm.test type=AVC msg=audit(1718101440.457:74310): avc:  denied  { getattr } for  pid=22753 comm="systemctl" name="/" dev="vda3" ino=128 scontext=system_u:system_r:ipa_helper_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=0
node=replica1.testrelm.test type=SYSCALL msg=audit(1718101440.457:74310): arch=c000003e syscall=138 success=no exit=-13 a0=3 a1=7ffd242f92c0 a2=280100 a3=0 items=0 ppid=22606 pid=22753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemctl" exe="/usr/bin/systemctl" subj=system_u:system_r:ipa_helper_t:s0 key=(null)ARCH=x86_64 SYSCALL=fstatfs AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
node=replica1.testrelm.test type=PROCTITLE msg=audit(1718101440.457:74310): proctitle=2F62696E2F73797374656D63746C0069732D61637469766500646972737276405445535452454C4D2D544553542E73657276696365
node=replica1.testrelm.test type=AVC msg=audit(1718101440.548:74311): avc:  denied  { getattr } for  pid=22755 comm="systemctl" name="/" dev="vda3" ino=128 scontext=system_u:system_r:ipa_helper_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=0
node=replica1.testrelm.test type=SYSCALL msg=audit(1718101440.548:74311): arch=c000003e syscall=138 success=no exit=-13 a0=3 a1=7ffdf224c6c0 a2=280100 a3=0 items=0 ppid=22606 pid=22755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemctl" exe="/usr/bin/systemctl" subj=system_u:system_r:ipa_helper_t:s0 key=(null)ARCH=x86_64 SYSCALL=fstatfs AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
node=replica1.testrelm.test type=PROCTITLE msg=audit(1718101440.548:74311): proctitle=2F62696E2F73797374656D63746C007265737461727400737373642E73657276696365
node=replica1.testrelm.test type=SERVICE_STOP msg=audit(1718101440.573:74312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"

PR: https://github.com/freeipa/freeipa/pull/7511

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-40894

master:

  • d87dc8296039ef093198e0cb4d648d52ba953ed2 ipatests: Update ipa-adtrust-install test

ipa-4-12:

  • a18eb8358675b3697ccf8f8d8dc230cc62df6a4d ipatests: Update ipa-adtrust-install test

ipa-4-10:

  • c6d743ff8e87fd7e7d2e698f0a50f0b3392c1150 ipatests: Update ipa-adtrust-install test

ipa-4-11:

  • 6d5ceaf5b1272350da7da5412b945ba887a34149 ipatests: Update ipa-adtrust-install test

ipa-4-9:

  • f6645ebe5c0c0c030ec2e62e007d8dacd1b4e4cf ipatests: Update ipa-adtrust-install test

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

test-failure tests

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.