Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1250724 - FreeIPA install fails during dogtag setup
Summary: FreeIPA install fails during dogtag setup
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Fedora
Classification: Fedora
Component: pki-core
Version: 23
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Matthew Harmsen
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: RejectedBlocker AcceptedFreezeException
Depends On: 1245786 1344804
Blocks: F23AlphaFreezeException
TreeView+ depends on / blocked
 
Reported: 2015-08-05 20:18 UTC by Stephen Gallagher
Modified: 2020-10-04 20:56 UTC (History)
10 users (show)

Fixed In Version: pki-core-10.2.6-5
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-09-22 18:19:27 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)
IPA server install log (234.50 KB, text/plain)
2015-08-05 20:18 UTC, Stephen Gallagher 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Github dogtagpki pki issues 2101 0 None None None 2020-10-04 20:56:02 UTC

Description Stephen Gallagher 2015-08-05 20:18:48 UTC 
Created attachment 1059640 [details]
IPA server install log

Description of problem:
Running ipa-server-install fails. The error log implies that the problem occurs during dogtag pki setup.

Version-Release number of selected component (if applicable):
pki-base-10.2.6-4.fc23.noarch
pki-ca-10.2.6-4.fc23.noarch

How reproducible:
Every time

Steps to Reproduce:
1. Run ipa-server-install with appropriate values
2.
3.

Actual results:
Installation fails with errors in the attached file

Expected results:
Installation succeeds

Additional info:
Comment 1 Stephen Gallagher 2015-08-05 20:20:06 UTC 
For the record, the FreeIPA version is freeipa-server-4.1.4-5.fc23.x86_64
Comment 2 Fedora Blocker Bugs Application 2015-08-05 20:23:33 UTC 
Proposed as a Blocker for 23-beta by Fedora user sgallagh using the blocker tracking app because:

 "The core functional requirements for all Featured Server Roles must be met, but it is acceptable if moderate workarounds are necessary to achieve this."

Due to this bug, it is impossible to deploy the Domain Controller Role (a Featured Server Role in Fedora 23)
Comment 3 Stephen Gallagher 2015-08-05 20:24:42 UTC 
Meant to block Alpha...
Comment 4 Mike Ruckman 2015-08-05 20:29:55 UTC 
+1 Alpha blocker
Comment 5 Endi Sukma Dewata 2015-08-05 21:02:02 UTC 
This is caused by a new method added in a recent version of Tomcat which will be fixed with a new TomcatJSS build (bug #1245786).
Comment 6 Endi Sukma Dewata 2015-08-05 21:55:56 UTC 
This is fixed by installing tomcatjss-7.1.3-1.fc23 package. The pki-core dependency will be updated soon.
Comment 7 Adam Williamson 2015-08-06 00:57:07 UTC 
I'm -1 blocker. Let me explain: sgallagh doesn't think this needs to go on the DVD, as roles usually come from the network and it's fairly unusual for someone to install the deps from the DVD. We have a 'reasonable workarounds allowed' caveat in the criteria to allow for this.

This doesn't even really need to be pushed stable, as network role deployments should pull from updates-testing in any case (as it's enabled by default).
Comment 8 Stephen Gallagher 2015-08-06 01:05:21 UTC 
To be clear, this fix still needed to be there. It's just that we happen to have a little wiggle-room on how we deliver it (we don't need to force a respin of the install media *just* for this). For the purposes of bookkeeping, I agree with the -1 blocker (as that would be defined as requiring it on the DVD). That said, if the release slipped for other reasons, I'd be +1 FE to putting this fix on subsequent respins.

That said, thank you for the fast turnaround on this. It's much appreciated.
Comment 9 Mike Ruckman 2015-08-07 17:19:35 UTC 
This was discussed in the 2015-08-06 Go/No-Go meeting. It was denied as a blocker due to the wiggle room provided in the criterion. Accepted as an FE if we slip and have to respin.
Comment 10 Endi Sukma Dewata 2015-10-01 03:59:07 UTC 
This was fixed in the following ticket:
https://fedorahosted.org/pki/ticket/1542
Note You need to log in before you can comment on or make changes to this bug.