freeipa team mailing list archive

[Timo Aaltonen <tjaalton@xxxxxxxxxx>]

thanks for the bug and the suggestion, we probably need to do exactly
that

** Changed in: freeipa (Ubuntu)
       Status: New => Triaged

** Changed in: freeipa (Ubuntu)
     Assignee: (unassigned) => Timo Aaltonen (tjaalton)

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1793994

Title:
  freeipa server upgrade fails trying to switch to authselect

Status in freeipa package in Ubuntu:
  Triaged

Bug description:
  On upgrading freeipa using the staging ppa, I encountered the
  following failure:

  traceback:

  2018-09-03T17:46:05Z INFO [Migrating to authselect profile]
  2018-09-03T17:46:05Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
  2018-09-03T17:46:05Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
  2018-09-03T17:46:05Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
  2018-09-03T17:46:05Z DEBUG Starting external process
  2018-09-03T17:46:05Z DEBUG args=[None, 'select', 'sssd', '--force']
  2018-09-03T17:46:06Z DEBUG Process execution failed
  2018-09-03T17:46:06Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
  2018-09-03T17:46:06Z DEBUG   File "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line 178, in execute
      return_value = self.run()
    File "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_upgrade.py", line 52, in run
      server.upgrade()
    File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 2103, in upgrade
      upgrade_configuration()
    File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 1982, in upgrade_configuration
      migrate_to_authselect()
    File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 1696, in migrate_to_authselect
      tasks.migrate_auth_configuration(statestore)
    File "/usr/lib/python2.7/dist-packages/ipaplatform/redhat/tasks.py", line 238, in migrate_auth_configuration
      ipautil.run(authselect_cmd)
    File "/usr/lib/python2.7/dist-packages/ipapython/ipautil.py", line 518, in run
      preexec_fn=preexec_fn)
    File "/usr/lib/python2.7/subprocess.py", line 394, in __init__
      errread, errwrite)
    File "/usr/lib/python2.7/subprocess.py", line 1047, in _execute_child
      raise child_exception

  2018-09-03T17:46:06Z DEBUG The ipa-server-upgrade command failed, exception: AttributeError: 'NoneType' object has no attribute 'rfind'
  2018-09-03T17:46:06Z ERROR Unexpected error - see /var/log/ipaupgrade.log for details:
  AttributeError: 'NoneType' object has no attribute 'rfind'
  2018-09-03T17:46:06Z ERROR The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information

  Looking through /usr/lib/python2.7/dist-
  packages/ipaplatform/debian/tasks.py, I note that debian doesn't use
  authconfig. Presuming (perhaps wrongly) that authselect is similarly
  inapplicable, I modified def migrate_to_authselect() in
  /usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py
  to just return. With this change, upgrade completed successfully. I'm
  not sure if this is the correct approach.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1793994/+subscriptions