freeipa team mailing list archive
-
freeipa team
-
Mailing list archive
-
Message #00856
[Bug 1793994] Re: freeipa server upgrade fails trying to switch to authselect
This bug was fixed in the package freeipa - 4.7.1-1
---------------
freeipa (4.7.1-1) unstable; urgency=medium
* New upstream release.
- fix-replicainstall.diff dropped, not applicable anymore
- ipa-httpd-pwdreader-force-fqdn.diff dropped, obsolete
- refresh patches
- server: drop ipa-replica-prepare
* dont-migrate-to-authselect.diff We don't have authselect, so just
return true when trying to migrate to it. (LP: #1793994)
* control: Move client dependency on chrony to recommends. (Closes:
#909803)
* control: Build server on any arch again.
* tests: Don't fail the tests, just dump the log if something goes
wrong.
-- Timo Aaltonen <tjaalton@xxxxxxxxxx> Tue, 09 Oct 2018 10:30:09 +0300
** Changed in: freeipa (Ubuntu)
Status: Triaged => Fix Released
--
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1793994
Title:
freeipa server upgrade fails trying to switch to authselect
Status in freeipa package in Ubuntu:
Fix Released
Bug description:
On upgrading freeipa using the staging ppa, I encountered the
following failure:
traceback:
2018-09-03T17:46:05Z INFO [Migrating to authselect profile]
2018-09-03T17:46:05Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
2018-09-03T17:46:05Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
2018-09-03T17:46:05Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
2018-09-03T17:46:05Z DEBUG Starting external process
2018-09-03T17:46:05Z DEBUG args=[None, 'select', 'sssd', '--force']
2018-09-03T17:46:06Z DEBUG Process execution failed
2018-09-03T17:46:06Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
2018-09-03T17:46:06Z DEBUG File "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line 178, in execute
return_value = self.run()
File "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_upgrade.py", line 52, in run
server.upgrade()
File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 2103, in upgrade
upgrade_configuration()
File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 1982, in upgrade_configuration
migrate_to_authselect()
File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 1696, in migrate_to_authselect
tasks.migrate_auth_configuration(statestore)
File "/usr/lib/python2.7/dist-packages/ipaplatform/redhat/tasks.py", line 238, in migrate_auth_configuration
ipautil.run(authselect_cmd)
File "/usr/lib/python2.7/dist-packages/ipapython/ipautil.py", line 518, in run
preexec_fn=preexec_fn)
File "/usr/lib/python2.7/subprocess.py", line 394, in __init__
errread, errwrite)
File "/usr/lib/python2.7/subprocess.py", line 1047, in _execute_child
raise child_exception
2018-09-03T17:46:06Z DEBUG The ipa-server-upgrade command failed, exception: AttributeError: 'NoneType' object has no attribute 'rfind'
2018-09-03T17:46:06Z ERROR Unexpected error - see /var/log/ipaupgrade.log for details:
AttributeError: 'NoneType' object has no attribute 'rfind'
2018-09-03T17:46:06Z ERROR The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information
Looking through /usr/lib/python2.7/dist-
packages/ipaplatform/debian/tasks.py, I note that debian doesn't use
authconfig. Presuming (perhaps wrongly) that authselect is similarly
inapplicable, I modified def migrate_to_authselect() in
/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py
to just return. With this change, upgrade completed successfully. I'm
not sure if this is the correct approach.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1793994/+subscriptions
References