← Back to team overview

freeipa team mailing list archive

[Bug 1793994] Re: freeipa server upgrade fails trying to switch to authselect

 

This bug was fixed in the package freeipa - 4.7.1-1

---------------
freeipa (4.7.1-1) unstable; urgency=medium

  * New upstream release.
    - fix-replicainstall.diff dropped, not applicable anymore
    - ipa-httpd-pwdreader-force-fqdn.diff dropped, obsolete
    - refresh patches
    - server: drop ipa-replica-prepare
  * dont-migrate-to-authselect.diff We don't have authselect, so just
    return true when trying to migrate to it. (LP: #1793994)
  * control: Move client dependency on chrony to recommends. (Closes:
    #909803)
  * control: Build server on any arch again.
  * tests: Don't fail the tests, just dump the log if something goes
    wrong.

 -- Timo Aaltonen <tjaalton@xxxxxxxxxx>  Tue, 09 Oct 2018 10:30:09 +0300

** Changed in: freeipa (Ubuntu)
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1793994

Title:
  freeipa server upgrade fails trying to switch to authselect

Status in freeipa package in Ubuntu:
  Fix Released

Bug description:
  On upgrading freeipa using the staging ppa, I encountered the
  following failure:

  traceback:

  2018-09-03T17:46:05Z INFO [Migrating to authselect profile]
  2018-09-03T17:46:05Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
  2018-09-03T17:46:05Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
  2018-09-03T17:46:05Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
  2018-09-03T17:46:05Z DEBUG Starting external process
  2018-09-03T17:46:05Z DEBUG args=[None, 'select', 'sssd', '--force']
  2018-09-03T17:46:06Z DEBUG Process execution failed
  2018-09-03T17:46:06Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
  2018-09-03T17:46:06Z DEBUG   File "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line 178, in execute
      return_value = self.run()
    File "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_upgrade.py", line 52, in run
      server.upgrade()
    File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 2103, in upgrade
      upgrade_configuration()
    File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 1982, in upgrade_configuration
      migrate_to_authselect()
    File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 1696, in migrate_to_authselect
      tasks.migrate_auth_configuration(statestore)
    File "/usr/lib/python2.7/dist-packages/ipaplatform/redhat/tasks.py", line 238, in migrate_auth_configuration
      ipautil.run(authselect_cmd)
    File "/usr/lib/python2.7/dist-packages/ipapython/ipautil.py", line 518, in run
      preexec_fn=preexec_fn)
    File "/usr/lib/python2.7/subprocess.py", line 394, in __init__
      errread, errwrite)
    File "/usr/lib/python2.7/subprocess.py", line 1047, in _execute_child
      raise child_exception

  2018-09-03T17:46:06Z DEBUG The ipa-server-upgrade command failed, exception: AttributeError: 'NoneType' object has no attribute 'rfind'
  2018-09-03T17:46:06Z ERROR Unexpected error - see /var/log/ipaupgrade.log for details:
  AttributeError: 'NoneType' object has no attribute 'rfind'
  2018-09-03T17:46:06Z ERROR The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information

  Looking through /usr/lib/python2.7/dist-
  packages/ipaplatform/debian/tasks.py, I note that debian doesn't use
  authconfig. Presuming (perhaps wrongly) that authselect is similarly
  inapplicable, I modified def migrate_to_authselect() in
  /usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py
  to just return. With this change, upgrade completed successfully. I'm
  not sure if this is the correct approach.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1793994/+subscriptions


References