[Freeipa-devel] [PATCHSET] Replica promotion patches

[Martin Babinsky]

On 10/22/2015 01:06 PM, Petr Vobornik wrote:
> On 10/16/2015 06:41 PM, Endi Sukma Dewata wrote:
>> On 10/15/2015 9:54 AM, Simo Sorce wrote:
>>>> 3) ipa-ca-install fails with:
>>>>
>>>> Traceback (most recent call last):
>>>>    File
>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
>>>> line 445, in start_creation
>>>>      run_step(full_msg, method)
>>>>    File
>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
>>>> line 435, in run_step
>>>>      method()
>>>>    File
>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py",
>>>> line
>>>> 631, in __spawn_instance
>>>>      DogtagInstance.spawn_instance(self, cfg_file)
>>>>    File
>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py",
>>>> line 185, in spawn_instance
>>>>      self.handle_setup_error(e)
>>>>    File
>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py",
>>>> line 448, in handle_setup_error
>>>>      raise RuntimeError("%s configuration failed." % self.subsystem)
>>>> RuntimeError: CA configuration failed.
>>>>
>>>> I guess I'm hitting the authentication bug in Dogtag. It is supposed to
>>>> be fixed in pki-core-10.2.6-10, but is it fixed in pki-core-10.2.7-0.2?
>>>> We might need a new 10.2.7 build.
>>>
>>> I am not sure which version has it fixed, Endi ?
>>
>> PKI ticket #1580 was fixed in pki-core-10.2.6-10 for F23 and F24. We
>> never released a pki-core-10.2.7. I suppose that is a custom build?
>>
>
> Yes it is a custom build[4].
>
> It was advertised that #1414[1] will be in PKI 10.2.7 but it was
> laterincluded into 10.2.6-5. I don't know what's a plan for 10.2.7.
>
> Required patch for the discussed issue #1580[2] is included in 10.2.6-10
>
> So I propose to change requires - patch attached, remove 10.2.7 custom
> build from mkosek/freeipa-master repo and add new build(for f22) based
> on pki-core-10.2.6-10.fc23 from koji[3]
>
>
> [1] https://fedorahosted.org/pki/ticket/1414
> [2] https://fedorahosted.org/pki/ticket/1580
> [3] http://koji.fedoraproject.org/koji/buildinfo?buildID=689985
> [4]
> https://copr.fedoraproject.org/coprs/mkosek/freeipa-master/build/121544/
>
>
ACK

-- 
Martin^3 Babinsky