[Freeipa-devel] [PATCHSET] Replica promotion patches

[Petr Vobornik]

On 10/27/2015 04:23 PM, Martin Babinsky wrote:
> On 10/22/2015 01:06 PM, Petr Vobornik wrote:
>> On 10/16/2015 06:41 PM, Endi Sukma Dewata wrote:
>>> On 10/15/2015 9:54 AM, Simo Sorce wrote:
>>>>> 3) ipa-ca-install fails with:
>>>>>
>>>>> Traceback (most recent call last):
>>>>>    File
>>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
>>>>> line 445, in start_creation
>>>>>      run_step(full_msg, method)
>>>>>    File
>>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
>>>>> line 435, in run_step
>>>>>      method()
>>>>>    File
>>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py",
>>>>> line
>>>>> 631, in __spawn_instance
>>>>>      DogtagInstance.spawn_instance(self, cfg_file)
>>>>>    File
>>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py",
>>>>>
>>>>> line 185, in spawn_instance
>>>>>      self.handle_setup_error(e)
>>>>>    File
>>>>> "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py",
>>>>>
>>>>> line 448, in handle_setup_error
>>>>>      raise RuntimeError("%s configuration failed." % self.subsystem)
>>>>> RuntimeError: CA configuration failed.
>>>>>
>>>>> I guess I'm hitting the authentication bug in Dogtag. It is
>>>>> supposed to
>>>>> be fixed in pki-core-10.2.6-10, but is it fixed in
>>>>> pki-core-10.2.7-0.2?
>>>>> We might need a new 10.2.7 build.
>>>>
>>>> I am not sure which version has it fixed, Endi ?
>>>
>>> PKI ticket #1580 was fixed in pki-core-10.2.6-10 for F23 and F24. We
>>> never released a pki-core-10.2.7. I suppose that is a custom build?
>>>
>>
>> Yes it is a custom build[4].
>>
>> It was advertised that #1414[1] will be in PKI 10.2.7 but it was
>> laterincluded into 10.2.6-5. I don't know what's a plan for 10.2.7.
>>
>> Required patch for the discussed issue #1580[2] is included in 10.2.6-10
>>
>> So I propose to change requires - patch attached, remove 10.2.7 custom
>> build from mkosek/freeipa-master repo and add new build(for f22) based
>> on pki-core-10.2.6-10.fc23 from koji[3]
>>
>>
>> [1] https://fedorahosted.org/pki/ticket/1414
>> [2] https://fedorahosted.org/pki/ticket/1580
>> [3] http://koji.fedoraproject.org/koji/buildinfo?buildID=689985
>> [4]
>> https://copr.fedoraproject.org/coprs/mkosek/freeipa-master/build/121544/
>>
>>
> ACK
>

Pushed to master: 3f0707a199dae98d55d8e1f69b750f2d1ed4dcab

pki-core-10.2.6-11 was built for f22 and f23 in  mkosek/freeipa-master 
copr [1]

pki-core-10.2.7-0.2 was removed from the copr

[1] https://copr.fedoraproject.org/coprs/mkosek/freeipa-master/build/130759/
-- 
Petr Vobornik