[Freeipa-devel] [PATCH 016, 024, 025] First part of the replica promotion tests + testplan
Oleg Fayans
ofayans at redhat.com
Mon Mar 21 14:54:14 UTC 2016
Hi Lukas, Martin,
Looks I've implemented the approach proposed by Martin. The issue seems
to have gone (see the external_ca_out for external_ca test output).
Would like you to take a look and tell me what'd you think.
On 03/17/2016 08:37 PM, Lukas Slebodnik wrote:
> On (17/03/16 16:00), Oleg Fayans wrote:
>> Hi Lukas,
>>
>> On 03/17/2016 11:28 AM, Lukas Slebodnik wrote:
>>> On (10/03/16 23:09), Oleg Fayans wrote:
>>>> Hi Martin,
>>>>
>>>>
>>>>
>>>> On 03/08/2016 08:18 PM, Martin Basti wrote:
>>>>>
>>>>>
>>>>> On 08.03.2016 18:24, Martin Basti wrote:
>>>>>>
>>>>>>
>>>>>> On 08.03.2016 12:38, Oleg Fayans wrote:
>>>>>>> The patches were rebased against the current master
>>>>>>>
>>>>>>> On 03/04/2016 05:33 PM, Martin Basti wrote:
>>>>>>>> * old messages have been removed *
>>>>>>>>>>>> 1)
>>>>>>>>>>>> this method is unused please remove it
>>>>>>>>>>>>
>>>>>>>>>>>> def test_kra_install_master(self):
>>>>>>>>> Well, in fact it is used twice: in both domain levels, so I'd better
>>>>>>>>> keep it:
>>>>>>>>>
>>>>>>>>> -bash-4.3$ ipa-run-tests test_integration/test_replica_promotion.py
>>>>>>>>> --collect-only
>>>>>>>>> ====================================================================================
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> test session starts
>>>>>>>>> =====================================================================================
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> platform linux2 -- Python 2.7.10 -- py-1.4.30 -- pytest-2.7.3
>>>>>>>>> rootdir: /usr/lib/python2.7/site-packages/ipatests, inifile:
>>>>>>>>> pytest.ini
>>>>>>>>> plugins: sourceorder, multihost
>>>>>>>>> collected 8 items
>>>>>>>>> <Module 'test_integration/test_replica_promotion.py'>
>>>>>>>>> <Class 'TestReplicaPromotionLevel0'>
>>>>>>>>> <Instance '()'>
>>>>>>>>> <Function 'test_kra_install_master'>
>>>>>>>>> <Function 'test_promotion_disabled'>
>>>>>>>>> <Function 'test_backup_restore'>
>>>>>>>>> <Class 'TestKRAInstall'>
>>>>>>>>> <Instance '()'>
>>>>>>>>> <Function 'test_kra_install_without_replica_file'>
>>>>>>>>> <Class 'TestCAInstall'>
>>>>>>>>> <Instance '()'>
>>>>>>>>> <Function 'test_ca_install_without_replica_file'>
>>>>>>>>> <Class 'TestReplicaPromotionLevel1'>
>>>>>>>>> <Instance '()'>
>>>>>>>>> <Function 'test_kra_install_master'>
>>>>>>>>> <Function 'test_replica_prepare_disabled'>
>>>>>>>>> <Class 'TestReplicaManageCommands'>
>>>>>>>>> <Instance '()'>
>>>>>>>>> <Function 'test_replica_manage_commands'>
>>>>>>>> aah my bad, I forgot that pytest executes it when it begins with test_*
>>>>>>>> even in parent class
>>>>>>>>>>>> 2)
>>>>>>>>>>>> Why are these there? I do not see any usage
>>>>>>>>>>>>
>>>>>>>>>>>> from env_config import get_global_config
>>>>>>>>>>>> config = get_global_config()
>>>>>>>>> Removed
>>>>>>>>>
>>>>>>>>>>>> 3) nitpick
>>>>>>>>>>>> + num_clients = 0
>>>>>>>>>>>> this is set by default
>>>>>>>>> Removed
>>>>>>>>>
>>>>>>>>>>>> otherwise LGTM
>>>>>>>>>>>>
>>>>>>>>>>>> Results of testing tomorrow.
>>>>>>>>>>>>
>>>>>>>>>>>> Martin^2
>>>>>>>>>>>>
>>>>>>>>>>> I applied all patches including workarounds, but test failed.
>>>>>>>>>>>
>>>>>>>>>>> ipatests.test_integration.test_replica_promotion.TestReplicaPromotionLevel0
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> [ipa.ipatests.test_integration.host.Host.replica1.cmd51] RUN
>>>>>>>>>>> ['ipa-replica-install', '-U', '-p', 'Secret123', '-w', 'Secret123',
>>>>>>>>>>> '--setup-ca', '--ip-address', '192.168.144.102',
>>>>>>>>>>> '/root/ipatests/replica-info.gpg']
>>>>>>>>>>> [ipa.ipatests.test_integration.host.Host.replica1.cmd51] The host
>>>>>>>>>>> replica1.ipa.test already exists on the master server.
>>>>>>>>>>> [ipa.ipatests.test_integration.host.Host.replica1.cmd51] You should
>>>>>>>>>>> remove it before proceeding:
>>>>>>>>>>> [ipa.ipatests.test_integration.host.Host.replica1.cmd51] % ipa
>>>>>>>>>>> host-del replica1.ipa.test
>>>>>>>>>>> [ipa.ipatests.test_integration.host.Host.replica1.cmd51]
>>>>>>>>>>> ipa.ipapython.install.cli.install_tool(Replica): ERROR The
>>>>>>>>>>> ipa-replica-install command failed. See
>>>>>>>>>>> /var/log/ipareplica-install.log for more information
>>>>>>>>>>> [ipa.ipatests.test_integration.host.Host.replica1.cmd51] Exit
>>>>>>>>>>> code: 3
>>>>>>>>>>> FAILED
>>>>>>>>> this is exactly the error that happens when a workaround for 5627
>>>>>>>>> is not
>>>>>>>>> applied. I have re-run the tests with all the patches and everything
>>>>>>>>> passed. Could you please double-check, whether patch 0027 was applied
>>>>>>>>> correctly?
>>>>>>>>>
>>>>>>>>> bash-4.3$ ipa-run-tests test_integration/test_replica_promotion.py
>>>>>>>>> --pdb
>>>>>>>>> ====================================================================================
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> test session starts
>>>>>>>>> =====================================================================================
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> platform linux2 -- Python 2.7.10 -- py-1.4.30 -- pytest-2.7.3
>>>>>>>>> rootdir: /usr/lib/python2.7/site-packages/ipatests, inifile:
>>>>>>>>> pytest.ini
>>>>>>>>> plugins: sourceorder, multihost
>>>>>>>>> collected 8 items
>>>>>>>>>
>>>>>>>>> test_integration/test_replica_promotion.py ........
>>>>>>>>>
>>>>>>>>> ================================================================================
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> 8 passed in 7561.93 seconds
>>>>>>>>> =================================================================================
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>> I will
>>>>>>>>
>>>>>>>>>> And it needs ticket, otherwise it will not be in 4-3 branch.
>>>>>>>>> https://fedorahosted.org/freeipa/ticket/5723
>>>>>> NACK
>>>>>>
>>>>>> 1)
>>>>>> ipatests.test_integration.test_replica_promotion.TestReplicaPromotionLevel0
>>>>>>
>>>>>>
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.ParamikoTransport]
>>>>>> RUN ['ipa-replica-install', '-U', '-p', 'Secret123', '-w',
>>>>>> 'Secret123', '--setup-ca', '--ip-address', '192.168.200.103', '-r',
>>>>>> 'IPA.TEST']
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd65] RUN
>>>>>> ['ipa-replica-install', '-U', '-p', 'Secret123', '-w', 'Secret123',
>>>>>> '--setup-ca', '--ip-address', '192.168.200.103', '-r', 'IPA.TEST']
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd65] IPA client is
>>>>>> already configured on this system, ignoring the --domain, --server,
>>>>>> --realm, --hostname, --password and --keytab options.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd65] Your system
>>>>>> may be partly configured.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd65] Run
>>>>>> /usr/sbin/ipa-server-install --uninstall to clean up.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd65]
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd65]
>>>>>> ipa.ipapython.install.cli.install_tool(Replica): ERROR You must
>>>>>> provide a file generated by ipa-replica-prepare to create a replica
>>>>>> when the domain is at level 0.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd65]
>>>>>> ipa.ipapython.install.cli.install_tool(Replica): ERROR The
>>>>>> ipa-replica-install command failed. See
>>>>>> /var/log/ipareplica-install.log for more information
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd65] Exit code: 1
>>>>>> FAILED
>>>>>>
>>>>>> 2)
>>>>>> ipatests.test_integration.test_replica_promotion.TestKRAInstall
>>>>>>
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.ParamikoTransport]
>>>>>> RUN ['ipa-replica-install', '-U', '-p', 'Secret123', '-w',
>>>>>> 'Secret123', '--setup-ca', '--ip-address', '192.168.200.103', '-r',
>>>>>> 'IPA.TEST']
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] RUN
>>>>>> ['ipa-replica-install', '-U', '-p', 'Secret123', '-w', 'Secret123',
>>>>>> '--setup-ca', '--ip-address', '192.168.200.103', '-r', 'IPA.TEST']
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] IPA client is
>>>>>> already configured on this system, ignoring the --domain, --server,
>>>>>> --realm, --hostname, --password and --keytab options.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] Your system
>>>>>> may be partly configured.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] Run
>>>>>> /usr/sbin/ipa-server-install --uninstall to clean up.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22]
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22]
>>>>>> ipa.ipapython.install.cli.install_tool(Replica): ERROR You must
>>>>>> provide a file generated by ipa-replica-prepare to create a replica
>>>>>> when the domain is at level 0.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22]
>>>>>> ipa.ipapython.install.cli.install_tool(Replica): ERROR The
>>>>>> ipa-replica-install command failed. See
>>>>>> /var/log/ipareplica-install.log for more information
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] Exit code: 1
>>>>>> FAILED
>>>>>>
>>>>>>
>>>>>> 3)
>>>>>> ipatests.test_integration.test_replica_promotion.TestCAInstall
>>>>>>
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.ParamikoTransport]
>>>>>> RUN ['ipa-replica-install', '-U', '-p', 'Secret123', '-w',
>>>>>> 'Secret123', '--setup-dns', '--forwarder', '10.34.78.1',
>>>>>> '--ip-address', '192.168.200.103', '-r', 'IPA.TEST']
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] RUN
>>>>>> ['ipa-replica-install', '-U', '-p', 'Secret123', '-w', 'Secret123',
>>>>>> '--setup-dns', '--forwarder', '10.34.78.1', '--ip-address',
>>>>>> '192.168.200.103', '-r', 'IPA.TEST']
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] IPA client is
>>>>>> already configured on this system, ignoring the --domain, --server,
>>>>>> --realm, --hostname, --password and --keytab options.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] Your system
>>>>>> may be partly configured.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] Run
>>>>>> /usr/sbin/ipa-server-install --uninstall to clean up.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22]
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22]
>>>>>> ipa.ipapython.install.cli.install_tool(Replica): ERROR You must
>>>>>> provide a file generated by ipa-replica-prepare to create a replica
>>>>>> when the domain is at level 0.
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22]
>>>>>> ipa.ipapython.install.cli.install_tool(Replica): ERROR The
>>>>>> ipa-replica-install command failed. See
>>>>>> /var/log/ipareplica-install.log for more information
>>>>>> [ipa.ipatests.test_integration.host.Host.replica2.cmd22] Exit code: 1
>>>>>> FAILED
>>>>>>
>>>>>>
>>>>>> Reason:
>>>>>>
>>>>>> def install_replica(master, replica, setup_ca=True, setup_dns=False,
>>>>>> - setup_kra=False, extra_args=()):
>>>>>> + setup_kra=False, extra_args=(), domain_level=None):
>>>>>> + if domain_level is None:
>>>>>> + domain_level = domainlevel(master)
>>>>
>>>> Oops. Sorry, must have been a result of inaccurate rebase. Fixed
>>>> The successful run is attached
>>>>
>>>>>>
>>>>>> - if domainlevel(master) == DOMAIN_LEVEL_0:
>>>>>> + if domainlevel == DOMAIN_LEVEL_0:
>>>>>>
>>>>>> domain_level variable is actually unused
>>>>>>
>>>>> Also with your patch that removes host_prepare, I see many following
>>>>> errors in test debug output
>>>>>
>>>>> [ipa.ipatests.test_integration.host.Host.replica1.cmd8] -bash: line 1:
>>>>> cd: /root/ipatests: No such file or directory
>>>>> [ipa.ipatests.test_integration.host.Host.replica1.cmd8] -bash: line 2:
>>>>> /root/ipatests/env.sh: No such file or directory
>>>>>
>>>>>
>>>>> I do not see these errors in current tests, so the patch does not seem
>>>>> right to me.
>>>>
>>>> http://jenkins.idm.lab.eng.brq.redhat.com:8080/job/freeipa-integration-f23master-customized_ds_config_install-domlevel-1/23/consoleFull
>>>>
>>>> I've been experimenting a lot to find get rid of it but was
>>>> unsuccessful. Seemingly it does not affect the tests.
>>>>
>>> Oleg it looks like you broke something
>>> in the test_integration/test_external_ca.py
>>>
>>> _______________________ TestExternalCA.test_external_ca ________________________
>>>
>>> self = <ipatests.test_integration.test_external_ca.TestExternalCA object at 0x7ff560a51750>
>>>
>>> def test_external_ca(self):
>>> # Step 1 of ipa-server-install
>>> self.master.run_command([
>>> 'ipa-server-install', '-U',
>>> '-a', self.master.config.admin_password,
>>> '-p', self.master.config.dirman_password,
>>> '--setup-dns', '--no-forwarders',
>>> '-n', self.master.domain.name,
>>> '-r', self.master.domain.realm,
>>> '--domain-level=%i' % self.master.config.domain_level,
>>> '--external-ca'
>>> ])
>>>
>>> nss_db = os.path.join(self.master.config.test_dir, 'testdb')
>>> external_cert_file = os.path.join(nss_db, 'ipa.crt')
>>> external_ca_file = os.path.join(nss_db, 'ca.crt')
>>> noisefile = os.path.join(self.master.config.test_dir, 'noise.txt')
>>> pwdfile = os.path.join(self.master.config.test_dir, 'pwdfile.txt')
>>>
>>> # Create noise and password files for NSS database
>>>> self.master.run_command('date | sha256sum > %s' % noisefile)
>>>
>>> test_integration/test_external_ca.py:49:
>>> _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
>>> ../pytest_multihost/host.py:246: in run_command
>>> command.wait(raiseonerr=raiseonerr)
>>> _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
>>>
>>> self = <pytest_multihost.transport.SSHCommand object at 0x7ff5609eb610>
>>> raiseonerr = True
>>>
>>> def wait(self, raiseonerr=True):
>>> """Wait for the remote process to exit
>>>
>>> Raises an excption if the exit code is not 0, unless raiseonerr is
>>> true.
>>> """
>>> if self._done:
>>> return self.returncode
>>>
>>> self._end_process()
>>>
>>> self._done = True
>>>
>>> if raiseonerr and self.returncode:
>>> self.log.error('Exit code: %s', self.returncode)
>>>> raise subprocess.CalledProcessError(self.returncode, self.argv)
>>> E CalledProcessError: Command 'date | sha256sum > /root/ipatests/noise.txt' returned non-zero exit status 1
>>>
>>> ../pytest_multihost/transport.py:159: CalledProcessError
>>> ---------------------------- Captured stdout setup -----------------------------
>>> <ipatests.test_integration.config.Config object at 0x7ff560a51cd0>
>>> ========================== 1 failed in 32.25 seconds ===========================
>>>
>>>
>>>
>>> The command "date | sha256sum > /root/ipatests/noise.txt"
>>>
>>> The only explanation is that the directory /root/ipatests/ does not exist.
>>
>> Obviously this is caused by my patch N 0025
>> freeipa-ofayans-0025-Removed-a-constantly-failing-call-to-prepare_host.patch
>>
>> Without it replica_promotion tests would fail. The only compromise I see
>> is to remove this line in unapply_fixes function in
>> ipatests/test_integration/tasks.py:
>>
>> host.run_command(['rm', '-rvf', host.config.test_dir])
>>
>> Now the biggest question is: why do we keep removing the config folder
>> anyway? All the files (backups of /etc/hosts, etc) that ever get there
>> get overwritten each time anyway so it's quite safe to just keep the
>> folder throughout the whole test execution.
>>
> I do not know why it was removed. IMHO it shoudl be enough
> to remove just content of this directory.
>
> But it will bee godd to fix it ASAP
> and unblock test test_integration/test_external_ca.py
> I hope we want to have green test in 4.3 branch.
> Please also open a ticket so it can be backported to
> stable branch (if needed)
>
> LS
>
--
Oleg Fayans
Quality Engineer
FreeIPA team
RedHat.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-ofayans-0028-refactor-the-way-the-test-folder-is-created-deleted.patch
Type: text/x-patch
Size: 2966 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160321/560941ef/attachment.bin>
-------------- next part --------------
============================= test session starts ==============================
platform linux2 -- Python 2.7.10 -- py-1.4.30 -- pytest-2.7.3
rootdir: /usr/lib/python2.7/site-packages/ipatests, inifile: pytest.ini
plugins: multihost, sourceorder
collected 1 items
test_integration/test_external_ca.py [ipa.ipatests.test_integration.base.IntegrationTest] Preparing host f23master.pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] Authenticating with private RSA key using user root
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['true']
[ipa.ipatests.test_integration.host.Host.f23master.cmd1] RUN ['true']
[ipa.ipatests.test_integration.host.Host.f23master.cmd1] -bash: line 1: cd: /home/ofayans/ipatests: No such file or directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd1] Exit code: 0
[ipa.ipatests.pytest_plugins.integration] Adding f23master.pesen.net:/home/ofayans/ipatests/env.sh to list of logs to collect
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] STAT /home/ofayans/ipatests
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] STAT /home/ofayans
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] MKDIR /home/ofayans/ipatests
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] WRITE /home/ofayans/ipatests/env.sh
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['true']
[ipa.ipatests.test_integration.host.Host.f23master.cmd2] RUN ['true']
[ipa.ipatests.test_integration.host.Host.f23master.cmd2] Exit code: 0
[ipa.ipatests.pytest_plugins.integration] Adding f23master.pesen.net:/home/ofayans/ipatests/env.sh to list of logs to collect
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] STAT /home/ofayans/ipatests
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] WRITE /home/ofayans/ipatests/env.sh
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['ipa-server-install', '-U', '-a', 'x2k1j5tdsl', '-p', 'x2k1j5tdsl', '--setup-dns', '--no-forwarders', '-n', 'pesen.net', '-r', 'PESEN.NET', '--domain-level=1', '--external-ca']
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] RUN ['ipa-server-install', '-U', '-a', 'x2k1j5tdsl', '-p', 'x2k1j5tdsl', '--setup-dns', '--no-forwarders', '-n', 'pesen.net', '-r', 'PESEN.NET', '--domain-level=1', '--external-ca']
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Checking DNS domain pesen.net, please wait ...
[ipa.ipatests.test_integration.host.Host.f23master.cmd3]
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] The log file for this installation can be found in /var/log/ipaserver-install.log
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] ==============================================================================
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] This program will set up the FreeIPA Server.
[ipa.ipatests.test_integration.host.Host.f23master.cmd3]
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] This includes:
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] * Configure a stand-alone CA (dogtag) for certificate management
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] * Configure the Network Time Daemon (ntpd)
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] * Create and configure an instance of Directory Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] * Create and configure a Kerberos Key Distribution Center (KDC)
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] * Configure Apache (httpd)
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] * Configure DNS (bind)
[ipa.ipatests.test_integration.host.Host.f23master.cmd3]
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Warning: skipping DNS resolution of host f23master.pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Checking DNS domain pesen.net., please wait ...
[ipa.ipatests.test_integration.host.Host.f23master.cmd3]
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] The IPA Master Server will be configured with:
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Hostname: f23master.pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] IP address(es): 192.168.122.63
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Domain name: pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Realm name: PESEN.NET
[ipa.ipatests.test_integration.host.Host.f23master.cmd3]
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] BIND DNS server will be configured to serve IPA domain with:
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Forwarders: No forwarders
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Reverse zone(s): No reverse zone
[ipa.ipatests.test_integration.host.Host.f23master.cmd3]
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Configuring NTP daemon (ntpd)
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [1/4]: stopping ntpd
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [2/4]: writing configuration
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [3/4]: configuring ntpd to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [4/4]: starting ntpd
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Done configuring NTP daemon (ntpd).
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Configuring directory server (dirsrv). Estimated time: 1 minute
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [1/46]: creating directory server user
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [2/46]: creating directory server instance
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [3/46]: restarting directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [4/46]: adding default schema
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [5/46]: enabling memberof plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [6/46]: enabling winsync plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [7/46]: configuring replication version plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [8/46]: enabling IPA enrollment plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [9/46]: enabling ldapi
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [10/46]: configuring uniqueness plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [11/46]: configuring uuid plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [12/46]: configuring modrdn plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [13/46]: configuring DNS plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [14/46]: enabling entryUSN plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [15/46]: configuring lockout plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [16/46]: configuring topology plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [17/46]: creating indices
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [18/46]: enabling referential integrity plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [19/46]: configuring certmap.conf
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [20/46]: configure autobind for root
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [21/46]: configure new location for managed entries
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [22/46]: configure dirsrv ccache
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [23/46]: enabling SASL mapping fallback
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [24/46]: restarting directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [25/46]: adding sasl mappings to the directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [26/46]: adding default layout
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [27/46]: adding delegation layout
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [28/46]: creating container for managed entries
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [29/46]: configuring user private groups
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [30/46]: configuring netgroups from hostgroups
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [31/46]: creating default Sudo bind user
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [32/46]: creating default Auto Member layout
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [33/46]: adding range check plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [34/46]: creating default HBAC rule allow_all
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [35/46]: adding sasl mappings to the directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [36/46]: adding entries for topology management
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [37/46]: initializing group membership
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [38/46]: adding master entry
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [39/46]: initializing domain level
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [40/46]: configuring Posix uid/gid generation
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [41/46]: adding replication acis
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [42/46]: enabling compatibility plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [43/46]: activating sidgen plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [44/46]: activating extdom plugin
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [45/46]: tuning directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [46/46]: configuring directory to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Done configuring directory server (dirsrv).
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes 30 seconds
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [1/8]: creating certificate server user
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] [2/8]: configuring certificate server instance
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] The next step is to get /root/ipa.csr signed by your CA and re-run /usr/sbin/ipa-server-install as:
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] /usr/sbin/ipa-server-install --external-cert-file=/path/to/signed_certificate --external-cert-file=/path/to/external_ca_certificate
[ipa.ipatests.test_integration.host.Host.f23master.cmd3] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN date | sha256sum > /home/ofayans/ipatests/noise.txt
[ipa.ipatests.test_integration.host.Host.f23master.cmd4] RUN date | sha256sum > /home/ofayans/ipatests/noise.txt
[ipa.ipatests.test_integration.host.Host.f23master.cmd4] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN echo x2k1j5tdsl > /home/ofayans/ipatests/pwdfile.txt
[ipa.ipatests.test_integration.host.Host.f23master.cmd5] RUN echo x2k1j5tdsl > /home/ofayans/ipatests/pwdfile.txt
[ipa.ipatests.test_integration.host.Host.f23master.cmd5] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['mkdir', '/home/ofayans/ipatests/testdb']
[ipa.ipatests.test_integration.host.Host.f23master.cmd6] RUN ['mkdir', '/home/ofayans/ipatests/testdb']
[ipa.ipatests.test_integration.host.Host.f23master.cmd6] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['certutil', '-N', '-d', '/home/ofayans/ipatests/testdb', '-f', '/home/ofayans/ipatests/pwdfile.txt']
[ipa.ipatests.test_integration.host.Host.f23master.cmd7] RUN ['certutil', '-N', '-d', '/home/ofayans/ipatests/testdb', '-f', '/home/ofayans/ipatests/pwdfile.txt']
[ipa.ipatests.test_integration.host.Host.f23master.cmd7] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['certutil', '-S', '-d', '/home/ofayans/ipatests/testdb', '-f', '/home/ofayans/ipatests/pwdfile.txt', '-n', 'external', '-s', 'CN=External CA, O=pesen.net', '-x', '-t', 'CTu,CTu,CTu', '-g', '2048', '-m', '0', '-v', '60', '-z', '/home/ofayans/ipatests/noise.txt', '-2', '-1', '-5']
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] RUN ['certutil', '-S', '-d', '/home/ofayans/ipatests/testdb', '-f', '/home/ofayans/ipatests/pwdfile.txt', '-n', 'external', '-s', 'CN=External CA, O=pesen.net', '-x', '-t', 'CTu,CTu,CTu', '-g', '2048', '-m', '0', '-v', '60', '-z', '/home/ofayans/ipatests/noise.txt', '-2', '-1', '-5']
[ipa.ipatests.test_integration.host.Host.f23master.cmd8]
[ipa.ipatests.test_integration.host.Host.f23master.cmd8]
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Generating key. This may take a few moments...
[ipa.ipatests.test_integration.host.Host.f23master.cmd8]
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 0 - Digital Signature
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 1 - Non-repudiation
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 2 - Key encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 3 - Data encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 4 - Key agreement
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 5 - Cert signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 6 - CRL signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] > 0 - Digital Signature
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 1 - Non-repudiation
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 2 - Key encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 3 - Data encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 4 - Key agreement
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 5 - Cert signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 6 - CRL signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] > Is this a critical extension [y/N]?
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Is this a CA certificate [y/N]?
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Enter the path length constraint, enter to skip [<0 for unlimited path]: > Is this a critical extension [y/N]?
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 0 - SSL Client
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 1 - SSL Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 2 - S/MIME
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 3 - Object Signing
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 4 - Reserved for future use
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 5 - SSL CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 6 - S/MIME CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 7 - Object Signing CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Notice: Trust flag u is set automatically if the private key is present.
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] > 0 - SSL Client
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 1 - SSL Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 2 - S/MIME
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 3 - Object Signing
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 4 - Reserved for future use
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 5 - SSL CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 6 - S/MIME CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 7 - Object Signing CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] > 0 - SSL Client
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 1 - SSL Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 2 - S/MIME
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 3 - Object Signing
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 4 - Reserved for future use
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 5 - SSL CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 6 - S/MIME CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 7 - Object Signing CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] > 0 - SSL Client
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 1 - SSL Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 2 - S/MIME
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 3 - Object Signing
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 4 - Reserved for future use
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 5 - SSL CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 6 - S/MIME CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] 7 - Object Signing CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] > Is this a critical extension [y/N]?
[ipa.ipatests.test_integration.host.Host.f23master.cmd8] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['certutil', '-C', '-d', '/home/ofayans/ipatests/testdb', '-f', '/home/ofayans/ipatests/pwdfile.txt', '-c', 'external', '-m', '1', '-v', '60', '-2', '-1', '-5', '-i', '/root/ipa.csr', '-o', '/home/ofayans/ipatests/testdb/ipa.crt', '-a']
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] RUN ['certutil', '-C', '-d', '/home/ofayans/ipatests/testdb', '-f', '/home/ofayans/ipatests/pwdfile.txt', '-c', 'external', '-m', '1', '-v', '60', '-2', '-1', '-5', '-i', '/root/ipa.csr', '-o', '/home/ofayans/ipatests/testdb/ipa.crt', '-a']
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 0 - Digital Signature
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 1 - Non-repudiation
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 2 - Key encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 3 - Data encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 4 - Key agreement
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 5 - Cert signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 6 - CRL signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] > 0 - Digital Signature
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 1 - Non-repudiation
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 2 - Key encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 3 - Data encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 4 - Key agreement
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 5 - Cert signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 6 - CRL signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] > 0 - Digital Signature
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 1 - Non-repudiation
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 2 - Key encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 3 - Data encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 4 - Key agreement
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 5 - Cert signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 6 - CRL signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] > 0 - Digital Signature
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 1 - Non-repudiation
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 2 - Key encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 3 - Data encipherment
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 4 - Key agreement
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 5 - Cert signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 6 - CRL signing key
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] > Is this a critical extension [y/N]?
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Is this a CA certificate [y/N]?
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Enter the path length constraint, enter to skip [<0 for unlimited path]: > Is this a critical extension [y/N]?
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 0 - SSL Client
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 1 - SSL Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 2 - S/MIME
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 3 - Object Signing
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 4 - Reserved for future use
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 5 - SSL CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 6 - S/MIME CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 7 - Object Signing CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] > 0 - SSL Client
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 1 - SSL Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 2 - S/MIME
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 3 - Object Signing
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 4 - Reserved for future use
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 5 - SSL CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 6 - S/MIME CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 7 - Object Signing CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] > 0 - SSL Client
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 1 - SSL Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 2 - S/MIME
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 3 - Object Signing
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 4 - Reserved for future use
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 5 - SSL CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 6 - S/MIME CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 7 - Object Signing CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] > 0 - SSL Client
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 1 - SSL Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 2 - S/MIME
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 3 - Object Signing
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 4 - Reserved for future use
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 5 - SSL CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 6 - S/MIME CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] 7 - Object Signing CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Other to finish
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] > Is this a critical extension [y/N]?
[ipa.ipatests.test_integration.host.Host.f23master.cmd9] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN certutil -L -d /home/ofayans/ipatests/testdb -n "external" -a > /home/ofayans/ipatests/testdb/ca.crt
[ipa.ipatests.test_integration.host.Host.f23master.cmd10] RUN certutil -L -d /home/ofayans/ipatests/testdb -n "external" -a > /home/ofayans/ipatests/testdb/ca.crt
[ipa.ipatests.test_integration.host.Host.f23master.cmd10] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['ipa-server-install', '-a', 'x2k1j5tdsl', '-p', 'x2k1j5tdsl', '--external-cert-file', '/home/ofayans/ipatests/testdb/ipa.crt', '--external-cert-file', '/home/ofayans/ipatests/testdb/ca.crt']
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] RUN ['ipa-server-install', '-a', 'x2k1j5tdsl', '-p', 'x2k1j5tdsl', '--external-cert-file', '/home/ofayans/ipatests/testdb/ipa.crt', '--external-cert-file', '/home/ofayans/ipatests/testdb/ca.crt']
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] The log file for this installation can be found in /var/log/ipaserver-install.log
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] ==============================================================================
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] This program will set up the FreeIPA Server.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] This includes:
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * Configure a stand-alone CA (dogtag) for certificate management
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * Configure the Network Time Daemon (ntpd)
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * Create and configure an instance of Directory Server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * Create and configure a Kerberos Key Distribution Center (KDC)
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * Configure Apache (httpd)
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * Configure DNS (bind)
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Warning: skipping DNS resolution of host f23master.pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Checking DNS domain pesen.net., please wait ...
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] The IPA Master Server will be configured with:
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Hostname: f23master.pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] IP address(es): 192.168.122.63
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Domain name: pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Realm name: PESEN.NET
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] BIND DNS server will be configured to serve IPA domain with:
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Forwarders: No forwarders
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Reverse zone(s): No reverse zone
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes 30 seconds
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/28]: creating certificate server user
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/28]: configuring certificate server instance
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [3/28]: stopping certificate server instance to update CS.cfg
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [4/28]: backing up CS.cfg
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [5/28]: disabling nonces
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [6/28]: set up CRL publishing
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [7/28]: enable PKIX certificate path discovery and validation
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [8/28]: starting certificate server instance
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [9/28]: creating RA agent certificate database
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [10/28]: importing CA chain to RA certificate database
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [11/28]: fixing RA database permissions
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [12/28]: setting up signing cert profile
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [13/28]: setting audit signing renewal to 2 years
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [14/28]: restarting certificate server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [15/28]: requesting RA certificate from CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [16/28]: issuing RA agent certificate
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [17/28]: adding RA agent as a trusted user
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [18/28]: authorizing RA to modify profiles
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [19/28]: configure certmonger for renewals
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [20/28]: configure certificate renewals
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [21/28]: configure RA certificate renewal
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [22/28]: configure Server-Cert certificate renewal
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [23/28]: Configure HTTP to proxy connections
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [24/28]: restarting certificate server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [25/28]: migrating certificate profiles to LDAP
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [26/28]: importing IPA certificate profiles
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [27/28]: adding default CA ACL
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [28/28]: updating IPA configuration
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring certificate server (pki-tomcatd).
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring directory server (dirsrv). Estimated time: 10 seconds
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/3]: configuring ssl for ds instance
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/3]: restarting directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [3/3]: adding CA certificate entry
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring directory server (dirsrv).
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring Kerberos KDC (krb5kdc). Estimated time: 30 seconds
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/9]: adding kerberos container to the directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/9]: configuring KDC
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [3/9]: initialize kerberos container
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [4/9]: adding default ACIs
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [5/9]: creating a keytab for the directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [6/9]: creating a keytab for the machine
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [7/9]: adding the password extension to the directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [8/9]: starting the KDC
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [9/9]: configuring KDC to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring Kerberos KDC (krb5kdc).
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring kadmin
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/2]: starting kadmin
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/2]: configuring kadmin to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring kadmin.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring ipa_memcached
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/2]: starting ipa_memcached
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/2]: configuring ipa_memcached to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring ipa_memcached.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring ipa-otpd
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/2]: starting ipa-otpd
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/2]: configuring ipa-otpd to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring ipa-otpd.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring ipa-custodia
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/5]: Generating ipa-custodia config file
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/5]: Making sure custodia container exists
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [3/5]: Generating ipa-custodia keys
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [4/5]: starting ipa-custodia
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [5/5]: configuring ipa-custodia to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring ipa-custodia.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring the web interface (httpd). Estimated time: 1 minute
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/21]: setting mod_nss port to 443
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/21]: setting mod_nss cipher suite
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [3/21]: setting mod_nss protocol list to TLSv1.0 - TLSv1.2
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [4/21]: setting mod_nss password file
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [5/21]: enabling mod_nss renegotiate
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [6/21]: adding URL rewriting rules
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [7/21]: configuring httpd
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [8/21]: configure certmonger for renewals
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [9/21]: setting up httpd keytab
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [10/21]: setting up ssl
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [11/21]: importing CA certificates from LDAP
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [12/21]: setting up browser autoconfig
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [13/21]: publish CA cert
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [14/21]: clean up any existing httpd ccache
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [15/21]: configuring SELinux for httpd
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [16/21]: create KDC proxy user
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [17/21]: create KDC proxy config
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [18/21]: enable KDC proxy
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [19/21]: restarting httpd
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [20/21]: configuring httpd to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [21/21]: enabling oddjobd
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring the web interface (httpd).
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Applying LDAP updates
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Upgrading IPA:
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/9]: stopping directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/9]: saving configuration
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [3/9]: disabling listeners
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [4/9]: enabling DS global lock
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [5/9]: starting directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [6/9]: upgrading server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [7/9]: stopping directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [8/9]: restoring configuration
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [9/9]: starting directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Restarting the directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Restarting the KDC
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring DNS (named)
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/11]: generating rndc key file
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/11]: adding DNS container
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [3/11]: setting up our zone
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [4/11]: setting up our own record
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [5/11]: setting up records for other masters
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [6/11]: adding NS record to the zones
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [7/11]: setting up CA record
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [8/11]: setting up kerberos principal
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [9/11]: setting up named.conf
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [10/11]: configuring named to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [11/11]: changing resolv.conf to point to ourselves
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring DNS (named).
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring DNS key synchronization service (ipa-dnskeysyncd)
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [1/7]: checking status
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [2/7]: setting up bind-dyndb-ldap working directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [3/7]: setting up kerberos principal
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [4/7]: setting up SoftHSM
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [5/7]: adding DNSSEC containers
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [6/7]: creating replica keys
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] [7/7]: configuring ipa-dnskeysyncd to start on boot
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Done configuring DNS key synchronization service (ipa-dnskeysyncd).
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Restarting ipa-dnskeysyncd
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Restarting named
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Restarting the web server
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring client side components
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Using existing certificate '/etc/ipa/ca.crt'.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Client hostname: f23master.pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Realm: PESEN.NET
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] DNS Domain: pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] IPA Server: f23master.pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] BaseDN: dc=pesen,dc=net
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Skipping synchronizing time with NTP server.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] New SSSD config will be created
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configured sudoers in /etc/nsswitch.conf
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configured /etc/sssd/sssd.conf
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] trying https://f23master.pesen.net/ipa/json
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Forwarding 'ping' to json server 'https://f23master.pesen.net/ipa/json'
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Forwarding 'ca_is_enabled' to json server 'https://f23master.pesen.net/ipa/json'
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Systemwide CA database updated.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Forwarding 'host_mod' to json server 'https://f23master.pesen.net/ipa/json'
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] SSSD enabled
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configured /etc/openldap/ldap.conf
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configured /etc/ssh/ssh_config
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configured /etc/ssh/sshd_config
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Configuring pesen.net as NIS domain.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Client configuration complete.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] ==============================================================================
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Setup complete
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Next steps:
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] 1. You must make sure these network ports are open:
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] TCP Ports:
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * 80, 443: HTTP/HTTPS
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * 389, 636: LDAP/LDAPS
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * 88, 464: kerberos
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * 53: bind
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] UDP Ports:
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * 88, 464: kerberos
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * 53: bind
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] * 123: ntp
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] 2. You can now obtain a kerberos ticket using the command: 'kinit admin'
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] This ticket will allow you to use the IPA tools (e.g., ipa user-add)
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] and the web user interface.
[ipa.ipatests.test_integration.host.Host.f23master.cmd11]
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Be sure to back up the CA certificates stored in /root/cacert.p12
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] These files are required to create replicas. The password for these
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] files is the Directory Manager password
[ipa.ipatests.test_integration.host.Host.f23master.cmd11] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['kinit', 'admin']
[ipa.ipatests.test_integration.host.Host.f23master.cmd12] RUN ['kinit', 'admin']
[ipa.ipatests.test_integration.host.Host.f23master.cmd12] Password for admin at PESEN.NET:
[ipa.ipatests.test_integration.host.Host.f23master.cmd12] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['ipa', 'user-show', 'admin']
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] RUN ['ipa', 'user-show', 'admin']
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] User login: admin
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] Last name: Administrator
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] Home directory: /home/admin
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] Login shell: /bin/bash
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] UID: 269200000
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] GID: 269200000
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] Account disabled: False
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] Password: True
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] Member of groups: admins, trust admins
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] Kerberos keys available: True
[ipa.ipatests.test_integration.host.Host.f23master.cmd13] Exit code: 0
.[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['ipa', 'domainlevel-get']
[ipa.ipatests.test_integration.host.Host.f23master.cmd14] RUN ['ipa', 'domainlevel-get']
[ipa.ipatests.test_integration.host.Host.f23master.cmd14] -----------------------
[ipa.ipatests.test_integration.host.Host.f23master.cmd14] Current domain level: 1
[ipa.ipatests.test_integration.host.Host.f23master.cmd14] -----------------------
[ipa.ipatests.test_integration.host.Host.f23master.cmd14] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['ipa-server-install', '--uninstall', '-U', '--ignore-topology-disconnect']
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] RUN ['ipa-server-install', '--uninstall', '-U', '--ignore-topology-disconnect']
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Shutting down all IPA services
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring ntpd
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Configuring certmonger to stop tracking system certificates for KRA
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Configuring certmonger to stop tracking system certificates for CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring CA
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring named
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring ipa-dnskeysyncd
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring web server
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring krb5kdc
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring kadmin
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring directory server
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring ipa-custodia
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring ipa_memcached
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring ipa-otpd
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Removing Kerberos service principals from /etc/krb5.keytab
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Failed to remove Kerberos service principals: Command '/usr/sbin/ipa-rmkeytab -k /etc/krb5.keytab -r PESEN.NET' returned non-zero exit status 5
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Disabling client Kerberos and LDAP configurations
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Restoring client configuration files
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Unconfiguring the NIS domain.
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] nscd daemon is not installed, skip configuration
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] nslcd daemon is not installed, skip configuration
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Systemwide CA database updated.
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Client uninstall complete.
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Removing IPA client configuration
[ipa.ipatests.test_integration.host.Host.f23master.cmd15] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['pkidestroy', '-s', 'CA', '-i', 'pki-tomcat']
[ipa.ipatests.test_integration.host.Host.f23master.cmd16] RUN ['pkidestroy', '-s', 'CA', '-i', 'pki-tomcat']
[ipa.ipatests.test_integration.host.Host.f23master.cmd16] ERROR: PKI instance '/var/lib/pki/pki-tomcat' does NOT exist!
[ipa.ipatests.test_integration.host.Host.f23master.cmd16]
[ipa.ipatests.test_integration.host.Host.f23master.cmd16] Exit code: 255
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['rm', '-rf', '/var/log/pki/pki-tomcat', '/etc/sysconfig/pki-tomcat', '/etc/sysconfig/pki/tomcat/pki-tomcat', '/var/lib/pki/pki-tomcat', '/etc/pki/pki-tomcat', '/var/lib/ipa/replica-info-f23master.pesen.net.gpg']
[ipa.ipatests.test_integration.host.Host.f23master.cmd17] RUN ['rm', '-rf', '/var/log/pki/pki-tomcat', '/etc/sysconfig/pki-tomcat', '/etc/sysconfig/pki/tomcat/pki-tomcat', '/var/lib/pki/pki-tomcat', '/etc/pki/pki-tomcat', '/var/lib/ipa/replica-info-f23master.pesen.net.gpg']
[ipa.ipatests.test_integration.host.Host.f23master.cmd17] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN if [ -d '/home/ofayans/ipatests/file_backup'/ ]; then cp -arvf '/home/ofayans/ipatests/file_backup'/* /; fi ; (find /home/ofayans/ipatests/file_backup | sed 's/\/home\/ofayans\/ipatests\/file_backup//g' | sed '/^$/d' | xargs -d '
' /sbin/restorecon -v ||:)
[ipa.ipatests.test_integration.host.Host.f23master.cmd18] RUN if [ -d '/home/ofayans/ipatests/file_backup'/ ]; then cp -arvf '/home/ofayans/ipatests/file_backup'/* /; fi ; (find /home/ofayans/ipatests/file_backup | sed 's/\/home\/ofayans\/ipatests\/file_backup//g' | sed '/^$/d' | xargs -d '
' /sbin/restorecon -v ||:)
[ipa.ipatests.test_integration.host.Host.f23master.cmd18] find: ‘/home/ofayans/ipatests/file_backup’: No such file or directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd18] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['xargs', '-d', '\\n', '-a', '/home/ofayans/ipatests/file_remove', 'rm', '-vf']
[ipa.ipatests.test_integration.host.Host.f23master.cmd19] RUN ['xargs', '-d', '\\n', '-a', '/home/ofayans/ipatests/file_remove', 'rm', '-vf']
[ipa.ipatests.test_integration.host.Host.f23master.cmd19] xargs: Cannot open input file ‘/home/ofayans/ipatests/file_remove’: No such file or directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd19] Exit code: 1
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['rm', '-rvf', '/home/ofayans/ipatests/file_backup', '/home/ofayans/ipatests/file_remove']
[ipa.ipatests.test_integration.host.Host.f23master.cmd20] RUN ['rm', '-rvf', '/home/ofayans/ipatests/file_backup', '/home/ofayans/ipatests/file_remove']
[ipa.ipatests.test_integration.host.Host.f23master.cmd20] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] READ /home/ofayans/ipatests/backup_hostname
[ipa.ipatests.test_integration.tasks] No hostname backed up on f23master.pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN if [ -d '/home/ofayans/ipatests/file_backup'/ ]; then cp -arvf '/home/ofayans/ipatests/file_backup'/* /; fi ; (find /home/ofayans/ipatests/file_backup | sed 's/\/home\/ofayans\/ipatests\/file_backup//g' | sed '/^$/d' | xargs -d '
' /sbin/restorecon -v ||:)
[ipa.ipatests.test_integration.host.Host.f23master.cmd21] RUN if [ -d '/home/ofayans/ipatests/file_backup'/ ]; then cp -arvf '/home/ofayans/ipatests/file_backup'/* /; fi ; (find /home/ofayans/ipatests/file_backup | sed 's/\/home\/ofayans\/ipatests\/file_backup//g' | sed '/^$/d' | xargs -d '
' /sbin/restorecon -v ||:)
[ipa.ipatests.test_integration.host.Host.f23master.cmd21] find: ‘/home/ofayans/ipatests/file_backup’: No such file or directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd21] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['xargs', '-d', '\\n', '-a', '/home/ofayans/ipatests/file_remove', 'rm', '-vf']
[ipa.ipatests.test_integration.host.Host.f23master.cmd22] RUN ['xargs', '-d', '\\n', '-a', '/home/ofayans/ipatests/file_remove', 'rm', '-vf']
[ipa.ipatests.test_integration.host.Host.f23master.cmd22] xargs: Cannot open input file ‘/home/ofayans/ipatests/file_remove’: No such file or directory
[ipa.ipatests.test_integration.host.Host.f23master.cmd22] Exit code: 1
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['rm', '-rvf', '/home/ofayans/ipatests/file_backup', '/home/ofayans/ipatests/file_remove']
[ipa.ipatests.test_integration.host.Host.f23master.cmd23] RUN ['rm', '-rvf', '/home/ofayans/ipatests/file_backup', '/home/ofayans/ipatests/file_remove']
[ipa.ipatests.test_integration.host.Host.f23master.cmd23] Exit code: 0
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] READ /home/ofayans/ipatests/backup_hostname
[ipa.ipatests.test_integration.tasks] No hostname backed up on f23master.pesen.net
[ipa.ipatests.test_integration.host.Host.f23master.ParamikoTransport] RUN ['rm', '-rvf', '/home/ofayans/ipatests']
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] RUN ['rm', '-rvf', '/home/ofayans/ipatests']
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed ‘/home/ofayans/ipatests/env.sh’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed ‘/home/ofayans/ipatests/noise.txt’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed ‘/home/ofayans/ipatests/pwdfile.txt’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed ‘/home/ofayans/ipatests/testdb/secmod.db’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed ‘/home/ofayans/ipatests/testdb/cert8.db’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed ‘/home/ofayans/ipatests/testdb/key3.db’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed ‘/home/ofayans/ipatests/testdb/ipa.crt’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed ‘/home/ofayans/ipatests/testdb/ca.crt’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed directory: ‘/home/ofayans/ipatests/testdb’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] removed directory: ‘/home/ofayans/ipatests’
[ipa.ipatests.test_integration.host.Host.f23master.cmd24] Exit code: 0
========================== 1 passed in 397.84 seconds ==========================
More information about the Freeipa-devel
mailing list