[Freeipa-users] ipa: ERROR: non-public: TypeError -- ipa trust-add crash

[Alexander Bokovoy]

On Tue, 21 Apr 2015, g.fer.ordas at unicyber.co.uk wrote:
>
>
>Hi
>
>This is for freeipa-server-4.1.4-1.el7.centos.x86_64
>
>When Running: ipa trust-add --type=ad ad.domain.com --admin <ad_user>
>--password
>ipa: ERROR: an internal error has occurred
>
>Some more info at : /var/log/httpd/error_log
>
>----
>num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
>data_total=116, this_data=116, max_data=4280, param_offset=84,
>param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
>smb_signing_md5: sequence number 14
>smb_signing_sign_pdu: sent SMB signature of
>[0000] FD A6 9F 6B 2F 72 8D 4F ...k/r.O
>smb_signing_md5: sequence number 15
>smb_signing_check_pdu: seq 15: got good SMB signature of
>[0000] B3 5C 71 C9 1F E4 21 35 .q...!5
>rpc reply data:
>[0000] 00 00 02 00 08 00 00 00 32 00 34 00 04 00 02 00 ........ 2.4.....
>[0010] 32 00 34 00 08 00 02 00 00 00 00 00 03 00 00 00 2.4..... ........
>[0020] 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
>[0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
>[0040] 00 00 00 00 1A 00 00 00 00 00 00 00 19 00 00 00 ........ ........
>[00C0] 6D 00 00 00 00 00 00 00 m.......
>[Mon Apr 20 22:59:48.849462 2015] [:error] [pid 32475] ipa: ERROR:
>non-public: TypeError: default/librpc/gen_ndr/py_lsa.c:9436: Expected
>type 'security.dom_sid' for 'py_dom_sid' of type 'NoneType'
>[Mon Apr 20 22:59:48.849484 2015] [:error] [pid 32475] Traceback (most
>recent call last):
>[Mon Apr 20 22:59:48.849486 2015] [:error] [pid 32475] File
>"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 349, in
>wsgi_execute
>[Mon Apr 20 22:59:48.849489 2015] [:error] [pid 32475] result =
>self.Command[name](*args, **options)
>[Mon Apr 20 22:59:48.849491 2015] [:error] [pid 32475] File
>"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 439, in
>__call__
>[Mon Apr 20 22:59:48.849492 2015] [:error] [pid 32475] ret =
>self.run(*args, **options)
>[Mon Apr 20 22:59:48.849494 2015] [:error] [pid 32475] File
>"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 754, in run
>[Mon Apr 20 22:59:48.849496 2015] [:error] [pid 32475] return
>self.execute(*args, **options)
>[Mon Apr 20 22:59:48.849498 2015] [:error] [pid 32475] File
>"/usr/lib/python2.7/site-packages/ipalib/plugins/trust.py", line 474, in
>execute
>[Mon Apr 20 22:59:48.849500 2015] [:error] [pid 32475] result =
>self.execute_ad(full_join, *keys, **options)
>[Mon Apr 20 22:59:48.849502 2015] [:error] [pid 32475] File
>"/usr/lib/python2.7/site-packages/ipalib/plugins/trust.py", line 709, in
>execute_ad
>[Mon Apr 20 22:59:48.849504 2015] [:error] [pid 32475] self.realm_passwd
>[Mon Apr 20 22:59:48.849506 2015] [:error] [pid 32475] File
>"/usr/lib/python2.7/site-packages/ipaserver/dcerpc.py", line 1222, in
>join_ad_full_credentials
>[Mon Apr 20 22:59:48.849507 2015] [:error] [pid 32475]
>self.remote_domain.establish_trust(self.local_domain, trustdom_pass)
>[Mon Apr 20 22:59:48.849509 2015] [:error] [pid 32475] File
>"/usr/lib/python2.7/site-packages/ipaserver/dcerpc.py", line 963, in
>establish_trust
>[Mon Apr 20 22:59:48.849511 2015] [:error] [pid 32475]
>self._pipe.DeleteTrustedDomain(self._policy_handle, res.info_ex.sid)
>[Mon Apr 20 22:59:48.849513 2015] [:error] [pid 32475] TypeError:
>default/librpc/gen_ndr/py_lsa.c:9436: Expected type 'security.dom_sid'
>for 'py_dom_sid' of type 'NoneType'
>[Mon Apr 20 22:59:48.849782 2015] [:error] [pid 32475] ipa: INFO:
>[jsonserver_kerb] admin at ldap.domain.com: trust_add(u'ad.domain.com',
>trust_type=u'ad', realm_admin=u'ad_user', realm_passwd=u'********',
>all=False, raw=False, version=u'2.114'): TypeError
>
>----
>
>Have you seen any of this before?
No.

Can you file a bug or ticket and attach full httpd's error_log there?

-- 
/ Alexander Bokovoy