[Freeipa-users] Freeipa 4.3.0 replica installation fails with DuplicateEntry: This entry already exists

Mon Jan 18 11:24:13 UTC 2016

On 01/18/2016 11:04 AM, Ludwig Krispenz wrote:
>
> On 01/18/2016 04:47 AM, Nathan Peters wrote:
>>
>> This is another issue I'm not sure how to debug or solve in 4.3.0.  A
>> failed replica installation left a replica with stuff in the tree, but
>> not configured properly on the localhost.  I did ipa-server-install
>> --uninstall as suggested by the installation program and it deleted
>> the local copy of the data, but did not clean the tree.
>>
>> Now all subsequent installations are failing with some duplicate entry
>> error.
>>
>> All packages are up to date so this is not the pki-ca 10.2.6-13 fix
>> issue.  I've checked the whole tree for any references to the old copy
>> of the master but I can't find them.
>>
>> That error log is typically unhelpful as it doesn't tell me what entry
>> or where it is looking or finding a duplicate or I would just go
>> delete it myself.
>>
> look at the DS access log, you should see an ADD operation with
> RESULT  err=68 tag=105

According to code it's most likely
  cn=replica,cn=$DOMAIN_SUFFIX,cn=mapping tree,cn=config

I don't know why it happens because installer should add it only if the 
entry does not exist. Would be worth to check the DS access log if base 
search(which should happen before the add) for the dn fails or succeeds.

>>
>> 2016-01-18T03:29:55Z DEBUG Fetching nsDS5ReplicaId from master
>> [attempt 1/5]
>>
>> 2016-01-18T03:29:55Z DEBUG Successfully updated nsDS5ReplicaId.
>>
>> 2016-01-18T03:29:55Z DEBUG Traceback (most recent call last):
>>
>> File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
>> line 447, in start_creation
>>
>> run_step(full_msg, method)
>>
>> File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
>> line 437, in run_step
>>
>> method()
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
>> line 413, in __setup_replica
>>
>> repl.setup_promote_replication(self.master_fqdn)
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py",
>> line 1589, in setup_promote_replication
>>
>> self.basic_replication_setup(r_conn, r_id, self.repl_man_dn, None)
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py",
>> line 983, in basic_replication_setup
>>
>> self.replica_config(conn, replica_id, repldn)
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py",
>> line 467, in replica_config
>>
>> conn.add_entry(entry)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line
>> 1442, in add_entry
>>
>> self.conn.add_s(str(entry.dn), list(attrs.items()))
>>
>> File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
>>
>> self.gen.throw(type, value, traceback)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line
>> 947, in error_handler
>>
>> raise errors.DuplicateEntry()
>>
>> DuplicateEntry: This entry already exists
>>
>> 2016-01-18T03:29:55Z DEBUG   [error] DuplicateEntry: This entry
>> already exists
>>
>> 2016-01-18T03:29:55Z DEBUG   File
>> "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171,
>> in execute
>>
>> return_value = self.run()
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line
>> 318, in run
>>
>> cfgr.run()
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 310, in run
>>
>> self.execute()
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 332, in execute
>>
>> for nothing in self._executor():
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 372, in __runner
>>
>> self._handle_exception(exc_info)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 394, in _handle_exception
>>
>> six.reraise(*exc_info)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 362, in __runner
>>
>> step()
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 359, in <lambda>
>>
>> step = lambda: next(self.__gen)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/util.py",
>> line 81, in run_generator_with_yield_from
>>
>> six.reraise(*exc_info)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/util.py",
>> line 59, in run_generator_with_yield_from
>>
>> value = gen.send(prev_value)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 571, in _configure
>>
>> next(executor)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 372, in __runner
>>
>> self._handle_exception(exc_info)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 449, in _handle_exception
>>
>> self.__parent._handle_exception(exc_info)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 394, in _handle_exception
>>
>> six.reraise(*exc_info)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 446, in _handle_exception
>>
>> super(ComponentBase, self)._handle_exception(exc_info)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 394, in _handle_exception
>>
>> six.reraise(*exc_info)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 362, in __runner
>>
>> step()
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
>> line 359, in <lambda>
>>
>> step = lambda: next(self.__gen)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/util.py",
>> line 81, in run_generator_with_yield_from
>>
>> six.reraise(*exc_info)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/util.py",
>> line 59, in run_generator_with_yield_from
>>
>> value = gen.send(prev_value)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/install/common.py",
>> line 63, in _install
>>
>> for nothing in self._installer(self.parent):
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
>> line 1553, in main
>>
>> promote(self)
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
>> line 372, in decorated
>>
>> func(installer)
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
>> line 1275, in promote
>>
>> promote=True, pkcs12_info=dirsrv_pkcs12_info)
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
>> line 120, in install_replica_ds
>>
>> promote=promote,
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
>> line 398, in create_replica
>>
>> self.start_creation(runtime=60)
>>
>> File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
>> line 447, in start_creation
>>
>> run_step(full_msg, method)
>>
>> File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
>> line 437, in run_step
>>
>> method()
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
>> line 413, in __setup_replica
>>
>> repl.setup_promote_replication(self.master_fqdn)
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py",
>> line 1589, in setup_promote_replication
>>
>> self.basic_replication_setup(r_conn, r_id, self.repl_man_dn, None)
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py",
>> line 983, in basic_replication_setup
>>
>> self.replica_config(conn, replica_id, repldn)
>>
>> File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py",
>> line 467, in replica_config
>>
>> conn.add_entry(entry)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line
>> 1442, in add_entry
>>
>> self.conn.add_s(str(entry.dn), list(attrs.items()))
>>
>> File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
>>
>> self.gen.throw(type, value, traceback)
>>
>> File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line
>> 947, in error_handler
>>
>> raise errors.DuplicateEntry()
>>
>> 2016-01-18T03:29:55Z DEBUG The ipa-replica-install command failed,
>> exception: DuplicateEntry: This entry already exists
>>
>> 2016-01-18T03:29:55Z ERROR This entry already exists
>>
>> 2016-01-18T03:29:55Z ERROR The ipa-replica-install command failed. See
>> /var/log/ipareplica-install.log for more information
>>
>>
>>
>
>
>
>

-- 
Petr Vobornik