freeipa

#5455 both ipa-ca-install and ipa-kra-install accept replica file with domain level 1
Closed: Fixed Opened by ofayans.

Closed: Fixed
Reopen Issue

ipa-ca-install and ipa-kra-install should throw an error when called with replica file as one of the arguments under domain level 1
In reality both commands get successfully executed.
Steps to reproduce:
1. Setup master with domain level 0
2. Prepare and install a replica without '--setup-ca'
3. Raise domain level to 1
4. run ipa-ca-install on replica with replica file provided as the last positional argument
5. run ipa-kra-install on master
6. run ipa-kra-install on replica with replica file provided as the last positional argument

I can reproduce ipa-ca-install.

I cannot reproduce ipa-kra-install (it always refuse to install with replica file).

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=837369 (Red Hat Enterprise Linux 7)

I still observe ipa-kra-install accepting replica file.
Steps to reproduce:
1. Install master with domain level0
2. Install kra on master
3. Prepare a replica file and install a replica from it
4. Raise domain level on master to 1
5. run 

ipa-kra-install -U -p <dirman_password> <path_to_replica_file>

Expected result:
The command fails

Actual result:
Command passes

I am using the packages built yesterday from the latest upstream branch.

Reason might be that patch for this ticket is still on review.

I haven't been able to reproduce it, so my patch does not fix it, I'm trying to reproduce it again now.

I can reproduce it now, I have to investigate why with this particular setup it works

master:

  • fa2fbc680aea8f9cb43238ae0103e5030324f3f6 ipa-ca-install: error when replica file is passed with domain level > 0
  • dcaf57271c91f75733e42048683a04bde4ea9b2a KRA install: show installation message only if install really started
  • ab8cba61c08571e4cbce1246bcbf820d3e337506 ipa-kra-install: error when replica file is passed with domain level > 0

Metadata Update from @ofayans:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.3
Metadata
None
None
None
Normal
defect
IPA
1
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.