freeipa

#5574 Sysrestore did not restore state if a key is specified in mixed case
Closed: Fixed Opened by mbasti.

Closed: Fixed
Reopen Issue

When DNSSEC master is installed on server, after uninstallation state

[ods-enforcerd]
kasp_db_configured = True

is still there, even if uninstaller tries to remove it with restore_state().

This is caused by mixed case of "KASP_DB_configured" that is used in code (see that this has been saved as lower case in statefile). When I changed this value to lower case in code, it worked.

Possible solutions:

  1. fix sysrestore
  2. change key "KASP_DB_configured" to lower case and allow to store only keys in lower case

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1296196

Sysrestore state 'kasp_db_configured' giving information that OpenDNSSEC database kasp.db has been created. This database must be created only once, it contains metadata for DNSSEC keys. Reinitialization of kasp.sb database will cause lost of those information and DNSSEC keys will not be rotated, respectively new keys will be generated.

This bug causes that installer receives information that kasp.db has not been initialized yet and installer will recreate it. This may happen when user is reinstalling DNS subsystem.

master:

  • 129d97c10be570c3327445337c534e57a8c12ef6 Allow to used mixed case for sysrestore

ipa-4-3:

  • 44796fd275f9a1e577ce62a3fa557ace15ce4d88 Allow to used mixed case for sysrestore

ipa-4-2:

  • 2fce8fdc0dbb017eeda6bc3986472142cd712fe9 Allow to used mixed case for sysrestore

Metadata Update from @mbasti:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.2.4
Metadata
None
None
None
Low
defect
Installation
1
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.