freeipa

#7240 ipa-dnskeysyncd broken (and ipactl doesn't tell)
Closed: fixed Opened by cheimes.

Closed: fixed
Reopen Issue
  • Fedora 27 X86_64
  • freeipa-server-4.6.1-3.fc27.x86_64
  • python-ldap-2.4.25-6.fc27.x86_64

The ipa-dnskeysyncd daemon is failing with a PyASN1 error. It looks like python-ldap's syncrepl is broken.

Further more there seems to be a bug in ipactl. Although the service is marked as FAILURE, ipactl shows the process as running correctly. 

[root@vm-193 cheimes]# ipactl status
Directory Service: RUNNING
krb5kdc Service: RUNNING
kadmin Service: RUNNING
named Service: RUNNING
httpd Service: RUNNING
ipa-custodia Service: RUNNING
ntpd Service: RUNNING
pki-tomcatd Service: RUNNING
ipa-otpd Service: RUNNING
ipa-dnskeysyncd Service: RUNNING
ipa: INFO: The ipactl command was successful
[root@vm-193 cheimes]# systemctl status ipa-dnskeysyncd
● ipa-dnskeysyncd.service - IPA key daemon
   Loaded: loaded (/usr/lib/systemd/system/ipa-dnskeysyncd.service; disabled; vendor preset: disabled)
   Active: activating (auto-restart) (Result: exit-code) since Tue 2017-11-07 12:45:41 CET; 928ms ago
  Process: 70068 ExecStart=/usr/libexec/ipa/ipa-dnskeysyncd (code=exited, status=1/FAILURE)
 Main PID: 70068 (code=exited, status=1/FAILURE)
Nov 07 12:45:41 vm-193.abc.idm.lab.eng.brq.redhat.com systemd[1]: ipa-dnskeysyncd.service: Unit entered failed state.
Nov 07 12:45:41 vm-193.abc.idm.lab.eng.brq.redhat.com systemd[1]: ipa-dnskeysyncd.service: Failed with result 'exit-code'.
[root@vm-193 cheimes]# /usr/libexec/ipa/ipa-dnskeysyncd
ipa-dnskeysyncd: INFO     LDAP bind...
ipa-dnskeysyncd: INFO     Commencing sync process
Traceback (most recent call last):
  File "/usr/libexec/ipa/ipa-dnskeysyncd", line 116, in <module>
    while ldap_connection.syncrepl_poll(all=1, msgid=ldap_search):
  File "/usr/lib64/python2.7/site-packages/ldap/syncrepl.py", line 393, in syncrepl_poll
    sim = SyncInfoMessage(resp)
  File "/usr/lib64/python2.7/site-packages/ldap/syncrepl.py", line 271, in __init__
    self.newcookie = str(comp)
  File "/usr/lib/python2.7/site-packages/pyasn1/type/univ.py", line 939, in __str__
    return str(self._value)
  File "/usr/lib/python2.7/site-packages/pyasn1/type/base.py", line 186, in plug
    raise error.PyAsn1Error('Uninitialized ASN.1 value ("%s" attribute looked up)' % name)
pyasn1.error.PyAsn1Error: Uninitialized ASN.1 value ("__str__" attribute looked up)

syncrepl issue: https://bugzilla.redhat.com/show_bug.cgi?id=1489184

python-ldap-2.4.25-9.fc27 (available in updates-testing) fixes the issue. Need to bump version in freeipa.spec.in

Metadata Update from @cheimes:
- Issue assigned to cheimes

Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/1530

Metadata Update from @cheimes:
- Issue priority set to: normal
- Issue set to the milestone: FreeIPA 4.6.4

master:

  • 7619fa41549d7206b04511fbabb4c39f648a486c Bump python-ldap version to fix syncrepl bug

ipa-4-6:

  • 37773248fb022dc48552089fa2215785cc3523c6 Bump python-ldap version to fix syncrepl bug

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
Normal
https://github.com/freeipa/freeipa/pull/1530
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.