The test TestIPAMigratewithBackupRestore is failing in IDM-CI environment during the installation of the 2nd server.
TestIPAMigratewithBackupRestore
The test installs server1 as source, then server2 as destination and performs a migration from source to destination using a backup done on the source. In IDM-CI environment the installation of server2 fails because the DNS zone is already handled by the first server.
DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:513 RUN ['ipa-server-install', '-n', 'ufreeipa.test', '-r', 'UFREEIPA.TEST', '-p', 'Secret.123', '-a', 'Secret.123', '--domain-level=1', '--dirsrv-config-file', '/root/ipatests/ipatests_dse.ldif', '-U', '--setup-dns', '--forwarder', '10.11.5.19', '--auto-reverse', '--setup-kra'] DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 Checking DNS domain ufreeipa.test., please wait ... DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 The log file for this installation can be found in /var/log/ipaserver-install.log DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 ============================================================================== DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 This program will set up the IPA Server. DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 Version 4.13.0.dev202509181524+git DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 This includes: DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 * Configure a stand-alone CA (dogtag) for certificate management DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 * Configure the NTP client (chronyd) DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 * Create and configure an instance of Directory Server DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 * Create and configure a Kerberos Key Distribution Center (KDC) DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 * Configure Apache (httpd) DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 * Configure KRA (dogtag) for secret management DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 * Configure DNS (bind) DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 * Configure SID generation DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 * Configure the KDC to enable PKINIT DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 DNS zone ufreeipa.test. already exists in DNS and is handled by server(s): master.ufreeipa.test. DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 Warning: skipping DNS resolution of host replica1.ufreeipa.test DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:557 The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information DEBUG ipatests.pytest_ipa.integration.host.Host.replica1.cmd37:transport.py:217 Exit code: 1
The workaround: install with --allow-zone-overlap (this workaround is already used for the other test classes in the same test file).
--allow-zone-overlap
See also https://pagure.io/freeipa/issue/9697 with the fix from 411b29d ipatests: install master with allow-zone-overlap
Metadata Update from @frenaud: - Issue assigned to frenaud
Metadata Update from @frenaud: - Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7952
master:
ipa-4-12:
Metadata Update from @frenaud: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)