Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-129846

Ansible role-based install of IdM fails

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-10.1
    • ansible-freeipa
    • None
    • None
    • None
    • rhel-idm-zta
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • x86_64
    • None

      What were you trying to do that didn't work?

      Attempting to install IdM on a brand-new RHEL 10 install via the redhat.rhel_idm.ipaserver role

      What is the impact of this issue to you?

      Unable to install IdM on RHEL 10

      Please provide the package NVR for which the bug is seen:

      ipa-server-4.12.2-24.el10

      How reproducible is this bug?:

      Always

      Steps to reproduce

      1. Install new server with RHEL 10, BaseOS and AppStream repos only
      2. Fully update server
      3. Using attached playbook, attempt to install IdM

      Expected results

      IdM initial server installed and functional

      Actual results

      TASK [redhat.rhel_idm.ipaserver : Install - Setup DS] **************************
      fatal: [ipa1.lab.jbho.me]: FAILED! => {"changed": false, "module_stderr": "Shared connection to ipa1.lab.jbho.me closed.\r\n", "module_stdout": "Failed to load graceperiod-conf.ldif: CalledProcessError(Command ['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/graceperiod-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-LAB-JBHO-ME.socket', '-Y', 'EXTERNAL'] returned non-zero exit status 53: 'ldap_initialize( ldapi://%2Frun%2Fslapd-LAB-JBHO-ME.socket/??base )
      nSASL/EXTERNAL authentication started
      nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
      nSASL SSF: 0
      nldap_add: Server is unwilling to perform (53)\\n
      tadditional info: Invalid plugin path /usr/lib64/dirsrv/plugins/libipa_graceperiod.so - failed to open library\\n')\r\nTraceback (most recent call last):\r\n  File \"/usr/lib/python3.12/site-packages/ipapython/ipaldap.py\", line 1095, in error_handler\r\n    yield\r\n  File \"/usr/lib/python3.12/site-packages/ipapython/ipaldap.py\", line 1607, in find_entries\r\n    raise e\r\n  File \"/usr/lib/python3.12/site-packages/ipapython/ipaldap.py\", line 1567, in find_entries\r\n    result = self.conn.result3(id, 0)\r\n             ^^^^^^^^^^^^^^^^^^^^^^^\r\n  File \"/usr/lib64/python3.12/site-packages/ldap/ldapobject.py\", line 543, in result3\r\n    resp_type, resp_data, resp_msgid, decoded_resp_ctrls, retoid, retval = self.result4(\r\n                                                                           ^^^^^^^^^^^^^\r\n  File \"/usr/lib64/python3.12/site-packages/ldap/ldapobject.py\", line 553, in result4\r\n    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)\r\n                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n  File \"/usr/lib64/python3.12/site-packages/ldap/ldapobject.py\", line 128, in _ldap_call\r\n    result = func(args,*kwargs)\r\n             ^^^^^^^^^^^^^^^^^^^^\r\nldap.NO_SUCH_OBJECT:

      {'msgtype': 101, 'msgid': 2, 'result': 32, 'desc': 'No such object', 'ctrls': []}

      \r\n\r\nDuring handling of the above exception, another exception occurred:\r\n\r\nTraceback (most recent call last):\r\n  File \"/usr/lib/python3.12/site-packages/ipaserver/install/dsinstance.py\", line 766, in config_graceperiod_module\r\n    api.Backend.ldap2.get_entry(dn)\r\n  File \"/usr/lib/python3.12/site-packages/ipapython/ipaldap.py\", line 1962, in get_entry\r\n    return super(LDAPCache, self).get_entry(\r\n           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n  File \"/usr/lib/python3.12/site-packages/ipapython/ipaldap.py\", line 1662, in get_entry\r\n    entries = self.get_entries(\r\n              ^^^^^^^^^^^^^^^^\r\n  File \"/usr/lib/python3.12/site-packages/ipapython/ipaldap.py\", line 1473, in get_entries\r\n    entries, truncated = self.find_entries(\r\n                         ^^^^^^^^^^^^^^^^^^\r\n  File \"/usr/lib/python3.12/site-packages/ipapython/ipaldap.py\", line 1547, in find_entries\r\n    with self.error_handler():\r\n         ^^^^^^^^^^^^^^^^^^^^\r\n  File \"/usr/lib64/python3.12/contextlib.py\", line 158, in _exit_\r\n    self.gen.throw(value)\r\n  File \"/usr/lib/python3.12/site-packages/ipapython/ipaldap.py\", line 1105, in error_handler\r\n    raise errors.NotFound(reason=arg_desc or 'no such entry')\r\nipalib.errors.NotFound: no such entry\r\n\r\nDuring handling of the above exception, another exception occurred:\r\n\r\nTraceback (most recent call last):\r\n  File \"/home/opie/.ansible/tmp/ansible-tmp-1763586408.6212244-96-104572895222525/AnsiballZ_ipaserver_setup_ds.py\", line 107, in <module>\r\n    _ansiballz_main()\r\n  File \"/home/opie/.ansible/tmp/ansible-tmp-1763586408.6212244-96-104572895222525/AnsiballZ_ipaserver_setup_ds.py\", line 99, in _ansiballz_main\r\n    invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)\r\n  File \"/home/opie/.ansible/tmp/ansible-tmp-1763586408.6212244-96-104572895222525/AnsiballZ_ipaserver_setup_ds.py\", line 47, in invoke_module\r\n    runpy.run_module(mod_name='ansible_collections.redhat.rhel_idm.plugins.modules.ipaserver_setup_ds', init_globals=dict(_module_fqn='ansible_collections.redhat.rhel_idm.plugins.modules.ipaserver_setup_ds', _modlib_path=modlib_path),\r\n  File \"<frozen runpy>\", line 226, in run_module\r\n  File \"<frozen runpy>\", line 98, in _run_module_code\r\n  File \"<frozen runpy>\", line 88, in _run_code\r\n  File \"/tmp/ansible_redhat.rhel_idm.ipaserver_setup_ds_payload_2jd3ncqc/ansible_redhat.rhel_idm.ipaserver_setup_ds_payload.zip/ansible_collections/redhat/rhel_idm/plugins/modules/ipaserver_setup_ds.py\", line 260, in <module>\r\n  File \"/tmp/ansible_redhat.rhel_idm.ipaserver_setup_ds_payload_2jd3ncqc/ansible_redhat.rhel_idm.ipaserver_setup_ds_payload.zip/ansible_collections/redhat/rhel_idm/plugins/modules/ipaserver_setup_ds.py\", line 228, in main\r\n  File \"/usr/lib/python3.12/site-packages/ipaserver/install/dsinstance.py\", line 329, in create_instance\r\n    self.start_creation(runtime=30)\r\n  File \"/usr/lib/python3.12/site-packages/ipaserver/install/service.py\", line 688, in start_creation\r\n    run_step(full_msg, method)\r\n  File \"/usr/lib/python3.12/site-packages/ipaserver/install/service.py\", line 674, in run_step\r\n    method()\r\n  File \"/usr/lib/python3.12/site-packages/ipaserver/install/dsinstance.py\", line 768, in config_graceperiod_module\r\n    self._ldap_mod(\"graceperiod-conf.ldif\")\r\n  File \"/usr/lib/python3.12/site-packages/ipaserver/install/service.py\", line 410, in _ldap_mod\r\n    ipautil.run(args, nolog=nologlist)\r\n  File \"/usr/lib/python3.12/site-packages/ipapython/ipautil.py\", line 607, in run\r\n    raise CalledProcessError(\r\nipapython.ipautil.CalledProcessError: CalledProcessError(Command ['/usr/bin/ldapmodify', '-v', '-f', '/usr/share/ipa/graceperiod-conf.ldif', '-H', 'ldapi://%2Frun%2Fslapd-LAB-JBHO-ME.socket', '-Y', 'EXTERNAL'] returned non-zero exit status 53: 'ldap_initialize( ldapi://%2Frun%2Fslapd-LAB-JBHO-ME.socket/??base )
      nSASL/EXTERNAL authentication started
      nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
      nSASL SSF: 0
      nldap_add: Server is unwilling to perform (53)\\n
      tadditional info: Invalid plugin path /usr/lib64/dirsrv/plugins/libipa_graceperiod.so - failed to open library\\n')\r\n", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1}

        1. inventory-idm
          0.1 kB
        2. idm.yml
          0.7 kB

              twoerner Thomas Woerner
              rhn-gps-jberning John Berninger
              Thomas Woerner Thomas Woerner
              Varun Mylaraiah Varun Mylaraiah
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: