Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-41186

When setting up AD according to docs, when httpd is not installed, keytab is not created and no error shown

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • False
    • sat-endeavour
    • None
    • None
    • None
    • None

      Description of problem:

      When I attempt to setup Active Directory according to:

      https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/configuring_authentication_for_red_hat_satellite_users/configuring-kerberos-sso-for-active-directory-users-in-project_authentication

      I am supposed to run

      KRB5_KTNAME=FILE:/etc/httpd/conf/http.keytab net ads keytab create HTTP -U Administrator -s /etc/samba/smb.conf
      

      This should create a keytab file in /etc/httpd/conf/http.keytab.

      However, when the Satellite is not installed yet, /etc/httpd/ directory doesn't exist. The command then fails silently: doesn't output any error but also doesn't create a keytab.

      Installing httpd before running the "net ads" command fixes the issue:

      dnf install httpd -y 

      How reproducible:

      Deterministic

      Is this issue a regression from an earlier version:

      Probably not

      Steps to Reproduce:

      1. Have a RHEL machine without httpd installed (so, no Satellite installed yet)

      2. Follow the linked documentation

      Actual behavior:
      After running the "net ads" command, no error is shown and no keytab is created

      Expected behavior:
      1) an error should be shown... that's an issue in samba package:

      # rpm -qf $(which net)
      samba-common-tools-4.22.4-6.el9_7.x86_64 

      2) our docs should instruct to install httpd before attempting to create a keytab

      Business Impact / Additional info:

      I'm not aware of anyone hitting this issue

              Unassigned Unassigned
              lhellebr@redhat.com Lukas Hellebrandt
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: