Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.
Bug 1687125 - "Running ipa-client-install failed" [NEEDINFO]
Summary: "Running ipa-client-install failed"
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: realmd
Version: 29
Hardware: All
OS: All
unspecified
low
Target Milestone: ---
Assignee: IPA Maintainers
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-03-10 05:53 UTC by Albert Szostkiewicz
Modified: 2019-03-12 08:07 UTC (History)
17 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
sbose: needinfo? (tmdag)


Attachments (Terms of Use)

Description Albert Szostkiewicz 2019-03-10 05:53:22 UTC
Description of problem:
During fresh installation, when trying to use "Enterprise Login" we are getting very minimal and not helpful error info "Running ipa-client-install failed" which is too minimal to debug anything, especially during fresh installation.

Version-Release number of selected component (if applicable):
29


Steps to Reproduce:
1.Run fresh fedora 29 installation, click "Setup Enterprise Login"
2.Select domain and enter user/passwd
3.Type domain that is not qualified name like "mycomputer", provide admin password

Actual results:
"Running ipa-client-install failed" error

Expected results:
automatically generate mycomputer.example.com
OR provide info like:
"mycomputer is not fully qualified domain name"

Comment 1 Alexander Bokovoy 2019-03-11 12:08:58 UTC
This is hardly a FreeIPA issue because 'Setup Enterprise Login' does not run ipa-client-install directly. Instead, it runs 'realm join', I think, thus reporting is happening either in GNOME or realm.

Comment 2 Alexander Bokovoy 2019-03-11 12:09:52 UTC
Albert,

please provide journalctl output to show what was happening on the system.

Comment 3 Albert Szostkiewicz 2019-03-11 16:17:46 UTC
@Alexander: You're right, it's not a FreeIPA issue as Freeipa is providing info in journalctl that "it's not fully qualified domain name". Unfortunately that info is not parsed and provided to user during installation - I did figure it out only by creating local user, and trying to install ipa-client manually where i did get proper info. I will provide full journalctl soon

Comment 4 Alexander Bokovoy 2019-03-11 17:12:57 UTC
So the question is where to enforce this -- in UI (in GNOME) or in realm.

Sumit, is it possible to get that logic to realmd?

Comment 5 Sumit Bose 2019-03-12 07:14:49 UTC
(In reply to Alexander Bokovoy from comment #4)
> So the question is where to enforce this -- in UI (in GNOME) or in realm.
> 
> Sumit, is it possible to get that logic to realmd?

Sure, if there is some suitable information in the ipa-client-install output realmd can provide a more helpful message as it currently does for wrong passwords https://gitlab.freedesktop.org/realmd/realmd/blob/master/service/realm-sssd-ipa.c#L163.

As an alternative the whole stdout or stderr from ipa-client-install might be displayed but I'm not sure if this works well in the UI.

bye,
Sumit

Comment 6 Alexander Bokovoy 2019-03-12 07:56:24 UTC
The client returns error code 3 and outputs a message on stderr. Unfortunately, it might be more than just one line there as both log.error() and log.warning() go to stderr.

For example, an attempt to re-install a client without --force would give following three lines on stderr:

------
IPA client is already configured on this system.
If you want to reinstall the IPA client, uninstall it first using 'ipa-client-install --uninstall'.
The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information
------

Not-FQDN error is generated this way:
https://pagure.io/freeipa/blob/master/f/ipaclient/install/client.py#_2210

Comment 7 Alexander Bokovoy 2019-03-12 07:58:44 UTC
Move to realmd.

Comment 8 Sumit Bose 2019-03-12 08:07:37 UTC
(In reply to Alexander Bokovoy from comment #6)
> The client returns error code 3 and outputs a message on stderr.
> Unfortunately, it might be more than just one line there as both log.error()
> and log.warning() go to stderr.
> 
> For example, an attempt to re-install a client without --force would give
> following three lines on stderr:
> 
> ------
> IPA client is already configured on this system.
> If you want to reinstall the IPA client, uninstall it first using
> 'ipa-client-install --uninstall'.
> The ipa-client-install command failed. See /var/log/ipaclient-install.log
> for more information
> ------
> 
> Not-FQDN error is generated this way:
> https://pagure.io/freeipa/blob/master/f/ipaclient/install/client.py#_2210

It would be good to see the full journal output from ipa-client-install because it was said that "it's not fully qualified domain name" but the code above generates a message for a host name.


Note You need to log in before you can comment on or make changes to this bug.