https://bugzilla.redhat.com/show_bug.cgi?id=739604
Description of problem: IPA server is now failing to install as restorecon returns 1 when changing context and IPA is expecting 0 for success. Unexpected error - see ipaserver-install.log for details: Command '/sbin/restorecon /var/lib/pki-ca/publish' returned non-zero exit status 1 ipa-server-install.log <snip> 2011-09-19 11:36:41,937 DEBUG stderr= 2011-09-19 11:36:42,002 DEBUG args=/usr/bin/certutil -d /etc/httpd/alias -f XXXXXXXX -A -t CT,C,C -n TESTRELM IPA CA -a -i /tmp/tmpo5puqh 2011-09-19 11:36:42,003 DEBUG stdout= 2011-09-19 11:36:42,004 DEBUG stderr= 2011-09-19 11:36:42,005 DEBUG duration: 0 seconds 2011-09-19 11:36:42,006 DEBUG [8/17]: fixing RA database permissions 2011-09-19 11:36:42,008 DEBUG duration: 0 seconds 2011-09-19 11:36:42,009 DEBUG [9/17]: setting up signing cert profile 2011-09-19 11:36:42,012 DEBUG duration: 0 seconds 2011-09-19 11:36:42,013 DEBUG [10/17]: set up CRL publishing 2011-09-19 11:36:44,042 DEBUG args=/sbin/restorecon /var/lib/pki-ca/publish 2011-09-19 11:36:44,043 DEBUG stdout= 2011-09-19 11:36:44,044 DEBUG stderr= 2011-09-19 11:36:44,067 DEBUG Command '/sbin/restorecon /var/lib/pki-ca/publish' returned non-zero exit status 1 File "/usr/sbin/ipa-server-install", line 1068, in <module> sys.exit(main()) File "/usr/sbin/ipa-server-install", line 871, in main subject_base=options.subject) File "/usr/lib/python2.6/site-packages/ipaserver/install/cainstance.py", line 544, in configure_instance self.start_creation("Configuring certificate server", 210) File "/usr/lib/python2.6/site-packages/ipaserver/install/service.py", line 276, in start_creation method() File "/usr/lib/python2.6/site-packages/ipaserver/install/cainstance.py", line 1047, in __enable_crl_publish ipautil.run(["/sbin/restorecon", publishdir]) File "/usr/lib/python2.6/site-packages/ipapython/ipautil.py", line 242, in run raise CalledProcessError(p.returncode, args) </snip> Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
attachment freeipa-rcrit-878-restorecon.patch
master: 1d8a891[[BR]] ipa-2-1: 7a4295e
Metadata Update from @mkosek: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 3.0 Core Effort - 2011/12
Login to comment on this ticket.