Ticket #3572 (closed defect: fixed)

Opened 12 months ago

Last modified 12 months ago

Inform user about --force-join flag when client already enrolled

Reported by: mkosek Owned by: tbabej
Priority: minor Milestone: FreeIPA 3.2 - 2013/04-05 (GA)
Component: IPA Version:
Keywords: Cc:
Blocked By: Blocking:
Affects Documentation: no Patch posted for review: yes
Red Hat Bugzilla: 955701 Patch review by:
External tracker: Design link:
Needs UI design: Fedora test page:
Feature: Source:
Expertise:
Release Notes:

Description

When client is already joined, ipa-client-install fails:

# ipa-client-install --domain f19.ad.test --hostname client.f19.ad.test -p admin -w kokos123
Discovery was successful!
Hostname: client.f19.ad.test
Realm: F19.AD.TEST
DNS Domain: f19.ad.test
IPA Server: ipa.f19.ad.test
BaseDN: dc=f19,dc=ad,dc=test

Continue to configure the system with these values? [no]: y
Synchronizing time with KDC...
Successfully retrieved CA cert
    Subject:     CN=Certificate Authority,O=F19.AD.TEST
    Issuer:      CN=Certificate Authority,O=F19.AD.TEST
    Valid From:  Thu Apr 18 08:09:16 2013 UTC
    Valid Until: Mon Apr 18 08:09:16 2033 UTC

Joining realm failed: Host is already joined.

Installation failed. Rolling back changes.
Disabling client Kerberos and LDAP configurations
Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted
Restoring client configuration files
nscd daemon is not installed, skip configuration
nslcd daemon is not installed, skip configuration
/etc/ipa/default.conf could not be removed: [Errno 2] No such file or directory: '/etc/ipa/default.conf'
Please remove /etc/ipa/default.conf manually, as it can cause subsequent installation to fail.
Client uninstall complete.

We should advertise that --force-join flag can be used to re-enroll, otherwise use may not even know its there.

Thus something like:

ipa-client-install
...
    Valid From:  Thu Apr 18 08:09:16 2013 UTC
    Valid Until: Mon Apr 18 08:09:16 2033 UTC

Joining realm failed: Host is already joined.
Use --force-join to forcefully join the server (overwrites client data on server)

...

Change History

comment:1 Changed 12 months ago by tbabej

  • Owner changed from someone to tbabej

comment:2 Changed 12 months ago by tbabej

  • Status changed from new to assigned

comment:3 Changed 12 months ago by tbabej

  • Patch posted for review set

comment:4 Changed 12 months ago by dpal

  • Milestone changed from 0.0 NEEDS_TRIAGE to 2013 Month 04 - April - May (3.2 GA)

comment:5 Changed 12 months ago by arubin

  • selected set to Must

comment:6 Changed 12 months ago by dpal

  • Red Hat Bugzilla set to [https://bugzilla.redhat.com/show_bug.cgi?id=955701 955701]

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=955701

comment:7 Changed 12 months ago by rcritten

  • Resolution set to fixed
  • Status changed from assigned to closed

comment:8 Changed 12 months ago by dpal

  • Type changed from enhancement to defect
Note: See TracTickets for help on using tickets.