#5345 ipa-kra-install should detect if CA is installed
Closed: Fixed None Opened 8 years ago by mbasti.

KRA requires running CA, KRA installer should check if this requirement is satisfied.

ipa-kra-install without CA just prints creepy error message:

$ ipa-kra-install /home/mbasti/replica-info-vm-replica.ipa.testgpg 
('Connection aborted.', error(111, 'Connection refused'))

Traceback:

ipa.ipaserver.install.ipa_kra_install.KRAInstaller: DEBUG:   File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 168, in execute
    self.validate_options()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py", line 131, in validate_options
    self.installing_replica = dogtaginstance.is_installing_replica("KRA")
  File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 84, in is_installing_replica
    info = get_security_domain()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 73, in get_security_domain
    info = domain_client.get_security_domain_info()
  File "/usr/lib/python2.7/site-packages/pki/system.py", line 185, in get_security_domain_info
    response = self.connection.get('/rest/securityDomain/domainInfo')
  File "/usr/lib/python2.7/site-packages/pki/client.py", line 115, in get
    data=payload)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 477, in get
    return self.request('GET', url, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 465, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 573, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 415, in send
    raise ConnectionError(err, request=request)

This error is raised from validate_option, before install_check can verify that CA is installed on replica.

master:

  • 4ec8df2 KRA: fix check that CA is installed

ipa-4-2:

  • 0f77745 KRA: fix check that CA is installed

Metadata Update from @mbasti:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.2.3

7 years ago

Login to comment on this ticket.

Metadata