#5761 ipa-client-install throws Python exception on FIPS enabled servers
Closed: Fixed None Opened 8 years ago by pvoborni.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1317041

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

[+] Description of problem:
 - I am attempting to join our identity management server using
ipa-client-install which is throwing a python exception on a FIPS enabled
server.

[+] Version-Release number of selected component (if applicable):


[+] How reproducible:
 - Always

[+] Steps to Reproduce:
1. Perform an ipa-client-install on a FIPS enabled server.
2.
3.

[+] Actual results:

Traceback (most recent call last):
  File "/usr/sbin/ipa-client-install", line 43, in <module>
    import ipaclient.ntpconf
  File "/usr/lib/python2.7/site-packages/ipaclient/ntpconf.py", line 24, in
<module>
    from ipaplatform.tasks import tasks
  File "/usr/lib/python2.7/site-packages/ipaplatform/tasks.py", line 24, in
<module>
    from ipaplatform.redhat.tasks import RedHatTaskNamespace
  File "/usr/lib/python2.7/site-packages/ipaplatform/redhat/tasks.py", line 54,
in <module>
    """)
  File "/usr/lib64/python2.7/site-packages/cffi/api.py", line 103, in cdef
    self._parser.parse(csource, override=override, packed=packed)
  File "/usr/lib64/python2.7/site-packages/cffi/cparser.py", line 166, in parse
    self._internal_parse(csource)
  File "/usr/lib64/python2.7/site-packages/cffi/cparser.py", line 172, in
_internal_parse
    ast, macros, csource = self._parse(csource)
  File "/usr/lib64/python2.7/site-packages/cffi/cparser.py", line 127, in
_parse
    ast = _get_parser().parse(csource)
  File "/usr/lib64/python2.7/site-packages/cffi/cparser.py", line 32, in
_get_parser
    _parser_cache = pycparser.CParser()
  File "/usr/lib/python2.7/site-packages/pycparser/c_parser.py", line 111, in
__init__
    outputdir=taboutputdir)
  File "/usr/lib/python2.7/site-packages/ply/yacc.py", line 3065, in yacc
    signature = pinfo.signature()
  File "/usr/lib/python2.7/site-packages/ply/yacc.py", line 2814, in signature
    return sig.digest()
UnboundLocalError: local variable 'sig' referenced before assignment

Local variables in innermost frame:
self: <ply.yacc.ParserReflect object at 0x26e3bd0>
md5: <built-in function openssl_md5>

Raising prio, fix should be easy.

master:

  • 3c40d3a Do not allow installation in FIPS mode

ipa-4-3:

  • 4ce0ff6 Do not allow installation in FIPS mode

Metadata Update from @pvoborni:
- Issue assigned to frenaud
- Issue set to the milestone: FreeIPA 4.3.2

7 years ago

Login to comment on this ticket.

Metadata