Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

freeipa-client: unable to convert the attribute 'cacertificate;binary' value #6346

Closed
martinpitt opened this issue May 7, 2024 · 3 comments · Fixed by #6618
Closed

freeipa-client: unable to convert the attribute 'cacertificate;binary' value #6346

martinpitt opened this issue May 7, 2024 · 3 comments · Fixed by #6618
Labels
knownissue

Comments

@martinpitt
Copy link
Member

Downstream report: https://bugs.debian.org/1070680
martinpitt added a commit to martinpitt/bots that referenced this issue May 7, 2024
@martinpitt
naughty: Add pattern for debian-testing FreeIPA crash
a6d7521 
TestIPA.testClientCertAuthentication and TestIPA.testQualifiedUsers join
with the UI; TestIPA.testUnqualifiedUsers and TestKerberos join with the
CLI. Add patterns for both.

Downstream report: https://bugs.debian.org/1070680
Known issue cockpit-project#6346
@cockpituous
Copy link
Contributor

debian-testing
Ooops, it happened again

# ----------------------------------------------------------------------
# testUnqualifiedUsers (__main__.TestIPA.testUnqualifiedUsers)
Error: unknown connection 'eth1'.
Error: cannot delete unknown connection(s): 'eth1'.
time="2024-05-07T05:20:29Z" level=warning msg="The input device is not a TTY. The --tty and --interactive flags might not work properly"
userdel: admin mail spool (/var/mail/admin) not found
 * Resolving: _ldap._tcp.cockpit.lan
 * Performing LDAP DSE lookup on: 10.111.112.100
 * Successfully discovered: cockpit.lan
 * Unconditionally checking packages
 * Resolving required packages
 * LANG=C /usr/sbin/ipa-client-install --domain cockpit.lan --realm COCKPIT.LAN --mkhomedir --enable-dns-updates --unattended --force-join --principal admin -W --force-ntpd
Option --force-ntpd has been deprecated and will be removed in a future release.
Discovery was successful!
Client hostname: x0.cockpit.lan
Realm: COCKPIT.LAN
DNS Domain: cockpit.lan
IPA Server: f0.cockpit.lan
BaseDN: dc=cockpit,dc=lan
Synchronizing time
No SRV records of NTP servers found and no NTP server or pool address was provided.
Attempting to sync time with chronyc.
Process chronyc waitsync failed to sync time!
Unable to sync time with chrony server, assuming the time is in sync. Please check that 123 UDP port is opened, and any time server is on network.
unable to convert the attribute 'cacertificate;binary' value b'0\x82\x04\x8b0\x82\x02\xf3\xa0\x03\x02\x01\x02\x02\x01\x010\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00061\x140\x12\x06\x03U\x04\n\x0c\x0bCOCKPIT.LAN1\x1e0\x1c\x06\x03U\x04\x03\x0c\x15Certificate Authority0\x1e\x17\r240404224112Z\x17\r440404224112Z061\x140\x12\x06\x03U\x04\n\x0c\x0bCOCKPIT.LAN1\x1e0\x1c\x06\x03U\x04\x03\x0c\x15Certificate Authority0\x82\x01\xa20\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x8f\x000\x82\x01\x8a\x02\x82\x01\x81\x00\xca\xee(\x05w\xce\xc7M36\xdbI\xaf\xdf<\xb3!\xad\xc5\x91\x98h\xfe\x82s24i\x9c\xd3\x9a\xc9\xbe\n\xcaR\xcanIT\x9d\xfc\xd6\xfd\xda\xd8\xbeP\x02KL\xdf\x9f\x98[\xff\x989\xc8\x08v/\xd3\xf6\xcfYC\xe36\xed\x89Z\n|NUt\xc9\xcc\xb6\x95\xd5\x01\xb1T\xa7\xb2\t\xb8\xa1\xfaF6\xd0@\x90\n\xe4\xae\xe0]C\xf2\xd1\xf2\x93\xe6\xa7@ \xdb\xd2C\xcd\xd4NI\xc5\xf8\x18\xb0y\x1f\xca;\xd7I\xf2V\xa3U\xce\x81\x96\xdb\x87\xd1\x95\x07\xa4\xff\xd0\xfd\x1eO\xd23\xed3\x93C\xd8Ei\xd2\x94V\xb5\x9c\xd8\xb6\xd3AQ\x84\x17,\xb0\xd6b\x08g\x07\xd7]k\x93\x0ec_\xcc\x1b\xfc\x83\xb18\x93\x93\xda\xb9\x97\x93\x81\xa2Lx\xcdQz\xeb\xaa$\xf5!\xcc\xfea\xbf\xf0\xb6 Z\xffX\xd4PC`\xe6\xd9n\xb3e\xdd0\x84-\xa4]\xf6\xb5\xf4\x03J\x81@\x04\x99#\xc7\x17\'3\xd2\xbeF\xb5\xe2\x12\x18\x07Y\x97\x92\xc5o7a\x1cLO\xa7\x86\xf1\xe0\x93\x98\xab\xf0!\x0bK\xc1\xd1x8\xc3\xd8.q7D\xe4m4\x9b\xc7\xaa\xe4\xf0\xd4g\x96\x00\x14Z\x9b \x03Z\xd2;:\xeau\'g\xbd|g\x00"\xa4n\xdc#\xad\xae\xebV?\xe0\xaf\x07\xdf\x1c9Lu\x11\x90\xb8\xe5\xa3\xaf\xe5\xa8\xfb(e\xc1\xc4\xd8K\x82\xc8\xf7B\xf4\xa6 \x8e\xbe4(v\xc5\xb1\x9b\xb07\x9f\xab\xf8)F\xed\x19\xf6\xa0@\x98u\xc7u0\x06\x9fC\x8b\x8c\xee\nq\x02\x03\x01\x00\x01\xa3\x81\xa30\x81\xa00\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xa5]\x06\xa6"\x99s\x9e~\x14\xdc\x1c\xba\x8d\xc8\xb3\xb0\xdbJ\x120\x0f\x06\x03U\x1d\x13\x01\x01\xff\x04\x050\x03\x01\x01\xff0\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x01\xc60\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14\xa5]\x06\xa6"\x99s\x9e~\x14\xdc\x1c\xba\x8d\xc8\xb3\xb0\xdbJ\x120=\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x0410/0-\x06\x08+\x06\x01\x05\x05\x070\x01\x86!http://ipa-ca.cockpit.lan/ca/ocsp0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x81\x00\x9f\xff\xfc\x95\xce\xd7\xf6Ho\xd1\x97\xf0\x184\x1a.\\\xfa\xe0\xaa\xf8\xa9\x8d\x90\x1f\xe1%X\x01\x81\xe3\x8e\xcc\x9eFd\xd5|\xb3KY\xcc\x18\xa8\xe5\x04\r\x1aJr\xeb\xeb\x9a\x8aoJ\xf2\x12\xc3\xce\xe0\x8a\x82g\xfa\x94Y\x8ei\x88\xb6I\xda\xde\xb7\xef\x0el`c\xd7\x83\x1a/\x00\xbd\xde%\x80I\xc3\xd5\xe8\x1d\xe9\x84w\x82\xd57U\xad\xff\xc3\x00\x1b\xc0ip\xff\x9a\xa7\xde>*\x82\xc1p\x18I\x83\xdc:jv4\xf2$"9F\ni,P_\xf9J\xff\xc06_\xca\x00\xbf\xbe\x89\xd8|[\xc6#\xf1\x922\xc6\x1bU\xebF\xb5\xaeA&\xd1\x178+-9\xcc:1;V\xb7\xc9\xf1\xb2(\x98]s\xa5\xa5\x04(\x94\xeb\xf3~\xf4\xf2=\x93\xde\xa0\x92\x7f\xf5\x04\xe3=$\xfb\xb5<\x11\x9b\xefC\xadp\xcf\xa5\x81\xcd\r\xa6\x83r\xce\x0b\x97m\xd3\xfb\xdb\x0e\xc3\x9bd\x92>6s\xec\x9d\xd3\x8e\xd7d9g\x08VW\x7f\x03pzR@\x03\x9aV\x9b\xefU\xa1x\xee\xf3\xff\xe0\xde\x82\x1f\x07\xce\xde\x02\x8b\xdd\xb0\xcf\x01X\xab\xb7\xe5\x1e\x8b\x1aU\xd6\x03\xa2\x151#\xd35r\x95[\xf3]\xd3\xac\xe99x\xe02\xb7\xb4\x9a2$\xee\xc4\x8bW;\xc3\x81\xaf\xef\xa7\xc5\xa3n\xb4\xcc\x7f\xef\x85Bx\x0b4\\\xbb\xba\xee-\xa6\xe6\x03\xcbxr5\x9e\xf6L\x9c\x88\xc1"sZ\xc3\xb8\xe7\xa8\xe3\x90f\x1e\xceh\xc70\xca\x8c\xa5E\xb2^\x96\x1f\xdb\xdf\x81\xd4X\x9e\xab\x01\x19\xbe\x91' to type <class 'cryptography.x509.base.Certificate'>
Cannot obtain CA certificate
'ldap://f0.cockpit.lan' doesn't have a certificate.
Installation failed. Rolling back changes.
Disabling client Kerberos and LDAP configurations
nscd daemon is not installed, skip configuration
nslcd daemon is not installed, skip configuration
Some installation state for ntp has not been restored, see /var/lib/ipa/sysrestore/sysrestore.state
Some installation state has not been restored.
This may cause re-installation to fail.
It should be safe to remove /var/lib/ipa-client/sysrestore.state but it may
 mean your system hasn't been restored to its pre-installation state.
Client uninstall complete.

This program will set up IPA client.
Version 4.11.1

WARNING: conflicting time&date synchronization service 'ntp' will be disabled in favor of chronyd


Using default chrony configuration.
The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information
 ! Running ipa-client-install failed
realm: Couldn't join realm: Running ipa-client-install failed
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 631, in testUnqualifiedUsers
    super().testUnqualifiedUsers()
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 290, in testUnqualifiedUsers
    m.execute(f"echo {self.admin_password} | realm join -vU {self.admin_user} cockpit.lan", timeout=300)
  File "/work/make-checkout-workdir/bots/machine/machine_core/ssh_connection.py", line 327, in execute
    res = subprocess.run(command_line,
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/subprocess.py", line 571, in run
    raise CalledProcessError(retcode, process.args,
subprocess.CalledProcessError: Command '('env', '-u', 'LANGUAGE', 'LC_ALL=C', 'ssh', '-p', '2201', '-o', 'BatchMode=yes', '-o', 'IdentitiesOnly=yes', '-o', 'PKCS11Provider=none', '-o', 'StrictHostKeyChecking=no', '-o', 'UserKnownHostsFile=/dev/null', '-o', 'LogLevel=ERROR', '-l', 'root', '-o', 'ControlPath=/tmp/.cockpit-test-resources/ssh-%h-%p-%r-16059', '127.0.0.2', 'set -e;', 'echo foobarfoo | realm join -vU admin cockpit.lan')' returned non-zero exit status 1.

Journal extracted to TestIPA-testUnqualifiedUsers-debian-testing-127.0.0.2-2201-FAIL.log.gz
Journal extracted to TestIPA-testUnqualifiedUsers-services-127.0.0.2-2202-FAIL.log.gz
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 631, in testUnqualifiedUsers
    super().testUnqualifiedUsers()
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 290, in testUnqualifiedUsers
    m.execute(f"echo {self.admin_password} | realm join -vU {self.admin_user} cockpit.lan", timeout=300)
  File "/work/make-checkout-workdir/bots/machine/machine_core/ssh_connection.py", line 327, in execute
    res = subprocess.run(command_line,
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/subprocess.py", line 571, in run
    raise CalledProcessError(retcode, process.args,
subprocess.CalledProcessError: Command '('env', '-u', 'LANGUAGE', 'LC_ALL=C', 'ssh', '-p', '2201', '-o', 'BatchMode=yes', '-o', 'IdentitiesOnly=yes', '-o', 'PKCS11Provider=none', '-o', 'StrictHostKeyChecking=no', '-o', 'UserKnownHostsFile=/dev/null', '-o', 'LogLevel=ERROR', '-l', 'root', '-o', 'ControlPath=/tmp/.cockpit-test-resources/ssh-%h-%p-%r-16059', '127.0.0.2', 'set -e;', 'echo foobarfoo | realm join -vU admin cockpit.lan')' returned non-zero exit status 1.

# Result testUnqualifiedUsers (__main__.TestIPA.testUnqualifiedUsers) failed
# 1 TEST FAILED [86s on 9b8dd199bec9]
not ok 60 test/verify/check-system-realms TestIPA.testUnqualifiedUsers $2

First occurrence: 2024-05-07T05:21:32.165756+00:00 | revision a6d7521
Times recorded: 1
Latest occurrences:

  • 2024-05-07T05:21:32.165756+00:00 | revision a6d7521

@cockpituous
Copy link
Contributor

cockpituous commented May 7, 2024 •
edited
Loading

debian-testing
Ooops, it happened again

# ----------------------------------------------------------------------
# testQualifiedUsers (__main__.TestIPA.testQualifiedUsers)
Error: unknown connection 'eth1'.
Error: cannot delete unknown connection(s): 'eth1'.
time="2024-05-23T13:04:39Z" level=warning msg="The input device is not a TTY. The --tty and --interactive flags might not work properly"
[0523/130524.833628:WARNING:sandbox_linux.cc(420)] InitializeSandbox() called with multiple threads in process gpu-process.

DevTools listening on ws://127.0.0.1:10066/devtools/browser/47788f76-62f8-42ab-a44e-7265a6e1f1da
[0523/130524.861863:WARNING:runtime_features.cc(730)] AttributionReportingCrossAppWeb cannot be enabled in this configuration. Use --enable-features=ConversionMeasurement,AttributionReportingCrossAppWeb in addition.
[0523/130525.517605:WARNING:runtime_features.cc(730)] AttributionReportingCrossAppWeb cannot be enabled in this configuration. Use --enable-features=ConversionMeasurement,AttributionReportingCrossAppWeb in addition.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1716469526557.133,"url":"http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js","networkRequestId":"16753.19"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1716469526569.326,"url":"http://127.0.0.2:9091/cockpit/@localhost/*/po.js","networkRequestId":"16753.20"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1716469526604.308,"url":"http://127.0.0.2:9091/system"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1716469526604.414,"url":"http://127.0.0.2:9091/system"}
> warning: cockpit.format_{bytes,bits}[_per_sec](..., MiB, [object Object]) is deprecated.
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 131, in testQualifiedUsers
    b.wait_not_present("#realms-join-dialog")
  File "/work/make-checkout-workdir/test/common/testlib.py", line 666, in wait_not_present
    self.wait_js_func('!ph_is_present', selector)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 657, in wait_js_func
    self.wait_js_cond("%s(%s)" % (func, ','.join(map(jsquote, args))))
  File "/work/make-checkout-workdir/test/common/testlib.py", line 642, in wait_js_cond
    self.raise_cdp_exception("timeout\nwait_js_cond", cond, result["exceptionDetails"], trailer)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 332, in raise_cdp_exception
    raise Error("%s(%s): %s" % (func, arg, msg))
testlib.Error: timeout
wait_js_cond(!ph_is_present("#realms-join-dialog")): Uncaught (in promise) Error: condition did not become true
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 401 (Authentication failed)', 'timestamp': 1716469525833.095, 'url': 'http://127.0.0.2:9091/cockpit/login', 'networkRequestId': '16753.12'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716469526557.133, 'url': 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js', 'networkRequestId': '16753.19'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716469526569.326, 'url': 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js', 'networkRequestId': '16753.20'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716469526604.308, 'url': 'http://127.0.0.2:9091/system'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716469526604.414, 'url': 'http://127.0.0.2:9091/system'}
warning: cockpit.format_{bytes,bits}[_per_sec](..., MiB, [object Object]) is deprecated.
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}

Wrote screenshot to TestIPA-testQualifiedUsers-debian-testing-127.0.0.2-2201-FAIL.png
Wrote HTML dump to TestIPA-testQualifiedUsers-debian-testing-127.0.0.2-2201-FAIL.html
Wrote JS log to TestIPA-testQualifiedUsers-debian-testing-127.0.0.2-2201-FAIL.js.log
Journal extracted to TestIPA-testQualifiedUsers-debian-testing-127.0.0.2-2201-FAIL.log.gz
Journal extracted to TestIPA-testQualifiedUsers-services-127.0.0.2-2202-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 131, in testQualifiedUsers
    b.wait_not_present("#realms-join-dialog")
  File "/work/make-checkout-workdir/test/common/testlib.py", line 666, in wait_not_present
    self.wait_js_func('!ph_is_present', selector)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 657, in wait_js_func
    self.wait_js_cond("%s(%s)" % (func, ','.join(map(jsquote, args))))
  File "/work/make-checkout-workdir/test/common/testlib.py", line 642, in wait_js_cond
    self.raise_cdp_exception("timeout\nwait_js_cond", cond, result["exceptionDetails"], trailer)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 332, in raise_cdp_exception
    raise Error("%s(%s): %s" % (func, arg, msg))
testlib.Error: timeout
wait_js_cond(!ph_is_present("#realms-join-dialog")): Uncaught (in promise) Error: condition did not become true
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 401 (Authentication failed)', 'timestamp': 1716469525833.095, 'url': 'http://127.0.0.2:9091/cockpit/login', 'networkRequestId': '16753.12'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716469526557.133, 'url': 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js', 'networkRequestId': '16753.19'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716469526569.326, 'url': 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js', 'networkRequestId': '16753.20'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716469526604.308, 'url': 'http://127.0.0.2:9091/system'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716469526604.414, 'url': 'http://127.0.0.2:9091/system'}
warning: cockpit.format_{bytes,bits}[_per_sec](..., MiB, [object Object]) is deprecated.
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}

# Result testQualifiedUsers (__main__.TestIPA.testQualifiedUsers) failed
# 1 TEST FAILED [376s on c6d2074f9d03]
not ok 59 test/verify/check-system-realms TestIPA.testQualifiedUsers $2

First occurrence: 2024-05-23T13:10:31.209973+00:00 | revision 2654a55b1df2edff90f1feed3e44e2b7f8bfb94c
Times recorded: 1
Latest occurrences:

  • 2024-05-23T13:10:31.209973+00:00 | revision 2654a55b1df2edff90f1feed3e44e2b7f8bfb94c
# ----------------------------------------------------------------------
# testUnqualifiedUsers (__main__.TestIPA.testUnqualifiedUsers)
Error: unknown connection 'eth1'.
Error: cannot delete unknown connection(s): 'eth1'.
time="2024-05-23T13:51:11Z" level=warning msg="The input device is not a TTY. The --tty and --interactive flags might not work properly"
userdel: admin mail spool (/var/mail/admin) not found
 * Resolving: _ldap._tcp.cockpit.lan
 * Performing LDAP DSE lookup on: 10.111.112.100
 * Successfully discovered: cockpit.lan
 * Unconditionally checking packages
 * Resolving required packages
 * LANG=C /usr/sbin/ipa-client-install --domain cockpit.lan --realm COCKPIT.LAN --mkhomedir --enable-dns-updates --unattended --force-join --principal admin -W --force-ntpd
Option --force-ntpd has been deprecated and will be removed in a future release.
Discovery was successful!
Client hostname: x0.cockpit.lan
Realm: COCKPIT.LAN
DNS Domain: cockpit.lan
IPA Server: f0.cockpit.lan
BaseDN: dc=cockpit,dc=lan
Synchronizing time
No SRV records of NTP servers found and no NTP server or pool address was provided.
Attempting to sync time with chronyc.
Process chronyc waitsync failed to sync time!
Unable to sync time with chrony server, assuming the time is in sync. Please check that 123 UDP port is opened, and any time server is on network.
unable to convert the attribute 'cacertificate;binary' value b'0\x82\x04\x8b0\x82\x02\xf3\xa0\x03\x02\x01\x02\x02\x01\x010\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00061\x140\x12\x06\x03U\x04\n\x0c\x0bCOCKPIT.LAN1\x1e0\x1c\x06\x03U\x04\x03\x0c\x15Certificate Authority0\x1e\x17\r240507142844Z\x17\r440507142844Z061\x140\x12\x06\x03U\x04\n\x0c\x0bCOCKPIT.LAN1\x1e0\x1c\x06\x03U\x04\x03\x0c\x15Certificate Authority0\x82\x01\xa20\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x8f\x000\x82\x01\x8a\x02\x82\x01\x81\x00\xc5\xfbE\xf3\x16\xde\x8d\xbc\xc0=7\xec\x9fj<Sh\x9d"\xd3\x03\xd8F,\x98fX\xa5\xfa\'Q\x87%\xcd2/\x90\x08\x06M\xe1\x86@\xe0;D\xda\xc4\x88\xbe\xa7\x04\xea \xbd\xca\x0e\x14/v\xa9\xee\xe4,\xe6&7M1\xb0\xa5\x06n\n\xdcg\x02\xf2\x9e\xc6=\xf5\xc4R\x9d6\xf7\x82`<N\xfa\x10\x97>vP<\xeb\xa7\x05Z\xc1)\xb8|\x7fL\xf8L\x0c\xf9\xa2\x01\x90\xb1\x1c<\xd0\x19\xf8w\x9b\x9a\x98\x19\xa4\xc2\xd2\xd0\x0bE\xf8\xaf\x9b5\xe7\xca%u\xe2.2r]\x1bm<\x16(\x16\n\n\xf2\xf2o\x9e4_5\xeeu&LC\xd26\xd3\xae\xe9\n\xf7E\xb3\xc3Q\t5Z\x1e\x19\xaaFF(\xaa5A\xf1\x02\xb5j\xa0\xe3\x94#.\xb8E\x8d\xda\x99\xbf\xc3\xf4\x8d\x9fn\x14\xb8\xe8\x93v.R\x89\xe6]0\xc4\xef\x16\x06\xa7\x0e\xa6M\xfa-\xf6\\\xf2\x13\x18\x0f\xf2\xa8T\x8e\xfeI\xe2\x18^n^\xf4\xe3h\xbe\n\xc5\xb2\xe5D\x10~\xec\xa87\xb3\xc1C~0\x93\x8a\x1al[&XD\xdbe2\x8c\xb73\xf5\xac^I\xa2\xa89>\xc4h\x11\x026\xd6Pc \x7f\x91\x1b!\x83\x01D#\xf3)\xbf\x80\x17x\x9a\xee0\xd9\xf7\x10\x93e*\xe50\xe0\xc2\x8d\x83\xd2 e\xa6\xbc\xdf\x82gq\xb5c\xe5\x16*\x08f\xc79\xafr\xd4\xfaK"\x93<\xad[\xa0\xa91[\xa4I\xd7\xf5\x9b\x8bxo\xf9\xca\xe8\x89\x96  \xc9\xab\xc7P:J\x1b\x16\x1bU`\xa9\x02\x03\x01\x00\x01\xa3\x81\xa30\x81\xa00\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xcf\xb3Kc\xad\x7f)V\xd1\xf6\x953r[\xda\x9bk1)\xa30\x0f\x06\x03U\x1d\x13\x01\x01\xff\x04\x050\x03\x01\x01\xff0\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x01\xc60\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14\xcf\xb3Kc\xad\x7f)V\xd1\xf6\x953r[\xda\x9bk1)\xa30=\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x0410/0-\x06\x08+\x06\x01\x05\x05\x070\x01\x86!http://ipa-ca.cockpit.lan/ca/ocsp0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x81\x00k\x8c\xa80R\xeb\xef\xf1+L\x1e\x18\xbb\x98\xc2\xbbC\xb8q?\xe7b\xf9y\x08n}\x06B~aP\\pRBi%\xec\x98*J\x80V\x9c\x0eR\xcd\x0c;\x13\xfb\x04\x87\xbd\xee~\x1c\xefO\xd3\xea\x06\x0c\xfbw\xe7)r%\x81*\x19K\xf5\x7f?}\xa6\xdfQ\x97\x0f\x8d~\xbaN\xd6\xc0[\x1f\xd4\xc1\xfb\x8bS\x1b\x1e\xcf\xe5\xac\xb2\xd7V\'\x1e\x13\x8e*b\x00`\xf6\xc7\xbf\x98[\xb4\x051\xc1\xed\xeel\xd5\xdc\xff\xac\x93\x9em7\xc8\xab\xc4(\x0bB\x15e\xa5@\xd9qfJJl\xad\xb4[\xfa\xbc\xd3\xc2:/N\xef\xa2\xe3\x95\x92z\xea\x91\xa8\xe3\xcb\x8b\x007kF\xad\xf5\x8ey\x16\x83\xe1\xb4N\xa3\xc4l\xd6\xf9\x96\xf3\xeb\x86\x0e\r\xf76&\xce\xfe\xd57v\x94\t2[e.W\x8dD~\x00\x15\x839V\xda\x17\x05\x8f+\xef\xc6[\xb2V\x9et\x10\xdc\x86A\xd5\xe1G\xdf%\xa9\xca\xb8\x1d\xef\x99>a-\xff+\xee\x9c69\x9e\xf2\xcf"\x01\x19\x96I\x83z\x91\x7f3\x13\xb6\xdal\x9a5\x0f\xc94\x84N\xb3\xd2\x1f\xc1\x88\xf2/\xf2y\xa0[\xa6\xb9Yn\x8b\xa01\xa6r!\x7f+f\xda\x15\xbf\x98U,\xd1y\xb0\x1c,[\x88\xc9\xbd\x8a\xd8a\xd1\x84\xedE\xa3R\xfeE\xe2$\x05b\x15\'nK\xf3\x1a\x15 G"\x9d\x9eK\xfa\x16\x0f\x8f\xee\x8cy87W\x7f\x18\x1a\x18\xac3f\x86:\xc7\xa1f\xd2/\x8f\xcc\xfe7Yk\x8d\x03\x04\xe7\x92C"^\x84\xc6' to type <class 'cryptography.x509.base.Certificate'>
Cannot obtain CA certificate
'ldap://f0.cockpit.lan' doesn't have a certificate.
Installation failed. Rolling back changes.
Disabling client Kerberos and LDAP configurations
nscd daemon is not installed, skip configuration
nslcd daemon is not installed, skip configuration
Some installation state for ntp has not been restored, see /var/lib/ipa/sysrestore/sysrestore.state
Some installation state has not been restored.
This may cause re-installation to fail.
It should be safe to remove /var/lib/ipa-client/sysrestore.state but it may
 mean your system hasn't been restored to its pre-installation state.
Client uninstall complete.

The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information
This program will set up IPA client.
Version 4.11.1

WARNING: conflicting time&date synchronization service 'ntp' will be disabled in favor of chronyd


Using default chrony configuration.
 ! Running ipa-client-install failed
realm: Couldn't join realm: Running ipa-client-install failed
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 631, in testUnqualifiedUsers
    super().testUnqualifiedUsers()
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 290, in testUnqualifiedUsers
    m.execute(f"echo {self.admin_password} | realm join -vU {self.admin_user} cockpit.lan", timeout=300)
  File "/work/make-checkout-workdir/bots/machine/machine_core/ssh_connection.py", line 327, in execute
    res = subprocess.run(command_line,
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/subprocess.py", line 571, in run
    raise CalledProcessError(retcode, process.args,
subprocess.CalledProcessError: Command '('env', '-u', 'LANGUAGE', 'LC_ALL=C', 'ssh', '-p', '2301', '-o', 'BatchMode=yes', '-o', 'IdentitiesOnly=yes', '-o', 'PKCS11Provider=none', '-o', 'StrictHostKeyChecking=no', '-o', 'UserKnownHostsFile=/dev/null', '-o', 'LogLevel=ERROR', '-l', 'root', '-o', 'ControlPath=/tmp/.cockpit-test-resources/ssh-%h-%p-%r-16277', '127.0.0.2', 'set -e;', 'echo foobarfoo | realm join -vU admin cockpit.lan')' returned non-zero exit status 1.

Journal extracted to TestIPA-testUnqualifiedUsers-debian-testing-127.0.0.2-2301-FAIL.log.gz
Journal extracted to TestIPA-testUnqualifiedUsers-services-127.0.0.2-2302-FAIL.log.gz
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 631, in testUnqualifiedUsers
    super().testUnqualifiedUsers()
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 290, in testUnqualifiedUsers
    m.execute(f"echo {self.admin_password} | realm join -vU {self.admin_user} cockpit.lan", timeout=300)
  File "/work/make-checkout-workdir/bots/machine/machine_core/ssh_connection.py", line 327, in execute
    res = subprocess.run(command_line,
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/subprocess.py", line 571, in run
    raise CalledProcessError(retcode, process.args,
subprocess.CalledProcessError: Command '('env', '-u', 'LANGUAGE', 'LC_ALL=C', 'ssh', '-p', '2301', '-o', 'BatchMode=yes', '-o', 'IdentitiesOnly=yes', '-o', 'PKCS11Provider=none', '-o', 'StrictHostKeyChecking=no', '-o', 'UserKnownHostsFile=/dev/null', '-o', 'LogLevel=ERROR', '-l', 'root', '-o', 'ControlPath=/tmp/.cockpit-test-resources/ssh-%h-%p-%r-16277', '127.0.0.2', 'set -e;', 'echo foobarfoo | realm join -vU admin cockpit.lan')' returned non-zero exit status 1.

# Result testUnqualifiedUsers (__main__.TestIPA.testUnqualifiedUsers) failed
# 1 TEST FAILED [185s on 18b335b075d5]
not ok 60 test/verify/check-system-realms TestIPA.testUnqualifiedUsers $2

First occurrence: 2024-05-23T13:53:33.365322+00:00 | revision 3d900192a3b8589c411cee21c21c7996397637f4
Times recorded: 1
Latest occurrences:

  • 2024-05-23T13:53:33.365322+00:00 | revision 3d900192a3b8589c411cee21c21c7996397637f4
# ----------------------------------------------------------------------
# testNegotiate (__main__.TestKerberos.testNegotiate)
Error: unknown connection 'eth1'.
Error: cannot delete unknown connection(s): 'eth1'.
userdel: admin mail spool (/var/mail/admin) not found
time="2024-05-23T13:53:35Z" level=warning msg="The input device is not a TTY. The --tty and --interactive flags might not work properly"
++ seq 1 20
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 1
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 2
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 3
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 4
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 5
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 6
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 7
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 8
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 9
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 10
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ sleep 11
+ for x in $(seq 1 20)
+ nslookup -type=SRV _ldap._tcp.cockpit.lan
+ break
+ echo foobarfoo
+ realm join -vU admin cockpit.lan
 * Resolving: _ldap._tcp.cockpit.lan
 * Performing LDAP DSE lookup on: 10.111.112.100
 * Successfully discovered: cockpit.lan
 * Unconditionally checking packages
 * Resolving required packages
 * LANG=C /usr/sbin/ipa-client-install --domain cockpit.lan --realm COCKPIT.LAN --mkhomedir --enable-dns-updates --unattended --force-join --principal admin -W --force-ntpd
Option --force-ntpd has been deprecated and will be removed in a future release.
Discovery was successful!
Client hostname: x0.cockpit.lan
Realm: COCKPIT.LAN
DNS Domain: cockpit.lan
IPA Server: f0.cockpit.lan
BaseDN: dc=cockpit,dc=lan
Synchronizing time
No SRV records of NTP servers found and no NTP server or pool address was provided.
Attempting to sync time with chronyc.
Process chronyc waitsync failed to sync time!
Unable to sync time with chrony server, assuming the time is in sync. Please check that 123 UDP port is opened, and any time server is on network.
unable to convert the attribute 'cacertificate;binary' value b'0\x82\x04\x8b0\x82\x02\xf3\xa0\x03\x02\x01\x02\x02\x01\x010\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00061\x140\x12\x06\x03U\x04\n\x0c\x0bCOCKPIT.LAN1\x1e0\x1c\x06\x03U\x04\x03\x0c\x15Certificate Authority0\x1e\x17\r240507142844Z\x17\r440507142844Z061\x140\x12\x06\x03U\x04\n\x0c\x0bCOCKPIT.LAN1\x1e0\x1c\x06\x03U\x04\x03\x0c\x15Certificate Authority0\x82\x01\xa20\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x8f\x000\x82\x01\x8a\x02\x82\x01\x81\x00\xc5\xfbE\xf3\x16\xde\x8d\xbc\xc0=7\xec\x9fj<Sh\x9d"\xd3\x03\xd8F,\x98fX\xa5\xfa\'Q\x87%\xcd2/\x90\x08\x06M\xe1\x86@\xe0;D\xda\xc4\x88\xbe\xa7\x04\xea \xbd\xca\x0e\x14/v\xa9\xee\xe4,\xe6&7M1\xb0\xa5\x06n\n\xdcg\x02\xf2\x9e\xc6=\xf5\xc4R\x9d6\xf7\x82`<N\xfa\x10\x97>vP<\xeb\xa7\x05Z\xc1)\xb8|\x7fL\xf8L\x0c\xf9\xa2\x01\x90\xb1\x1c<\xd0\x19\xf8w\x9b\x9a\x98\x19\xa4\xc2\xd2\xd0\x0bE\xf8\xaf\x9b5\xe7\xca%u\xe2.2r]\x1bm<\x16(\x16\n\n\xf2\xf2o\x9e4_5\xeeu&LC\xd26\xd3\xae\xe9\n\xf7E\xb3\xc3Q\t5Z\x1e\x19\xaaFF(\xaa5A\xf1\x02\xb5j\xa0\xe3\x94#.\xb8E\x8d\xda\x99\xbf\xc3\xf4\x8d\x9fn\x14\xb8\xe8\x93v.R\x89\xe6]0\xc4\xef\x16\x06\xa7\x0e\xa6M\xfa-\xf6\\\xf2\x13\x18\x0f\xf2\xa8T\x8e\xfeI\xe2\x18^n^\xf4\xe3h\xbe\n\xc5\xb2\xe5D\x10~\xec\xa87\xb3\xc1C~0\x93\x8a\x1al[&XD\xdbe2\x8c\xb73\xf5\xac^I\xa2\xa89>\xc4h\x11\x026\xd6Pc \x7f\x91\x1b!\x83\x01D#\xf3)\xbf\x80\x17x\x9a\xee0\xd9\xf7\x10\x93e*\xe50\xe0\xc2\x8d\x83\xd2 e\xa6\xbc\xdf\x82gq\xb5c\xe5\x16*\x08f\xc79\xafr\xd4\xfaK"\x93<\xad[\xa0\xa91[\xa4I\xd7\xf5\x9b\x8bxo\xf9\xca\xe8\x89\x96  \xc9\xab\xc7P:J\x1b\x16\x1bU`\xa9\x02\x03\x01\x00\x01\xa3\x81\xa30\x81\xa00\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xcf\xb3Kc\xad\x7f)V\xd1\xf6\x953r[\xda\x9bk1)\xa30\x0f\x06\x03U\x1d\x13\x01\x01\xff\x04\x050\x03\x01\x01\xff0\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x01\xc60\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14\xcf\xb3Kc\xad\x7f)V\xd1\xf6\x953r[\xda\x9bk1)\xa30=\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x0410/0-\x06\x08+\x06\x01\x05\x05\x070\x01\x86!http://ipa-ca.cockpit.lan/ca/ocsp0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x81\x00k\x8c\xa80R\xeb\xef\xf1+L\x1e\x18\xbb\x98\xc2\xbbC\xb8q?\xe7b\xf9y\x08n}\x06B~aP\\pRBi%\xec\x98*J\x80V\x9c\x0eR\xcd\x0c;\x13\xfb\x04\x87\xbd\xee~\x1c\xefO\xd3\xea\x06\x0c\xfbw\xe7)r%\x81*\x19K\xf5\x7f?}\xa6\xdfQ\x97\x0f\x8d~\xbaN\xd6\xc0[\x1f\xd4\xc1\xfb\x8bS\x1b\x1e\xcf\xe5\xac\xb2\xd7V\'\x1e\x13\x8e*b\x00`\xf6\xc7\xbf\x98[\xb4\x051\xc1\xed\xeel\xd5\xdc\xff\xac\x93\x9em7\xc8\xab\xc4(\x0bB\x15e\xa5@\xd9qfJJl\xad\xb4[\xfa\xbc\xd3\xc2:/N\xef\xa2\xe3\x95\x92z\xea\x91\xa8\xe3\xcb\x8b\x007kF\xad\xf5\x8ey\x16\x83\xe1\xb4N\xa3\xc4l\xd6\xf9\x96\xf3\xeb\x86\x0e\r\xf76&\xce\xfe\xd57v\x94\t2[e.W\x8dD~\x00\x15\x839V\xda\x17\x05\x8f+\xef\xc6[\xb2V\x9et\x10\xdc\x86A\xd5\xe1G\xdf%\xa9\xca\xb8\x1d\xef\x99>a-\xff+\xee\x9c69\x9e\xf2\xcf"\x01\x19\x96I\x83z\x91\x7f3\x13\xb6\xdal\x9a5\x0f\xc94\x84N\xb3\xd2\x1f\xc1\x88\xf2/\xf2y\xa0[\xa6\xb9Yn\x8b\xa01\xa6r!\x7f+f\xda\x15\xbf\x98U,\xd1y\xb0\x1c,[\x88\xc9\xbd\x8a\xd8a\xd1\x84\xedE\xa3R\xfeE\xe2$\x05b\x15\'nK\xf3\x1a\x15 G"\x9d\x9eK\xfa\x16\x0f\x8f\xee\x8cy87W\x7f\x18\x1a\x18\xac3f\x86:\xc7\xa1f\xd2/\x8f\xcc\xfe7Yk\x8d\x03\x04\xe7\x92C"^\x84\xc6' to type <class 'cryptography.x509.base.Certificate'>
Cannot obtain CA certificate
'ldap://f0.cockpit.lan' doesn't have a certificate.
Installation failed. Rolling back changes.
Disabling client Kerberos and LDAP configurations
nscd daemon is not installed, skip configuration
nslcd daemon is not installed, skip configuration
Some installation state for ntp has not been restored, see /var/lib/ipa/sysrestore/sysrestore.state
Some installation state has not been restored.
This may cause re-installation to fail.
It should be safe to remove /var/lib/ipa-client/sysrestore.state but it may
 mean your system hasn't been restored to its pre-installation state.
Client uninstall complete.

The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information
This program will set up IPA client.
Version 4.11.1

WARNING: conflicting time&date synchronization service 'ntp' will be disabled in favor of chronyd


Using default chrony configuration.
 ! Running ipa-client-install failed
realm: Couldn't join realm: Running ipa-client-install failed
+ systemctl --quiet is-failed sssd.service
+ journalctl -u realmd.service
+ exit 1
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 1055, in testNegotiate
    self.configure_kerberos("/etc/cockpit/krb5.keytab")
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 1021, in configure_kerberos
    self.machine.execute(JOIN_SCRIPT % args, timeout=1800)
  File "/work/make-checkout-workdir/bots/machine/machine_core/ssh_connection.py", line 327, in execute
    res = subprocess.run(command_line,
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/subprocess.py", line 571, in run
    raise CalledProcessError(retcode, process.args,
subprocess.CalledProcessError: Command '('env', '-u', 'LANGUAGE', 'LC_ALL=C', 'ssh', '-p', '2501', '-o', 'BatchMode=yes', '-o', 'IdentitiesOnly=yes', '-o', 'PKCS11Provider=none', '-o', 'StrictHostKeyChecking=no', '-o', 'UserKnownHostsFile=/dev/null', '-o', 'LogLevel=ERROR', '-l', 'root', '-o', 'ControlPath=/tmp/.cockpit-test-resources/ssh-%h-%p-%r-16938', '127.0.0.2', 'set -e;', '\nset -ex\n# Wait until zones from LDAP get loaded\nfor x in $(seq 1 20); do\n    if nslookup -type=SRV _ldap._tcp.cockpit.lan; then\n        break\n    else\n        sleep $x\n    fi\ndone\n\nif ! echo \'foobarfoo\' | realm join -vU admin cockpit.lan; then\n    if systemctl --quiet is-failed sssd.service; then\n        systemctl status --lines=100 sssd.service >&2\n    fi\n    journalctl -u realmd.service\n    exit 1\nfi\n\n# On certain OS\'s it takes time for sssd to come up properly\n#   [8347] 1528294262.886088: Sending initial UDP request to dgram 172.27.0.15:88\n#   kinit: Cannot contact any KDC for realm \'COCKPIT.LAN\' while getting initial credentials\nfor x in $(seq 1 20); do\n    if echo \'foobarfoo\' | KRB5_TRACE=/dev/stderr kinit -f admin@COCKPIT.LAN; then\n        break\n    else\n        sleep $x\n    fi\ndone\n\n# create SPN and keytab for ws\nif type ipa >/dev/null 2>&1; then\n    LC_ALL=C.UTF-8 ipa service-add --ok-as-delegate=true --force HTTP/x0.cockpit.lan@COCKPIT.LAN\nelse\n    curl --insecure -s --negotiate -u : \\\n         --header \'Referer: https://services.cockpit.lan/ipa\' \\\n         --header "Content-Type: application/json" \\\n         --header "Accept: application/json" \\\n         --data \'{"params":\n                  [\n                    ["HTTP/x0.cockpit.lan@COCKPIT.LAN"],\n                    {"raw": false, "all": false, "version": "2.101",\n                     "force": true, "no_members": false, "ipakrbokasdelegate": true}\n                  ], "method": "service_add", "id": 0}\' \\\n         https://services.cockpit.lan/ipa/json\nfi\nipa-getkeytab -p HTTP/x0.cockpit.lan -k /etc/cockpit/krb5.keytab\n\n# HACK: due to sudo\'s "last rule wins", our /etc/sudoers rule becomes trumped by sssd\'s, so swap the order\nsed -i \'/^sudoers:/ s/files sss/sss files/\' /etc/nsswitch.conf\n')' returned non-zero exit status 1.

Journal extracted to TestKerberos-testNegotiate-debian-testing-127.0.0.2-2501-FAIL.log.gz
Journal extracted to TestKerberos-testNegotiate-services-127.0.0.2-2502-FAIL.log.gz
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 1055, in testNegotiate
    self.configure_kerberos("/etc/cockpit/krb5.keytab")
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 1021, in configure_kerberos
    self.machine.execute(JOIN_SCRIPT % args, timeout=1800)
  File "/work/make-checkout-workdir/bots/machine/machine_core/ssh_connection.py", line 327, in execute
    res = subprocess.run(command_line,
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/subprocess.py", line 571, in run
    raise CalledProcessError(retcode, process.args,
subprocess.CalledProcessError: Command '('env', '-u', 'LANGUAGE', 'LC_ALL=C', 'ssh', '-p', '2501', '-o', 'BatchMode=yes', '-o', 'IdentitiesOnly=yes', '-o', 'PKCS11Provider=none', '-o', 'StrictHostKeyChecking=no', '-o', 'UserKnownHostsFile=/dev/null', '-o', 'LogLevel=ERROR', '-l', 'root', '-o', 'ControlPath=/tmp/.cockpit-test-resources/ssh-%h-%p-%r-16938', '127.0.0.2', 'set -e;', '\nset -ex\n# Wait until zones from LDAP get loaded\nfor x in $(seq 1 20); do\n    if nslookup -type=SRV _ldap._tcp.cockpit.lan; then\n        break\n    else\n        sleep $x\n    fi\ndone\n\nif ! echo \'foobarfoo\' | realm join -vU admin cockpit.lan; then\n    if systemctl --quiet is-failed sssd.service; then\n        systemctl status --lines=100 sssd.service >&2\n    fi\n    journalctl -u realmd.service\n    exit 1\nfi\n\n# On certain OS\'s it takes time for sssd to come up properly\n#   [8347] 1528294262.886088: Sending initial UDP request to dgram 172.27.0.15:88\n#   kinit: Cannot contact any KDC for realm \'COCKPIT.LAN\' while getting initial credentials\nfor x in $(seq 1 20); do\n    if echo \'foobarfoo\' | KRB5_TRACE=/dev/stderr kinit -f admin@COCKPIT.LAN; then\n        break\n    else\n        sleep $x\n    fi\ndone\n\n# create SPN and keytab for ws\nif type ipa >/dev/null 2>&1; then\n    LC_ALL=C.UTF-8 ipa service-add --ok-as-delegate=true --force HTTP/x0.cockpit.lan@COCKPIT.LAN\nelse\n    curl --insecure -s --negotiate -u : \\\n         --header \'Referer: https://services.cockpit.lan/ipa\' \\\n         --header "Content-Type: application/json" \\\n         --header "Accept: application/json" \\\n         --data \'{"params":\n                  [\n                    ["HTTP/x0.cockpit.lan@COCKPIT.LAN"],\n                    {"raw": false, "all": false, "version": "2.101",\n                     "force": true, "no_members": false, "ipakrbokasdelegate": true}\n                  ], "method": "service_add", "id": 0}\' \\\n         https://services.cockpit.lan/ipa/json\nfi\nipa-getkeytab -p HTTP/x0.cockpit.lan -k /etc/cockpit/krb5.keytab\n\n# HACK: due to sudo\'s "last rule wins", our /etc/sudoers rule becomes trumped by sssd\'s, so swap the order\nsed -i \'/^sudoers:/ s/files sss/sss files/\' /etc/nsswitch.conf\n')' returned non-zero exit status 1.

# Result testNegotiate (__main__.TestKerberos.testNegotiate) failed
# 1 TEST FAILED [153s on 18b335b075d5]
not ok 61 test/verify/check-system-realms TestKerberos.testNegotiate $2

First occurrence: 2024-05-23T13:55:23.920786+00:00 | revision 3d900192a3b8589c411cee21c21c7996397637f4
Times recorded: 1
Latest occurrences:

  • 2024-05-23T13:55:23.920786+00:00 | revision 3d900192a3b8589c411cee21c21c7996397637f4
# ----------------------------------------------------------------------
# testQualifiedUsers (__main__.TestIPA.testQualifiedUsers)
Error: unknown connection 'eth1'.
Error: cannot delete unknown connection(s): 'eth1'.
time="2024-05-23T13:50:52Z" level=warning msg="The input device is not a TTY. The --tty and --interactive flags might not work properly"
[0523/135244.120319:WARNING:sandbox_linux.cc(420)] InitializeSandbox() called with multiple threads in process gpu-process.
[0523/135244.173414:WARNING:runtime_features.cc(730)] AttributionReportingCrossAppWeb cannot be enabled in this configuration. Use --enable-features=ConversionMeasurement,AttributionReportingCrossAppWeb in addition.

DevTools listening on ws://127.0.0.1:9612/devtools/browser/9939572c-ed4e-4efc-bab1-301ad8ee4963
[0523/135244.997721:WARNING:runtime_features.cc(730)] AttributionReportingCrossAppWeb cannot be enabled in this configuration. Use --enable-features=ConversionMeasurement,AttributionReportingCrossAppWeb in addition.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1716472367158.758,"url":"http://127.0.0.2:9091/cockpit/@localhost/*/po.js","networkRequestId":"16907.20"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1716472367160.704,"url":"http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js","networkRequestId":"16907.19"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1716472367229.617,"url":"http://127.0.0.2:9091/system"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1716472367230.761,"url":"http://127.0.0.2:9091/system"}
> warning: cockpit.format_{bytes,bits}[_per_sec](..., MiB, [object Object]) is deprecated.
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
> log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 131, in testQualifiedUsers
    b.wait_not_present("#realms-join-dialog")
  File "/work/make-checkout-workdir/test/common/testlib.py", line 666, in wait_not_present
    self.wait_js_func('!ph_is_present', selector)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 657, in wait_js_func
    self.wait_js_cond("%s(%s)" % (func, ','.join(map(jsquote, args))))
  File "/work/make-checkout-workdir/test/common/testlib.py", line 642, in wait_js_cond
    self.raise_cdp_exception("timeout\nwait_js_cond", cond, result["exceptionDetails"], trailer)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 332, in raise_cdp_exception
    raise Error("%s(%s): %s" % (func, arg, msg))
testlib.Error: timeout
wait_js_cond(!ph_is_present("#realms-join-dialog")): Uncaught (in promise) Error: condition did not become true
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 401 (Authentication failed)', 'timestamp': 1716472365577.939, 'url': 'http://127.0.0.2:9091/cockpit/login', 'networkRequestId': '16907.12'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716472367158.758, 'url': 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js', 'networkRequestId': '16907.20'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716472367160.704, 'url': 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js', 'networkRequestId': '16907.19'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716472367229.617, 'url': 'http://127.0.0.2:9091/system'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716472367230.761, 'url': 'http://127.0.0.2:9091/system'}
warning: cockpit.format_{bytes,bits}[_per_sec](..., MiB, [object Object]) is deprecated.
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}

Wrote screenshot to TestIPA-testQualifiedUsers-debian-testing-127.0.0.2-2201-FAIL.png
Wrote HTML dump to TestIPA-testQualifiedUsers-debian-testing-127.0.0.2-2201-FAIL.html
Wrote JS log to TestIPA-testQualifiedUsers-debian-testing-127.0.0.2-2201-FAIL.js.log
Journal extracted to TestIPA-testQualifiedUsers-debian-testing-127.0.0.2-2201-FAIL.log.gz
Journal extracted to TestIPA-testQualifiedUsers-services-127.0.0.2-2202-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 131, in testQualifiedUsers
    b.wait_not_present("#realms-join-dialog")
  File "/work/make-checkout-workdir/test/common/testlib.py", line 666, in wait_not_present
    self.wait_js_func('!ph_is_present', selector)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 657, in wait_js_func
    self.wait_js_cond("%s(%s)" % (func, ','.join(map(jsquote, args))))
  File "/work/make-checkout-workdir/test/common/testlib.py", line 642, in wait_js_cond
    self.raise_cdp_exception("timeout\nwait_js_cond", cond, result["exceptionDetails"], trailer)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 332, in raise_cdp_exception
    raise Error("%s(%s): %s" % (func, arg, msg))
testlib.Error: timeout
wait_js_cond(!ph_is_present("#realms-join-dialog")): Uncaught (in promise) Error: condition did not become true
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 401 (Authentication failed)', 'timestamp': 1716472365577.939, 'url': 'http://127.0.0.2:9091/cockpit/login', 'networkRequestId': '16907.12'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716472367158.758, 'url': 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js', 'networkRequestId': '16907.20'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716472367160.704, 'url': 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js', 'networkRequestId': '16907.19'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716472367229.617, 'url': 'http://127.0.0.2:9091/system'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716472367230.761, 'url': 'http://127.0.0.2:9091/system'}
warning: cockpit.format_{bytes,bits}[_per_sec](..., MiB, [object Object]) is deprecated.
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}
log: {"problem":"null","name":"org.freedesktop.DBus.Error.UnknownInterface","message":"Unknown interface 'org.freedesktop.systemd1.Service'.","toString":""}

# Result testQualifiedUsers (__main__.TestIPA.testQualifiedUsers) failed
# 1 TEST FAILED [466s on 18b335b075d5]
not ok 59 test/verify/check-system-realms TestIPA.testQualifiedUsers $2

First occurrence: 2024-05-23T13:57:54.843489+00:00 | revision 3d900192a3b8589c411cee21c21c7996397637f4
Times recorded: 1
Latest occurrences:

  • 2024-05-23T13:57:54.843489+00:00 | revision 3d900192a3b8589c411cee21c21c7996397637f4
# ----------------------------------------------------------------------
# testClientCertAuthentication (__main__.TestIPA.testClientCertAuthentication)
Error: unknown connection 'eth1'.
Error: cannot delete unknown connection(s): 'eth1'.
time="2024-05-24T05:26:41Z" level=warning msg="The input device is not a TTY. The --tty and --interactive flags might not work properly"
bash: line 1: type: chronyc: not found
+ ipa user-add --first=Alice --last=Developer --shell=/bin/bash alice
+ yes WonderLand123
+ ipa user-mod --password alice
+ ipa user-mod --password-expiration=2030-01-01T00:00:00Z alice
+ openssl req -new -newkey rsa:2048 -days 365 -nodes -keyout /tmp/alice.key -out /tmp/alice.csr -subj /CN=alice
Ignoring -days; not generating a certificate
Generating a RSA private key
...............+++++
.......+++++
writing new private key to '/tmp/alice.key'
-----
+ ipa cert-request /tmp/alice.csr --principal=alice --certificate-out=/tmp/alice.pem
+ ipa group-add-member admins --users=alice
+ ipa-advise enable-admins-sudo
+ sh -ex
+ klist
+ '[' 0 -ne 0 ']'
+ ipa hbacrule-show admins_sudo
+ echo HBAC rule admins_sudo already exists
+ ipa sudorule-show admins_all
+ echo SUDO rule admins_all already exists
[0524/052753.476932:WARNING:sandbox_linux.cc(420)] InitializeSandbox() called with multiple threads in process gpu-process.

DevTools listening on ws://127.0.0.1:9809/devtools/browser/c8aac258-ab80-4c13-b03e-48fee7986b48
[0524/052753.513335:WARNING:runtime_features.cc(730)] AttributionReportingCrossAppWeb cannot be enabled in this configuration. Use --enable-features=ConversionMeasurement,AttributionReportingCrossAppWeb in addition.
[0524/052754.185307:WARNING:runtime_features.cc(730)] AttributionReportingCrossAppWeb cannot be enabled in this configuration. Use --enable-features=ConversionMeasurement,AttributionReportingCrossAppWeb in addition.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1716528475326.038,"url":"http://127.0.0.2:9291/cockpit/@localhost/*/po.js","networkRequestId":"16565.20"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1716528475330.606,"url":"http://127.0.0.2:9291/cockpit/@localhost/*/po.manifest.js","networkRequestId":"16565.19"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9291/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1716528475373.91,"url":"http://127.0.0.2:9291/system"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9291/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1716528475374.03,"url":"http://127.0.0.2:9291/system"}
> warning: cockpit.format_{bytes,bits}[_per_sec](..., MiB, [object Object]) is deprecated.
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 729, in testClientCertAuthentication
    self.checkClientCertAuthentication()
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 363, in checkClientCertAuthentication
    b.wait_not_present("#realms-join-dialog")
  File "/work/make-checkout-workdir/test/common/testlib.py", line 666, in wait_not_present
    self.wait_js_func('!ph_is_present', selector)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 657, in wait_js_func
    self.wait_js_cond("%s(%s)" % (func, ','.join(map(jsquote, args))))
  File "/work/make-checkout-workdir/test/common/testlib.py", line 642, in wait_js_cond
    self.raise_cdp_exception("timeout\nwait_js_cond", cond, result["exceptionDetails"], trailer)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 332, in raise_cdp_exception
    raise Error("%s(%s): %s" % (func, arg, msg))
testlib.Error: timeout
wait_js_cond(!ph_is_present("#realms-join-dialog")): Uncaught (in promise) Error: condition did not become true
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 401 (Authentication failed)', 'timestamp': 1716528474522.875, 'url': 'http://127.0.0.2:9291/cockpit/login', 'networkRequestId': '16565.12'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716528475326.038, 'url': 'http://127.0.0.2:9291/cockpit/@localhost/*/po.js', 'networkRequestId': '16565.20'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716528475330.606, 'url': 'http://127.0.0.2:9291/cockpit/@localhost/*/po.manifest.js', 'networkRequestId': '16565.19'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9291/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716528475373.91, 'url': 'http://127.0.0.2:9291/system'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9291/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716528475374.03, 'url': 'http://127.0.0.2:9291/system'}
warning: cockpit.format_{bytes,bits}[_per_sec](..., MiB, [object Object]) is deprecated.

Wrote screenshot to TestIPA-testClientCertAuthentication-debian-testing-127.0.0.2-2401-FAIL.png
Wrote HTML dump to TestIPA-testClientCertAuthentication-debian-testing-127.0.0.2-2401-FAIL.html
Wrote JS log to TestIPA-testClientCertAuthentication-debian-testing-127.0.0.2-2401-FAIL.js.log
Journal extracted to TestIPA-testClientCertAuthentication-debian-testing-127.0.0.2-2401-FAIL.log.gz
Journal extracted to TestIPA-testClientCertAuthentication-services-127.0.0.2-2402-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 729, in testClientCertAuthentication
    self.checkClientCertAuthentication()
  File "/work/make-checkout-workdir/test/verify/check-system-realms", line 363, in checkClientCertAuthentication
    b.wait_not_present("#realms-join-dialog")
  File "/work/make-checkout-workdir/test/common/testlib.py", line 666, in wait_not_present
    self.wait_js_func('!ph_is_present', selector)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 657, in wait_js_func
    self.wait_js_cond("%s(%s)" % (func, ','.join(map(jsquote, args))))
  File "/work/make-checkout-workdir/test/common/testlib.py", line 642, in wait_js_cond
    self.raise_cdp_exception("timeout\nwait_js_cond", cond, result["exceptionDetails"], trailer)
  File "/work/make-checkout-workdir/test/common/testlib.py", line 332, in raise_cdp_exception
    raise Error("%s(%s): %s" % (func, arg, msg))
testlib.Error: timeout
wait_js_cond(!ph_is_present("#realms-join-dialog")): Uncaught (in promise) Error: condition did not become true
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 401 (Authentication failed)', 'timestamp': 1716528474522.875, 'url': 'http://127.0.0.2:9291/cockpit/login', 'networkRequestId': '16565.12'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716528475326.038, 'url': 'http://127.0.0.2:9291/cockpit/@localhost/*/po.js', 'networkRequestId': '16565.20'}
cdp: {'source': 'network', 'level': 'error', 'text': 'Failed to load resource: the server responded with a status of 404 (ERROR)', 'timestamp': 1716528475330.606, 'url': 'http://127.0.0.2:9291/cockpit/@localhost/*/po.manifest.js', 'networkRequestId': '16565.19'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9291/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716528475373.91, 'url': 'http://127.0.0.2:9291/system'}
cdp: {'source': 'security', 'level': 'error', 'text': "Refused to execute script from 'http://127.0.0.2:9291/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.", 'timestamp': 1716528475374.03, 'url': 'http://127.0.0.2:9291/system'}
warning: cockpit.format_{bytes,bits}[_per_sec](..., MiB, [object Object]) is deprecated.

# Result testClientCertAuthentication (__main__.TestIPA.testClientCertAuthentication) failed
# 1 TEST FAILED [404s on b95430495765]
not ok 57 test/verify/check-system-realms TestIPA.testClientCertAuthentication $2

First occurrence: 2024-05-24T05:33:00.653302+00:00 | revision 2a46a68
Times recorded: 1
Latest occurrences:

  • 2024-05-24T05:33:00.653302+00:00 | revision 2a46a68

allisonkarlitskaya pushed a commit that referenced this issue May 7, 2024
@martinpitt @allisonkarlitskaya
naughty: Add pattern for debian-testing FreeIPA crash
9b07c71 
TestIPA.testClientCertAuthentication and TestIPA.testQualifiedUsers join
with the UI; TestIPA.testUnqualifiedUsers and TestKerberos join with the
CLI. Add patterns for both.

Downstream report: https://bugs.debian.org/1070680
Known issue #6346
allisonkarlitskaya pushed a commit that referenced this issue Jun 16, 2024
naughty: Close 6346: freeipa-client: unable to convert the attribute …
14b155e 
…'cacertificate;binary' value

Known issue which has not occurred in 22 days

freeipa-client: unable to convert the attribute 'cacertificate;binary' value

Fixes #6346
@github-actions github-actions bot mentioned this issue Jun 16, 2024
Closed
allisonkarlitskaya pushed a commit that referenced this issue Jun 16, 2024
naughty: Close 6346: freeipa-client: unable to convert the attribute …
58a23dd 
…'cacertificate;binary' value

Known issue which has not occurred in 22 days

freeipa-client: unable to convert the attribute 'cacertificate;binary' value

Fixes #6346

Closes #6507
@martinpitt
Copy link
Member Author

Manual bump. This is still current, we just dropped freeipa from our debian-testing image temporarily as the package fell out of testing.

allisonkarlitskaya pushed a commit that referenced this issue Jul 14, 2024
naughty: Close 6346: freeipa-client: unable to convert the attribute …
4dd4030 
…'cacertificate;binary' value

Known issue which has not occurred in 27 days

freeipa-client: unable to convert the attribute 'cacertificate;binary' value

Fixes #6346
@github-actions github-actions bot mentioned this issue Jul 14, 2024
Merged
allisonkarlitskaya pushed a commit that referenced this issue Jul 14, 2024
naughty: Close 6346: freeipa-client: unable to convert the attribute …
afe0b2d 
…'cacertificate;binary' value

Known issue which has not occurred in 27 days

freeipa-client: unable to convert the attribute 'cacertificate;binary' value

Fixes #6346

Closes #6618
martinpitt pushed a commit that referenced this issue Jul 14, 2024
@martinpitt
naughty: Close 6346: freeipa-client: unable to convert the attribute …
3734ded 
…'cacertificate;binary' value

Known issue which has not occurred in 27 days

freeipa-client: unable to convert the attribute 'cacertificate;binary' value

Fixes #6346

Closes #6618
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
knownissue
Projects
None yet
Milestone
No milestone
2 participants
@martinpitt @cockpituous