{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 7, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Upstream release FreeIPA 4.8.10\n\nRelease notes: https://www.freeipa.org/page/Releases/4.8.10\n\n\n\n", "type": "bugfix", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2020-09-26 09:50:41", "date_modified": "2020-09-29 11:16:17", "date_approved": null, "date_testing": "2020-09-30 01:21:14", "date_stable": "2020-10-07 20:36:01", "alias": "FEDORA-2020-6f072665c6", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2020-10-07 20:36:01", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2020-6f072665c6", "title": "freeipa-4.8.10-5.fc32", "version_hash": "3652b857d91430218db8211d4d48bbd216df3a77", "release": {"name": "F32", "long_name": "Fedora 32", "version": "32", "id_prefix": "FEDORA", "branch": "f32", "dist_tag": "f32", "stable_tag": "f32-updates", "testing_tag": "f32-updates-testing", "candidate_tag": "f32-updates-candidate", "pending_signing_tag": "f32-signing-pending", "pending_testing_tag": "f32-updates-testing-pending", "pending_stable_tag": "f32-updates-pending", "override_tag": "f32-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by abbra. ", "timestamp": "2020-09-26 09:50:41", "update_id": 245252, "user_id": 91, "id": 1648913, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2020-09-26 09:50:41", "update_id": 245252, "user_id": 91, "id": 1648914, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2020-09-26 09:50:41", "update_id": 245252, "user_id": 91, "id": 1648915, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2020-09-26 11:10:39", "update_id": 245252, "user_id": 91, "id": 1648945, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Greenwave does not work, it seems, but OpenQA tests succeeded: https://openqa.fedoraproject.org/tests/overview?distri=fedora&version=32&build=Update-FEDORA-2020-6f072665c6&groupid=2", "timestamp": "2020-09-26 12:04:09", "update_id": 245252, "user_id": 1242, "id": 1648951, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "abbra edited this update.\n\nNew build(s):\n\n- freeipa-4.8.10-2.fc32\n\nRemoved build(s):\n\n- freeipa-4.8.10-1.fc32\n\nKarma has been reset.", "timestamp": "2020-09-26 15:31:38", "update_id": 245252, "user_id": 91, "id": 1649337, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2020-09-27 01:01:41", "update_id": 245252, "user_id": 91, "id": 1649748, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "abbra edited this update.\n\nNew build(s):\n\n- freeipa-4.8.10-3.fc32\n\nRemoved build(s):\n\n- freeipa-4.8.10-2.fc32\n\nKarma has been reset.", "timestamp": "2020-09-27 15:22:49", "update_id": 245252, "user_id": 91, "id": 1650206, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by abbra. ", "timestamp": "2020-09-27 15:22:51", "update_id": 245252, "user_id": 91, "id": 1650207, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2020-09-28 01:15:21", "update_id": 245252, "user_id": 91, "id": 1650745, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "FreeIPA server installation works for me.\n\nClient-only installation does not pull in FreeIPA server packages.", "timestamp": "2020-09-28 09:40:43", "update_id": 245252, "user_id": 2622, "id": 1651321, "bug_feedback": [{"karma": 1, "comment_id": 1651321, "bug_id": 1883005, "bug": {"bug_id": 1883005, "title": "freeipa-selinux drags in server components on client", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "cheimes", "email": "cheimes@redhat.com", "id": 2622, "avatar": "https://seccdn.libravatar.org/avatar/fb01cd1580c9fa10cf453f7c77b9a5ac59f645883d7bf9f921743803e0379c8d?s=24&d=retro", "openid": "cheimes.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "python-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitfreeipa"}, {"name": "git389"}, {"name": "latchset"}, {"name": "gitpki"}, {"name": "python-packagers-sig"}, {"name": "podengo"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "abbra edited this update.\n\nNew build(s):\n\n- freeipa-4.8.10-4.fc32\n\nRemoved build(s):\n\n- freeipa-4.8.10-3.fc32\n\nKarma has been reset.", "timestamp": "2020-09-28 12:56:31", "update_id": 245252, "user_id": 91, "id": 1651632, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by abbra. ", "timestamp": "2020-09-28 12:56:32", "update_id": 245252, "user_id": 91, "id": 1651633, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2020-09-29 01:16:29", "update_id": 245252, "user_id": 91, "id": 1652684, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "abbra edited this update.\n\nNew build(s):\n\n- freeipa-4.8.10-5.fc32\n\nRemoved build(s):\n\n- freeipa-4.8.10-4.fc32\n\nKarma has been reset.", "timestamp": "2020-09-29 11:16:16", "update_id": 245252, "user_id": 91, "id": 1653464, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by abbra. ", "timestamp": "2020-09-29 11:16:17", "update_id": 245252, "user_id": 91, "id": 1653465, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2020-09-30 01:22:12", "update_id": 245252, "user_id": 91, "id": 1654669, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2020-10-07 01:23:47", "update_id": 245252, "user_id": 91, "id": 1666894, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2020-10-07 01:23:47", "update_id": 245252, "user_id": 91, "id": 1666895, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2020-10-07 20:36:49", "update_id": 245252, "user_id": 91, "id": 1668287, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-10-09 12:29:50", "update_id": 245252, "user_id": 685, "id": 1671598, "bug_feedback": [{"karma": 1, "comment_id": 1671598, "bug_id": 1883005, "bug": {"bug_id": 1883005, "title": "freeipa-selinux drags in server components on client", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "fcami", "email": "fdc@fcami.net", "id": 685, "avatar": "https://seccdn.libravatar.org/avatar/50e67d6bd8fd754776a97cfc0726e679c2f8400e76dd1a85664b9087ae48810d?s=24&d=retro", "openid": "fcami.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}]}}], "builds": [{"nvr": "freeipa-4.8.10-5.fc32", "signed": true, "release_id": 35, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1883005, "title": "freeipa-selinux drags in server components on client", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1663078, "bug_id": 1883005, "comment": {"karma": 0, "karma_critpath": 0, "text": "Actually, the resolved support on the replica works just fine -- it is able to resolve master and communicate to it. What fails is resolution of the replica hostname *from* master:\n\n```\nExecute check on remote master\nCheck connection from master to remote replica 'ipa003.domain.local':\nERROR: Port check failed! Unable to resolve host name 'ipa003.domain.local'\n\n```\n\nSadly, the logs we have collected from master do not include anything from `/var/log` or `/etc/` so there is no way to understand what is broken.", "timestamp": "2020-10-05 08:14:38", "update_id": 245251, "user_id": 1242, "id": 1663078, "testcase_feedback": [], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 1651386, "bug_id": 1883005, "comment": {"karma": 0, "karma_critpath": 0, "text": "``/etc/systemd/resolved.conf.d`` was not accessible by systemd-resolved. PR https://github.com/freeipa/freeipa/pull/5156 fixes the problem.", "timestamp": "2020-09-28 10:11:08", "update_id": 245251, "user_id": 2622, "id": 1651386, "testcase_feedback": [], "user": {"name": "cheimes", "email": "cheimes@redhat.com", "id": 2622, "avatar": "https://seccdn.libravatar.org/avatar/fb01cd1580c9fa10cf453f7c77b9a5ac59f645883d7bf9f921743803e0379c8d?s=24&d=retro", "openid": "cheimes.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "python-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitfreeipa"}, {"name": "git389"}, {"name": "latchset"}, {"name": "gitpki"}, {"name": "python-packagers-sig"}, {"name": "podengo"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1662157, "bug_id": 1883005, "comment": {"karma": 0, "karma_critpath": 0, "text": "As noted in the bug report, openQA tests passing was not indicative of the update working, because I had already put a workaround for the systemd-resolved problem in the openQA tests themselves: we simply check if systemd-resolved is enabled and disable it if so, reverting to how things worked before F33.\n\nI've temporarily hacked the tests to skip that workaround if we're testing *this specific update*, and am re-running them. That should give us more useful results.", "timestamp": "2020-10-04 17:10:46", "update_id": 245251, "user_id": 302, "id": 1662157, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1662252, "bug_id": 1883005, "comment": {"karma": -1, "karma_critpath": 0, "text": "So looks like the [replica test fails](https://openqa.fedoraproject.org/tests/684390#step/realmd_join_sssd/33) much the same way it did before I added the workaround :( That's with freeipa-4.8.10-5.fc33 .", "timestamp": "2020-10-04 17:52:53", "update_id": 245251, "user_id": 302, "id": 1662252, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1663213, "bug_id": 1883005, "comment": {"karma": 0, "karma_critpath": 0, "text": "Checking through the replica logs, it seems that master itself is not capable to talk to own DNS server (connection check runs on replica _and_ asks to run the remote check from master too), so when a connection check is executed on master, that process didn't resolve replica hostname. I wonder if this was a master upgrade and perhaps systemd-resolved did its upgrade after IPA scripts were run, so actual upgrade in IPA didn't trigger migrating configuration to resolved.", "timestamp": "2020-10-05 10:08:16", "update_id": 245251, "user_id": 1242, "id": 1663213, "testcase_feedback": [], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 1, "comment_id": 1671544, "bug_id": 1883005, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1 for Adam's last proposal. Let's land this update while we work on a new update for #1880628", "timestamp": "2020-10-09 11:30:51", "update_id": 245251, "user_id": 2622, "id": 1671544, "testcase_feedback": [], "user": {"name": "cheimes", "email": "cheimes@redhat.com", "id": 2622, "avatar": "https://seccdn.libravatar.org/avatar/fb01cd1580c9fa10cf453f7c77b9a5ac59f645883d7bf9f921743803e0379c8d?s=24&d=retro", "openid": "cheimes.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "python-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitfreeipa"}, {"name": "git389"}, {"name": "latchset"}, {"name": "gitpki"}, {"name": "python-packagers-sig"}, {"name": "podengo"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1671550, "bug_id": 1883005, "comment": {"karma": 0, "karma_critpath": 0, "text": "I added bug 1886205 and submitted this to stable to unblock F32 to F33 situation. We'll do FreeIPA 4.8.11 release today/tomorrow that includes all fixes for systemd-resolved we done (more than this build contains).", "timestamp": "2020-10-09 11:32:26", "update_id": 245251, "user_id": 1242, "id": 1671550, "testcase_feedback": [], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 1672621, "bug_id": 1883005, "comment": {"karma": 1, "karma_critpath": 0, "text": "With some tweaks to the test code (especially not touching resolv.conf) the replica tests do pass, so changing my feedback to positive. Let's just push this stable and pretend everything's fine!", "timestamp": "2020-10-09 22:53:44", "update_id": 245251, "user_id": 302, "id": 1672621, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 1, "comment_id": 1651321, "bug_id": 1883005, "comment": {"karma": 1, "karma_critpath": 0, "text": "FreeIPA server installation works for me.\n\nClient-only installation does not pull in FreeIPA server packages.", "timestamp": "2020-09-28 09:40:43", "update_id": 245252, "user_id": 2622, "id": 1651321, "testcase_feedback": [], "user": {"name": "cheimes", "email": "cheimes@redhat.com", "id": 2622, "avatar": "https://seccdn.libravatar.org/avatar/fb01cd1580c9fa10cf453f7c77b9a5ac59f645883d7bf9f921743803e0379c8d?s=24&d=retro", "openid": "cheimes.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "python-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitfreeipa"}, {"name": "git389"}, {"name": "latchset"}, {"name": "gitpki"}, {"name": "python-packagers-sig"}, {"name": "podengo"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 1651344, "bug_id": 1883005, "comment": {"karma": -1, "karma_critpath": 0, "text": "FreeIPA server installation works for me.\n\nClient-only installation does not pull in FreeIPA server packages.\n\nsystemd-resolved integration does **not** work correctly. resolved ignores the new drop-in configuration file.\n\n```\n# cat /etc/systemd/resolved.conf.d/zzz-ipa.conf \n\n# auto-generated by IPA installer\n[Resolve]\n# use local BIND instance\nDNS=127.0.0.1\n# make local BIND default DNS server, add search suffixes\nDomains=~. ipa.example\n```\n\nresolvectl does neither show default DNS server 127.0.0.1 nor ipa.example default search domain.\n\n```\n# resolvectl \nGlobal\n       LLMNR setting: resolve             \nMulticastDNS setting: no                  \n  DNSOverTLS setting: no                  \n      DNSSEC setting: no                  \n    DNSSEC supported: no                  \nFallback DNS Servers: 1.1.1.1             \n                      8.8.8.8             \n                      1.0.0.1             \n                      8.8.4.4             \n                      2606:4700:4700::1111\n                      2001:4860:4860::8888\n                      2606:4700:4700::1001\n                      2001:4860:4860::8844\n...\n```\n\nDNS lookup of ipa-ca alias with default resolver systemd-resolved does not work either:\n\n```\n# dig +nocomments ipa-ca.ipa.example.\n\n; <<>> DiG 9.11.23-RedHat-9.11.23-1.fc33 <<>> +nocomments ipa-ca.ipa.example.\n;; global options: +cmd\n;ipa-ca.ipa.example.            IN      A\n;; Query time: 0 msec\n;; SERVER: 127.0.0.53#53(127.0.0.53)\n;; WHEN: Mon Sep 28 05:45:42 EDT 2020\n;; MSG SIZE  rcvd: 47\n# dig +nocomments @127.0.0.1 ipa-ca.ipa.example.\n\n; <<>> DiG 9.11.23-RedHat-9.11.23-1.fc33 <<>> +nocomments @127.0.0.1 ipa-ca.ipa.example.\n; (1 server found)\n;; global options: +cmd\n;ipa-ca.ipa.example.            IN      A\nipa-ca.ipa.example.     86400   IN      A       10.0.139.100\nipa.example.            86400   IN      NS      host-10-0-139-100.ipa.example.\nhost-10-0-139-100.ipa.example. 86400 IN A       10.0.139.100\n;; Query time: 0 msec\n;; SERVER: 127.0.0.1#53(127.0.0.1)\n;; WHEN: Mon Sep 28 05:46:01 EDT 2020\n;; MSG SIZE  rcvd: 139\n```\n\n```\n# rpm -qa systemd freeipa-server\nsystemd-246.4-2.fc33.x86_64\nfreeipa-server-4.8.10-3.fc33.x86_64\n```", "timestamp": "2020-09-28 09:48:04", "update_id": 245251, "user_id": 2622, "id": 1651344, "testcase_feedback": [], "user": {"name": "cheimes", "email": "cheimes@redhat.com", "id": 2622, "avatar": "https://seccdn.libravatar.org/avatar/fb01cd1580c9fa10cf453f7c77b9a5ac59f645883d7bf9f921743803e0379c8d?s=24&d=retro", "openid": "cheimes.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "python-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitfreeipa"}, {"name": "git389"}, {"name": "latchset"}, {"name": "gitpki"}, {"name": "python-packagers-sig"}, {"name": "podengo"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1653062, "bug_id": 1883005, "comment": {"karma": 0, "karma_critpath": 0, "text": "This is not a full fix, sadly. Restoring SELinux context on a generated config file does not work. I added details to https://pagure.io/freeipa/issue/8518", "timestamp": "2020-09-29 07:46:37", "update_id": 245251, "user_id": 1242, "id": 1653062, "testcase_feedback": [], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 1671545, "bug_id": 1883005, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-10-09 11:31:05", "update_id": 245251, "user_id": 2622, "id": 1671545, "testcase_feedback": [], "user": {"name": "cheimes", "email": "cheimes@redhat.com", "id": 2622, "avatar": "https://seccdn.libravatar.org/avatar/fb01cd1580c9fa10cf453f7c77b9a5ac59f645883d7bf9f921743803e0379c8d?s=24&d=retro", "openid": "cheimes.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "python-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitfreeipa"}, {"name": "git389"}, {"name": "latchset"}, {"name": "gitpki"}, {"name": "python-packagers-sig"}, {"name": "podengo"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1671597, "bug_id": 1883005, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-10-09 12:26:25", "update_id": 245251, "user_id": 685, "id": 1671597, "testcase_feedback": [], "user": {"name": "fcami", "email": "fdc@fcami.net", "id": 685, "avatar": "https://seccdn.libravatar.org/avatar/50e67d6bd8fd754776a97cfc0726e679c2f8400e76dd1a85664b9087ae48810d?s=24&d=retro", "openid": "fcami.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}]}}}, {"karma": 1, "comment_id": 1671598, "bug_id": 1883005, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-10-09 12:29:50", "update_id": 245252, "user_id": 685, "id": 1671598, "testcase_feedback": [], "user": {"name": "fcami", "email": "fdc@fcami.net", "id": 685, "avatar": "https://seccdn.libravatar.org/avatar/50e67d6bd8fd754776a97cfc0726e679c2f8400e76dd1a85664b9087ae48810d?s=24&d=retro", "openid": "fcami.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}]}}}, {"karma": 0, "comment_id": 1668545, "bug_id": 1883005, "comment": {"karma": 0, "karma_critpath": 0, "text": "No. It's not an upgrade test. It's a fresh deployment test. This is exactly how it failed before you tried to deal with resolved. I know the failure is on the master, I think I mentioned that initially in the bug report.\n\nNote, we have an ancillary problem now - upgrade from F32 to F33 doesn't work any more because F32's freeipa is now newer than F33's. We may have to push this anyway just to fix *that* problem.", "timestamp": "2020-10-07 22:08:55", "update_id": 245251, "user_id": 302, "id": 1668545, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1668546, "bug_id": 1883005, "comment": {"karma": 0, "karma_critpath": 0, "text": "Filed https://bugzilla.redhat.com/show_bug.cgi?id=1886205 for that problem. Assuming it's accepted as a blocker (as it should be) I'd suggest we should edit this update so it's marked as fixing that bug but *not* fixing the resolved bug, and go ahead and push it.", "timestamp": "2020-10-07 22:17:16", "update_id": 245251, "user_id": 302, "id": 1668546, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}]}], "updateid": "FEDORA-2020-6f072665c6", "karma": 1, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}