On 07/20/2015 01:04 PM, Martin Basti wrote:
On 20/07/15 12:47, Oleg Fayans wrote:
Hi everybody,

I keep receiving the same non-specific error message during attepts to
set domain level to 0:
$ ipa domainlevel-set 0
ipa: ERROR: an internal error has occurred

This error does not get recorded in the directory server errors log.
Real-time observations on the access log show that only the following
lines get added:

[20/Jul/2015:06:45:07 -0400] conn=151 op=0 BIND dn="" method=sasl
version=3 mech=GSSAPI
[20/Jul/2015:06:45:07 -0400] conn=2 op=984 RESULT err=0 tag=101
nentries=1 etime=0
[20/Jul/2015:06:45:07 -0400] conn=151 op=0 RESULT err=14 tag=97
nentries=0 etime=0, SASL bind in progress
[20/Jul/2015:06:45:08 -0400] conn=151 op=1 BIND dn="" method=sasl
version=3 mech=GSSAPI
[20/Jul/2015:06:45:08 -0400] conn=151 op=2 BIND dn="" method=sasl
version=3 mech=GSSAPI
[20/Jul/2015:06:45:08 -0400] conn=151 op=3 SRCH
base="cn=ipaconfig,cn=etc,dc=pesen,dc=net" scope=0
filter="(objectClass=*)" attrs=ALL
[20/Jul/2015:06:45:08 -0400] conn=151 op=2 RESULT err=0 tag=97
nentries=0 etime=0 dn="uid=admin,cn=users,cn=accounts,dc=pesen,dc=net"
[20/Jul/2015:06:45:08 -0400] conn=151 op=3 RESULT err=0 tag=101
nentries=1 etime=0
[20/Jul/2015:06:45:08 -0400] conn=151 op=4 SRCH base="cn=Domain
Level,cn=ipa,cn=etc,dc=pesen,dc=net" scope=0 filter="(objectClass=*)"
attrs=ALL
[20/Jul/2015:06:45:08 -0400] conn=151 op=4 RESULT err=0 tag=101
nentries=1 etime=0
[20/Jul/2015:06:45:08 -0400] conn=151 op=1 RESULT err=14 tag=97
nentries=0 etime=0, SASL bind in progress
[20/Jul/2015:06:45:08 -0400] conn=151 op=5 UNBIND
[20/Jul/2015:06:45:08 -0400] conn=151 op=5 fd=102 closed - U1

According to Ludwig, decreasing of the domain level is not supported,
so we should provide some meaningfull error message in this case

P. S.
$ rpm -q freeipa-server
freeipa-server-4.2.90.201507171036GITf1f3ef4-0.fc22.x86_64
The packages were built on Friday from the upstream master.

Can you paste apache error log here please?


ipa: ERROR: non-public: ValueError: non-generic 'InvalidDomainLevelError' needs format=None; got format=Gettext('Domain Level cannot be lowered.', domain='ipa', localedir=None)
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 347, in wsgi_execute
    result = self.Command[name](*args, **options)
File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 443, in __call__
    ret = self.run(*args, **options)
File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 760, in run
    return self.execute(*args, **options)
File "/usr/lib/python2.7/site-packages/ipalib/plugins/domainlevel.py", line 123, in execute
    raise errors.InvalidDomainLevelError(message)
File "/usr/lib/python2.7/site-packages/ipalib/errors.py", line 248, in __init__
    messages.process_message_arguments(self, format, message, **kw)
File "/usr/lib/python2.7/site-packages/ipalib/messages.py", line 52, in process_message_arguments
    name, format)
ValueError: non-generic 'InvalidDomainLevelError' needs format=None; got format=Gettext('Domain Level cannot be lowered.', domain='ipa', localedir=None)

--
Petr Vobornik

--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to