|
 |
fb8d45 |
From 641c550cc3650c6d0aa95f52b422089f64e7fb6a Mon Sep 17 00:00:00 2001
|
|
|
fb8d45 |
From: Thomas Woerner <twoerner@redhat.com>
|
|
|
fb8d45 |
Date: Mon, 15 Aug 2022 16:00:06 +0200
|
|
|
fb8d45 |
Subject: [PATCH] ipareplica: ipareplica_setup_adtrust fails while updating
|
|
|
fb8d45 |
ipaNTFlatName
|
|
|
fb8d45 |
|
|
|
fb8d45 |
The internal parameter sid_generation_always is generated in
|
|
|
fb8d45 |
ipareplica_test to enable SID generation if ipareplica_setup_adtrust is
|
|
|
fb8d45 |
not enabled.
|
|
|
fb8d45 |
|
|
|
fb8d45 |
This parameter was not used for ipareplica_prepare though, therefore
|
|
|
fb8d45 |
adtrust.install_check was not executed and did not set the attribute
|
|
|
fb8d45 |
adtrust.netbios_name. As a result adtrust.netbios_name was None and the
|
|
|
fb8d45 |
try to use this as the new NetBIOS domain name failed with an
|
|
|
fb8d45 |
INVALID_SYNTAX error in adtrustinstance while executing
|
|
|
fb8d45 |
ipareplica_setup_adtrust.
|
|
|
fb8d45 |
|
|
|
fb8d45 |
This issue only occurs if SIDs are not enabled in the domain yet for
|
|
|
fb8d45 |
example with an old deployment.
|
|
|
fb8d45 |
---
|
|
|
fb8d45 |
roles/ipareplica/tasks/install.yml | 1 +
|
|
|
fb8d45 |
1 file changed, 1 insertion(+)
|
|
|
fb8d45 |
|
|
|
fb8d45 |
diff --git a/roles/ipareplica/tasks/install.yml b/roles/ipareplica/tasks/install.yml
|
|
|
fb8d45 |
index 0e5f840..7413884 100644
|
|
|
fb8d45 |
--- a/roles/ipareplica/tasks/install.yml
|
|
|
fb8d45 |
+++ b/roles/ipareplica/tasks/install.yml
|
|
|
fb8d45 |
@@ -201,6 +201,7 @@
|
|
|
fb8d45 |
### additional ###
|
|
|
fb8d45 |
server: "{{ result_ipareplica_test.server }}"
|
|
|
fb8d45 |
skip_conncheck: "{{ ipareplica_skip_conncheck }}"
|
|
|
fb8d45 |
+ sid_generation_always: "{{ result_ipareplica_test.sid_generation_always }}"
|
|
|
fb8d45 |
register: result_ipareplica_prepare
|
|
|
fb8d45 |
|
|
|
fb8d45 |
- name: Install - Add to ipaservers
|
|
|
fb8d45 |
--
|
|
|
fb8d45 |
2.37.3
|
|
|
fb8d45 |
|