ansible-freeipa icon indicating copy to clipboard operation
ansible-freeipa copied to clipboard

certmonger request for host certificate failed: 'Env' object has no attribute 'certmonger_wait_timeout'

Open taniahagan opened this issue 2 years ago • 13 comments

Hi,

Running the ipa_client install on version 1.11.1 I see the following error: certmonger request for host certificate failed: 'Env' object has no attribute 'certmonger_wait_timeout'

If I revert to version 1.9.2 it works as expected.

Any one have any ideas on how to resolve this?

Many Thanks, Tania

taniahagan avatar Oct 09 '23 11:10 taniahagan

Which IPA version are you using?

t-woerner avatar Oct 09 '23 11:10 t-woerner

certmonger_wait_timeout is defined within ipalib/constants.py and used within the server and certmonger installation code. ansible-freeipa is not using certmonger_wait_timeout itself.

t-woerner avatar Oct 09 '23 12:10 t-woerner

We're on IPA version 4.9.11

taniahagan avatar Oct 09 '23 14:10 taniahagan

Is the server also using 4.9.11?

t-woerner avatar Oct 09 '23 15:10 t-woerner

i have the same problem, with centos 7 latest (with cis security hardening and without) the same are for rocky 8

daswars avatar Oct 31 '23 08:10 daswars

Please run this on the client machines:

rpm -qf $(python -c "import ipaclient; print(ipaclient.__path__[0])")
rpm -qf $(/usr/libexec/platform-python -c "import ipaclient; print(ipaclient.__path__[0])")

The first line is for RHEL-7 and the second for RHEL-8 and later.

t-woerner avatar Nov 08 '23 12:11 t-woerner

Centos7

rpm -qf $(python -c "import ipaclient; print(ipaclient.__path__[0])")
python2-ipaclient-4.6.8-5.el7.centos.15.noarch

daswars avatar Nov 10 '23 19:11 daswars

On Rocky 9 rpm -qf $(/usr/libexec/platform-python -c "import ipaclient; print(ipaclient.path[0])") python3-ipaclient-4.10.2-8.el9_3.noarch

taniahagan avatar Apr 05 '24 13:04 taniahagan