Blame SOURCES/ansible-freeipa-1.6.3-ipareplica-ipareplica_setup_adtrust-fails-while-upda_PR877_RHBZ#2132971.patch

e788bc
From 641c550cc3650c6d0aa95f52b422089f64e7fb6a Mon Sep 17 00:00:00 2001
e788bc
From: Thomas Woerner <twoerner@redhat.com>
e788bc
Date: Mon, 15 Aug 2022 16:00:06 +0200
e788bc
Subject: [PATCH] ipareplica: ipareplica_setup_adtrust fails while updating
e788bc
 ipaNTFlatName
e788bc
e788bc
The internal parameter sid_generation_always is generated in
e788bc
ipareplica_test to enable SID generation if ipareplica_setup_adtrust is
e788bc
not enabled.
e788bc
e788bc
This parameter was not used for ipareplica_prepare though, therefore
e788bc
adtrust.install_check was not executed and did not set the attribute
e788bc
adtrust.netbios_name. As a result adtrust.netbios_name was None and the
e788bc
try to use this as the new NetBIOS domain name failed with an
e788bc
INVALID_SYNTAX error in adtrustinstance while executing
e788bc
ipareplica_setup_adtrust.
e788bc
e788bc
This issue only occurs if SIDs are not enabled in the domain yet for
e788bc
example with an old deployment.
e788bc
---
e788bc
 roles/ipareplica/tasks/install.yml | 1 +
e788bc
 1 file changed, 1 insertion(+)
e788bc
e788bc
diff --git a/roles/ipareplica/tasks/install.yml b/roles/ipareplica/tasks/install.yml
e788bc
index 0e5f840..7413884 100644
e788bc
--- a/roles/ipareplica/tasks/install.yml
e788bc
+++ b/roles/ipareplica/tasks/install.yml
e788bc
@@ -201,6 +201,7 @@
e788bc
       ### additional ###
e788bc
       server: "{{ result_ipareplica_test.server }}"
e788bc
       skip_conncheck: "{{ ipareplica_skip_conncheck }}"
e788bc
+      sid_generation_always: "{{ result_ipareplica_test.sid_generation_always }}"
e788bc
     register: result_ipareplica_prepare
e788bc
 
e788bc
   - name: Install - Add to ipaservers
e788bc
-- 
e788bc
2.37.3
e788bc