search

freeipa / ansible-freeipa

Ansible roles and modules for FreeIPA
GNU General Public License v3.0
489 stars 232 forks source link

certmonger request for host certificate failed: 'Env' object has no attribute 'certmonger_wait_timeout' #1152

Open taniahagan opened 11 months ago

taniahagan commented 11 months ago

Hi,

Running the ipa_client install on version 1.11.1 I see the following error: certmonger request for host certificate failed: 'Env' object has no attribute 'certmonger_wait_timeout'

If I revert to version 1.9.2 it works as expected.

Any one have any ideas on how to resolve this?

Many Thanks, Tania

t-woerner commented 11 months ago

Which IPA version are you using?

t-woerner commented 11 months ago

certmonger_wait_timeout is defined within ipalib/constants.py and used within the server and certmonger installation code. ansible-freeipa is not using certmonger_wait_timeout itself.

taniahagan commented 11 months ago

We're on IPA version 4.9.11

t-woerner commented 11 months ago

Is the server also using 4.9.11?

daswars commented 10 months ago

i have the same problem, with centos 7 latest (with cis security hardening and without) the same are for rocky 8

t-woerner commented 10 months ago

Please run this on the client machines:

rpm -qf $(python -c "import ipaclient; print(ipaclient.__path__[0])")
rpm -qf $(/usr/libexec/platform-python -c "import ipaclient; print(ipaclient.__path__[0])")

The first line is for RHEL-7 and the second for RHEL-8 and later.

daswars commented 10 months ago

Centos7

rpm -qf $(python -c "import ipaclient; print(ipaclient.__path__[0])")
python2-ipaclient-4.6.8-5.el7.centos.15.noarch
taniahagan commented 5 months ago

On Rocky 9 rpm -qf $(/usr/libexec/platform-python -c "import ipaclient; print(ipaclient.path[0])") python3-ipaclient-4.10.2-8.el9_3.noarch