On ma, 11 tammi 2021, Kay Jeschonneck via FreeIPA-users wrote:
Yes, this is it. Thanks, the UI work now.
But i have an other problem with the dnssec-service.
I get this message:
Jan 10 10:56:27 hn-dlp /usr/libexec/ipa/ipa-ods-exporter[10276]: new replica keys in LDAP:
{'0xbb…', '0x8c…'}
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: Traceback (most recent call last):
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: File
"/usr/libexec/ipa/ipa-ods-exporter", line 701, in <module>
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:
ldap2master_replica_keys_sync(ldapkeydb, localhsm)
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: File
"/usr/libexec/ipa/ipa-ods-exporter", line 304, in ldap2master_replica_keys_sync
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:
localhsm.import_public_key(new_key_ldap, new_key_ldap['ipapublickey'])
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: File
"/usr/lib/python3.6/site-packages/ipaserver/dnssec/localhsm.py", line 183, in
import_public_key
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: h =
self.p11.import_public_key(**params)
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: File
"/usr/lib/python3.6/site-packages/ipaserver/p11helper.py", line 1451, in
import_public_key
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: raise DuplicationError("Public key
with same ID already exists")
Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: ipaserver.p11helper.DuplicationError:
Public key with same ID already exists
I vaguely remember there was a similar bug in past but didn't get to
look at it.
Can you provide (offlist) the exact log details?
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland