certmonger request for host certificate failed: 'Env' object has no attribute 'certmonger_wait_timeout'

[taniahagan]

Hi,

Running the ipa_client install on version 1.11.1 I see the following error:
certmonger request for host certificate failed: 'Env' object has no attribute 'certmonger_wait_timeout'

If I revert to version 1.9.2 it works as expected.

Any one have any ideas on how to resolve this?

Many Thanks,
Tania

[Thomas Woerner]

Which IPA version are you using?

[Thomas Woerner]

certmonger_wait_timeout is defined within ipalib/constants.py and used within the server and certmonger installation code. ansible-freeipa is not using certmonger_wait_timeout itself.

[taniahagan]

We're on IPA version 4.9.11

[Thomas Woerner]

Is the server also using 4.9.11?

[daswars]

i have the same problem,
with centos 7 latest (with cis security hardening and without)
the same are for rocky 8

[Thomas Woerner]

Please run this on the client machines:

rpm -qf $(python -c "import ipaclient; print(ipaclient.__path__[0])")
rpm -qf $(/usr/libexec/platform-python -c "import ipaclient; print(ipaclient.__path__[0])")

The first line is for RHEL-7 and the second for RHEL-8 and later.

[daswars]

Centos7

rpm -qf $(python -c "import ipaclient; print(ipaclient.__path__[0])")
python2-ipaclient-4.6.8-5.el7.centos.15.noarch

[taniahagan]

On Rocky 9
rpm -qf $(/usr/libexec/platform-python -c "import ipaclient; print(ipaclient.path[0])")
python3-ipaclient-4.10.2-8.el9_3.noarch