+1 maintenance report (dogtag-pki vs 389-ds-base)

[Timo Aaltonen]

On 21.1.2021 18.59, Lukas Märdian wrote:
> NO - dogtag-pki vs ['389-ds-base/1.4.4.9-1build2', 
> 'net-snmp/5.9+dfsg-3ubuntu1']
> 
> So I had a closer look into the dogtag-pki failure on s390x. I could 
> easily reproduce the problem inside a s390x LXD container, but wasn't 
> able to isolate the root cause... After quite some investigation I was 
> able to produce a debug trace of the problem, and to me it looks like 
> the issue is actually not inside this package, but rather inside the 
> LDAP server (i.e. 389-ds-base), as the debug log shows an "SEVERE: 
> Unable to modify o=pki-tomcat-CA: netscape.ldap.LDAPException: error 
> result (1); Operations error", i.e. "Internal Server Error" 
> (https://docs.oracle.com/cd/E19957-01/816-5618-10/netscape/ldap/LDAPException.html#OPERATION_ERROR 
> <https://docs.oracle.com/cd/E19957-01/816-5618-10/netscape/ldap/LDAPException.html#OPERATION_ERROR>). 
> I do not really understand why the LDAP server would behave differently 
> on s390x than on all the other architectures, but I guess this is for 
> another time...
> 
> Debug log: https://paste.ubuntu.com/p/vx9JB6VTjF/ 
> <https://paste.ubuntu.com/p/vx9JB6VTjF/>

This seems to go back to at least 389-ds-base 1.4.4.4, probably longer. 
Would be useful to know where it regressed.

As to why it only happens on s390x my guess would be that it's related 
to endianness (it's big-endian). Upstream tests only on amd64 (LE).


-- 
t