[Freeipa-devel] [PATCH] 311 more integrated client install

[Rob Crittenden]

Jason Gerard DeRose wrote:
> On Wed, 2009-11-11 at 11:39 -0500, Rob Crittenden wrote:
>> This patch integrates ipa-join and ipa-rmkeytab into the client 
>> installer. This will join a machine to the IPA realm and fetch a host 
>> principal for /etc/krb5.keytab.
>>
>> On uninstall all principals for the realm will be removed from 
>> /etc/krb5.keytab.
>>
>> By default installation will fail if a host principal cannot be 
>> obtained. Use the --force option to continue anyway.
>>
>> rob
> 
> nack.  this is breaking the installer:
> 
>   [6/12]: creating a keytab for httpd
>   [7/12]: Setting up ssl
>   [8/12]: Setting up browser autoconfig
>   [9/12]: publish CA cert
>   [10/12]: configuring SELinux for httpd
>   [11/12]: restarting httpd
>   [12/12]: configuring httpd to start on boot
> done configuring httpd.
> Applying LDAP updates
> restarting the directory server
> restarting the KDC
> Sample zone file for bind has been created in /tmp/sample.zone.WUedsi.db
> Configuration of client side components failed!
> ipa-client-install returned: Command '/usr/sbin/ipa-client-install
> --on-master --unattended --domain example.com --server
> fedora11.example.com --realm EXAMPLE.COM' returned non-zero exit status
> 1

It shouldn't require a password/principal when on the master. New patch 
attached.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-311.2-install.patch
Type: application/mbox
Size: 19435 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20091119/f132ed9e/attachment.mbox>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20091119/f132ed9e/attachment.bin>