2011-02-24 20:45:58,992 DEBUG /usr/sbin/ipa-client-install was invoked with options: {'conf_ntp': True, 'domain': 'idm.lab.bos.redhat.com', 'uninstall': False, 'force': False, 'sssd': True, 'hostname': None, 'permit': False, 'server': None, 'prompt_password': False, 'realm_name': None, 'dns_updates': False, 'debug': False, 'on_master': False, 'ntp_server': None, 'mkhomedir': False, 'unattended': None, 'principal': 'admin'} 2011-02-24 20:45:58,992 DEBUG missing options might be asked for interactively later 2011-02-24 20:45:58,992 DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2011-02-24 20:45:58,995 DEBUG [ipadnssearchldap(idm.lab.bos.redhat.com)] 2011-02-24 20:45:58,998 DEBUG [ipadnssearchkrb] 2011-02-24 20:45:59,001 DEBUG [ipacheckldap] 2011-02-24 20:45:59,054 DEBUG args=/usr/bin/wget -O /tmp/tmpYLmC3X/ca.crt http://vm-051.idm.lab.bos.redhat.com/ipa/config/ca.crt 2011-02-24 20:45:59,055 DEBUG stdout= 2011-02-24 20:45:59,055 DEBUG stderr=--2011-02-24 20:45:59-- http://vm-051.idm.lab.bos.redhat.com/ipa/config/ca.crt Resolving vm-051.idm.lab.bos.redhat.com... 10.16.78.51 Connecting to vm-051.idm.lab.bos.redhat.com|10.16.78.51|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 1361 (1.3K) [application/x-x509-ca-cert] Saving to: `/tmp/tmpYLmC3X/ca.crt' 0K . 100% 194M=0s 2011-02-24 20:45:59 (194 MB/s) - `/tmp/tmpYLmC3X/ca.crt' saved [1361/1361] 2011-02-24 20:45:59,055 DEBUG Init ldap with: ldap://vm-051.idm.lab.bos.redhat.com:389 2011-02-24 20:45:59,146 DEBUG Search rootdse 2011-02-24 20:45:59,149 DEBUG Search for (info=*) in dc=idm,dc=lab,dc=bos,dc=redhat,dc=com(base) 2011-02-24 20:45:59,150 DEBUG Found: [('dc=idm,dc=lab,dc=bos,dc=redhat,dc=com', {'objectClass': ['top', 'domain', 'pilotObject', 'nisDomainObject', 'domainRelatedObject'], 'info': ['IPA V2.0'], 'associatedDomain': ['idm.lab.bos.redhat.com'], 'dc': ['idm'], 'nisDomain': ['idm.lab.bos.redhat.com']})] 2011-02-24 20:45:59,151 DEBUG Search for (objectClass=krbRealmContainer) in dc=idm,dc=lab,dc=bos,dc=redhat,dc=com(sub) 2011-02-24 20:45:59,153 DEBUG Found: [('cn=IDM.LAB.BOS.REDHAT.COM,cn=kerberos,dc=idm,dc=lab,dc=bos,dc=redhat,dc=com', {'krbSubTrees': ['dc=idm,dc=lab,dc=bos,dc=redhat,dc=com'], 'cn': ['IDM.LAB.BOS.REDHAT.COM'], 'krbDefaultEncSaltTypes': ['aes256-cts:special', 'aes128-cts:special', 'des3-hmac-sha1:special', 'arcfour-hmac:special'], 'objectClass': ['top', 'krbrealmcontainer', 'krbticketpolicyaux'], 'krbSearchScope': ['2'], 'krbSupportedEncSaltTypes': ['aes256-cts:normal', 'aes256-cts:special', 'aes128-cts:normal', 'aes128-cts:special', 'des3-hmac-sha1:normal', 'des3-hmac-sha1:special', 'arcfour-hmac:normal', 'arcfour-hmac:special', 'des-hmac-sha1:normal', 'des-cbc-md5:normal', 'des-cbc-crc:normal', 'des-cbc-crc:v4', 'des-cbc-crc:afs3'], 'krbMaxTicketLife': ['86400'], 'krbMaxRenewableAge': ['604800']})] 2011-02-24 20:45:59,153 DEBUG will use domain: idm.lab.bos.redhat.com 2011-02-24 20:45:59,153 DEBUG will use server: vm-051.idm.lab.bos.redhat.com 2011-02-24 20:45:59,154 DEBUG will use cli_realm: IDM.LAB.BOS.REDHAT.COM 2011-02-24 20:45:59,154 DEBUG will use cli_basedn: dc=idm,dc=lab,dc=bos,dc=redhat,dc=com 2011-02-24 20:46:03,281 DEBUG args=/usr/bin/wget -O /etc/ipa/ca.crt http://vm-051.idm.lab.bos.redhat.com/ipa/config/ca.crt 2011-02-24 20:46:03,282 DEBUG stdout= 2011-02-24 20:46:03,282 DEBUG stderr=--2011-02-24 20:46:03-- http://vm-051.idm.lab.bos.redhat.com/ipa/config/ca.crt Resolving vm-051.idm.lab.bos.redhat.com... 10.16.78.51 Connecting to vm-051.idm.lab.bos.redhat.com|10.16.78.51|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 1361 (1.3K) [application/x-x509-ca-cert] Saving to: `/etc/ipa/ca.crt' 0K . 100% 130M=0s 2011-02-24 20:46:03 (130 MB/s) - `/etc/ipa/ca.crt' saved [1361/1361] 2011-02-24 20:46:03,720 DEBUG args=kinit admin@IDM.LAB.BOS.REDHAT.COM 2011-02-24 20:46:03,721 DEBUG stdout=Password for admin@IDM.LAB.BOS.REDHAT.COM: 2011-02-24 20:46:03,721 DEBUG stderr= 2011-02-24 20:46:06,087 DEBUG args=/usr/sbin/ipa-join -s vm-051.idm.lab.bos.redhat.com 2011-02-24 20:46:06,088 DEBUG stdout= 2011-02-24 20:46:06,088 DEBUG stderr=Keytab successfully retrieved and stored in: /etc/krb5.keytab Certificate subject base is: O=IDM.LAB.BOS.REDHAT.COM 2011-02-24 20:46:06,108 DEBUG args=kdestroy 2011-02-24 20:46:06,108 DEBUG stdout= 2011-02-24 20:46:06,108 DEBUG stderr= 2011-02-24 20:46:06,109 DEBUG Backing up system configuration file '/etc/ipa/default.conf' 2011-02-24 20:46:06,109 DEBUG -> Not backing up - '/etc/ipa/default.conf' doesn't exist 2011-02-24 20:46:06,110 DEBUG Backing up system configuration file '/etc/sssd/sssd.conf' 2011-02-24 20:46:06,126 DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2011-02-24 20:46:06,255 DEBUG args=/usr/bin/certutil -A -d /etc/pki/nssdb -n IPA CA -t CT,C,C -a -i /etc/ipa/ca.crt 2011-02-24 20:46:06,256 DEBUG stdout= 2011-02-24 20:46:06,256 DEBUG stderr= 2011-02-24 20:46:06,257 DEBUG Backing up system configuration file '/etc/krb5.conf' 2011-02-24 20:46:06,258 DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2011-02-24 20:46:06,334 DEBUG args=/sbin/service certmonger status 2011-02-24 20:46:06,335 DEBUG stdout=certmonger is stopped 2011-02-24 20:46:06,335 DEBUG stderr= 2011-02-24 20:46:06,560 DEBUG args=/sbin/service certmonger restart 2011-02-24 20:46:06,561 DEBUG stdout=Stopping certmonger: [FAILED] Starting certmonger: [ OK ] 2011-02-24 20:46:06,561 DEBUG stderr= 2011-02-24 20:46:06,710 DEBUG args=/sbin/chkconfig certmonger --list 2011-02-24 20:46:06,711 DEBUG stdout=certmonger 0:off 1:off 2:off 3:off 4:off 5:off 6:off 2011-02-24 20:46:06,711 DEBUG stderr= 2011-02-24 20:46:06,811 DEBUG args=/sbin/chkconfig certmonger on 2011-02-24 20:46:06,812 DEBUG stdout= 2011-02-24 20:46:06,812 DEBUG stderr= 2011-02-24 20:46:06,850 DEBUG args=ipa-getcert request -d /etc/pki/nssdb -n IPA Machine Certificate - vm-060.idm.lab.bos.redhat.com -N CN=vm-060.idm.lab.bos.redhat.com,O=IDM.LAB.BOS.REDHAT.COM -K host/vm-060.idm.lab.bos.redhat.com@IDM.LAB.BOS.REDHAT.COM 2011-02-24 20:46:06,851 DEBUG stdout=Error org.fedorahosted.certmonger.duplicate: Certificate at same location is already used by request "20110219000336". 2011-02-24 20:46:06,851 DEBUG stderr= 2011-02-24 20:46:06,878 DEBUG args=/usr/bin/kinit -k -t /etc/krb5.keytab 2011-02-24 20:46:06,879 DEBUG stdout= 2011-02-24 20:46:06,879 DEBUG stderr=kinit: Hostname cannot be canonicalized when creating default server principal name 2011-02-24 20:46:07,014 DEBUG args=/usr/bin/nsupdate -g /etc/ipa/.dns_update.txt 2011-02-24 20:46:07,015 DEBUG stdout= 2011-02-24 20:46:07,015 DEBUG stderr=Check your Kerberos ticket, it may have expired. 2011-02-24 20:46:07,046 DEBUG args=/sbin/service nscd status 2011-02-24 20:46:07,047 DEBUG stdout= 2011-02-24 20:46:07,047 DEBUG stderr=nscd: unrecognized service 2011-02-24 20:46:07,060 DEBUG args=/sbin/chkconfig nscd --list 2011-02-24 20:46:07,061 DEBUG stdout= 2011-02-24 20:46:07,061 DEBUG stderr=error reading information on service nscd: No such file or directory 2011-02-24 20:46:09,599 DEBUG args=/usr/sbin/authconfig --enablesssd --enablesssdauth --update 2011-02-24 20:46:09,600 DEBUG stdout=Starting sssd: [ OK ] [ OK ] 2011-02-24 20:46:09,601 DEBUG stderr= 2011-02-24 20:46:09,649 DEBUG args=getent passwd admin 2011-02-24 20:46:09,650 DEBUG stdout= 2011-02-24 20:46:09,650 DEBUG stderr= 2011-02-24 20:46:10,664 DEBUG args=getent passwd admin 2011-02-24 20:46:10,665 DEBUG stdout=admin:*:1190800000:1190800000:Administrator:/home/admin:/bin/bash 2011-02-24 20:46:10,665 DEBUG stderr= 2011-02-24 20:46:12,264 DEBUG args=/usr/sbin/authconfig --enablekrb5 --update --nostart 2011-02-24 20:46:12,265 DEBUG stdout= 2011-02-24 20:46:12,265 DEBUG stderr= 2011-02-24 20:46:12,266 DEBUG Backing up system configuration file '/etc/ntp.conf' 2011-02-24 20:46:12,267 DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2011-02-24 20:46:12,268 DEBUG Backing up system configuration file '/etc/sysconfig/ntpd' 2011-02-24 20:46:12,268 DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2011-02-24 20:46:12,315 DEBUG args=/sbin/chkconfig ntpd on 2011-02-24 20:46:12,315 DEBUG stdout= 2011-02-24 20:46:12,315 DEBUG stderr= 2011-02-24 20:46:12,513 DEBUG args=/sbin/service ntpd restart 2011-02-24 20:46:12,513 DEBUG stdout=Shutting down ntpd: [ OK ] Starting ntpd: [ OK ] 2011-02-24 20:46:12,514 DEBUG stderr=