<div dir="ltr">Nevermind. I used the Administrator account and all is well. This is a lovely site.<br><br>Added Active Directory trust for realm "<a href="http://ad.dc.com">ad.dc.com</a>"<br>--------------------------------------------------------<br>
Realm name: <a href="http://ad.dc.com">ad.dc.com</a><br> Domain NetBIOS name: AD<br> Domain Security Identifier: S-1-5-21-1226121717-3896983829-760149474<br> Trust direction: Two-way trust<br> Trust type: Active Directory domain<br>
Trust status: Established and verified<br><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, May 28, 2013 at 4:24 AM, Nicholas MacKenzie <span dir="ltr"><<a href="mailto:nicmac@gmail.com" target="_blank">nicmac@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">You were spot on about that. I enabled IPv6 and now the CLDAP plugin installs fine. I am now faced with this...<br>
<br>dcerpc: alter_resp - rpc fault: WERR_ACCESS_DENIED<br>Failed to bind to uuid 12345778-1234-abcd-ef00-0123456789ab for 12345778-1234-abcd-ef00-0123456789ab@ncacn_ip_tcp:<a href="http://domain_controller.ad.dc.com" target="_blank">domain_controller.ad.dc.com</a>[49500] NT_STATUS_NET_WRITE_FAULT<br>
[Tue May 28 08:20:03 2013] [error] ipa: INFO: <a href="mailto:admin@IPA.DC.COM" target="_blank">admin@IPA.DC.COM</a>: trust_add(u'<a href="http://ad.dc.sita.aero" target="_blank">ad.dc.sita.aero</a>', trust_type=u'ad', realm_admin=u'username', realm_passwd=u'********', range_size=200000, all=False, raw=False, version=u'2.46'): ACIError<br>
<br></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, May 28, 2013 at 3:46 AM, Alexander Bokovoy <span dir="ltr"><<a href="mailto:abokovoy@redhat.com" target="_blank">abokovoy@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>On Tue, 28 May 2013, Nicholas MacKenzie wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hello,<br>
<br>
I have seen this happen on multiple fresh installs now. Can anyone shed any<br>
light on it? I am unable to add a trust because of this, I assume. An<br>
smbclient lookup against the DC works.<br>
======================<br>
# ipa trust-add --type=ad <a href="http://ad.dc.com" target="_blank">ad.dc.com</a> --admin username --password<br>
Active directory domain administrator's password:<br>
ipa: ERROR: Cannot find specified domain or server name<br>
======================<br>
/var/log/httpd/error_log:<br>
[Tue May 28 07:05:01 2013] [error] ipa: INFO: <a href="mailto:admin@IPA.DC.COM" target="_blank">admin@IPA.DC.COM</a>: trust_add(u'<br>
<a href="http://ad.dc.sita.aero" target="_blank">ad.dc.sita.aero</a>', trust_46'): NotFound<br>
======================<br>
# ipactl restart<br>
Restarting Directory Service<br>
Shutting down dirsrv:<br>
IPA-DC-COM. [ OK ]<br>
PKI-IPA... [ OK ]<br>
Starting dirsrv:<br>
IPA-DC-COM ...[28/May/2013:07:09:24 +0000] ipa_cldap_init_service -<br>
[file ipa_cldap.c, line 148]: Failed to create socket<br>
</blockquote></div>
What operating system is that?<br>
<br>
Here is what we have in ipa_cldap.c:<br>
ctx->sd = socket(PF_INET6, SOCK_DGRAM, 0);<br>
if (ctx->sd == -1) {<br>
LOG_FATAL("Failed to create socket\n");<br>
ret = EIO;<br>
goto done;<br>
}<br>
<br>
So we failed to create a socket using PF_INET6 family. It looks like you<br>
don't have IPv6 enabled in your kernel?<span><font color="#888888"><br>
<br>
-- <br>
/ Alexander Bokovoy<br>
</font></span></blockquote></div><br></div>
</div></div></blockquote></div><br></div>