Your also going to have to create the folder /etc/pki/nssdb or the script will also fail. That trick cost me a day of farting around<span></span><br><br>On Saturday, May 18, 2013, Willie Slepecki wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Do a --help on the script. I specify every parameter. When I trust the script to discover anything on ubuntu it fails. Even the host name. <span></span><br><br>On Saturday, May 18, 2013, Endre Karlson wrote:<br><blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div>So I am trying to enrull Ubuntu into FreeIPA.</div><div><br></div><div>But I am getting a number of issues:</div><div>1. DNS autodiscovery isn't working.</div><div>
2. certutils fails at the end?</div><div><br></div><div>In my setup I currently have 1 IPA server running DNS and all of it.</div><div><br></div><div>What can be wrong?</div><div><br></div><div>
Endre.</div><div><br></div><div>sudo ipa-client-install -d --enable-dns-updates</div><div>root : DEBUG /usr/sbin/ipa-client-install was invoked with options: {'conf_ntp': True, 'domain': None, 'uninstall': False, 'force': False, 'sssd': True, 'krb5_offline_passwords': True, 'hostname': None, 'preserve_sssd': False, 'server': None, 'prompt_password': False, 'mkhomedir': False, 'dns_updates': True, 'permit': False, 'debug': True, 'on_master': False, 'ntp_server': None, 'realm_name': None, 'unattended': None, 'principal': None}</div>
<div>root : DEBUG missing options might be asked for interactively later</div><div><br></div><div>root : DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'</div><div>
root : DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'</div><div>root : DEBUG [ipadnssearchldap(<a href="http://coretrek.net" target="_blank">coretrek.net</a>)]</div>
<div>root : DEBUG [ipadnssearchldap(net)]</div>
<div>root : DEBUG [ipadnssearchldap(<a href="http://coretrek.net" target="_blank">coretrek.net</a>)]</div><div>root : DEBUG [ipadnssearchldap(net)]</div><div>root : DEBUG Domain not found</div>
<div>DNS discovery failed to determine your DNS domain</div>
<div>Provide the domain name of your IPA server (ex: <a href="http://example.com" target="_blank">example.com</a>): <a href="http://coretrek.net" target="_blank">coretrek.net</a></div><div>root : DEBUG will use domain: <a href="http://coretrek.net" target="_blank">coretrek.net</a></div>
<div><br></div><div>root : DEBUG [ipadnssearchldap]</div><div>root : DEBUG IPA Server not found</div><div>DNS discovery failed to find the IPA Server</div><div>Provide your IPA server name (ex: <a href="http://ipa.example.com" target="_blank">ipa.example.com</a>): <a href="http://st-vidm001.coretrek.net" target="_blank">st-vidm001.coretrek.net</a></div>
<div>root : DEBUG will use server: <a href="http://st-vidm001.coretrek.net" target="_blank">st-vidm001.coretrek.net</a></div><div><br></div><div>root : DEBUG [ipadnssearchkrb]</div><div>root : DEBUG [ipacheckldap]</div>
<div>root : DEBUG args=/usr/bin/wget -O /tmp/tmp1RBeGA/ca.crt -T 15 -t 2 <a href="http://st-vidm001.coretrek.net/ipa/config/ca.crt" target="_blank">http://st-vidm001.coretrek.net/ipa/config/ca.crt</a></div><div>
root : DEBUG stdout=</div>
<div>root : DEBUG stderr=--2013-05-18 18:40:05-- <a href="http://st-vidm001.coretrek.net/ipa/config/ca.crt" target="_blank">http://st-vidm001.coretrek.net/ipa/config/ca.crt</a></div><div>Resolving <a href="http://st-vidm001.coretrek.net" target="_blank">st-vidm001.coretrek.net</a> (<a href="http://st-vidm001.coretrek.net" target="_blank">st-vidm001.coretrek.net</a>)... 172.16.200.5</div>
<div>Connecting to <a href="http://st-vidm001.coretrek.net" target="_blank">st-vidm001.coretrek.net</a> (<a href="http://st-vidm001.coretrek.net" target="_blank">st-vidm001.coretrek.net</a>)|172.16.200.5|:80... connected.</div>
<div>HTTP request sent, awaiting response... 200 OK</div>
<div>Length: 1321 (1.3K) [application/x-x509-ca-cert]</div><div>Saving to: `/tmp/tmp1RBeGA/ca.crt'</div><div><br></div><div> 0K . 100% 69.1M=0s</div><div><br></div>
<div>2013-05-18 18:40:05 (69.1 MB/s) - `/tmp/tmp1RBeGA/ca.crt' saved [1321/1321]</div><div><br></div><div><br></div><div>root : DEBUG Init ldap with: ldap://<a href="http://st-vidm001.coretrek.net:389" target="_blank">st-vidm001.coretrek.net:389</a></div>
<div>root : DEBUG Search LDAP server for IPA base DN</div><div>root : DEBUG Check if naming context 'dc=coretrek,dc=net' is for IPA</div><div>root : DEBUG Naming context 'dc=coretrek,dc=net' is a valid IPA context</div>
<div>root : DEBUG Search for (objectClass=krbRealmContainer) in dc=coretrek,dc=net(sub)</div><div>root : DEBUG Found: [('cn=<a href="http://CORETREK.NET" target="_blank">CORETREK.NET</a>,cn=kerberos,dc=coretrek,dc=net', {'krbSubTrees': ['dc=coretrek,dc=net'], 'cn': ['<a href="http://CORETREK.NET" target="_blank">CO</a></div>
</div></div></blockquote>-- <br>You want it fast, cheap, or right. Pick two!!<br>
</blockquote><br><br>-- <br>You want it fast, cheap, or right. Pick two!!<br>