<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">I think I got the issue. Realm Name Entry in DNS is added in lower case rather than UPPER.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><div class="gmail_default" style="font-family:arial,sans-serif;font-size:12.8000001907349px"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Found: cn=<a href="http://sd.int/" target="_blank">SD.INT</a>,cn=kerberos,dc=sd,dc=int</font></div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:12.8000001907349px"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Discovery result: REALM_NOT_FOUND; server=None, domain=<a href="http://sd.int/" target="_blank">sd.int</a>, kdc=<a href="http://ldap-inf-stg-sg1-01.sd.int/" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>, basedn=dc=sd,dc=int</font></div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:12.8000001907349px"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:12.8000001907349px"><font face="verdana, sans-serif">Will try changing the Realm and see if it resovled.</font></div></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div><div><i><span style="font-family:verdana,sans-serif"><br>Best Regards,<br>__________________________________________<br></span></i></div><i><span style="font-family:verdana,sans-serif">Yogesh Sharma<br></span></i></div><span style="font-family:verdana,sans-serif"><i>Email: <a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a> | Web: <span style="color:rgb(0,0,0)"><a href="http://www.initd.in" target="_blank">www.initd.in</a></span></i><br></span></div><span style="font-family:verdana,sans-serif"><br>RHCE, VCE-CIA, RackSpace Cloud U</span><br><a href="http://in.linkedin.com/in/yks0000" target="_blank"><img alt="My LinkedIn Profile" src="https://static.licdn.com/scds/common/u/img/webpromo/btn_myprofile_160x33.png"></a><br><div><span style="font-family:verdana,sans-serif"></span><div><div><br></div></div></div></div></div></div> <br><div class="gmail_quote">On Wed, Mar 25, 2015 at 6:13 PM, Yogesh Sharma <span dir="ltr"><<a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Hi Martin,</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Please find the client logs:</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default"><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG /usr/sbin/ipa-client-install was invoked with options: {'domain': '<a href="http://sd.int" target="_blank">sd.int</a>', 'force': False, 'krb5_offline_passwords': True, 'primary': False, 'mkhomedir': False, 'create_sshfp': True, 'conf_sshd': True, 'conf_ntp': True, 'on_master': True, 'ntp_server': None, 'server': ['<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>'], 'no_nisdomain': False, 'principal': None, 'hostname': '<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>', 'no_ac': False, 'unattended': True, 'sssd': True, 'trust_sshfp': False, 'realm_name': '<a href="http://SD.INT" target="_blank">SD.INT</a>', 'dns_updates': False, 'conf_sudo': True, 'conf_ssh': True, 'force_join': False, 'ca_cert_file': None, 'nisdomain': None, 'prompt_password': False, 'permit': False, 'debug': False, 'preserve_sssd': False, 'uninstall': False}</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG missing options might be asked for interactively later</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG [IPA Discovery]</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Starting IPA discovery with domain=<a href="http://sd.int" target="_blank">sd.int</a>, servers=['<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>'], hostname=<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Server and domain forced</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG [Kerberos realm search]</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Search DNS for TXT record of _<a href="http://kerberos.sd.int" target="_blank">kerberos.sd.int</a>.</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG DNS record found: DNSResult::name:_<a href="http://kerberos.sd.int" target="_blank">kerberos.sd.int</a>.,type:16,class:1,rdata={data:<a href="http://sd.int" target="_blank">sd.int</a>}</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Search DNS for SRV record of _kerberos._<a href="http://udp.sd.int" target="_blank">udp.sd.int</a>.</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG DNS record found: DNSResult::name:_kerberos._<a href="http://udp.sd.int" target="_blank">udp.sd.int</a>.,type:33,class:1,rdata={priority:0,port:88,weight:100,server:<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>.}</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG [LDAP server check]</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Verifying that <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> (realm <a href="http://sd.int" target="_blank">sd.int</a>) is an IPA server</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Init LDAP connection with: ldap://<a href="http://ldap-inf-stg-sg1-01.sd.int:389" target="_blank">ldap-inf-stg-sg1-01.sd.int:389</a></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Search LDAP server for IPA base DN</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Check if naming context 'dc=sd,dc=int' is for IPA</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Naming context 'dc=sd,dc=int' is a valid IPA context</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Search for (objectClass=krbRealmContainer) in dc=sd,dc=int (sub)</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Found: cn=<a href="http://SD.INT" target="_blank">SD.INT</a>,cn=kerberos,dc=sd,dc=int</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Discovery result: REALM_NOT_FOUND; server=None, domain=<a href="http://sd.int" target="_blank">sd.int</a>, kdc=<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>, basedn=dc=sd,dc=int</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Validated servers: </font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG will use discovered domain: <a href="http://sd.int" target="_blank">sd.int</a></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG IPA Server not found</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG [IPA Discovery]</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Starting IPA discovery with domain=<a href="http://sd.int" target="_blank">sd.int</a>, servers=['<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>'], hostname=<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Server and domain forced</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG [Kerberos realm search]</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Search DNS for TXT record of _<a href="http://kerberos.sd.int" target="_blank">kerberos.sd.int</a>.</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG DNS record found: DNSResult::name:_<a href="http://kerberos.sd.int" target="_blank">kerberos.sd.int</a>.,type:16,class:1,rdata={data:<a href="http://sd.int" target="_blank">sd.int</a>}</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Search DNS for SRV record of _kerberos._<a href="http://udp.sd.int" target="_blank">udp.sd.int</a>.</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG DNS record found: DNSResult::name:_kerberos._<a href="http://udp.sd.int" target="_blank">udp.sd.int</a>.,type:33,class:1,rdata={priority:0,port:88,weight:100,server:<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>.}</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG [LDAP server check]</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Verifying that <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> (realm <a href="http://sd.int" target="_blank">sd.int</a>) is an IPA server</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Init LDAP connection with: ldap://<a href="http://ldap-inf-stg-sg1-01.sd.int:389" target="_blank">ldap-inf-stg-sg1-01.sd.int:389</a></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Search LDAP server for IPA base DN</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Check if naming context 'dc=sd,dc=int' is for IPA</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Naming context 'dc=sd,dc=int' is a valid IPA context</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Search for (objectClass=krbRealmContainer) in dc=sd,dc=int (sub)</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Found: cn=<a href="http://SD.INT" target="_blank">SD.INT</a>,cn=kerberos,dc=sd,dc=int</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Discovery result: REALM_NOT_FOUND; server=None, domain=<a href="http://sd.int" target="_blank">sd.int</a>, kdc=<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>, basedn=dc=sd,dc=int</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Validated servers: </font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z ERROR Failed to verify that <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> is an IPA Server.</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z ERROR This may mean that the remote server is not up or is not reachable due to network or firewall settings.</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z INFO Please make sure the following ports are opened in the firewall settings:</font></div><div class="gmail_default"><font face="verdana, sans-serif"> TCP: 80, 88, 389</font></div><div class="gmail_default"><font face="verdana, sans-serif"> UDP: 88 (at least one of TCP/UDP ports 88 has to be open)</font></div><div class="gmail_default"><font face="verdana, sans-serif">Also note that following ports are necessary for ipa-client working properly after enrollment:</font></div><div class="gmail_default"><font face="verdana, sans-serif"> TCP: 464</font></div><div class="gmail_default"><font face="verdana, sans-serif"> UDP: 464, 123 (if NTP enabled)</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG (<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>: Provided as option)</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z ERROR Installation failed. Rolling back changes.</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG args=ipa-client-automount --uninstall --debug</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stderr=IPA client is not configured on this system.</font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z ERROR Unconfigured automount client failed: Command 'ipa-client-automount --uninstall --debug' returned non-zero exit status 1</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG args=/usr/bin/certutil -L -d /etc/pki/nssdb -n IPA CA</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stderr=certutil: Could not find cert: IPA CA</font></div><div class="gmail_default"><font face="verdana, sans-serif">: PR_FILE_NOT_FOUND_ERROR: File not found</font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG args=/sbin/service messagebus start </font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stdout=Starting system message bus: </font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stderr=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG args=/sbin/service messagebus status </font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stdout=messagebus (pid 1151) is running...</font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stderr=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG args=/sbin/service certmonger start </font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stderr=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG args=/sbin/service certmonger status </font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stdout=certmonger (pid 13244) is running...</font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:49Z DEBUG stderr=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:57Z DEBUG args=/usr/bin/certutil -L -d /etc/pki/nssdb -n IPA Machine Certificate - <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:57Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:57Z DEBUG stderr=certutil: Could not find cert: IPA Machine Certificate - <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a></font></div><div class="gmail_default"><font face="verdana, sans-serif">: PR_FILE_NOT_FOUND_ERROR: File not found</font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:57Z DEBUG args=/sbin/service certmonger stop </font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:57Z DEBUG stdout=Stopping certmonger: [ OK ]</font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:57Z DEBUG stderr=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG args=/sbin/chkconfig certmonger off</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stderr=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z INFO Removing Kerberos service principals from /etc/krb5.keytab</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG args=/usr/sbin/ipa-rmkeytab -k /etc/krb5.keytab -r <a href="http://SD.INT" target="_blank">SD.INT</a></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stderr=Removing principal host/<a href="mailto:ldap-inf-stg-sg1-01.sd.int@SD.INT" target="_blank">ldap-inf-stg-sg1-01.sd.int@SD.INT</a></font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z INFO Disabling client Kerberos and LDAP configurations</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG args=/usr/sbin/authconfig --disablekrb5 --disablesssd --update --disablemkhomedir --disableldap --disablesssdauth</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stderr=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG Error while moving /etc/sssd/sssd.conf to /etc/sssd/sssd.conf.deleted</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z INFO Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG args=/sbin/service sssd stop </font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stderr=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG args=/sbin/chkconfig sssd off</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stderr=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG args=/sbin/service nscd status</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stderr=nscd: unrecognized service</font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z INFO nscd daemon is not installed, skip configuration</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG args=/sbin/service nslcd status</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stdout=</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z DEBUG stderr=nslcd: unrecognized service</font></div><div class="gmail_default"><font face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z INFO nslcd daemon is not installed, skip configuration</font></div><div class="gmail_default"><font face="verdana, sans-serif">2015-03-25T12:29:59Z INFO Client uninstall complete.</font></div><div style="font-family:verdana,sans-serif"><br></div></div></div><div class="gmail_extra"><br clear="all"><div><div><div dir="ltr"><div><div><div><i><span style="font-family:verdana,sans-serif"><br>Best Regards,<br>__________________________________________<br></span></i></div><i><span style="font-family:verdana,sans-serif">Yogesh Sharma<br></span></i></div><span style="font-family:verdana,sans-serif"><i>Email: <a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a> | Web: <span style="color:rgb(0,0,0)"><a href="http://www.initd.in" target="_blank">www.initd.in</a></span></i><br></span></div><span style="font-family:verdana,sans-serif"><br>RHCE, VCE-CIA, RackSpace Cloud U</span><br><a href="http://in.linkedin.com/in/yks0000" target="_blank"><img alt="My LinkedIn Profile" src="https://static.licdn.com/scds/common/u/img/webpromo/btn_myprofile_160x33.png"></a><br><div><span style="font-family:verdana,sans-serif"></span><div><div><br></div></div></div></div></div></div> <br><div class="gmail_quote">On Wed, Mar 25, 2015 at 6:10 PM, Martin Kosek <span dir="ltr"><<a href="mailto:mkosek@redhat.com" target="_blank">mkosek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 03/25/2015 07:46 AM, Yogesh Sharma wrote:<br> > Hi,<br> ><br> > We are getting below error while we are installing IPA Server<br> > (ipa-server-install --no-ntp).<br> ><br> ><br> > **<br> > *Configuration of client side components failed!*<br> > *ipa-client-install returned: Command '/usr/sbin/ipa-client-install<br> > --on-master --unattended --domain <a href="http://sd.int" target="_blank">sd.int</a> <<a href="http://sd.int" target="_blank">http://sd.int</a>> --server<br> > <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> <<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">http://ldap-inf-stg-sg1-01.sd.int</a>> --realm<br> > <a href="http://SD.INT" target="_blank">SD.INT</a> <<a href="http://SD.INT" target="_blank">http://SD.INT</a>> --hostname <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a><br> > <<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">http://ldap-inf-stg-sg1-01.sd.int</a>>' returned non-zero exit status 1*<br> ><br> > **Logs indicate below errors:<br> ><br> > *2015-03-25T06:39:59Z DEBUG args=/usr/bin/ldappasswd -h<br> > <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> <<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">http://ldap-inf-stg-sg1-01.sd.int</a>> -ZZ -x -D<br> > cn=Directory Manager -y /var/lib/ipa/tmpiI0qCS -T /var/lib/ipa/tmp0iYpzn<br> > uid=admin,cn=users,cn=accounts,dc=sd,dc=int*<br> > *2015-03-25T06:39:59Z DEBUG stdout=*<br> > *2015-03-25T06:39:59Z DEBUG stderr=*<br> > *2015-03-25T06:39:59Z DEBUG ldappasswd done*<br> > *2015-03-25T06:40:10Z DEBUG args=/usr/sbin/ipa-client-install --on-master<br> > --unattended --domain <a href="http://sd.int" target="_blank">sd.int</a> <<a href="http://sd.int" target="_blank">http://sd.int</a>> --server<br> > <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> <<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">http://ldap-inf-stg-sg1-01.sd.int</a>> --realm<br> > <a href="http://SD.INT" target="_blank">SD.INT</a> <<a href="http://SD.INT" target="_blank">http://SD.INT</a>> --hostname <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a><br> > <<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">http://ldap-inf-stg-sg1-01.sd.int</a>>*<br> > *2015-03-25T06:40:10Z DEBUG stdout=*<br> > *2015-03-25T06:40:10Z DEBUG stderr=Failed to verify that<br> > <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> <<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">http://ldap-inf-stg-sg1-01.sd.int</a>> is an IPA<br> > Server.*<br> > *This may mean that the remote server is not up or is not reachable due to<br> > network or firewall settings.*<br> > *Please make sure the following ports are opened in the firewall settings:*<br> > * TCP: 80, 88, 389*<br> > * UDP: 88 (at least one of TCP/UDP ports 88 has to be open)*<br> > *Also note that following ports are necessary for ipa-client working<br> > properly after enrollment:*<br> > * TCP: 464*<br> > * UDP: 464, 123 (if NTP enabled)*<br> > *Installation failed. Rolling back changes.*<br> > *Unconfigured automount client failed: Command 'ipa-client-automount<br> > --uninstall --debug' returned non-zero exit status 1*<br> > *Removing Kerberos service principals from /etc/krb5.keytab*<br> > *Disabling client Kerberos and LDAP configurations*<br> > *Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to<br> > /etc/sssd/sssd.conf.deleted*<br> > *nscd daemon is not installed, skip configuration*<br> > *nslcd daemon is not installed, skip configuration*<br> > *Client uninstall complete.*<br> ><br> > *2015-03-25T06:40:10Z INFO File<br> > "/usr/lib/python2.6/site-packages/ipaserver/install/installutils.py", line<br> > 614, in run_script*<br> > * return_value = main_function()*<br> ><br> > * File "/usr/sbin/ipa-server-install", line 1103, in main*<br> > * sys.exit("Configuration of client side components<br> > failed!\nipa-client-install returned: " + str(e))*<br> ><br> > *2015-03-25T06:40:10Z INFO The ipa-server-install command failed,<br> > exception: SystemExit: Configuration of client side components failed!*<br> > *ipa-client-install returned: Command '/usr/sbin/ipa-client-install<br> > --on-master --unattended --domain <a href="http://sd.int" target="_blank">sd.int</a> <<a href="http://sd.int" target="_blank">http://sd.int</a>> --server<br> > <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> <<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">http://ldap-inf-stg-sg1-01.sd.int</a>> --realm<br> > <a href="http://SD.INT" target="_blank">SD.INT</a> <<a href="http://SD.INT" target="_blank">http://SD.INT</a>> --hostname <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a><br> > <<a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">http://ldap-inf-stg-sg1-01.sd.int</a>>' returned non-zero exit status 1*<br> ><br> > **<br> ><br> ><br> > This server is on AWS and I can confirm that all above ports are opened.<br> > Also as it is installing on same server where IPA Server is being<br> > installed, Port should not be an issue.<br> ><br> > Am I missing anything here.<br> <br> Please also share ipaclient-install.log, it should show what is the exact<br> problem in the client component installation.<br> <br> </blockquote></div><br></div> </blockquote></div><br></div>