<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">While restarting using ipactl . It is stopping. Any suggestion.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><div class="gmail_default">[root@ldap-inf-stg-sg1-01 ys7673]# ipactl stop</div><div class="gmail_default">Starting dirsrv: </div><div class="gmail_default"> PKI-IPA... [ OK ]</div><div class="gmail_default"> SD-INT... [ OK ]</div><div class="gmail_default">Stopping CA Service</div><div class="gmail_default">pki-tomcatd: unrecognized service</div><div class="gmail_default">Failed to stop CA Service</div><div class="gmail_default">Stopping HTTP Service</div><div class="gmail_default">Stopping httpd: [FAILED]</div><div class="gmail_default">Stopping MEMCACHE Service</div><div class="gmail_default">Stopping KPASSWD Service</div><div class="gmail_default">Stopping Kerberos 5 Admin Server: [FAILED]</div><div class="gmail_default">Stopping KDC Service</div><div class="gmail_default">Stopping Kerberos 5 KDC: [FAILED]</div><div class="gmail_default">Stopping Directory Service</div><div class="gmail_default">Shutting down dirsrv: </div><div class="gmail_default"> PKI-IPA... [ OK ]</div><div class="gmail_default"> SD-INT... [ OK ]</div><div class="gmail_default">[root@ldap-inf-stg-sg1-01 ys7673]# ipactl start</div><div class="gmail_default">Starting Directory Service</div><div class="gmail_default">Starting dirsrv: </div><div class="gmail_default"> PKI-IPA... [ OK ]</div><div class="gmail_default"> SD-INT... [ OK ]</div><div class="gmail_default">Starting KDC Service</div><div class="gmail_default">Starting Kerberos 5 KDC: [ OK ]</div><div class="gmail_default">Starting KPASSWD Service</div><div class="gmail_default">Starting Kerberos 5 Admin Server: [ OK ]</div><div class="gmail_default">Starting MEMCACHE Service</div><div class="gmail_default">Starting ipa_memcached: [ OK ]</div><div class="gmail_default">Starting HTTP Service</div><div class="gmail_default">Starting httpd: [ OK ]</div><div class="gmail_default">Starting CA Service</div><div class="gmail_default">pki-tomcatd: unrecognized service</div><div class="gmail_default">Failed to start CA Service</div><div class="gmail_default"><b>Shutting down</b></div><div class="gmail_default"><b>Stopping Kerberos 5 KDC: [ OK ]</b></div><div class="gmail_default"><b>Stopping Kerberos 5 Admin Server: [ OK ]</b></div><div class="gmail_default"><b>Stopping ipa_memcached: [ OK ]</b></div><div class="gmail_default"><b>Stopping httpd: [ OK ]</b></div><div class="gmail_default"><b>pki-tomcatd: unrecognized service</b></div><div class="gmail_default"><b>Shutting down dirsrv: </b></div><div class="gmail_default"><b> PKI-IPA... [ OK ]</b></div><div class="gmail_default"><b> SD-INT... [ OK ]</b></div><div class="gmail_default"><b>Aborting ipactl</b></div><div class="gmail_default">[root@ldap-inf-stg-sg1-01 ys7673]</div></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div><div><i><span style="font-family:verdana,sans-serif"><br>Best Regards,<br>__________________________________________<br></span></i></div><i><span style="font-family:verdana,sans-serif">Yogesh Sharma<br></span></i></div><span style="font-family:verdana,sans-serif"><i>Email: <a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a> | Web: <span style="color:rgb(0,0,0)"><a href="http://www.initd.in" target="_blank">www.initd.in</a></span></i><br></span></div><span style="font-family:verdana,sans-serif"><br>RHCE, VCE-CIA, RackSpace Cloud U</span><br><a href="http://in.linkedin.com/in/yks0000" target="_blank"><img alt="My LinkedIn Profile" src="https://static.licdn.com/scds/common/u/img/webpromo/btn_myprofile_160x33.png"></a><br><div><span style="font-family:verdana,sans-serif"></span><div><div><br></div></div></div></div></div></div> <br><div class="gmail_quote">On Wed, Mar 25, 2015 at 12:29 PM, Yogesh Sharma <span dir="ltr"><<a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">I have checked , there is no default.conf. Please suggest.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><div class="gmail_default">[root@ldap-inf-stg-sg1-01 ipa]# ls -lrth /etc/ipa/</div><div class="gmail_default">total 8.0K</div><div class="gmail_default">drwxr-xr-x 2 root root 4.0K Mar 24 13:29 html</div><div class="gmail_default">-r--r--r-- 1 root root 1.3K Mar 25 06:36 ca.crt</div><div class="gmail_default"><br></div><div class="gmail_default">[root@ldap-inf-stg-sg1-01 ipa]# ls -lrth /etc/ipa/html/</div><div class="gmail_default">total 28K</div><div class="gmail_default">-rw-r--r-- 1 root root 1.4K Oct 16 15:03 unauthorized.html</div><div class="gmail_default">-rw-r--r-- 1 root root 3.9K Oct 16 15:03 ssbrowser.html</div><div class="gmail_default">-rw-r--r-- 1 root root 521 Oct 16 15:03 ipa_error.css</div><div class="gmail_default">-rw-r--r-- 1 root root 4.5K Oct 16 15:03 ffconfig_page.js</div><div class="gmail_default">-rw-r--r-- 1 root root 2.9K Oct 16 15:03 ffconfig.js</div><div class="gmail_default">-rw-r--r-- 1 root root 3.9K Oct 16 15:03 browserconfig.html</div><div class="gmail_default">[root@ldap-inf-stg-sg1-01 ipa]# </div><div><br></div></div></div><div class="gmail_extra"><br clear="all"><div><div><div dir="ltr"><div><div><div><i><span style="font-family:verdana,sans-serif"><br>Best Regards,<br>__________________________________________<br></span></i></div><i><span style="font-family:verdana,sans-serif">Yogesh Sharma<br></span></i></div><span style="font-family:verdana,sans-serif"><i>Email: <a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a> | Web: <span style="color:rgb(0,0,0)"><a href="http://www.initd.in" target="_blank">www.initd.in</a></span></i><br></span></div><span style="font-family:verdana,sans-serif"><br>RHCE, VCE-CIA, RackSpace Cloud U</span><br><a href="http://in.linkedin.com/in/yks0000" target="_blank"><img alt="My LinkedIn Profile" src="https://static.licdn.com/scds/common/u/img/webpromo/btn_myprofile_160x33.png"></a><br><div><span style="font-family:verdana,sans-serif"></span><div><div><br></div></div></div></div></div></div> <br><div class="gmail_quote">On Wed, Mar 25, 2015 at 12:16 PM, Yogesh Sharma <span dir="ltr"><<a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Hi,</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br>We are getting below error while we are installing IPA Server (ipa-server-install --no-ntp).</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div><div><div dir="ltr"><div><div><i><span style="font-family:verdana,sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"></div></span></i><font face="verdana, sans-serif"><i><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"></div>Configuration of client side components failed!</i></font></div><div><font face="verdana, sans-serif"><i>ipa-client-install returned: Command '/usr/sbin/ipa-client-install --on-master --unattended --domain <a href="http://sd.int" target="_blank">sd.int</a> --server <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> --realm <a href="http://SD.INT" target="_blank">SD.INT</a> --hostname <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>' returned non-zero exit status 1</i></font></div><div><font face="verdana, sans-serif"><i><br></i></font></div><div><font face="verdana, sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"><i></i>Logs indicate below errors:</div></font></div><div><font face="verdana, sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"><i><br></i></div></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:39:59Z DEBUG args=/usr/bin/ldappasswd -h <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> -ZZ -x -D cn=Directory Manager -y /var/lib/ipa/tmpiI0qCS -T /var/lib/ipa/tmp0iYpzn uid=admin,cn=users,cn=accounts,dc=sd,dc=int</i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:39:59Z DEBUG stdout=</i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:39:59Z DEBUG stderr=</i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:39:59Z DEBUG ldappasswd done</i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:40:10Z DEBUG args=/usr/sbin/ipa-client-install --on-master --unattended --domain <a href="http://sd.int" target="_blank">sd.int</a> --server <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> --realm <a href="http://SD.INT" target="_blank">SD.INT</a> --hostname <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a></i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:40:10Z DEBUG stdout=</i></font></div><div><font face="verdana, sans-serif"><i><b>2015-03-25T06:40:10Z DEBUG stderr=Failed to verify that <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> is an IPA Server.</b></i></font></div><div><font face="verdana, sans-serif"><i><b>This may mean that the remote server is not up or is not reachable due to network or firewall settings.</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Please make sure the following ports are opened in the firewall settings:</b></i></font></div><div><font face="verdana, sans-serif"><i><b> TCP: 80, 88, 389</b></i></font></div><div><font face="verdana, sans-serif"><i><b> UDP: 88 (at least one of TCP/UDP ports 88 has to be open)</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Also note that following ports are necessary for ipa-client working properly after enrollment:</b></i></font></div><div><font face="verdana, sans-serif"><i><b> TCP: 464</b></i></font></div><div><font face="verdana, sans-serif"><i><b> UDP: 464, 123 (if NTP enabled)</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Installation failed. Rolling back changes.</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Unconfigured automount client failed: Command 'ipa-client-automount --uninstall --debug' returned non-zero exit status 1</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Removing Kerberos service principals from /etc/krb5.keytab</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Disabling client Kerberos and LDAP configurations</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted</b></i></font></div><div><font face="verdana, sans-serif"><i><b>nscd daemon is not installed, skip configuration</b></i></font></div><div><font face="verdana, sans-serif"><i><b>nslcd daemon is not installed, skip configuration</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Client uninstall complete.</b></i></font></div><div><font face="verdana, sans-serif"><i><br></i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:40:10Z INFO File "/usr/lib/python2.6/site-packages/ipaserver/install/installutils.py", line 614, in run_script</i></font></div><div><font face="verdana, sans-serif"><i> return_value = main_function()</i></font></div><div><font face="verdana, sans-serif"><i><br></i></font></div><div><font face="verdana, sans-serif"><i> File "/usr/sbin/ipa-server-install", line 1103, in main</i></font></div><div><font face="verdana, sans-serif"><i> sys.exit("Configuration of client side components failed!\nipa-client-install returned: " + str(e))</i></font></div><div><font face="verdana, sans-serif"><i><br></i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:40:10Z INFO The ipa-server-install command failed, exception: SystemExit: Configuration of client side components failed!</i></font></div><div><font face="verdana, sans-serif"><i>ipa-client-install returned: Command '/usr/sbin/ipa-client-install --on-master --unattended --domain <a href="http://sd.int" target="_blank">sd.int</a> --server <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a> --realm <a href="http://SD.INT" target="_blank">SD.INT</a> --hostname <a href="http://ldap-inf-stg-sg1-01.sd.int" target="_blank">ldap-inf-stg-sg1-01.sd.int</a>' returned non-zero exit status 1</i></font></div><div><br></div><div><font face="verdana, sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"><i></i></div><br></font></div><div><i><span style="font-family:verdana,sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"><br></div></span></i></div><div><div class="gmail_default" style="font-family:verdana,sans-serif">This server is on AWS and I can confirm that all above ports are opened. Also as it is installing on same server where IPA Server is being installed, Port should not be an issue.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Am I missing anything here. </div><br></div><div><i><span style="font-family:verdana,sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"></div><br>Best Regards,<br>__________________________________________<span><font color="#888888"><br></font></span></span></i></div></div><span><font color="#888888"><div><i><span style="font-family:verdana,sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline">Yogesh Sharma</div><br></span></i></div><br><div><span style="font-family:verdana,sans-serif"></span><div><div><br></div></div></div></font></span></div></div></div> </div> </blockquote></div><br></div> </blockquote></div><br></div>