[Freeipa-users] Unable to start IPA server after server reboot

[Ondrej Valousek]

Hi list,

I have a problem with my IPA server:
Symptoms:

[root at polaris etc]# /etc/init.d/ipa start
Starting Directory Service
Starting dirsrv:
     EXAMPLE-COM...                                         [  OK  ]
     PKI-IPA...                                             [  OK  ]
Failed to read data from Directory Service: Unknown error when retrieving list of services from LDAP: {'matched': 
'cn=masters,cn=ipa,cn=etc,dc=example,dc=com', 'desc': 'No such object'}
Shutting down
Shutting down dirsrv:
     EXAMPLE-COM...                                         [  OK  ]
     PKI-IPA...                                             [  OK  ]

I am able to start the services (dirsrv, named, krb5kdc) separately though and then read the configuration fine:

[root at polaris log]# kinit admin
Password for admin at EXAMPLE.COM:
[root at polaris etc]# ldapsearch -Y GSSAPI -h localhost -b cn=masters,cn=ipa,cn=etc,dc=example,dc=com
SASL/GSSAPI authentication started
SASL username: admin at EXAMPLE.COM
SASL SSF: 56
SASL data security layer installed.
# extended LDIF
#
# LDAPv3
# base <cn=masters,cn=ipa,cn=etc,dc=example,dc=com> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# masters, ipa, etc, example.com
dn: cn=masters,cn=ipa,cn=etc,dc=example,dc=com
objectClass: nsContainer
objectClass: top
cn: masters

# polaris.example.com, masters, ipa, etc, example.com
dn: cn=polaris.example.com,cn=masters,cn=ipa,cn=etc,dc=example,dc=com
objectClass: top
objectClass: nsContainer
cn: polaris.example.com

# CA, polaris.example.com, masters, ipa, etc, example.com
dn: cn=CA,cn=polaris.example.com,cn=masters,cn=ipa,cn=etc,dc=example,dc=com
objectClass: nsContainer
objectClass: ipaConfigObject
objectClass: top
ipaConfigString: enabledService
ipaConfigString: startOrder 50
cn: CA
.....

Does it ring any bell to you?
Note that the IPA server was running fine right after the installation....

Thanks!
Ondrej


The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s).
Please direct any additional queries to: communications at s3group.com.
Thank You.
Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073.
Registered Office: South County Business Park, Leopardstown, Dublin 18
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20110802/5667a906/attachment.htm>