[Freeipa-users] FreeIPA start dependencies

Dmitri Pal dpal at redhat.com
Mon Nov 5 18:08:34 UTC 2012


On 11/05/2012 12:51 PM, Matthew Barr wrote:
> So, we're in a datacenter that lost power over sandy.  (It's not our
> only one, so the app was fine.)
>
> I'm now trying to bring the DC back online, and IPA is having issues
> with it's inability to reach other replicas.
>
> * We're using IPA for DNS as well as the kerberos & LDAP services.

Is it installed with forwarders to some other DNS server? Is that server
alive and running? It is reachable?
If not you might want to add host name and IP of the IPA server into the
/etc/hosts

>
> Does anyone have any documentation on which services are required for
> bringing up IPA?
>
> named is having trouble coming up, since it can't reach it's peers.  
>
> resolv.conf points to the local IP, then to the replicas.. but those
> aren't reachable yet.
>
>
> We're getting:  
>  Failed to init credentials (Cannot resolve network address for KDC in
> realm "XXXXYYYY.COM <http://XXXXYYYY.COM>")
>
> As an aside, we're not having issues starting dirsrv, KDC, or the
> other IPA services, just named.    Named's failure then causes
> everything else to shut down, though..
You actually might have problems with others too. Some logs would be
helpful.

>
>
>
> Matthew Barr
> Technical Architect
> E: mbarr at snap-interactive.com <mailto:mbarr at snap-interactive.com>
> AIM: matthewbarr1
> c:  (646) 727-0535
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121105/28765bef/attachment.htm>


More information about the Freeipa-users mailing list