[Freeipa-users] ipa-server-install: ERROR Failed to initialize IPA API

[Arturo Borrero]

Hi there,

In a freshly installed server, I try:

# ipa-server-install
[...]
   [12/13]: restarting httpd
   [13/13]: configuring httpd to start on boot
Done configuring the web interface (httpd).
Applying LDAP updates
Restarting the directory server
Restarting the KDC
Sample zone file for bind has been created in /tmp/sample.zone.NGKJk1.db
Restarting the web server
Configuration of client side components failed!
ipa-client-install returned: Command '/usr/sbin/ipa-client-install 
--on-master --unattended --domain cica.es --server sheldon.cica.es 
--realm CICA.ES --hostname sheldon.cica.es' returned non-zero exit status 1

If I see the ipa-client-install logs, I have:

[...]
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py'
args=klist -V
stdout=Kerberos 5 version 1.10.3

stderr=
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/role.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/selinuxusermap.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/service.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/trust.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/user.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py'
Failed to initialize IPA API.
Installation failed. Rolling back changes.
IPA client is not configured on this system.

I fit all prerequisites listed in fedora and redhat documentation:
http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/installing-ipa.html

After this, if I try ipactl:

# ipactl start
Starting Directory Service
Starting dirsrv:
     CICA-ES... already running                             [  OK  ]
     PKI-IPA... already running                             [  OK  ]
Failed to read data from Directory Service: Unknown error when 
retrieving list of services from LDAP: {'info': 'SASL(-4): no mechanism 
available: ', 'desc': 'Unknown authentication method'}
Shutting down
Shutting down dirsrv:
     CICA-ES...                                             [  OK  ]
     PKI-IPA...                                             [  OK  ]


Any idea how to get rid of this error and continuing installing/using?

regards

-- 
Arturo Borrero González
Departamento de Seguridad Informática
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3072 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130415/9adc29da/attachment.p7s>