[Freeipa-users] Error: Fedora 18 client to IPA Server 2.2.0?

[Jakub Hrozek]

On Tue, Jan 22, 2013 at 11:02:39AM -0500, Rob Crittenden wrote:
> freeipa at noboost.org wrote:
> >Hi,
> >
> >Has anyone had success with installing the IPA client on Fedora 18 (with SeLinux disabled)?
> >
> >Server:
> >Red Hat Enterprise Linux Server release 6.3 (Santiago)
> >* ipa-server-2.2.0-16.el6.x86_64
> >
> >Client:
> >Fedora release 18 (Spherical Cow)
> >* freeipa-client-3.1.0-2.fc18.x86_64
> >
> >Error:
> >I installed with the debug flags and it is technically a complete
> >install, however uid and gid's don't look up correctly.
> >e.g.
> >getent passwd <username> - comes back blank
> >
> >&
> >
> >#Instead of working out the uid/gid, it just shows the number.
> >[root at craigvm-fedora18 home]# ls -la | grep craig
> >drwx------  45   365   132 16384 Jan 22 13:16 craig
> >
> >
> >Only Errors during the install I could find:
> >2013-01-22T02:42:13Z INFO Configured /etc/krb5.conf for IPA realm
> >EXAMPLE.COM
> >2013-01-22T02:42:13Z DEBUG Starting external process
> >2013-01-22T02:42:13Z DEBUG args=keyctl search @s user
> >ipa_session_cookie:host/craigvm-fedora18.example.com at EXAMPLE.COM
> >2013-01-22T02:42:13Z DEBUG Process finished, return code=1
> >2013-01-22T02:42:13Z DEBUG stdout=
> >2013-01-22T02:42:13Z DEBUG stderr=keyctl_search: Required key not
> >available
> >
> >---
> >2013-01-22T02:42:13Z DEBUG Caught fault 3008 from server
> >https://sysvm-ipa.example.com/ipa/xml: invalid 'sshpubkey':
> >must be binary data
> >2013-01-22T02:42:13Z INFO host_mod: invalid 'sshpubkey': must be binary
> >data
> >2013-01-22T02:42:13Z WARNING Failed to upload host SSH public keys.
> >----
> 
> It sounds like sssd isn't communicating with ipa. One of the last
> steps of the client install is to use getent to look up the admin
> user. This should also be in the client install log. Did that
> succeed?
> 
> rob

I think Rob is correct. Is there anything relevant in syslog? If not,
you may want to raise sssd debugging, restart the SSSD and retry the lookup.