[Freeipa-users] CentOS 6.5 client install failing
Dave Jablonski
djablonski at gatessolutions.com
Tue Feb 11 16:22:23 UTC 2014
The last line in the log should be:
2014-02-06T16:27:48Z DEBUG Caught fault 1101 from server
https://mgmt-001.domain/ipa/xml: did not receive Kerberos credentials
The python modules import happened after I tried to re-install again.
Sorry for the confusion.
ipa-client-3.0.0-37.el6.x86_64
On Tue, Feb 11, 2014 at 9:54 AM, Rob Crittenden <rcritten at redhat.com> wrote:
> Dave Jablonski wrote:
>
>> I've attached the whole client log. Thank you.
>>
>
> Not sure if it is related to the failure or not but the log seems cut off
> at the end. Can you double-check it, it ends with a bunch of python imports.
>
> Also, what is the output of rpm -q ipa-client ?
>
> I see the fallback code in 3.0.0-37 but it doesn't seem to be executing
> here.
>
> rob
>
>
>>
>> On Sat, Feb 8, 2014 at 7:48 AM, Rob Crittenden <rcritten at redhat.com
>> <mailto:rcritten at redhat.com>> wrote:
>>
>> Dave Jablonski wrote:
>>
>> FreeIPA Server: Fedora 16, freeipa 2.1.4
>> Latest CentOS 6.5 client
>>
>> When running:
>>
>> ipa-client-install --mkhomedir --enable-dns-updates
>>
>> The install fails with:
>>
>> trying https://<server-name>/ipa/xml
>> Forwarding 'env' to server u'https://<server-name>/ipa/__xml'
>>
>> Traceback (most recent call last):
>> File "/usr/sbin/ipa-client-install"__, line 2377, in <module>
>> sys.exit(main())
>> File "/usr/sbin/ipa-client-install"__, line 2363, in main
>>
>> rval = install(options, env, fstore, statestore)
>> File "/usr/sbin/ipa-client-install"__, line 2167, in install
>> remote_env = api.Command['env'](server=__True)['result']
>> File
>> "/usr/lib/python2.6/site-__packages/ipalib/frontend.py", line
>> 435,
>>
>> in __call__
>> ret = self.run(*args, **options)
>> File
>> "/usr/lib/python2.6/site-__packages/ipalib/frontend.py", line
>>
>> 1073, in run
>> return self.forward(*args, **options)
>> File
>> "/usr/lib/python2.6/site-__packages/ipalib/frontend.py", line
>> 769,
>> in forward
>> return self.Backend.xmlclient.__forward(self.name
>> <http://self.name> <http://self.name>,
>>
>> *args, **kw)
>> File "/usr/lib/python2.6/site-__packages/ipalib/rpc.py",
>>
>> line 736, in
>> forward
>> raise error(message=e.faultString)
>> ipalib.errors.CCacheError: did not receive Kerberos credentials
>>
>> In /var/log/ipaclient-install.__log:
>>
>>
>> 2014-02-06T18:19:53Z DEBUG approved_usage = SSLServer
>> intended_usage =
>> SSLServer
>> 2014-02-06T18:19:53Z DEBUG cert valid True for
>> "CN=<server-name>,O=<domain>"
>> 2014-02-06T18:19:53Z DEBUG handshake complete, peer =
>> 10.1.1.111:443 <http://10.1.1.111:443>
>> <http://10.1.1.111:443>
>>
>> 2014-02-06T18:19:53Z DEBUG Caught fault 1101 from server
>> https://<server-name>/ipa/xml: did not receive Kerberos
>> credentials
>>
>>
>> We need to see more context from the client install log, preferably
>> the whole thing.
>>
>> IPA v2 doesn't support session cookies but the 3.x client should
>> have support for falling back to using TGT delegation.
>>
>> rob
>>
>>
>>
>>
>> --
>> David Jablonski
>> Performance Gateway
>> Email: _djablonski at p
>> <mailto:djablonski at gatewaysolutions.com>erformancegateway.com
>> <http://erformancegateway.com>_
>> _
>>
>> _
>>
>> IMPORTANT: This e-mail (including any attachments) is intended for the
>> use of the individual or entity to which it is addressed and may contain
>> information that is classified, private, or confidential. If the reader
>> of this message is not the intended recipient, or the employee or agent
>> responsible for delivering the message to the intended recipient, you
>> are hereby notified that any dissemination, distribution, or copying of
>> this communication is prohibited. If you have received this
>> communication in error, please notify us immediately by replying to this
>> e-mail. Thank you.
>>
>>
>> IMPORTANT: This e-mail (including any attachments) is intended for the
>> use of the individual or entity to which it is addressed and may contain
>> information that is classified, private, or confidential. If the reader
>> of this message is not the intended recipient, or the employee or agent
>> responsible for delivering the message to the intended recipient, you
>> are hereby notified that any dissemination, distribution, or copying of
>> this communication is prohibited. If you have received this
>> communication in error, please notify us immediately by replying to this
>> e-mail. Thank you.
>>
>>
>
--
David Jablonski
Performance Gateway
Email: *djablonski at p <djablonski at gatewaysolutions.com>erformancegateway.com
<http://erformancegateway.com>*
IMPORTANT: This e-mail (including any attachments) is intended for the use
of the individual or entity to which it is addressed and may contain
information that is classified, private, or confidential. If the reader of
this message is not the intended recipient, or the employee or agent
responsible for delivering the message to the intended recipient, you are
hereby notified that any dissemination, distribution, or copying of this
communication is prohibited. If you have received this communication in
error, please notify us immediately by replying to this e-mail. Thank you.
--
IMPORTANT: This e-mail (including any attachments) is intended for the use
of the individual or entity to which it is addressed and may contain
information that is classified, private, or confidential. If the reader of
this message is not the intended recipient, or the employee or agent
responsible for delivering the message to the intended recipient, you are
hereby notified that any dissemination, distribution, or copying of this
communication is prohibited. If you have received this communication in
error, please notify us immediately by replying to this e-mail. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140211/ff38826d/attachment.htm>
More information about the Freeipa-users
mailing list