[Freeipa-users] ipa-client-install errors

[Martin Babinsky]

On 04/20/2016 07:12 PM, Gady Notrica wrote:
> Please find attached the install log
>
> Gady
>
> -----Original Message-----
> From: freeipa-users-bounces at redhat.com [mailto:freeipa-users-bounces at redhat.com] On Behalf Of Martin Babinsky
> Sent: April 20, 2016 1:04 PM
> To: freeipa-users at redhat.com
> Subject: Re: [Freeipa-users] ipa-client-install errors
>
> On 04/20/2016 06:00 PM, Gady Notrica wrote:
>> Hello World,
>>
>> I am having these errors trying to install ipa-client-install. Every
>> other machine is fine and they IPA servers are functioning perfectly
>>
>> Error trying to clean keytab: /usr/sbin/ipa-rmkeytab returned 1
>>
>> Kerberos authentication failed: kinit: Improper format of Kerberos
>> configuration file while initializing Kerberos 5 library
>>
>> Then I have "/Installation failed. Rolling back changes."/
>>
>> I have tried everything I know with no luck. Any idea on how to FIX
>> this? Below is the full log.
>>
>> -----------------------------------------------------------
>>
>> /Continue to configure the system with these values? [no]: yes/
>>
>> /Error trying to clean keytab: /usr/sbin/ipa-rmkeytab returned 1/
>>
>> /Skipping synchronizing time with NTP server./
>>
>> /User authorized to enroll computers: admin/
>>
>> /Password for admin at IPA.DOMAIN.COM:/
>>
>> /Please make sure the following ports are opened in the firewall
>> settings:/
>>
>> /     TCP: 80, 88, 389/
>>
>> /     UDP: 88 (at least one of TCP/UDP ports 88 has to be open)/
>>
>> /Also note that following ports are necessary for ipa-client working
>> properly after enrollment:/
>>
>> /     TCP: 464/
>>
>> /     UDP: 464, 123 (if NTP enabled)/
>>
>> /Kerberos authentication failed: kinit: Improper format of Kerberos
>> configuration file while initializing Kerberos 5 library/
>>
>> //
>>
>> /Installation failed. Rolling back changes./
>>
>> /Failed to list certificates in /etc/ipa/nssdb: Command
>> ''/usr/bin/certutil' '-d' '/etc/ipa/nssdb' '-L'' returned non-zero
>> exit status 255/
>>
>> /Disabling client Kerberos and LDAP configurations/
>>
>> /Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to
>> /etc/sssd/sssd.conf.deleted/
>>
>> /Restoring client configuration files/
>>
>> /nscd daemon is not installed, skip configuration/
>>
>> /nslcd daemon is not installed, skip configuration/
>>
>> /Client uninstall complete./
>>
>> /---------------------------------------------------------------/
>>
>> Gady
>>
>>
>>
> We would need to see the whole log, it should be located in '/var/log/ipaclient-install.log'
>
> --
> Martin^3 Babinsky
>
> --
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project
>
It looks like the log is truncated. Are you sure that this is the full 
version?

-- 
Martin^3 Babinsky