[Freeipa-users] ipa-ods-exporter failed ?

[Petr Spacek]

On 16.6.2016 21:51, Lukas Slebodnik wrote:
> On (16/06/16 11:54), Günther J. Niederwimmer wrote:
>> Hello
>>
>> on my system the ods-exporter i mean have a problem.
>>
>> I have this in the logs
>> CentOS 7.(2) ipa 4.3.1
>>
>> Jun 16 11:37:25 ipa systemd: ipa-ods-exporter.service holdoff time over, 
>> scheduling restart.
>> Jun 16 11:37:25 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
>> Jun 16 11:37:25 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
>> Jun 16 11:37:25 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers 
>> not running
>> Jun 16 11:37:26 ipa python2: GSSAPI Error: Unspecified GSS failure.  Minor code 
>> may provide more information (Ticket expired)
>> Jun 16 11:37:26 ipa ipa-ods-exporter: Traceback (most recent call last):
>> Jun 16 11:37:26 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
>> exporter", line 656, in <module>
>> Jun 16 11:37:26 ipa ipa-ods-exporter: ldap.gssapi_bind()
>> Jun 16 11:37:26 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
>> ipapython/ipaldap.py", line 1085, in gssapi_bind
>> Jun 16 11:37:26 ipa ipa-ods-exporter: '', auth_tokens, server_controls, 
>> client_controls)
>> Jun 16 11:37:26 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
>> contextlib.py", line 35, in __exit__
>> Jun 16 11:37:26 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
>> Jun 16 11:37:26 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
>> ipapython/ipaldap.py", line 992, in error_handler
>> Jun 16 11:37:26 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
>> Jun 16 11:37:26 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient 
>> access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  
>> Minor code may provide more information (Ticket expired)
>> Jun 16 11:37:26 ipa systemd: ipa-ods-exporter.service: main process exited, 
>> code=exited, status=1/FAILURE
>> Jun 16 11:37:26 ipa systemd: Unit ipa-ods-exporter.service entered failed 
>> state.
>> Jun 16 11:37:26 ipa systemd: ipa-ods-exporter.service failed.
>> Jun 16 11:38:26 ipa systemd: ipa-ods-exporter.service holdoff time over, 
>> scheduling restart.
>> Jun 16 11:38:26 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
>> Jun 16 11:38:26 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
>> Jun 16 11:38:27 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers 
>> not running
>> Jun 16 11:38:28 ipa python2: GSSAPI Error: Unspecified GSS failure.  Minor code 
>> may provide more information (Ticket expired)
>> Jun 16 11:38:28 ipa ipa-ods-exporter: Traceback (most recent call last):
>> Jun 16 11:38:28 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
>> exporter", line 656, in <module>
>> Jun 16 11:38:28 ipa ipa-ods-exporter: ldap.gssapi_bind()
>> Jun 16 11:38:28 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
>> ipapython/ipaldap.py", line 1085, in gssapi_bind
>> Jun 16 11:38:28 ipa ipa-ods-exporter: '', auth_tokens, server_controls, 
>> client_controls)
>> Jun 16 11:38:28 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
>> contextlib.py", line 35, in __exit__
>> Jun 16 11:38:28 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
>> Jun 16 11:38:28 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
>> ipapython/ipaldap.py", line 992, in error_handler
>> Jun 16 11:38:28 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
>> Jun 16 11:38:28 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient 
>> access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  
>> Minor code may provide more information (Ticket expired)
>                                           ^^^^^^^^^^^^^^
>                    Here seems to be a reason why it failed.
>                    But I can't help you more.

Lukas is right. Interesting, this should never happen :-)

Please enable debugging using procedure
http://www.freeipa.org/page/Troubleshooting#ipa_command_crashes_or_returns_no_data
and check logs after next ipa-ods-exporter restart.

Thank you!

-- 
Petr^2 Spacek