[Freeipa-users] CentOS 6.8: uninstalling IPA client causes python error

[Rob Crittenden]

Dan.Finkelstein at high5games.com wrote:
> Epilogue:
>
> While I couldn't solve the python error, I did manage to uninstall the
> ipa client and sssd components, then delete /var/lib/ipa-client (which
> was causing the ipa-client-install program to think that it was already
> registered). After reinstalling the ipa client and sssd components,
> ipa-client-install happily bound the system to the IPA cluster.

I'd check for SELinux errors, that might explain things.

rob

>
> Best regards,
>
> Dan
>
> <http://www.high5games.com/>
>
> *Daniel Alex Finkelstein*| Lead Dev Ops Engineer
>
> _Dan.Finkelstein at h5g.com <mailto:Dan.Finkelstein at h5g.com>_ | 212.604.3447
>
> One World Trade Center, New York, NY 10007
>
> www.high5games.com <http://www.high5games.com/>
>
> Play High 5 Casino <https://apps.facebook.com/highfivecasino/> and Shake
> the Sky <https://apps.facebook.com/shakethesky/>
>
> Follow us on: Facebook <http://www.facebook.com/high5games>, Twitter
> <https://twitter.com/High5Games>, YouTube
> <http://www.youtube.com/High5Games>, Linkedin
> <http://www.linkedin.com/company/1072533?trk=tyah>
>
> //
>
> /This message and any attachments may contain confidential or privileged
> information and are only for the use of the intended recipient of this
> message. If you are not the intended recipient, please notify the sender
> by return email, and delete or destroy this and all copies of this
> message and all attachments. Any unauthorized disclosure, use,
> distribution, or reproduction of this message or any attachments is
> prohibited and may be unlawful./
>
> *From: *<freeipa-users-bounces at redhat.com> on behalf of Daniel
> Finkestein <Dan.Finkelstein at high5games.com>
> *Date: *Saturday, June 18, 2016 at 06:34
> *To: *"freeipa-users at redhat.com" <freeipa-users at redhat.com>
> *Subject: *[Freeipa-users] CentOS 6.8: uninstalling IPA client causes
> python error
>
> We're rebinding clients from IPA 3 to IPA 4 and two CentOS 6.8 servers
> are giving us grief. When we try to run the uninstall program via
> "ipa-client-install --uninstall", we get:
>
> [root at localhost ~]# ipa-client-install --uninstall -U -f
>
> Disabling client Kerberos and LDAP configurations
>
> Unconfiguring the NIS domain.
>
> Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to
> /etc/sssd/sssd.conf.deleted
>
> Restoring client configuration files
>
> Traceback (most recent call last):
>
>    File "/usr/sbin/ipa-client-install", line 2567, in <module>
>
>      sys.exit(main())
>
>    File "/usr/sbin/ipa-client-install", line 2544, in main
>
>      return uninstall(options, env)
>
>    File "/usr/sbin/ipa-client-install", line 637, in uninstall
>
>      fstore.restore_all_files()
>
>    File "/usr/lib/python2.6/site-packages/ipapython/sysrestore.py", line
> 222, in restore_all_files
>
>      shutil.copy(backup_path, path)  # SELinux needs copy
>
>    File "/usr/lib64/python2.6/shutil.py", line 84, in copy
>
>      copyfile(src, dst)
>
>    File "/usr/lib64/python2.6/shutil.py", line 51, in copyfile
>
>      with open(dst, 'wb') as fdst:
>
> IOError: [Errno 13] Permission denied: '/etc/ssh/sshd_config'
>
> The /etc/ssh/sshd_config file seems to have proper permissions (as do
> the other files), so we're a little stumped why it fails here.
>
> Thanks,
>
> Dan
>
> <http://www.high5games.com/>
>
> *Daniel Alex Finkelstein*| Lead Dev Ops Engineer
>
> _Dan.Finkelstein at h5g.com <mailto:Dan.Finkelstein at h5g.com>_ | 212.604.3447
>
> One World Trade Center, New York, NY 10007
>
> www.high5games.com <http://www.high5games.com/>
>
> Play High 5 Casino <https://apps.facebook.com/highfivecasino/> and Shake
> the Sky <https://apps.facebook.com/shakethesky/>
>
> Follow us on: Facebook <http://www.facebook.com/high5games>, Twitter
> <https://twitter.com/High5Games>, YouTube
> <http://www.youtube.com/High5Games>, Linkedin
> <http://www.linkedin.com/company/1072533?trk=tyah>
>
> //
>
> /This message and any attachments may contain confidential or privileged
> information and are only for the use of the intended recipient of this
> message. If you are not the intended recipient, please notify the sender
> by return email, and delete or destroy this and all copies of this
> message and all attachments. Any unauthorized disclosure, use,
> distribution, or reproduction of this message or any attachments is
> prohibited and may be unlawful./
>
>
>