[Freeipa-users] ipa-ods-exporter failed ?
Günther J. Niederwimmer
gjn at gjn.priv.at
Mon Jun 20 16:48:42 UTC 2016
Hello,
Am Montag, 20. Juni 2016, 09:54:11 CEST schrieb Petr Spacek:
> On 18.6.2016 15:03, Günther J. Niederwimmer wrote:
> > hello,
> >
> > Am Freitag, 17. Juni 2016, 23:05:32 CEST schrieb Martin Basti:
> >> On 17.06.2016 18:29, Günther J. Niederwimmer wrote:
> >>> Hello,
> >>>
> >>> Am Freitag, 17. Juni 2016, 14:13:55 CEST schrieb Martin Basti:
> >>>> On 17.06.2016 12:54, Günther J. Niederwimmer wrote:
> >>>>> Hello List,
> >>>>>
> >>>>> Am Freitag, 17. Juni 2016, 07:51:45 CEST schrieb Petr Spacek:
> >>>>>> On 16.6.2016 21:51, Lukas Slebodnik wrote:
> >>>>>>> On (16/06/16 11:54), Günther J. Niederwimmer wrote:
> >>>>>>>> Hello
> >>>>>>>>
> >>>>>>>> on my system the ods-exporter i mean have a problem.
> >>>>>>>>
> >>>>>>>> I have this in the logs
> >>>>>>>> CentOS 7.(2) ipa 4.3.1
> >>>>>>>>
> >>>>>>>> Jun 16 11:38:28 ipa ipa-ods-exporter: raise
> >>>>>>>> errors.ACIError(info=info)
> >>>>>>>> Jun 16 11:38:28 ipa ipa-ods-exporter: ipalib.errors.ACIError:
> >>>>>>>> Insufficient
> >>>>>>>> access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS
> >>>>>>>> failure.
> >>>>>>>> Minor code may provide more information (Ticket expired)
> >>>>>>>>
> >>>>>>> ^^^^^^^^^^^^^^
> >>>>>>>
> >>>>>>> Here seems to be a reason why it failed.
> >>>>>>> But I can't help you more.
> >>>>>>
> >>>>>> Lukas is right. Interesting, this should never happen :-)
> >>>>>
> >>>>> this have I also found ;-)
> >>>>>
> >>>>>> Please enable debugging using procedure
> >>>>>> http://www.freeipa.org/page/Troubleshooting#ipa_command_crashes_or_re
> >>>>>> tu
> >>>>>> rn
> >>>>>> s_n o_data and check logs after next ipa-ods-exporter restart.
> >>>>>> Thank you!
> >>>>>
> >>>>> OK,
> >>>>>
> >>>>> I attache the messages log?
> >>>>>
> >>>>> I mean this is a problem with my DNS ?
> >>>>
> >>>> Hello,
> >>>> can you check kerberos status of ipa-ods-exporter service in webUI?
> >>>>
> >>>> identity/services/ipa-ods-exported/<hostname>
> >>>> There should be kerberos status in right top corner in details view
> >>>
> >>> I have a
> >>> identity/services/ipa-ods-exporter/..
> >>>
> >>> with a "Kerberos Key Present, Service Provisioned"
> >>>
> >>> but no Certificate ?
> >>
> >> Can you try,
> >>
> >> # kinit -kt /etc/ipa/dnssec/ipa-ods-exporter.keytab
> >> ipa-ods-exporter/$(hostname)
> >
> > OK
> > I can do a "kinit -kt /etc/ipa/dnssec/ipa-ods-exporter.keytab ipa-ods-
> > exporter/$(hostname)"
> >
> > written on one line!! is this OK.
> >
> >> and do ldapsearch
> >> # ldapsearch -Y GSSAPI
> >
> > and also ldapsearch is OK
> >
> >> It should show us if keytab is okay
> >
> > But the Error is present :-(.
>
> We need to see precise error. Please copy&paste it into the e-mail.
that is it.
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.login_password() at '/session/login_password'
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.xmlserver() at '/xml'
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.jsonserver_session() at '/session/json'
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.sync_token() at '/session/sync_token'
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.login_kerberos() at '/session/login_kerberos'
Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.jsonserver_kerb() at '/json'
Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.change_password() at '/session/change_password'
Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: Initializing principal ipa-
ods-exporter/ipa.4gjn.com using keytab /etc/ipa/dnssec/ipa-ods-exporter.keytab
Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: using ccache /var/
opendnssec/tmp/ipa-ods-exporter.ccache
Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: Attempt 1/5: success
Jun 20 18:43:35 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 20 18:43:35 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 20 18:43:35 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 20 18:43:35 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 20 18:43:35 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 20 18:43:35 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 20 18:43:35 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 20 18:43:35 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 20 18:43:35 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 20 18:43:35 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 20 18:43:35 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 20 18:43:35 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 20 18:43:35 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 20 18:43:35 ipa systemd: ipa-ods-exporter.service failed.
Jun 20 18:44:35 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 20 18:44:35 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 20 18:44:35 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing all plugin modules
in ipalib.plugins...
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.aci
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.automember
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.automount
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.baseldap
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.baseuser
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.batch
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.caacl
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.cert
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.certprofile
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.config
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.delegation
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.dns
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.domainlevel
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.group
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.hbacrule
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.hbacsvc
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.hbacsvcgroup
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.hbactest
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.host
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.hostgroup
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.idrange
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.idviews
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.internal
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.krbtpolicy
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.migration
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.misc
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.netgroup
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.otpconfig
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.otptoken
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.otptoken_yubikey
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.passwd
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.permission
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.ping
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.privilege
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.pwpolicy
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: Starting external process
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: args=klist -V
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: Process finished, return
code=0
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: stdout=Kerberos 5 version
1.13.2
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: stderr=
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.radiusproxy
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.realmdomains
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.role
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.rpcclient
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.selfservice
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.selinuxusermap
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.server
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.service
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.servicedelegation
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.session
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.stageuser
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.sudocmd
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.sudocmdgroup
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.sudorule
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.topology
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.trust
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.user
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.vault
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipalib.plugins.virtual
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing all plugin modules
in ipaserver.plugins...
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipaserver.plugins.dogtag
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipaserver.plugins.join
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipaserver.plugins.ldap2
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipaserver.plugins.rabase
Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module
ipaserver.plugins.xmlserver
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: SessionAuthManager.register:
name=jsonserver_session_66359568
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: SessionAuthManager.register:
name=xmlserver_session_66361360
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.sync_token() at '/session/sync_token'
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.xmlserver_session() at '/session/xml'
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.login_password() at '/session/login_password'
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.xmlserver() at '/xml'
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.jsonserver_session() at '/session/json'
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.change_password() at '/session/change_password'
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.jsonserver_kerb() at '/json'
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting
ipaserver.rpcserver.login_kerberos() at '/session/login_kerberos'
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration:
0:20:00
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Initializing principal ipa-
ods-exporter/ipa.4gjn.com using keytab /etc/ipa/dnssec/ipa-ods-exporter.keytab
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: using ccache /var/
opendnssec/tmp/ipa-ods-exporter.ccache
Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Attempt 1/5: success
Jun 20 18:44:36 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 20 18:44:36 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 20 18:44:36 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 20 18:44:36 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 20 18:44:36 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 20 18:44:36 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 20 18:44:36 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 20 18:44:36 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 20 18:44:36 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 20 18:44:36 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 20 18:44:36 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 20 18:44:36 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 20 18:44:36 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 20 18:44:36 ipa systemd: ipa-ods-exporter.service failed.
> It would be awesome if you could follow general rules for bug reporting:
> http://www.chiark.greenend.org.uk/~sgtatham/bugs-de.html
>
> Besides other things it would allow us to help you in shorter time.
>
> Have a nice day!
--
mit freundlichen Grüßen / best regards,
Günther J. Niederwimmer
More information about the Freeipa-users
mailing list