[Freeipa-users] ipa-ods-exporter failed ?
Günther J. Niederwimmer
gjn at gjn.priv.at
Thu Jun 23 13:27:49 UTC 2016
Hello Martin,
Am Donnerstag, 23. Juni 2016, 15:02:18 CEST schrieb Martin Basti:
> On 20.06.2016 18:48, Günther J. Niederwimmer wrote:
> > Hello,
> >
> > Am Montag, 20. Juni 2016, 09:54:11 CEST schrieb Petr Spacek:
> >> On 18.6.2016 15:03, Günther J. Niederwimmer wrote:
> >>> hello,
> >>>
> >>> Am Freitag, 17. Juni 2016, 23:05:32 CEST schrieb Martin Basti:
> >>>> On 17.06.2016 18:29, Günther J. Niederwimmer wrote:
> >>>>> Hello,
> >>>>>
> >>>>> Am Freitag, 17. Juni 2016, 14:13:55 CEST schrieb Martin Basti:
> >>>>>> On 17.06.2016 12:54, Günther J. Niederwimmer wrote:
> >>>>>>> Hello List,
> >>>>>>>
> >>>>>>> Am Freitag, 17. Juni 2016, 07:51:45 CEST schrieb Petr Spacek:
> >>>>>>>> On 16.6.2016 21:51, Lukas Slebodnik wrote:
> >>>>>>>>> On (16/06/16 11:54), Günther J. Niederwimmer wrote:
> >>>>>>>>>> Hello
> >>>>>>>>>>
> >>>>>>>>>> on my system the ods-exporter i mean have a problem.
> >>>>>>>>>>
> >>>>>>>>>> I have this in the logs
> >>>>>>>>>> CentOS 7.(2) ipa 4.3.1
> >>>>>>>>>>
> >>>>>>>>>> Jun 16 11:38:28 ipa ipa-ods-exporter: raise
> >>>>>>>>>> errors.ACIError(info=info)
> >>>>>>>>>> Jun 16 11:38:28 ipa ipa-ods-exporter: ipalib.errors.ACIError:
> >>>>>>>>>> Insufficient
> >>>>>>>>>> access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS
> >>>>>>>>>> failure.
> >>>>>>>>>> Minor code may provide more information (Ticket expired)
> >>>>>>>>>>
> >>>>>>>>> ^^^^^^^^^^^^^^
> >>>>>>>>>
> >>>>>>>>> Here seems to be a reason why it failed.
> >>>>>>>>> But I can't help you more.
> >>>>>>>>
> >>>>>>>> Lukas is right. Interesting, this should never happen :-)
> >>>>>>>
> >>>>>>> this have I also found ;-)
> >>>>>>>
> >>>>>>>> Please enable debugging using procedure
> >>>>>>>> http://www.freeipa.org/page/Troubleshooting#ipa_command_crashes_or_
> >>>>>>>> re
> >>>>>>>> tu
> >>>>>>>> rn
> >>>>>>>> s_n o_data and check logs after next ipa-ods-exporter restart.
> >>>>>>>> Thank you!
> >>>>>>>
> >>>>>>> OK,
> >>>>>>>
> >>>>>>> I attache the messages log?
> >>>>>>>
> >>>>>>> I mean this is a problem with my DNS ?
> >>>>>>
> >>>>>> Hello,
> >>>>>> can you check kerberos status of ipa-ods-exporter service in webUI?
> >>>>>>
> >>>>>> identity/services/ipa-ods-exported/<hostname>
> >>>>>> There should be kerberos status in right top corner in details view
> >>>>>
> >>>>> I have a
> >>>>> identity/services/ipa-ods-exporter/..
> >>>>>
> >>>>> with a "Kerberos Key Present, Service Provisioned"
> >>>>>
> >>>>> but no Certificate ?
> >>>>
> >>>> Can you try,
> >>>>
> >>>> # kinit -kt /etc/ipa/dnssec/ipa-ods-exporter.keytab
> >>>> ipa-ods-exporter/$(hostname)
> >>>
> >>> OK
> >>> I can do a "kinit -kt /etc/ipa/dnssec/ipa-ods-exporter.keytab ipa-ods-
> >>> exporter/$(hostname)"
> >>>
> >>> written on one line!! is this OK.
> >>>
> >>>> and do ldapsearch
> >>>> # ldapsearch -Y GSSAPI
> >>>
> >>> and also ldapsearch is OK
> >>>
> >>>> It should show us if keytab is okay
> >>>
> >>> But the Error is present :-(.
> >>
> >> We need to see precise error. Please copy&paste it into the e-mail.
> >
> > that is it.
> >
> > Jun 20 18:44:36 ipa systemd: ipa-ods-exporter.service failed.
> >
> >> It would be awesome if you could follow general rules for bug reporting:
> >> http://www.chiark.greenend.org.uk/~sgtatham/bugs-de.html
> >>
> >> Besides other things it would allow us to help you in shorter time.
> >>
> >> Have a nice day!
>
> This is weird, It looks like your kerberos keytab is valid, but I have
> no idea why you are getting ticket expired messages. It should just
> kinit again.
>
> Can you please remove this ccache file?
> /var/opendnssec/tmp/ipa-ods-exporter.ccache
OK now i make a ipactl stop remove the ccache file and start ipa again.
to start the ods-exporte I have to wait a long time 1-2 min. ;-)
I send you the log without debug when you like this with debug tell me.
Jun 23 14:57:56 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 14:57:56 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 14:57:56 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 14:57:56 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 14:57:56 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 14:57:56 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 14:57:56 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 14:57:56 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 14:57:56 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 14:57:56 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 14:57:56 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 14:57:56 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 14:57:56 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 14:58:01 ipa systemd: Created slice user-991.slice.
Jun 23 14:58:01 ipa systemd: Starting user-991.slice.
Jun 23 14:58:01 ipa systemd: Started Session 1580 of user pcp.
Jun 23 14:58:01 ipa systemd: Starting Session 1580 of user pcp.
Jun 23 14:58:01 ipa systemd: Removed slice user-991.slice.
Jun 23 14:58:01 ipa systemd: Stopping user-991.slice.
Jun 23 14:58:55 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da:
52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214
DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=59302 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0
Jun 23 14:58:56 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 14:58:56 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 14:58:56 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 14:58:57 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 14:58:57 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 14:58:57 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 14:58:57 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 14:58:57 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 14:58:57 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 14:58:57 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 14:58:57 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 14:58:57 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 14:58:57 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 14:58:57 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 14:58:57 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 14:58:58 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 14:58:58 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 14:58:58 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 14:59:58 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 14:59:58 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 14:59:58 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 14:59:58 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 14:59:59 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 14:59:59 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 14:59:59 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 14:59:59 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 14:59:59 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 14:59:59 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 14:59:59 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 14:59:59 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 14:59:59 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 14:59:59 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 14:59:59 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 14:59:59 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 14:59:59 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 14:59:59 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:00:01 ipa systemd: Started Session 1581 of user root.
Jun 23 15:00:01 ipa systemd: Starting Session 1581 of user root.
Jun 23 15:00:59 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:00:59 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:00:59 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:01:00 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:01:00 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:01:00 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:01:00 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:01:00 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:01:00 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:01:00 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:01:00 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:01:00 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:01:00 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:01:00 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:01:00 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:01:01 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:01:01 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:01:01 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:01:01 ipa systemd: Started Session 1582 of user root.
Jun 23 15:01:01 ipa systemd: Starting Session 1582 of user root.
Jun 23 15:02:01 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:02:01 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:02:01 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:02:01 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:02:02 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:02:02 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:02:02 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:02:02 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:02:02 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:02:02 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:02:02 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:02:02 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:02:02 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:02:02 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:02:02 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:02:02 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:02:02 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:02:02 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:03:02 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:03:02 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:03:02 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:03:03 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:03:03 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:03:03 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:03:03 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:03:03 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:03:03 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:03:03 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:03:03 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:03:03 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:03:03 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:03:03 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:03:03 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:03:04 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:03:04 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:03:04 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:03:57 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da:
52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214
DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=59303 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0
Jun 23 15:04:04 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:04:04 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:04:04 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:04:04 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:04:05 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:04:05 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:04:05 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:04:05 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:04:05 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:04:05 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:04:05 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:04:05 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:04:05 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:04:05 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:04:05 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:04:05 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:04:05 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:04:05 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:05:05 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:05:05 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:05:05 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:05:06 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:05:06 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:05:06 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:05:06 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:05:06 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:05:06 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:05:06 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:05:06 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:05:06 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:05:06 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:05:06 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:05:06 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:05:07 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:05:07 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:05:07 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:05:33 ipa named-pkcs11[7543]: error (connection refused) resolving
'centos.chi.host-engine.com/A/IN': 190.0.163.18#53
Jun 23 15:06:07 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:06:07 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:06:07 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:06:07 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:06:08 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:06:08 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:06:08 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:06:08 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:06:08 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:06:08 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:06:08 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:06:08 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:06:08 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:06:08 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:06:08 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:06:08 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:06:08 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:06:08 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:07:08 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:07:08 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:07:08 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:07:09 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:07:09 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:07:09 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:07:09 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:07:09 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:07:09 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:07:09 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:07:09 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:07:09 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:07:09 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:07:09 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:07:09 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:07:10 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:07:10 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:07:10 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:08:10 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:08:10 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:08:10 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:08:10 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:08:11 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:08:11 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:08:11 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:08:11 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:08:11 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:08:11 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:08:11 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:08:11 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:08:11 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:08:11 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:08:11 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:08:11 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:08:11 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:08:11 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:09:01 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da:
52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214
DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=59328 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0
Jun 23 15:09:11 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:09:11 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:09:11 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:09:12 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:09:12 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:09:12 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:09:12 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:09:12 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:09:12 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:09:12 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:09:12 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:09:12 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:09:12 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:09:12 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:09:12 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:09:13 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:09:13 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:09:13 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:10:01 ipa systemd: Started Session 1583 of user root.
Jun 23 15:10:01 ipa systemd: Starting Session 1583 of user root.
Jun 23 15:10:13 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:10:13 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:10:13 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:10:13 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:10:14 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:10:14 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:10:14 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:10:14 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:10:14 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:10:14 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:10:14 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:10:14 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:10:14 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:10:14 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:10:14 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:10:14 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:10:14 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:10:14 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:11:09 ipa kernel: freeipa-ldapIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=54309 DF PROTO=TCP SPT=37400 DPT=389
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:09 ipa kernel: freeipa-ldapsIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=4218 DF PROTO=TCP SPT=41544 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:09 ipa kernel: freeipa-ldapIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=4218 DF PROTO=TCP SPT=41544 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:09 ipa kernel: freeipa-ldapsIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=62257 DF PROTO=TCP SPT=41545 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:09 ipa kernel: freeipa-ldapIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=62257 DF PROTO=TCP SPT=41545 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:09 ipa kernel: freeipa-ldapsIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=43717 DF PROTO=TCP SPT=41546 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:09 ipa kernel: freeipa-ldapIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=43717 DF PROTO=TCP SPT=41546 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:12 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da:
52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214
DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=59329 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0
Jun 23 15:11:14 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:11:14 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:11:14 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:11:15 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:11:15 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:11:15 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:11:15 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:11:15 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:11:15 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:11:15 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:11:15 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:11:15 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:11:15 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:11:15 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:11:15 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:11:16 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:11:16 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:11:16 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:11:54 ipa kernel: freeipa-ldapIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=15401 DF PROTO=TCP SPT=35252 DPT=389
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:54 ipa kernel: freeipa-ldapsIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=18772 DF PROTO=TCP SPT=59206 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:54 ipa kernel: freeipa-ldapIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=18772 DF PROTO=TCP SPT=59206 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:54 ipa kernel: freeipa-ldapsIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=61685 DF PROTO=TCP SPT=59207 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:11:54 ipa kernel: freeipa-ldapIN=ens10 OUT=
MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=61685 DF PROTO=TCP SPT=59207 DPT=88
WINDOW=29200 RES=0x00 SYN URGP=0
Jun 23 15:12:16 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:12:16 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:12:16 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:12:16 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:12:17 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:12:17 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:12:17 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:12:17 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:12:17 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:12:17 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:12:17 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:12:17 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:12:17 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:12:17 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:12:17 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:12:17 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:12:17 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:12:17 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:12:18 ipa systemd-logind: New session 1584 of user root.
Jun 23 15:12:18 ipa systemd: Started Session 1584 of user root.
Jun 23 15:12:18 ipa systemd: Starting Session 1584 of user root.
Jun 23 15:12:18 ipa dbus[534]: [system] Activating service
name='org.freedesktop.problems' (using servicehelper)
Jun 23 15:12:18 ipa dbus-daemon: dbus[534]: [system] Activating service
name='org.freedesktop.problems' (using servicehelper)
Jun 23 15:12:18 ipa dbus[534]: [system] Successfully activated service
'org.freedesktop.problems'
Jun 23 15:12:18 ipa dbus-daemon: dbus[534]: [system] Successfully activated
service 'org.freedesktop.problems'
Jun 23 15:12:30 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da:
52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214
DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=59330 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0
Jun 23 15:12:30 ipa systemd: Stopping IPA key daemon...
Jun 23 15:12:30 ipa ipa-dnskeysyncd: ipa : INFO Signal 15
received: Shutting down!
Jun 23 15:12:30 ipa systemd: Stopped IPA key daemon.
Jun 23 15:12:30 ipa systemd: Stopping OpenDNSSEC Enforcer daemon...
Jun 23 15:12:30 ipa ods-enforcerd: Received SIGTERM, exiting...
Jun 23 15:12:30 ipa ods-enforcerd: all done! hsm_close result: 0
Jun 23 15:12:30 ipa systemd: Stopped OpenDNSSEC Enforcer daemon.
Jun 23 15:12:30 ipa systemd: Stopped IPA OpenDNSSEC Signer replacement.
Jun 23 15:12:30 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:12:30 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:12:30 ipa systemd: Stopping ipa-otpd socket.
Jun 23 15:12:30 ipa systemd: Closed ipa-otpd socket.
Jun 23 15:12:30 ipa systemd: Stopped target PKI Tomcat Server.
Jun 23 15:12:30 ipa systemd: Stopping PKI Tomcat Server.
Jun 23 15:12:30 ipa systemd: Stopping PKI Tomcat Server pki-tomcat...
Jun 23 15:12:30 ipa systemd: Stopping IPA Custodia Service...
Jun 23 15:12:30 ipa systemd: Stopped IPA Custodia Service.
Jun 23 15:12:30 ipa server: Java virtual machine used: /usr/lib/jvm/jre/bin/
java
Jun 23 15:12:30 ipa server: classpath used: /usr/share/tomcat/bin/
bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/commons-
daemon.jar
Jun 23 15:12:30 ipa server: main class used:
org.apache.catalina.startup.Bootstrap
Jun 23 15:12:30 ipa server: flags used: -DRESTEASY_LIB=/usr/share/java/
resteasy-base -Djava.library.path=/usr/lib64/nuxwdog-jni
Jun 23 15:12:30 ipa server: options used: -Dcatalina.base=/var/lib/pki/pki-
tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -
Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/
var/lib/pki/pki-tomcat/conf/logging.properties -
Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
Jun 23 15:12:30 ipa server: arguments used: stop
Jun 23 15:12:30 ipa systemd: Stopping The Apache HTTP Server...
Jun 23 15:12:31 ipa server: Jun 23, 2016 3:12:31 PM
org.apache.catalina.core.StandardServer await
Jun 23 15:12:31 ipa server: INFO: A valid shutdown command was received via
the shutdown port. Stopping the Server instance.
Jun 23 15:12:31 ipa server: PKIListener:
org.apache.catalina.core.StandardServer[before_stop]
Jun 23 15:12:31 ipa server: PKIListener:
org.apache.catalina.core.StandardServer[stop]
Jun 23 15:12:31 ipa server: PKIListener:
org.apache.catalina.core.StandardServer[configure_stop]
Jun 23 15:12:31 ipa server: Jun 23, 2016 3:12:31 PM
org.apache.coyote.AbstractProtocol pause
Jun 23 15:12:31 ipa server: INFO: Pausing ProtocolHandler ["http-bio-8080"]
Jun 23 15:12:31 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:12:31 ipa systemd: Stopped PKI Tomcat Server pki-tomcat.
Jun 23 15:12:32 ipa systemd: Stopped The Apache HTTP Server.
Jun 23 15:12:32 ipa systemd: Stopping IPA memcached daemon, increases IPA
server performance...
Jun 23 15:12:32 ipa systemd: Stopped IPA memcached daemon, increases IPA
server performance.
Jun 23 15:12:32 ipa systemd: Stopping Berkeley Internet Name Domain (DNS) with
native PKCS#11...
Jun 23 15:12:32 ipa named-pkcs11[7543]: received control channel command
'stop'
Jun 23 15:12:32 ipa named-pkcs11[7543]: shutting down: flushing changes
Jun 23 15:12:32 ipa named-pkcs11[7543]: stopping command channel on
127.0.0.1#953
Jun 23 15:12:32 ipa named-pkcs11[7543]: stopping command channel on ::1#953
Jun 23 15:12:32 ipa named-pkcs11[7543]: zone 1.f.8.0.f.
6.0.0.0.7.4.0.1.0.0.2.ip6.arpa/IN: shutting down
Jun 23 15:12:32 ipa named-pkcs11[7543]: zone 4gjn.com/IN (signed): shutting
down
Jun 23 15:12:32 ipa named-pkcs11[7543]: zone 4gjn.com/IN (unsigned): shutting
down
Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on ::#53
Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on 127.0.0.1#53
Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on 89.26.108.6#53
Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on
192.168.55.204#53
Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on
192.168.100.204#53
Jun 23 15:12:32 ipa named-pkcs11[7543]: exiting
Jun 23 15:12:32 ipa systemd: Stopped Berkeley Internet Name Domain (DNS) with
native PKCS#11.
Jun 23 15:12:32 ipa systemd: Stopping Kerberos 5 Password-changing and
Administration...
Jun 23 15:12:32 ipa systemd: kadmin.service: main process exited, code=exited,
status=2/INVALIDARGUMENT
Jun 23 15:12:32 ipa systemd: Stopped Kerberos 5 Password-changing and
Administration.
Jun 23 15:12:32 ipa systemd: Unit kadmin.service entered failed state.
Jun 23 15:12:32 ipa systemd: kadmin.service failed.
Jun 23 15:12:32 ipa systemd: Stopping Kerberos 5 KDC...
Jun 23 15:12:32 ipa systemd: Stopped Kerberos 5 KDC.
Jun 23 15:12:32 ipa systemd: Stopping 389 Directory Server 4GJN-COM....
Jun 23 15:12:32 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Ticket expired)
Jun 23 15:12:32 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:12:32 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 656, in <module>
Jun 23 15:12:32 ipa ipa-ods-exporter: ldap.gssapi_bind()
Jun 23 15:12:32 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 1085, in gssapi_bind
Jun 23 15:12:32 ipa ipa-ods-exporter: '', auth_tokens, server_controls,
client_controls)
Jun 23 15:12:32 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/
contextlib.py", line 35, in __exit__
Jun 23 15:12:32 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback)
Jun 23 15:12:32 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/
ipapython/ipaldap.py", line 992, in error_handler
Jun 23 15:12:32 ipa ipa-ods-exporter: raise errors.ACIError(info=info)
Jun 23 15:12:32 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient
access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Ticket expired)
Jun 23 15:12:32 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:12:32 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:12:32 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:12:34 ipa systemd: Stopped 389 Directory Server 4GJN-COM..
Jun 23 15:13:30 ipa systemd: Starting 389 Directory Server 4GJN-COM....
Jun 23 15:13:30 ipa systemd: Started 389 Directory Server 4GJN-COM..
Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert:
Security Initialization: Enabling default cipher set.
Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert:
Configured NSS Ciphers
Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert:
#011TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled
Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert:
#011TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert:
#011TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert:
#011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert:
#011TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled
Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert:
#011TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_RSA_WITH_AES_256_GCM_SHA384: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_RSA_WITH_AES_256_CBC_SHA: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_RSA_WITH_AES_128_CBC_SHA: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert:
#011TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] SSL Initialization
- Configured SSL version range: min: TLS1.0, max: TLS1.2
Jun 23 15:13:32 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:13:32 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:13:32 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:13:32 ipa [sssd[ldap_child[26829]]]: Failed to initialize
credentials using keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for
realm '4GJN.COM'. Unable to create GSSAPI-encrypted LDAP connection.
Jun 23 15:13:32 ipa [sssd[ldap_child[26829]]]: Cannot contact any KDC for
realm '4GJN.COM'
Jun 23 15:13:33 ipa systemd: Starting Kerberos 5 KDC...
Jun 23 15:13:33 ipa systemd: PID file /var/run/krb5kdc.pid not readable (yet?)
after start.
Jun 23 15:13:33 ipa systemd: Started Kerberos 5 KDC.
Jun 23 15:13:33 ipa systemd: Starting Kerberos 5 Password-changing and
Administration...
Jun 23 15:13:33 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:13:33 ipa systemd: PID file /var/run/kadmind.pid not readable (yet?)
after start.
Jun 23 15:13:33 ipa systemd: Started Kerberos 5 Password-changing and
Administration.
Jun 23 15:13:33 ipa systemd: Starting Generate rndc key for BIND (DNS)...
Jun 23 15:13:33 ipa systemd: Started Generate rndc key for BIND (DNS).
Jun 23 15:13:33 ipa systemd: Starting Berkeley Internet Name Domain (DNS) with
native PKCS#11...
Jun 23 15:13:33 ipa bash: zone localhost.localdomain/IN: loaded serial 0
Jun 23 15:13:33 ipa bash: zone localhost/IN: loaded serial 0
Jun 23 15:13:33 ipa bash: zone
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN:
loaded serial 0
Jun 23 15:13:33 ipa bash: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
Jun 23 15:13:33 ipa bash: zone 0.in-addr.arpa/IN: loaded serial 0
Jun 23 15:13:33 ipa named-pkcs11[26870]: starting BIND 9.9.4-
RedHat-9.9.4-29.el7_2.3 -u named
Jun 23 15:13:33 ipa named-pkcs11[26870]: built with '--build=x86_64-redhat-
linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--disable-
dependency-tracking' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin'
'--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--
includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--
sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info'
'--with-libtool' '--localstatedir=/var' '--enable-threads' '--enable-ipv6' '--
enable-filter-aaaa' '--enable-rrl' '--with-pic' '--disable-static' '--disable-
openssl-version-check' '--enable-exportlib' '--with-export-libdir=/usr/lib64'
'--with-export-includedir=/usr/include' '--includedir=/usr/include/bind9' '--
enable-native-pkcs11' '--with-pkcs11=/usr/lib64/pkcs11/libsofthsm2.so' '--
with-dlopen=yes' '--with-dlz-ldap=yes' '--with-dlz-postgres=yes' '--with-dlz-
mysql=yes' '--with-dlz-filesystem=yes' '--with-dlz-bdb=yes' '--with-gssapi=yes'
'--disable-isc-spnego' '--enable-fixed-rrset' '--with-docbook-xsl=/usr/share/
sgml/docbook/xsl-stylesheets' 'build_alias=x86_64-redhat-linux-gnu'
'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS= -O2 -g -pipe -Wall -Wp,-
D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-
size=4 -grecord-gcc-switches -m64 -mtune=generic' 'LDFLAGS=-Wl,-z,relro '
'CPPFLAGS= -DDIG_SIGCHASE'
Jun 23 15:13:33 ipa named-pkcs11[26870]:
----------------------------------------------------
Jun 23 15:13:33 ipa named-pkcs11[26870]: BIND 9 is maintained by Internet
Systems Consortium,
Jun 23 15:13:33 ipa named-pkcs11[26870]: Inc. (ISC), a non-profit 501(c)(3)
public-benefit
Jun 23 15:13:33 ipa named-pkcs11[26870]: corporation. Support and training
for BIND 9 are
Jun 23 15:13:33 ipa named-pkcs11[26870]: available at https://www.isc.org/
support
Jun 23 15:13:33 ipa named-pkcs11[26870]:
----------------------------------------------------
Jun 23 15:13:33 ipa named-pkcs11[26870]: adjusted limit on open files from 4096
to 1048576
Jun 23 15:13:33 ipa named-pkcs11[26870]: found 2 CPUs, using 2 worker threads
Jun 23 15:13:33 ipa named-pkcs11[26870]: using 2 UDP listeners per interface
Jun 23 15:13:33 ipa named-pkcs11[26870]: using up to 4096 sockets
Jun 23 15:13:33 ipa named-pkcs11[26870]: loading configuration from '/etc/
named.conf'
Jun 23 15:13:33 ipa named-pkcs11[26870]: reading built-in trusted keys from
file '/etc/named.iscdlv.key'
Jun 23 15:13:33 ipa named-pkcs11[26870]: using default UDP/IPv4 port range:
[1024, 65535]
Jun 23 15:13:33 ipa named-pkcs11[26870]: using default UDP/IPv6 port range:
[1024, 65535]
Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv6 interfaces, port 53
Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv4 interface lo,
127.0.0.1#53
Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv4 interface ens10,
89.26.108.6#53
Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv4 interface eth0,
192.168.55.204#53
Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv4 interface eth1,
192.168.100.204#53
Jun 23 15:13:33 ipa named-pkcs11[26870]: generating session key for dynamic
DNS
Jun 23 15:13:33 ipa named-pkcs11[26870]: sizing zone task pool based on 6
zones
Jun 23 15:13:33 ipa named-pkcs11[26870]: /etc/named.conf:16: no forwarders
seen; disabling forwarding
Jun 23 15:13:33 ipa named-pkcs11[26870]: set up managed keys zone for view
_default, file '/var/named/dynamic/managed-keys.bind'
Jun 23 15:13:33 ipa named-pkcs11[26870]: bind-dyndb-ldap version 8.0 compiled
at 15:16:02 Nov 20 2015, compiler 4.8.5 20150623 (Red Hat 4.8.5-4)
Jun 23 15:13:33 ipa named-pkcs11[26870]: option 'serial_autoincrement' is not
supported, ignoring
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 10.IN-ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 16.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 17.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 18.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 19.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 20.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 21.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 22.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 23.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 24.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 25.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 26.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 27.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 28.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 29.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 30.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 31.172.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 168.192.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 64.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 65.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 66.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 67.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 68.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 69.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 70.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 71.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 72.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 73.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 74.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 75.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 76.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 77.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 78.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 79.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 80.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 81.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 82.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 83.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 84.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 85.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 86.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 87.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 88.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 89.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 90.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 91.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 92.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 93.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 94.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 95.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 96.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 97.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 98.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 99.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 100.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 101.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 102.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 103.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 104.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 105.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 106.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 107.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 108.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 109.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 110.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 111.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 112.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 113.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 114.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 115.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 116.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 117.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 118.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 119.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 120.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 121.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 122.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 123.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 124.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 125.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 126.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 127.100.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 127.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 254.169.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 2.0.192.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 100.51.198.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 113.0.203.IN-
ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone:
255.255.255.255.IN-ADDR.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone:
0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: D.F.IP6.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 8.E.F.IP6.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 9.E.F.IP6.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: A.E.F.IP6.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: B.E.F.IP6.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 8.B.D.
0.1.0.0.2.IP6.ARPA
Jun 23 15:13:33 ipa named-pkcs11[26870]: /etc/named.conf:16: no forwarders
seen; disabling forwarding
Jun 23 15:13:33 ipa named-pkcs11[26870]: command channel listening on
127.0.0.1#953
Jun 23 15:13:33 ipa named-pkcs11[26870]: command channel listening on ::1#953
Jun 23 15:13:33 ipa named-pkcs11[26870]: managed-keys-zone: journal file is out
of date: removing journal file
Jun 23 15:13:33 ipa named-pkcs11[26870]: managed-keys-zone: loaded serial 97
Jun 23 15:13:33 ipa named-pkcs11[26870]: zone 0.in-addr.arpa/IN: loaded serial
0
Jun 23 15:13:33 ipa named-pkcs11[26870]: zone localhost/IN: loaded serial 0
Jun 23 15:13:33 ipa named-pkcs11[26870]: zone localhost.localdomain/IN: loaded
serial 0
Jun 23 15:13:33 ipa named-pkcs11[26870]: zone 1.0.0.127.in-addr.arpa/IN:
loaded serial 0
Jun 23 15:13:33 ipa named-pkcs11[26870]: zone
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN:
loaded serial 0
Jun 23 15:13:33 ipa named-pkcs11[26870]: all zones loaded
Jun 23 15:13:33 ipa named-pkcs11[26870]: running
Jun 23 15:13:33 ipa named-pkcs11[26870]: LDAP instance 'ipa' is being
synchronized, please ignore message 'all zones loaded'
Jun 23 15:13:33 ipa systemd: Started Berkeley Internet Name Domain (DNS) with
native PKCS#11.
Jun 23 15:13:33 ipa systemd: Starting IPA memcached daemon, increases IPA
server performance...
Jun 23 15:13:33 ipa systemd: PID file /var/run/ipa_memcached/ipa_memcached.pid
not readable (yet?) after start.
Jun 23 15:13:33 ipa systemd: Started IPA memcached daemon, increases IPA
server performance.
Jun 23 15:13:33 ipa systemd: Starting The Apache HTTP Server...
Jun 23 15:13:33 ipa ipa-httpd-kdcproxy: ipa : INFO KDC proxy
enabled
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN: reconfiguring
NSEC3PARAM to '1 0 10 65ba2cbb5f87cba8'
Jun 23 15:13:34 ipa systemd: Started The Apache HTTP Server.
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 1.f.8.0.f.
6.0.0.0.7.4.0.1.0.0.2.ip6.arpa/IN: loaded serial 1466687614
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (unsigned): loaded
serial 1466687614
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): signing in
progress
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed):
reconfiguring NSEC3PARAM to '1 0 10 65ba2cbb5f87cba8'
Jun 23 15:13:34 ipa named-pkcs11[26870]: 2 master zones from LDAP instance
'ipa' loaded (2 zones defined, 0 inactive, 0 failed to load)
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): loaded
serial 1466687614
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): could not
get zone keys for secure dynamic update
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed):
receive_secure_serial: unchanged
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 1.f.8.0.f.
6.0.0.0.7.4.0.1.0.0.2.ip6.arpa/IN: sending notifies (serial 1466687614)
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): sending
notifies (serial 1466687615)
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed):
reconfiguring zone keys
Jun 23 15:13:34 ipa systemd: Started IPA Custodia Service.
Jun 23 15:13:34 ipa systemd: Starting IPA Custodia Service...
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed):
zone_addnsec3chain(1,INITIAL|CREATE,10,65BA2CBB5F87CBA8)
Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): next key
event: 23-Jun-2016 16:13:34.510
Jun 23 15:13:34 ipa named-pkcs11[26870]: checkhints: unable to get root NS
rrset from cache: not found
Jun 23 15:13:34 ipa systemd: Configuration file /usr/lib/systemd/system/pki-
tomcatd.target is marked executable. Please remove executable permission bits.
Proceeding anyway.
Jun 23 15:13:34 ipa systemd: Configuration file /lib/systemd/system/pki-
tomcatd at .service is marked executable. Please remove executable permission
bits. Proceeding anyway.
Jun 23 15:13:34 ipa systemd: Starting PKI Tomcat Server pki-tomcat...
Jun 23 15:13:35 ipa ns-slapd: GSSAPI Error: Unspecified GSS failure. Minor
code may provide more information (No Kerberos credentials available)
Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: new replica keys in
LDAP: set([])
Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: obsolete replica keys
in local HSM: set([])
Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0xc223e02cb4ec2fb2abcb829a0548119e'])
Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79',
'0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1'])
Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79',
'0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1'])
Jun 23 15:13:35 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:13:35 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 694, in <module>
Jun 23 15:13:35 ipa ipa-ods-exporter: send_systemd_reply(conn, msg)
Jun 23 15:13:35 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 520, in send_systemd_reply
Jun 23 15:13:35 ipa ipa-ods-exporter: conn.send(reply + '\n')
Jun 23 15:13:35 ipa ipa-ods-exporter: socket.error: [Errno 32] Broken pipe
Jun 23 15:13:35 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:13:35 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:13:35 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:13:36 ipa systemd: Started PKI Tomcat Server pki-tomcat.
Jun 23 15:13:36 ipa systemd: Reached target PKI Tomcat Server.
Jun 23 15:13:36 ipa systemd: Starting PKI Tomcat Server.
Jun 23 15:13:36 ipa server: Java virtual machine used: /usr/lib/jvm/jre/bin/
java
Jun 23 15:13:36 ipa server: classpath used: /usr/share/tomcat/bin/
bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/commons-
daemon.jar
Jun 23 15:13:36 ipa server: main class used:
org.apache.catalina.startup.Bootstrap
Jun 23 15:13:36 ipa server: flags used: -DRESTEASY_LIB=/usr/share/java/
resteasy-base -Djava.library.path=/usr/lib64/nuxwdog-jni
Jun 23 15:13:36 ipa server: options used: -Dcatalina.base=/var/lib/pki/pki-
tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -
Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/
var/lib/pki/pki-tomcat/conf/logging.properties -
Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -
Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/
conf/catalina.policy
Jun 23 15:13:36 ipa server: arguments used: start
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'enableOCSP' to 'false' did not find a matching
property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'ocspResponderURL' to 'http://ipa.4gjn.com:9080/
ca/ocsp' did not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'ocspResponderCertNickname' to 'ocspSigningCert
cert-pki-ca' did not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'ocspCacheSize' to '1000' did not find a matching
property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'ocspMinCacheEntryDuration' to '60' did not find a
matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'ocspMaxCacheEntryDuration' to '120' did not find a
matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'ocspTimeout' to '10' did not find a matching
property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'strictCiphers' to 'true' did not find a matching
property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'sslOptions' to 'ssl2=false,ssl3=false,tls=true'
did not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'ssl2Ciphers' to '-SSL2_RC4_128_WITH_MD5,-
SSL2_RC4_128_EXPORT40_WITH_MD5,-SSL2_RC2_128_CBC_WITH_MD5,-
SSL2_RC2_128_CBC_EXPORT40_WITH_MD5,-SSL2_DES_64_CBC_WITH_MD5,-
SSL2_DES_192_EDE3_CBC_WITH_MD5' did not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'ssl3Ciphers' to '-
SSL3_FORTEZZA_DMS_WITH_NULL_SHA,-SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA,
+SSL3_RSA_WITH_RC4_128_SHA,-SSL3_RSA_EXPORT_WITH_RC4_40_MD5,
+SSL3_RSA_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_DES_CBC_SHA,-
SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5,-SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA,-
SSL_RSA_FIPS_WITH_DES_CBC_SHA,+SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA,-
SSL3_RSA_WITH_NULL_MD5,-TLS_RSA_EXPORT1024_WITH_RC4_56_SHA,-
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA' did
not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'tlsCiphers' to '-
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,
+TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,
+TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,
+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA,
+TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
+TLS_DHE_DSS_WITH_AES_128_CBC_SHA,+TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
+TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
+TLS_DHE_RSA_WITH_AES_256_CBC_SHA' did not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'sslVersionRangeStream' to 'tls1_0:tls1_2' did not
find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'sslVersionRangeDatagram' to 'tls1_1:tls1_2' did
not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'sslRangeCiphers' to '-
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,-
TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,-
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,-
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,
+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA,-
TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,-
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
+TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
+TLS_DHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,
+TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,+TLS_RSA_WITH_AES_128_CBC_SHA256,
+TLS_RSA_WITH_AES_256_CBC_SHA256,+TLS_RSA_WITH_AES_128_GCM_SHA256,
+TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,-
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,-
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,-
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,-
TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,-
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256'
did not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'serverCertNickFile' to '/var/lib/pki/pki-tomcat/
conf/serverCertNick.conf' did not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'passwordFile' to '/var/lib/pki/pki-tomcat/conf/
password.conf' did not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'passwordClass' to
'org.apache.tomcat.util.net.jss.PlainPasswordFile' did not find a matching
property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.SetAllPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/
Connector} Setting property 'certdbDir' to '/var/lib/pki/pki-tomcat/alias' did
not find a matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.tomcat.util.digester.SetPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetPropertiesRule]{Server/Service/
Engine/Host} Setting property 'xmlValidation' to 'false' did not find a
matching property.
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.tomcat.util.digester.SetPropertiesRule begin
Jun 23 15:13:37 ipa server: WARNING: [SetPropertiesRule]{Server/Service/
Engine/Host} Setting property 'xmlNamespaceAware' to 'false' did not find a
matching property.
Jun 23 15:13:37 ipa server: PKIListener:
org.apache.catalina.core.StandardServer[before_init]
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.coyote.AbstractProtocol init
Jun 23 15:13:37 ipa server: INFO: Initializing ProtocolHandler ["http-
bio-8080"]
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.coyote.AbstractProtocol init
Jun 23 15:13:37 ipa server: INFO: Initializing ProtocolHandler ["http-
bio-8443"]
Jun 23 15:13:37 ipa server: Error: SSL cipher
"TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA" not recognized by tomcatjss
Jun 23 15:13:37 ipa server: Error: SSL cipher
"TLS_ECDH_RSA_WITH_AES_128_CBC_SHA" not recognized by tomcatjss
Jun 23 15:13:37 ipa server: Error: SSL cipher
"TLS_ECDH_RSA_WITH_AES_256_CBC_SHA" not recognized by tomcatjss
Jun 23 15:13:37 ipa server: Error: SSL cipher "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
not recognized by tomcatjss
Jun 23 15:13:37 ipa server: Error: SSL cipher
"TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA" not recognized by tomcatjss
Jun 23 15:13:37 ipa server: Error: SSL cipher
"TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" not recognized by tomcatjss
Jun 23 15:13:37 ipa server: Error: SSL cipher
"TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256" unsupported by NSS
Jun 23 15:13:37 ipa server: Error: SSL cipher
"TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256" unsupported by NSS
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.coyote.AbstractProtocol init
Jun 23 15:13:37 ipa server: INFO: Initializing ProtocolHandler ["ajp-
bio-127.0.0.1-8009"]
Jun 23 15:13:37 ipa server: PKIListener:
org.apache.catalina.core.StandardServer[after_init]
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.Catalina load
Jun 23 15:13:37 ipa server: INFO: Initialization processed in 613 ms
Jun 23 15:13:37 ipa server: PKIListener:
org.apache.catalina.core.StandardServer[before_start]
Jun 23 15:13:37 ipa server: PKIListener:
org.apache.catalina.core.StandardServer[configure_start]
Jun 23 15:13:37 ipa server: PKIListener:
org.apache.catalina.core.StandardServer[start]
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.core.StandardService startInternal
Jun 23 15:13:37 ipa server: INFO: Starting service Catalina
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.core.StandardEngine startInternal
Jun 23 15:13:37 ipa server: INFO: Starting Servlet Engine: Apache Tomcat/
7.0.54
Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM
org.apache.catalina.startup.HostConfig deployDescriptor
Jun 23 15:13:37 ipa server: INFO: Deploying configuration descriptor /etc/pki/
pki-tomcat/Catalina/localhost/ROOT.xml
Jun 23 15:13:38 ipa server: Jun 23, 2016 3:13:38 PM
org.apache.catalina.startup.HostConfig deployDescriptor
Jun 23 15:13:38 ipa server: INFO: Deployment of configuration descriptor /etc/
pki/pki-tomcat/Catalina/localhost/ROOT.xml has finished in 1,135 ms
Jun 23 15:13:38 ipa server: Jun 23, 2016 3:13:38 PM
org.apache.catalina.startup.HostConfig deployDescriptor
Jun 23 15:13:38 ipa server: INFO: Deploying configuration descriptor /etc/pki/
pki-tomcat/Catalina/localhost/pki#admin.xml
Jun 23 15:13:39 ipa server: Jun 23, 2016 3:13:39 PM
org.apache.catalina.startup.HostConfig deployDescriptor
Jun 23 15:13:39 ipa server: INFO: Deployment of configuration descriptor /etc/
pki/pki-tomcat/Catalina/localhost/pki#admin.xml has finished in 734 ms
Jun 23 15:13:39 ipa server: Jun 23, 2016 3:13:39 PM
org.apache.catalina.startup.HostConfig deployDescriptor
Jun 23 15:13:39 ipa server: INFO: Deploying configuration descriptor /etc/pki/
pki-tomcat/Catalina/localhost/pki#js.xml
Jun 23 15:13:39 ipa named-pkcs11[26870]: zone 1.f.8.0.f.
6.0.0.0.7.4.0.1.0.0.2.ip6.arpa/IN: sending notifies (serial 1466687614)
Jun 23 15:13:39 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): sending
notifies (serial 1466687634)
Jun 23 15:13:40 ipa server: Jun 23, 2016 3:13:40 PM
org.apache.catalina.startup.HostConfig deployDescriptor
Jun 23 15:13:40 ipa server: INFO: Deployment of configuration descriptor /etc/
pki/pki-tomcat/Catalina/localhost/pki#js.xml has finished in 815 ms
Jun 23 15:13:40 ipa server: Jun 23, 2016 3:13:40 PM
org.apache.catalina.startup.HostConfig deployDescriptor
Jun 23 15:13:40 ipa server: INFO: Deploying configuration descriptor /etc/pki/
pki-tomcat/Catalina/localhost/ca.xml
Jun 23 15:13:40 ipa server: SSLAuthenticatorWithFallback: Creating SSL
authenticator with fallback
Jun 23 15:13:40 ipa server: SSLAuthenticatorWithFallback: Setting container
Jun 23 15:13:41 ipa server: SSLAuthenticatorWithFallback: Initializing
authenticators
Jun 23 15:13:41 ipa server: SSLAuthenticatorWithFallback: Starting
authenticators
Jun 23 15:13:41 ipa server: CMSEngine.initializePasswordStore() begins
Jun 23 15:13:41 ipa server: CMSEngine.initializePasswordStore():
tag=internaldb
Jun 23 15:13:41 ipa server: CMSEngine.initializePasswordStore():
tag=replicationdb
Jun 23 15:13:42 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da:
52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214
DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=59331 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0
Jun 23 15:13:45 ipa server: CA is started.
Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM
org.apache.catalina.startup.HostConfig deployDescriptor
Jun 23 15:13:45 ipa server: INFO: Deployment of configuration descriptor /etc/
pki/pki-tomcat/Catalina/localhost/ca.xml has finished in 5,160 ms
Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM
org.apache.coyote.AbstractProtocol start
Jun 23 15:13:45 ipa server: INFO: Starting ProtocolHandler ["http-bio-8080"]
Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM
org.apache.coyote.AbstractProtocol start
Jun 23 15:13:45 ipa server: INFO: Starting ProtocolHandler ["http-bio-8443"]
Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM
org.apache.coyote.AbstractProtocol start
Jun 23 15:13:45 ipa server: INFO: Starting ProtocolHandler ["ajp-
bio-127.0.0.1-8009"]
Jun 23 15:13:45 ipa server: PKIListener:
org.apache.catalina.core.StandardServer[after_start]
Jun 23 15:13:45 ipa server: PKIListener: Subsystem CA is running.
Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM
org.apache.catalina.startup.Catalina start
Jun 23 15:13:45 ipa server: INFO: Server startup in 7934 ms
Jun 23 15:13:45 ipa systemd: Listening on ipa-otpd socket.
Jun 23 15:13:45 ipa systemd: Starting ipa-otpd socket.
Jun 23 15:13:47 ipa named-pkcs11[26870]: client 217.196.154.211#36560
(4gjn.com): transfer of '4gjn.com/IN': AXFR-style IXFR started
Jun 23 15:13:47 ipa named-pkcs11[26870]: client 217.196.154.211#36560
(4gjn.com): transfer of '4gjn.com/IN': AXFR-style IXFR ended
Jun 23 15:14:35 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:14:35 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:14:35 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:14:35 ipa systemd: Starting OpenDNSSEC Enforcer daemon...
Jun 23 15:14:35 ipa ods-enforcerd: opendnssec starting...
Jun 23 15:14:35 ipa ods-enforcerd: opendnssec Parent exiting...
Jun 23 15:14:35 ipa ods-enforcerd: OpenDNSSEC ods-enforcerd started (version
1.4.7), pid 27232
Jun 23 15:14:35 ipa systemd: PID file /var/run/opendnssec/enforcerd.pid not
readable (yet?) after start.
Jun 23 15:14:35 ipa ods-enforcerd: opendnssec forked OK...
Jun 23 15:14:35 ipa ods-enforcerd: group set to: ods (998)
Jun 23 15:14:35 ipa ods-enforcerd: user set to: ods (999)
Jun 23 15:14:35 ipa ods-enforcerd: opendnssec started (version 1.4.7), pid
27232
Jun 23 15:14:35 ipa ods-enforcerd: HSM opened successfully.
Jun 23 15:14:35 ipa ods-enforcerd: Checking database connection...
Jun 23 15:14:35 ipa ods-enforcerd: Database connection ok.
Jun 23 15:14:35 ipa ods-enforcerd: Reading config "/etc/opendnssec/conf.xml"
Jun 23 15:14:35 ipa ods-enforcerd: Reading config schema "/usr/share/
opendnssec/conf.rng"
Jun 23 15:14:35 ipa ods-enforcerd: Communication Interval: 3600
Jun 23 15:14:35 ipa ods-enforcerd: No DS Submit command supplied
Jun 23 15:14:35 ipa ods-enforcerd: SQLite database set to: /var/opendnssec/
kasp.db
Jun 23 15:14:35 ipa systemd: Started OpenDNSSEC Enforcer daemon.
Jun 23 15:14:35 ipa ods-enforcerd: Log User set to: local0
Jun 23 15:14:35 ipa ods-enforcerd: Switched log facility to: local0
Jun 23 15:14:35 ipa ods-enforcerd: Connecting to Database...
Jun 23 15:14:35 ipa ods-enforcerd: Policy default found.
Jun 23 15:14:35 ipa ods-enforcerd: Key sharing is Off.
Jun 23 15:14:35 ipa ods-enforcerd: 1 zone(s) found on policy "default"
Jun 23 15:14:35 ipa ods-enforcerd: No new KSKs need to be created.
Jun 23 15:14:35 ipa ods-enforcerd: No new ZSKs need to be created.
Jun 23 15:14:35 ipa ods-enforcerd: zonelist filename set to /etc/opendnssec/
zonelist.xml.
Jun 23 15:14:35 ipa ods-enforcerd: Zone 4gjn.com found.
Jun 23 15:14:35 ipa ods-enforcerd: Policy for 4gjn.com set to default.
Jun 23 15:14:35 ipa ods-enforcerd: Config will be output to /var/opendnssec/
signconf/4gjn.com.xml.
Jun 23 15:14:35 ipa systemd: Started IPA key daemon.
Jun 23 15:14:35 ipa systemd: Starting IPA key daemon...
Jun 23 15:14:36 ipa ods-enforcerd: No change to: /var/opendnssec/signconf/
4gjn.com.xml
Jun 23 15:14:36 ipa ods-enforcerd: Disconnecting from Database...
Jun 23 15:14:36 ipa ods-enforcerd: Sleeping for 3600 seconds.
Jun 23 15:14:36 ipa ipa-dnskeysyncd: ipa: WARNING: session memcached servers
not running
Jun 23 15:14:36 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:14:37 ipa ipa-dnskeysyncd: ipa : INFO LDAP bind...
Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa : INFO Commencing sync
process
Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr:
INFO Key metadata cn=ZSK-20160513081559Z-
d7fe5c98d5f3f89aefb9e8dfb92ebcb1,cn=keys,idnsname=4gjn.com.,cn=dns,dc=4gjn,dc=com
added to zone 4gjn.com.
Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr:
INFO Key metadata
cn=KSK-20160513081559Z-6145b3b71c448dfc1130d0f9d2caac79,cn=keys,idnsname=4gjn.com.,cn=dns,dc=4gjn,dc=com
added to zone 4gjn.com.
Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.keysyncer.KeySyncer:
INFO Initial LDAP dump is done, sychronizing with ODS and BIND
Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.odsmgr.ODSMgr: INFO
Zones removed from LDAP: []
Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.odsmgr.ODSMgr: INFO
Zones added to LDAP: []
Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: new replica keys in
LDAP: set([])
Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: obsolete replica keys
in local HSM: set([])
Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0xc223e02cb4ec2fb2abcb829a0548119e'])
Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79',
'0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1'])
Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79',
'0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1'])
Jun 23 15:14:38 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:14:38 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 694, in <module>
Jun 23 15:14:38 ipa ipa-ods-exporter: send_systemd_reply(conn, msg)
Jun 23 15:14:38 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 520, in send_systemd_reply
Jun 23 15:14:38 ipa ipa-ods-exporter: conn.send(reply + '\n')
Jun 23 15:14:38 ipa ipa-ods-exporter: socket.error: [Errno 32] Broken pipe
Jun 23 15:14:38 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:14:38 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:14:38 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:15:18 ipa dbus-daemon: dbus[534]: [system] Activating service
name='org.freedesktop.problems' (using servicehelper)
Jun 23 15:15:18 ipa dbus[534]: [system] Activating service
name='org.freedesktop.problems' (using servicehelper)
Jun 23 15:15:18 ipa dbus[534]: [system] Successfully activated service
'org.freedesktop.problems'
Jun 23 15:15:18 ipa dbus-daemon: dbus[534]: [system] Successfully activated
service 'org.freedesktop.problems'
Jun 23 15:15:39 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:15:39 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:15:39 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:15:39 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: new replica keys in
LDAP: set([])
Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: obsolete replica keys
in local HSM: set([])
Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0xc223e02cb4ec2fb2abcb829a0548119e'])
Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79',
'0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1'])
Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79',
'0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1'])
Jun 23 15:15:40 ipa ipa-ods-exporter: Traceback (most recent call last):
Jun 23 15:15:40 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 694, in <module>
Jun 23 15:15:40 ipa ipa-ods-exporter: send_systemd_reply(conn, msg)
Jun 23 15:15:40 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods-
exporter", line 520, in send_systemd_reply
Jun 23 15:15:40 ipa ipa-ods-exporter: conn.send(reply + '\n')
Jun 23 15:15:40 ipa ipa-ods-exporter: socket.error: [Errno 32] Broken pipe
Jun 23 15:15:40 ipa systemd: ipa-ods-exporter.service: main process exited,
code=exited, status=1/FAILURE
Jun 23 15:15:40 ipa systemd: Unit ipa-ods-exporter.service entered failed
state.
Jun 23 15:15:40 ipa systemd: ipa-ods-exporter.service failed.
Jun 23 15:15:43 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da:
52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214
DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=59332 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0
Jun 23 15:16:41 ipa systemd: ipa-ods-exporter.service holdoff time over,
scheduling restart.
Jun 23 15:16:41 ipa systemd: Started IPA OpenDNSSEC Signer replacement.
Jun 23 15:16:41 ipa systemd: Starting IPA OpenDNSSEC Signer replacement...
Jun 23 15:16:41 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers
not running
Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: new replica keys in
LDAP: set([])
Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: obsolete replica keys
in local HSM: set([])
Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0xc223e02cb4ec2fb2abcb829a0548119e'])
Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79',
'0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1'])
Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM &
LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79',
'0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1'])
Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: HSM synchronization
finished, skipping zone synchronization.
Jun 23 15:16:42 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr:
INFO Synchronizing zone 4gjn.com.
Jun 23 15:16:42 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr:
INFO attrs: {'idnsseckeyref':
['pkcs11:object=d7fe5c98d5f3f89aefb9e8dfb92ebcb1'], 'dn':
'cn=ZSK-20160513081559Z-
d7fe5c98d5f3f89aefb9e8dfb92ebcb1,cn=keys,idnsname=4gjn.com.,cn=dns,dc=4gjn,dc=com',
'cn': ['ZSK-20160513081559Z-d7fe5c98d5f3f89aefb9e8dfb92ebcb1'],
'idnsseckeypublish': ['20160513081600Z'], 'objectclass': ['idnsSecKey'],
'idnssecalgorithm': ['RSASHA256'], 'idnsseckeyzone': ['TRUE'],
'idnsseckeycreated': ['20160513081559Z'], 'idnsseckeyactivate':
['20160513081600Z']}
Jun 23 15:16:42 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr:
INFO attrs: {'idnsseckeyref':
['pkcs11:object=6145b3b71c448dfc1130d0f9d2caac79'], 'dn':
'cn=KSK-20160513081559Z-6145b3b71c448dfc1130d0f9d2caac79,cn=keys,idnsname=4gjn.com.,cn=dns,dc=4gjn,dc=com',
'cn': ['KSK-20160513081559Z-6145b3b71c448dfc1130d0f9d2caac79'],
'idnsseckeypublish': ['20160513081600Z'], 'objectclass': ['idnsSecKey'],
'idnsseckeysep': ['TRUE'], 'idnssecalgorithm': ['RSASHA256'],
'idnsseckeyzone': ['TRUE'], 'idnsseckeycreated': ['20160513081559Z'],
'idnsseckeyactivate': ['20160513081600Z']}
Jun 23 15:16:42 ipa named-pkcs11[26870]: received control channel command
'sign 4gjn.com.'
Jun 23 15:16:42 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed):
reconfiguring zone keys
Jun 23 15:16:42 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr:
INFO
Jun 23 15:16:43 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): next key
event: 23-Jun-2016 16:16:42.953
Jun 23 15:16:43 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): sending
notifies (serial 1466687635)
[root at ipa log]#
> Martin
--
mit freundlichen Grüßen / best regards,
Günther J. Niederwimmer
More information about the Freeipa-users
mailing list