[Freeipa-users] ipa trust-fetch-domains failing.

[Martin Kosek]

Thanks for confirmation. Can you share with the list what was the root cause of
your problem? Maybe it helps someone else.

Thanks,
Martin

On 04/30/2016 08:23 AM, Ben .T.George wrote:
> HI All
> 
> this issue has solved
> 
> On Sat, Apr 30, 2016 at 9:16 AM, Ben .T.George <bentech4you at gmail.com 
> <mailto:bentech4you at gmail.com>> wrote:
> 
>     when i am running ipa trust-fetch-domains "kwttestdc.com.kw
>     <http://kwttestdc.com.kw/>" , i am getting below error in error_log
> 
>     [Sat Apr 30 09:14:25.107449 2016] [:error] [pid 2666] ipa: ERROR: Failed to
>     call com.redhat.idm.trust.fetch_domains helper.DBus exception is
>     org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes
>     include: the remote application did not send a reply, the message bus
>     security policy blocked the reply, the reply timeout expired, or the network
>     connection was broken..
>     [Sat Apr 30 09:14:25.108353 2016] [:error] [pid 2666] ipa: INFO:
>     [jsonserver_session] admin at IDM.LOCAL: trust_fetch_domains(u'kwttestdc.com.kw
>     <http://kwttestdc.com.kw>', rights=False, all=False, raw=False,
>     version=u'2.156'): ServerCommandError
> 
>     On Sat, Apr 30, 2016 at 12:00 AM, Ben .T.George <bentech4you at gmail.com
>     <mailto:bentech4you at gmail.com>> wrote:
> 
>         Hi
> 
>         Anyone please help me to fix this issue.
> 
>         i have created new group in AD( 4 hours back) and while i was mapping
>         this group as --external, i am getting below error.
> 
> 
>         /[root at freeipa sysctl.d]# ipa group-add --external ad_admins_external
>         --desc "KWTTESTDC.com.KW <http://KWTTESTDC.com.KW> AD
>         Administrators-External"/
>         /----------------------------------/
>         /Added group "ad_admins_external"/
>         /----------------------------------/
>         /  Group name: ad_admins_external/
>         /  Description: KWTTESTDC.com.KW <http://KWTTESTDC.com.KW> AD
>         Administrators-External/
>         /[root at freeipa sysctl.d]# ipa group-add-member ad_admins_external
>         --external "KWTTESTDC\test admins"/
>         /[member user]:/
>         /[member group]:/
>         /  Group name: ad_admins_external/
>         /  Description: KWTTESTDC.com.KW <http://KWTTESTDC.com.KW> AD
>         Administrators-External/
>         /  Failed members:/
>         /    member user:/
>         /    member group: KWTTESTDC\test admins: Cannot find specified domain
>         or server name/
>         /-------------------------/
>         /Number of members added 0/
>         -------------------------
> 
> 
> 
>         On Fri, Apr 29, 2016 at 4:41 PM, Ben .T.George <bentech4you at gmail.com
>         <mailto:bentech4you at gmail.com>> wrote:
> 
>             Hi
> 
>             while issuing ipa trust-fetch-domains, i am getting below error.
> 
>             i have created new security group in AD and i want to add this to
>             external group.
> 
>             [root at freeipa ~]# ipa trust-fetch-domains "kwttestdc.com.kw
>             <http://kwttestdc.com.kw>"
>             ipa: ERROR: error on server 'freeipa.idm.local': Fetching domains
>             from trusted fo                                                    
>               rest failed. See details in the error_log
> 
>             help me to fi/expalin more about this error
> 
>             Regards
> 
> 
> 
> 
> 
>