[Freeipa-users] New install, unsupported format?

Standa Laznicka slaznick at redhat.com
Mon Feb 27 10:56:15 UTC 2017


On 02/24/2017 08:38 PM, Steve Huston wrote:
> So, I tried a different tack.  Took my bare VM configured as an IPA
> client, did a 'yum install ipa-server' and edited the cainstance.py
> file to fix the IPv6 issue.  Then, without adding the host to
> ipaservers in the webui, I simply tried to promote it:
>
> # kinit admin
> Password for admin at ASTRO.PRINCETON.EDU:
> # ipa-replica-install --verbose
> ipa.ipapython.install.cli.install_tool(Replica): DEBUG    Logging to
> /var/log/ipareplica-install.log
> ipa.ipapython.install.cli.install_tool(Replica): DEBUG
> ipa-replica-install was invoked with arguments [] and options:
> {'no_dns_sshfp': None, 'skip_schema_check': None, 'setup_kra': None,
> 'ip_addresses': None
> , 'mkhomedir': None, 'http_cert_files': None, 'ssh_trust_dns': None,
> 'reverse_zones': None, 'no_forwarders': None, 'keytab': None,
> 'no_ntp': None, 'domain_name': None, 'http_cert_name': None,
> 'dirsrv_cert_files
> ': None, 'no_dnssec_validation': None, 'no_reverse': None,
> 'unattended': False, 'auto_reverse': None, 'auto_forwarders': None,
> 'no_host_dns': None, 'no_sshd': None, 'no_ui_redirect': None,
> 'dirsrv_config_file':
>   None, 'forwarders': None, 'verbose': True, 'setup_ca': None,
> 'realm_name': None, 'skip_conncheck': None, 'no_ssh': None,
> 'forward_policy': None, 'dirsrv_cert_name': None, 'quiet': False,
> 'server': None, 'setup_dns': None, 'host_name': None, 'log_file':
> None, 'allow_zone_overlap': None}
> ipa.ipapython.install.cli.install_tool(Replica): DEBUG    IPA version
> 4.4.0-14.el7_3.4
> ipa         : DEBUG    Starting external process
> ipa         : DEBUG    args=/usr/sbin/selinuxenabled
> ipa         : DEBUG    Process finished, return code=0
> ipa         : DEBUG    stdout=
> ipa         : DEBUG    stderr=
> ipa         : DEBUG    Loading StateFile from
> '/var/lib/ipa/sysrestore/sysrestore.state'
> ipa         : DEBUG    Loading Index file from
> '/var/lib/ipa/sysrestore/sysrestore.index'
> ipa         : DEBUG    httpd is not configured
> ipa         : DEBUG    kadmin is not configured
> ipa         : DEBUG    dirsrv is not configured
> ipa         : DEBUG    pki-tomcatd is not configured
> ipa         : DEBUG    install is not configured
> ipa         : DEBUG    krb5kdc is not configured
> ipa         : DEBUG    ntpd is not configured
> ipa         : DEBUG    named is not configured
> ipa         : DEBUG    ipa_memcached is not configured
> ipa         : DEBUG    filestore is tracking no files
> ipa         : DEBUG    Loading Index file from
> '/var/lib/ipa-client/sysrestore/sysrestore.index'
> ipa         : DEBUG    Configuring client side components
> Configuring client side components
> ipa         : DEBUG    Starting external process
> ipa         : DEBUG    args=/usr/sbin/ipa-client-install --unattended --no-ntp
> IPA client is already configured on this system.
> If you want to reinstall the IPA client, uninstall it first using
> 'ipa-client-install --uninstall'.
> ipa         : DEBUG    Process finished, return code=3
> Removing client side components
> ipa         : DEBUG    Starting external process
> ipa         : DEBUG    args=/usr/sbin/ipa-client-install --unattended
> --uninstall
> Unenrolling client from IPA server
> Removing Kerberos service principals from /etc/krb5.keytab
> Disabling client Kerberos and LDAP configurations
> Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to
> /etc/sssd/sssd.conf.deleted
> nslcd daemon is not installed, skip configuration
> Client uninstall complete.
> ipa         : DEBUG    Process finished, return code=0
>
> ipa.ipapython.install.cli.install_tool(Replica): DEBUG      File
> "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171,
> in execute
>      return_value = self.run()
>    File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py",
> line 318, in run
>      cfgr.run()
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 308, in run
>      self.validate()
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 317, in validate
>      for nothing in self._validator():
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 372, in __runner
>      self._handle_exception(exc_info)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 394, in _handle_exception
>      six.reraise(*exc_info)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 362, in __runner
>      step()
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 359, in <lambda>
>      step = lambda: next(self.__gen)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/util.py",
> line 81, in run_generator_with_yield_from
>      six.reraise(*exc_info)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/util.py",
> line 59, in run_generator_with_yield_from
>      value = gen.send(prev_value)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 564, in _configure
>      next(validator)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 372, in __runner
>      self._handle_exception(exc_info)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 449, in _handle_exception
>      self.__parent._handle_exception(exc_info)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 394, in _handle_exception
>      six.reraise(*exc_info)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 446, in _handle_exception
>      super(ComponentBase, self)._handle_exception(exc_info)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 394, in _handle_exception
>      six.reraise(*exc_info)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 362, in __runner
>      step()
>    File "/usr/lib/python2.7/site-packages/ipapython/install/core.py",
> line 359, in <lambda>
>      step = lambda: next(self.__gen)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/util.py",
> line 81, in run_generator_with_yield_from
>      six.reraise(*exc_info)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/util.py",
> line 59, in run_generator_with_yield_from
>      value = gen.send(prev_value)
>    File "/usr/lib/python2.7/site-packages/ipapython/install/common.py",
> line 63, in _install
>      for nothing in self._installer(self.parent):
>    File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
> line 1712, in main
>      promote_check(self)
>    File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
> line 364, in decorated
>      func(installer)
>    File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
> line 386, in decorated
>      func(installer)
>    File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
> line 1004, in promote_check
>      ensure_enrolled(installer)
>    File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
> line 958, in ensure_enrolled
>      sys.exit("Configuration of client side components failed!")
>
> ipa.ipapython.install.cli.install_tool(Replica): DEBUG    The
> ipa-replica-install command failed, exception: SystemExit:
> Configuration of client side components failed!
> ipa.ipapython.install.cli.install_tool(Replica): ERROR
> Configuration of client side components failed!
> ipa.ipapython.install.cli.install_tool(Replica): ERROR    The
> ipa-replica-install command failed. See
> /var/log/ipareplica-install.log for more information
>
> Looks like it's unenrolling the machine, then trying to enroll it
> again?  I also tried again with --server, --realm, --hostname, and
> --domain options set appropriately but it made no difference.
>
Hello,

Sorry for the hold up. Two questions - is this domain level 1 or 0 (you 
can run `ipa domainlevel-get` on the master if you don't know)? Did you 
have a client installed prior to ipa-replica-install?

Cheers,
Standa




More information about the Freeipa-users mailing list