[Freeipa-users] Insufficient privileges to promote the server. (ipa replica 4.4.0 / centos7.3)

[Jake]

dropped the '-p admin' and not it works, first time I've had that happen. 

Thanks 


From: "Martin Basti" <mbasti at redhat.com> 
To: "Jake" <freeipa at jacobdevans.com>, "freeipa-users" <freeipa-users at redhat.com> 
Sent: Tuesday, March 7, 2017 12:57:13 PM 
Subject: Re: [Freeipa-users] Insufficient privileges to promote the server. (ipa replica 4.4.0 / centos7.3) 





On 07.03.2017 18:36, Jake wrote: 



dirserv wasn't running and couldn't get running so I went to rebuild the replica and now I get this? 

replica is a fresh install, I removed the replica from ipa with 

$ ipa-replica-manage del dc1-rd-ipa02.ipa.example.com --force --cleanup 
on the master c05-rd-ipa01.ipa.example.com 

2017-03-07T17:32:18Z DEBUG Created connection context.ldap2_85375504 
2017-03-07T17:32:18Z DEBUG raw: domainlevel_get(version=u'2.213') 
2017-03-07T17:32:18Z DEBUG domainlevel_get(version=u'2.213') 
2017-03-07T17:32:18Z DEBUG flushing [ ldaps://c05-rd-ipa02.ipa.example.com | ldaps://c05-rd-ipa02.ipa.example.com ] from SchemaCache 
2017-03-07T17:32:18Z DEBUG retrieving schema for SchemaCache url= [ ldaps://c05-rd-ipa02.ipa.example.com | ldaps://c05-rd-ipa02.ipa.example.com ] conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x6eca488> 
2017-03-07T17:32:18Z DEBUG raw: hostgroup_find(None, cn=u'ipaservers', version=u'2.213', host=[u'dc1-rd-ipa02.ipa.example.com']) 
2017-03-07T17:32:18Z DEBUG hostgroup_find(None, cn=u'ipaservers', all=False, raw=False, version=u'2.213', no_members=True, pkey_only=False, host=(u'dc1-rd-ipa02.ipa.example.com',)) 
2017-03-07T17:32:18Z DEBUG Destroyed connection context.ldap2_85375504 
2017-03-07T17:32:18Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171, in execute 
return_value = self.run() 
File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 318, in run 
cfgr.run() 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 308, in run 
self.validate() 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 317, in validate 
for nothing in self._validator(): 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 372, in __runner 
self._handle_exception(exc_info) 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 394, in _handle_exception 
six.reraise(*exc_info) 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 362, in __runner 
step() 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 359, in <lambda> 
step = lambda: next(self.__gen) 
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from 
six.reraise(*exc_info) 
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from 
value = gen.send(prev_value) 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 564, in _configure 
next(validator) 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 372, in __runner 
self._handle_exception(exc_info) 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 449, in _handle_exception 
self.__parent._handle_exception(exc_info) 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 394, in _handle_exception 
six.reraise(*exc_info) 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 446, in _handle_exception 
super(ComponentBase, self)._handle_exception(exc_info) 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 394, in _handle_exception 
six.reraise(*exc_info) 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 362, in __runner 
step() 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 359, in <lambda> 
step = lambda: next(self.__gen) 
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from 
six.reraise(*exc_info) 
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from 
value = gen.send(prev_value) 
File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install 
for nothing in self._installer(self.parent): 
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 1712, in main 
promote_check(self) 
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 364, in decorated 
func(installer) 
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 386, in decorated 
func(installer) 
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 1311, in promote_check 
sys.exit("\nInsufficient privileges to promote the server.") 

2017-03-07T17:32:18Z DEBUG The ipa-replica-install command failed, exception: SystemExit: 
Insufficient privileges to promote the server. 
2017-03-07T17:32:18Z ERROR 
Insufficient privileges to promote the server. 
2017-03-07T17:32:18Z ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information 






Hello, 

are you kinited as admin? 

Martin 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170307/ef15cd8d/attachment.htm>