<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#ffffff" text="#000066">
Hi list,<br>
<br>
I have a problem with my IPA server:<br>
Symptoms:<br>
<br>
<tt>[root@polaris etc]# /etc/init.d/ipa start<br>
Starting Directory Service<br>
Starting dirsrv:<br>
EXAMPLE-COM... [ OK
]<br>
PKI-IPA... [ OK
]<br>
Failed to read data from Directory Service: Unknown error when
retrieving list of services from LDAP: {'matched':
'cn=masters,cn=ipa,cn=etc,dc=example,dc=com', 'desc': 'No such
object'}<br>
Shutting down<br>
Shutting down dirsrv:<br>
EXAMPLE-COM... [ OK
]<br>
PKI-IPA... [ OK
]<br>
<br>
</tt>I am able to start the services (dirsrv, named, krb5kdc)
separately though and then read the configuration fine:<br>
<br>
<tt>[root@polaris log]# kinit admin<br>
Password for <a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM:">admin@EXAMPLE.COM:</a><br>
[root@polaris etc]# ldapsearch -Y GSSAPI -h localhost -b
cn=masters,cn=ipa,cn=etc,dc=example,dc=com<br>
SASL/GSSAPI authentication started<br>
SASL username: <a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM">admin@EXAMPLE.COM</a><br>
SASL SSF: 56<br>
SASL data security layer installed.<br>
# extended LDIF<br>
#<br>
# LDAPv3<br>
# base <cn=masters,cn=ipa,cn=etc,dc=example,dc=com> with
scope subtree<br>
# filter: (objectclass=*)<br>
# requesting: ALL<br>
#<br>
<br>
# masters, ipa, etc, example.com<br>
dn: cn=masters,cn=ipa,cn=etc,dc=example,dc=com<br>
objectClass: nsContainer<br>
objectClass: top<br>
cn: masters<br>
<br>
# polaris.example.com, masters, ipa, etc, example.com<br>
dn:
cn=polaris.example.com,cn=masters,cn=ipa,cn=etc,dc=example,dc=com<br>
objectClass: top<br>
objectClass: nsContainer<br>
cn: polaris.example.com<br>
<br>
# CA, polaris.example.com, masters, ipa, etc, example.com<br>
dn:
cn=CA,cn=polaris.example.com,cn=masters,cn=ipa,cn=etc,dc=example,dc=com<br>
objectClass: nsContainer<br>
objectClass: ipaConfigObject<br>
objectClass: top<br>
ipaConfigString: enabledService<br>
ipaConfigString: startOrder 50<br>
cn: CA<br>
.....<br>
</tt><br>
Does it ring any bell to you?<br>
Note that the IPA server was running fine right after the
installation....<br>
<br>
Thanks!<br>
Ondrej<br>
<BR><HR>
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s).
Please direct any additional queries to: communications@s3group.com.
Thank You.
Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073.
Registered Office: South County Business Park, Leopardstown, Dublin 18
<BR><HR><BR></body>
</html>