<div dir="ltr">The last line in the log should be:<div><br></div><div>2014-02-06T16:27:48Z DEBUG Caught fault 1101 from server <a href="https://mgmt-001.domain/ipa/xml">https://mgmt-001.domain/ipa/xml</a>: did not receive Kerberos credentials<br>
</div><div><br></div><div>The python modules import happened after I tried to re-install again. Sorry for the confusion.</div><div><br></div><div>ipa-client-3.0.0-37.el6.x86_64<br></div></div><div class="gmail_extra"><br>
<br><div class="gmail_quote">On Tue, Feb 11, 2014 at 9:54 AM, Rob Crittenden <span dir="ltr"><<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="">Dave Jablonski wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I've attached the whole client log. Thank you.<br>
</blockquote>
<br></div>
Not sure if it is related to the failure or not but the log seems cut off at the end. Can you double-check it, it ends with a bunch of python imports.<br>
<br>
Also, what is the output of rpm -q ipa-client ?<br>
<br>
I see the fallback code in 3.0.0-37 but it doesn't seem to be executing here.<br>
<br>
rob<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">
<br>
<br>
On Sat, Feb 8, 2014 at 7:48 AM, Rob Crittenden <<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a><br></div><div class="">
<mailto:<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>>> wrote:<br>
<br>
Dave Jablonski wrote:<br>
<br>
FreeIPA Server: Fedora 16, freeipa 2.1.4<br>
Latest CentOS 6.5 client<br>
<br>
When running:<br>
<br>
ipa-client-install --mkhomedir --enable-dns-updates<br>
<br>
The install fails with:<br>
<br>
trying https://<server-name>/ipa/xml<br></div>
Forwarding 'env' to server u'https://<server-name>/ipa/__<u></u>xml'<div class=""><br>
Traceback (most recent call last):<br></div>
File "/usr/sbin/ipa-client-install"<u></u>__, line 2377, in <module><br>
sys.exit(main())<br>
File "/usr/sbin/ipa-client-install"<u></u>__, line 2363, in main<div class=""><br>
rval = install(options, env, fstore, statestore)<br></div>
File "/usr/sbin/ipa-client-install"<u></u>__, line 2167, in install<br>
remote_env = api.Command['env'](server=__<u></u>True)['result']<br>
File<br>
"/usr/lib/python2.6/site-__<u></u>packages/ipalib/frontend.py", line 435,<div class=""><br>
in __call__<br>
ret = self.run(*args, **options)<br>
File<br></div>
"/usr/lib/python2.6/site-__<u></u>packages/ipalib/frontend.py", line<div class=""><br>
1073, in run<br>
return self.forward(*args, **options)<br>
File<br></div>
"/usr/lib/python2.6/site-__<u></u>packages/ipalib/frontend.py", line 769,<br>
in forward<br>
return self.Backend.xmlclient.__<u></u>forward(<a href="http://self.name" target="_blank">self.name</a><br>
<<a href="http://self.name" target="_blank">http://self.name</a>> <<a href="http://self.name" target="_blank">http://self.name</a>>,<br>
<br>
*args, **kw)<br>
File "/usr/lib/python2.6/site-__<u></u>packages/ipalib/rpc.py",<div class=""><br>
line 736, in<br>
forward<br>
raise error(message=e.faultString)<br>
ipalib.errors.CCacheError: did not receive Kerberos credentials<br>
<br></div>
In /var/log/ipaclient-install.__<u></u>log:<div class=""><br>
<br>
2014-02-06T18:19:53Z DEBUG approved_usage = SSLServer<br>
intended_usage =<br>
SSLServer<br>
2014-02-06T18:19:53Z DEBUG cert valid True for<br>
"CN=<server-name>,O=<domain>"<br>
2014-02-06T18:19:53Z DEBUG handshake complete, peer =<br>
<a href="http://10.1.1.111:443" target="_blank">10.1.1.111:443</a> <<a href="http://10.1.1.111:443" target="_blank">http://10.1.1.111:443</a>><br>
<<a href="http://10.1.1.111:443" target="_blank">http://10.1.1.111:443</a>><br>
<br>
2014-02-06T18:19:53Z DEBUG Caught fault 1101 from server<br>
https://<server-name>/ipa/xml: did not receive Kerberos credentials<br>
<br>
<br>
We need to see more context from the client install log, preferably<br>
the whole thing.<br>
<br>
IPA v2 doesn't support session cookies but the 3.x client should<br>
have support for falling back to using TGT delegation.<br>
<br>
rob<br>
<br>
<br>
<br>
<br>
--<br>
David Jablonski<br>
Performance Gateway<br></div>
Email: _djablonski@p<br>
<mailto:<a href="mailto:djablonski@gatewaysolutions.com" target="_blank">djablonski@<u></u>gatewaysolutions.com</a>><a href="http://erformancegateway.com" target="_blank">erformanc<u></u>egateway.com</a><br>
<<a href="http://erformancegateway.com" target="_blank">http://erformancegateway.com</a>><u></u>_<br>
_<div class=""><br>
_<br>
<br>
IMPORTANT: This e-mail (including any attachments) is intended for the<br>
use of the individual or entity to which it is addressed and may contain<br>
information that is classified, private, or confidential. If the reader<br>
of this message is not the intended recipient, or the employee or agent<br>
responsible for delivering the message to the intended recipient, you<br>
are hereby notified that any dissemination, distribution, or copying of<br>
this communication is prohibited. If you have received this<br>
communication in error, please notify us immediately by replying to this<br>
e-mail. Thank you.<br>
<br>
<br>
IMPORTANT: This e-mail (including any attachments) is intended for the<br>
use of the individual or entity to which it is addressed and may contain<br>
information that is classified, private, or confidential. If the reader<br>
of this message is not the intended recipient, or the employee or agent<br>
responsible for delivering the message to the intended recipient, you<br>
are hereby notified that any dissemination, distribution, or copying of<br>
this communication is prohibited. If you have received this<br>
communication in error, please notify us immediately by replying to this<br>
e-mail. Thank you.<br>
<br>
</div></blockquote>
<br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>David Jablonski</div><div>Performance Gateway<br></div><div>Email: <u><a href="mailto:djablonski@gatewaysolutions.com" target="_blank">djablonski@p</a><a href="http://erformancegateway.com" target="_blank">erformancegateway.com</a></u></div>
<div><u><br></u></div></div></div><font style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em"><font face="Times New Roman"></font><font face="Times New Roman"></font></font><p style="margin:0in 0in 0pt">IMPORTANT: This e-mail (including any attachments) is intended for the use of the individual or entity to which it is addressed and may contain information that is classified, private, or confidential. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this communication in error, please notify us immediately by replying to this e-mail. Thank you.</p>
</div>
</div>
<br>
<font size="3" style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em"><font face="Times New Roman">
</font><font face="Times New Roman">
</font></font><p style="margin:0in 0in 0pt">IMPORTANT: This e-mail (including
any attachments) is intended for the use of
the individual or entity to which it is addressed and may contain information
that is classified, private, or confidential. If the reader of this message is
not the intended recipient, or the employee or agent responsible for delivering
the message to the intended recipient, you are hereby notified that any
dissemination, distribution, or copying of this communication is prohibited. If
you have received this communication in error, please notify us immediately by
replying to this e-mail. Thank you.</p><font size="3" face="Times New Roman" style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em">
</font>