<html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> Happy Monday to me -- I came in this morning to find all 3 of my IPA replicas are down. When I tried to start one of them, I got this: <tt>[root@ipa1 ~]# ipactl start</tt><tt> </tt><tt>Existing service file detected!</tt><tt> </tt><tt>Assuming stale, cleaning and proceeding</tt><tt> </tt><tt>Starting Directory Service</tt><tt> </tt><tt>Starting krb5kdc Service</tt><tt> </tt><tt>Job for krb5kdc.service failed. See 'systemctl status krb5kdc.service' and 'journalctl -xn' for details.</tt><tt> </tt><tt>Failed to start krb5kdc Service</tt><tt> </tt><tt>Shutting down</tt><tt> </tt><tt>Aborting ipactl</tt><tt> </tt><tt>[root@ipa1 ~]# systemctl status krb5kdc.service</tt><tt> </tt><tt>krb5kdc.service - Kerberos 5 KDC</tt><tt> </tt><tt> Loaded: loaded (/usr/lib/systemd/system/krb5kdc.service; disabled)</tt><tt> </tt><tt> Active: failed (Result: exit-code) since Mon 2014-05-19 06:46:24 EDT; 51s ago</tt><tt> </tt><tt> Process: 1835 ExecStart=/usr/sbin/krb5kdc -P /var/run/krb5kdc.pid $KRB5KDC_ARGS (code=exited, status=1/FAILURE)</tt><tt> </tt><tt> </tt><tt>May 19 06:46:24 ipa1.foo.net systemd[1]: krb5kdc.service: control process exited, code=exited status=1</tt><tt> </tt><tt>May 19 06:46:24 ipa1.foo.net systemd[1]: Failed to start Kerberos 5 KDC.</tt><tt> </tt><tt>May 19 06:46:24 ipa1.foo.net systemd[1]: Unit krb5kdc.service entered failed state.</tt><tt> </tt><tt>May 19 06:46:24 ipa1.foo.net systemd[1]: Stopped Kerberos 5 KDC.</tt><tt> </tt><tt>[root@ipa1 ~]# journalctl -xn</tt><tt> </tt><tt>-- Logs begin at Tue 2014-05-13 09:50:44 EDT, end at Mon 2014-05-19 06:47:03 EDT. --</tt><tt> </tt><tt>May 19 06:46:42 ipa1.foo.net ntpd_intres[526]: host name not found: 2.fedora.pool.ntp.org</tt><tt> </tt><tt>May 19 06:46:58 ipa1.foo.net sshd[1855]: error: AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys returned status 1</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net sshd[1855]: Accepted password for root from 192.168.2.13 port 42299 ssh2</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net systemd[1]: Starting Session 5 of user root.</tt><tt> </tt><tt>-- Subject: Unit session-5.scope has begun with start-up</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit session-5.scope has begun starting up.</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net systemd-logind[495]: New session 5 of user root.</tt><tt> </tt><tt>-- Subject: A new session 5 has been created for user root</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- Documentation: <a class="moz-txt-link-freetext" href="http://www.freedesktop.org/wiki/Software/systemd/multiseat">http://www.freedesktop.org/wiki/Software/systemd/multiseat</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- A new session with the ID 5 has been created for the user root.</tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- The leading process of the session is 1855.</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net systemd[1]: Started Session 5 of user root.</tt><tt> </tt><tt>-- Subject: Unit session-5.scope has finished start-up</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit session-5.scope has finished starting up.</tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- The start-up result is done.</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net sshd[1855]: pam_unix(sshd:session): session opened for user root by (uid=0)</tt><tt> </tt><tt>May 19 06:47:03 ipa1.foo.net systemd[1]: Stopped 389 Directory Server WEDGEOFLI-ME..</tt><tt> </tt><tt>-- Subject: Unit <a class="moz-txt-link-abbreviated" href="mailto:dirsrv@WEDGEOFLI-ME.service">dirsrv@WEDGEOFLI-ME.service</a> has finished shutting down</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit <a class="moz-txt-link-abbreviated" href="mailto:dirsrv@WEDGEOFLI-ME.service">dirsrv@WEDGEOFLI-ME.service</a> has finished shutting down.</tt><tt> </tt><tt>May 19 06:47:03 ipa1.foo.net systemd[1]: Stopping 389 Directory Server.</tt><tt> </tt><tt>-- Subject: Unit dirsrv.target has begun shutting down</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit dirsrv.target has begun shutting down.</tt><tt> </tt><tt>May 19 06:47:03 ipa1.foo.net systemd[1]: Stopped target 389 Directory Server.</tt><tt> </tt><tt>-- Subject: Unit dirsrv.target has finished shutting down</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit dirsrv.target has finished shutting down.</tt><tt> </tt><tt>[root@ipa1 ~]#</tt> <div class="moz-signature"> Any thoughts on where to look next? There's nothing at all logged in /var/log/krb5kdc.log when I try to start it up, and there are so many pieces to this that I'm not sure where to focus my efforts. Thanks! -- <div>Bret Wortman</div> <div><img src="cid:part1.02020209.02090206@damascusgrp.com" height="53/" width="200"> </div> <div><a href="http://damascusgrp.com/">http://damascusgrp.com/</a> </div> <div><a href="http://about.me/wortmanbret">http://about.me/wortmanbret</a> </div> </div> </body> </html>