<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> For completeness: <tt> </tt><tt>[root@ipa1 ~]# rpm -qa | grep ipa</tt><tt> </tt><tt>libipa_hbac-python-1.11.5.1-1.fc20.x86_64</tt><tt> </tt><tt>python-iniparse-0.4-9.fc20.noarch</tt><tt> </tt><tt>libipa_hbac-1.11.5.1-1.fc20.x86_64</tt><tt> </tt><tt>freeipa-python-3.3.5-1.fc20.x86_64</tt><tt> </tt><tt>freeipa-admintools-3.3.5-1.fc20.x86_64</tt><tt> </tt><tt>freeipa-server-3.3.5-1.fc20.x86_64</tt><tt> </tt><tt>sssd-ipa-1.11.5.1-1.fc20.x86_64</tt><tt> </tt><tt>freeipa-client-3.3.5-1.fc20.x86_64</tt><tt> </tt><tt>[root@ipa1 ~]# rpm -qa | grep krb</tt><tt> </tt><tt>krb5-libs-1.11.5-5.fc20.x86_64</tt><tt> </tt><tt>pam_krb5-2.4.8-1.fc20.x86_64</tt><tt> </tt><tt>sssd-krb5-1.11.5.1-1.fc20.x86_64</tt><tt> </tt><tt>krb5-pkinit-1.11.5-5.fc20.x86_64</tt><tt> </tt><tt>krb5-workstation-1.11.5-5.fc20.x86_64</tt><tt> </tt><tt>python-krbV-1.0.90-7.fc20.x86_64</tt><tt> </tt><tt>krb5-server-1.11.5-5.fc20.x86_64</tt><tt> </tt><tt>sssd-krb5-common-1.11.5.1-1.fc20.x86_64</tt><tt> </tt><tt>[root@ipa1 ~]# rpm -qa | grep 389</tt><tt> </tt><tt>389-ds-base-libs-1.3.2.16-1.fc20.x86_64</tt><tt> </tt><tt>389-ds-base-1.3.2.16-1.fc20.x86_64</tt><tt> </tt><tt>[root@ipa1 ~]# </tt><tt> </tt> <div class="moz-cite-prefix">On 05/19/2014 06:51 AM, Bret Wortman wrote: </div> <blockquote cite="mid:5379E219.6060407@damascusgrp.com" type="cite"> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> Happy Monday to me -- I came in this morning to find all 3 of my IPA replicas are down. When I tried to start one of them, I got this: <tt>[root@ipa1 ~]# ipactl start</tt><tt> </tt><tt>Existing service file detected!</tt><tt> </tt><tt>Assuming stale, cleaning and proceeding</tt><tt> </tt><tt>Starting Directory Service</tt><tt> </tt><tt>Starting krb5kdc Service</tt><tt> </tt><tt>Job for krb5kdc.service failed. See 'systemctl status krb5kdc.service' and 'journalctl -xn' for details.</tt><tt> </tt><tt>Failed to start krb5kdc Service</tt><tt> </tt><tt>Shutting down</tt><tt> </tt><tt>Aborting ipactl</tt><tt> </tt><tt>[root@ipa1 ~]# systemctl status krb5kdc.service</tt><tt> </tt><tt>krb5kdc.service - Kerberos 5 KDC</tt><tt> </tt><tt> Loaded: loaded (/usr/lib/systemd/system/krb5kdc.service; disabled)</tt><tt> </tt><tt> Active: failed (Result: exit-code) since Mon 2014-05-19 06:46:24 EDT; 51s ago</tt><tt> </tt><tt> Process: 1835 ExecStart=/usr/sbin/krb5kdc -P /var/run/krb5kdc.pid $KRB5KDC_ARGS (code=exited, status=1/FAILURE)</tt><tt> </tt><tt> </tt><tt>May 19 06:46:24 ipa1.foo.net systemd[1]: krb5kdc.service: control process exited, code=exited status=1</tt><tt> </tt><tt>May 19 06:46:24 ipa1.foo.net systemd[1]: Failed to start Kerberos 5 KDC.</tt><tt> </tt><tt>May 19 06:46:24 ipa1.foo.net systemd[1]: Unit krb5kdc.service entered failed state.</tt><tt> </tt><tt>May 19 06:46:24 ipa1.foo.net systemd[1]: Stopped Kerberos 5 KDC.</tt><tt> </tt><tt>[root@ipa1 ~]# journalctl -xn</tt><tt> </tt><tt>-- Logs begin at Tue 2014-05-13 09:50:44 EDT, end at Mon 2014-05-19 06:47:03 EDT. --</tt><tt> </tt><tt>May 19 06:46:42 ipa1.foo.net ntpd_intres[526]: host name not found: 2.fedora.pool.ntp.org</tt><tt> </tt><tt>May 19 06:46:58 ipa1.foo.net sshd[1855]: error: AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys returned status 1</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net sshd[1855]: Accepted password for root from 192.168.2.13 port 42299 ssh2</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net systemd[1]: Starting Session 5 of user root.</tt><tt> </tt><tt>-- Subject: Unit session-5.scope has begun with start-up</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit session-5.scope has begun starting up.</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net systemd-logind[495]: New session 5 of user root.</tt><tt> </tt><tt>-- Subject: A new session 5 has been created for user root</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- Documentation: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.freedesktop.org/wiki/Software/systemd/multiseat">http://www.freedesktop.org/wiki/Software/systemd/multiseat</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- A new session with the ID 5 has been created for the user root.</tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- The leading process of the session is 1855.</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net systemd[1]: Started Session 5 of user root.</tt><tt> </tt><tt>-- Subject: Unit session-5.scope has finished start-up</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit session-5.scope has finished starting up.</tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- The start-up result is done.</tt><tt> </tt><tt>May 19 06:47:00 ipa1.foo.net sshd[1855]: pam_unix(sshd:session): session opened for user root by (uid=0)</tt><tt> </tt><tt>May 19 06:47:03 ipa1.foo.net systemd[1]: Stopped 389 Directory Server WEDGEOFLI-ME..</tt><tt> </tt><tt>-- Subject: Unit <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:dirsrv@WEDGEOFLI-ME.service">dirsrv@WEDGEOFLI-ME.service</a> has finished shutting down</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:dirsrv@WEDGEOFLI-ME.service">dirsrv@WEDGEOFLI-ME.service</a> has finished shutting down.</tt><tt> </tt><tt>May 19 06:47:03 ipa1.foo.net systemd[1]: Stopping 389 Directory Server.</tt><tt> </tt><tt>-- Subject: Unit dirsrv.target has begun shutting down</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit dirsrv.target has begun shutting down.</tt><tt> </tt><tt>May 19 06:47:03 ipa1.foo.net systemd[1]: Stopped target 389 Directory Server.</tt><tt> </tt><tt>-- Subject: Unit dirsrv.target has finished shutting down</tt><tt> </tt><tt>-- Defined-By: systemd</tt><tt> </tt><tt>-- Support: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></tt><tt> </tt><tt>-- </tt><tt> </tt><tt>-- Unit dirsrv.target has finished shutting down.</tt><tt> </tt><tt>[root@ipa1 ~]#</tt> <div class="moz-signature"> Any thoughts on where to look next? There's nothing at all logged in /var/log/krb5kdc.log when I try to start it up, and there are so many pieces to this that I'm not sure where to focus my efforts. Thanks! -- <div>Bret Wortman</div> <div><img src="cid:part10.03050704.06090101@damascusgrp.com" height="53/" width="200"> </div> <div><a moz-do-not-send="true" href="http://damascusgrp.com/">http://damascusgrp.com/</a> </div> <div><a moz-do-not-send="true" href="http://about.me/wortmanbret">http://about.me/wortmanbret</a> </div> </div> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Freeipa-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre> </blockquote> </body> </html>