<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Hi,</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br>We are getting below error while we are installing IPA Server (ipa-server-install --no-ntp).</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div><div class="gmail_signature"><div dir="ltr"><div><div><i><span style="font-family:verdana,sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"></div></span></i><font face="verdana, sans-serif"><i><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"></div>Configuration of client side components failed!</i></font></div><div><font face="verdana, sans-serif"><i>ipa-client-install returned: Command '/usr/sbin/ipa-client-install --on-master --unattended --domain <a href="http://sd.int">sd.int</a> --server <a href="http://ldap-inf-stg-sg1-01.sd.int">ldap-inf-stg-sg1-01.sd.int</a> --realm <a href="http://SD.INT">SD.INT</a> --hostname <a href="http://ldap-inf-stg-sg1-01.sd.int">ldap-inf-stg-sg1-01.sd.int</a>' returned non-zero exit status 1</i></font></div><div><font face="verdana, sans-serif"><i><br></i></font></div><div><font face="verdana, sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"><i></i>Logs indicate below errors:</div></font></div><div><font face="verdana, sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"><i><br></i></div></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:39:59Z DEBUG args=/usr/bin/ldappasswd -h <a href="http://ldap-inf-stg-sg1-01.sd.int">ldap-inf-stg-sg1-01.sd.int</a> -ZZ -x -D cn=Directory Manager -y /var/lib/ipa/tmpiI0qCS -T /var/lib/ipa/tmp0iYpzn uid=admin,cn=users,cn=accounts,dc=sd,dc=int</i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:39:59Z DEBUG stdout=</i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:39:59Z DEBUG stderr=</i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:39:59Z DEBUG ldappasswd done</i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:40:10Z DEBUG args=/usr/sbin/ipa-client-install --on-master --unattended --domain <a href="http://sd.int">sd.int</a> --server <a href="http://ldap-inf-stg-sg1-01.sd.int">ldap-inf-stg-sg1-01.sd.int</a> --realm <a href="http://SD.INT">SD.INT</a> --hostname <a href="http://ldap-inf-stg-sg1-01.sd.int">ldap-inf-stg-sg1-01.sd.int</a></i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:40:10Z DEBUG stdout=</i></font></div><div><font face="verdana, sans-serif"><i><b>2015-03-25T06:40:10Z DEBUG stderr=Failed to verify that <a href="http://ldap-inf-stg-sg1-01.sd.int">ldap-inf-stg-sg1-01.sd.int</a> is an IPA Server.</b></i></font></div><div><font face="verdana, sans-serif"><i><b>This may mean that the remote server is not up or is not reachable due to network or firewall settings.</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Please make sure the following ports are opened in the firewall settings:</b></i></font></div><div><font face="verdana, sans-serif"><i><b> TCP: 80, 88, 389</b></i></font></div><div><font face="verdana, sans-serif"><i><b> UDP: 88 (at least one of TCP/UDP ports 88 has to be open)</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Also note that following ports are necessary for ipa-client working properly after enrollment:</b></i></font></div><div><font face="verdana, sans-serif"><i><b> TCP: 464</b></i></font></div><div><font face="verdana, sans-serif"><i><b> UDP: 464, 123 (if NTP enabled)</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Installation failed. Rolling back changes.</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Unconfigured automount client failed: Command 'ipa-client-automount --uninstall --debug' returned non-zero exit status 1</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Removing Kerberos service principals from /etc/krb5.keytab</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Disabling client Kerberos and LDAP configurations</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted</b></i></font></div><div><font face="verdana, sans-serif"><i><b>nscd daemon is not installed, skip configuration</b></i></font></div><div><font face="verdana, sans-serif"><i><b>nslcd daemon is not installed, skip configuration</b></i></font></div><div><font face="verdana, sans-serif"><i><b>Client uninstall complete.</b></i></font></div><div><font face="verdana, sans-serif"><i><br></i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:40:10Z INFO File "/usr/lib/python2.6/site-packages/ipaserver/install/installutils.py", line 614, in run_script</i></font></div><div><font face="verdana, sans-serif"><i> return_value = main_function()</i></font></div><div><font face="verdana, sans-serif"><i><br></i></font></div><div><font face="verdana, sans-serif"><i> File "/usr/sbin/ipa-server-install", line 1103, in main</i></font></div><div><font face="verdana, sans-serif"><i> sys.exit("Configuration of client side components failed!\nipa-client-install returned: " + str(e))</i></font></div><div><font face="verdana, sans-serif"><i><br></i></font></div><div><font face="verdana, sans-serif"><i>2015-03-25T06:40:10Z INFO The ipa-server-install command failed, exception: SystemExit: Configuration of client side components failed!</i></font></div><div><font face="verdana, sans-serif"><i>ipa-client-install returned: Command '/usr/sbin/ipa-client-install --on-master --unattended --domain <a href="http://sd.int">sd.int</a> --server <a href="http://ldap-inf-stg-sg1-01.sd.int">ldap-inf-stg-sg1-01.sd.int</a> --realm <a href="http://SD.INT">SD.INT</a> --hostname <a href="http://ldap-inf-stg-sg1-01.sd.int">ldap-inf-stg-sg1-01.sd.int</a>' returned non-zero exit status 1</i></font></div><div><br></div><div><font face="verdana, sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"><i></i></div><br></font></div><div><i><span style="font-family:verdana,sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"><br></div></span></i></div><div><div class="gmail_default" style="font-family:verdana,sans-serif">This server is on AWS and I can confirm that all above ports are opened. Also as it is installing on same server where IPA Server is being installed, Port should not be an issue.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Am I missing anything here. </div><br></div><div><i><span style="font-family:verdana,sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline"></div><br>Best Regards,<br>__________________________________________<br></span></i></div></div><div><i><span style="font-family:verdana,sans-serif"><div class="gmail_default" style="font-family:verdana,sans-serif;display:inline">Yogesh Sharma</div><br></span></i></div><br><div><span style="font-family:verdana,sans-serif"></span><div><div><br></div></div></div></div></div></div> </div>