<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 05/08/2015 02:06 PM, Linux Shell
wrote:<br>
</div>
<blockquote
cite="mid:CAJiL6dJ4Gt_=eYzDmfxeyfgKm6f=pu_oMEV4AxuiWjhgxPEhkA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>
<div>So i have been looking around for a solution
for this issue for a few days now and have had no
luck. I know in older versions of freeipa this was
a issue but i think i should be using the most
updated version. <br>
<br>
</div>
<div>(Please note that my company's name is
withheld)<br>
</div>
<div><br>
</div>
During the ipa-server-install it fails with:<br>
<br>
Restarting the web server<br>
Configuration of client side components failed!<br>
ipa-client-install returned: Command
''/usr/sbin/ipa-client-install' '--on-master'
'--unattended' '--domain' '<withheld>.com'
'--server' '###-#####-centos7.<withheld>.com'
'--realm' '<withheld>.COM' '--hostname'
'####-#####-centos7.<withheld>.com'' returned
non-zero exit status 1<br>
<br>
</div>
here is the yum ipa-server package i am using: <br>
<br>
# yum info ipa-server<br>
Loaded plugins: fastestmirror, rhnplugin<br>
This system is receiving updates from RHN Classic or
Red Hat Satellite.<br>
Loading mirror speeds from cached hostfile<br>
* base: <a moz-do-not-send="true"
href="http://mirrors.usinternet.com">mirrors.usinternet.com</a><br>
* extras: <a moz-do-not-send="true"
href="http://mirror.oss.ou.edu">mirror.oss.ou.edu</a><br>
* updates: <a moz-do-not-send="true"
href="http://mirrors.gigenet.com">mirrors.gigenet.com</a><br>
Installed Packages<br>
Name : ipa-server<br>
Arch : x86_64<br>
Version : 4.1.0<br>
Release : 18.el7.centos.3<br>
Size : 4.2 M<br>
Repo : installed<br>
From repo : updates<br>
Summary : The IPA authentication server<br>
URL : <a moz-do-not-send="true"
href="http://www.freeipa.org/">http://www.freeipa.org/</a><br>
License : GPLv3+<br>
Description : IPA is an integrated solution to provide
centrally managed Identity (machine,<br>
: user, virtual machines, groups,
authentication credentials), Policy<br>
: (configuration settings, access control
information) and Audit (events,<br>
: logs, analysis thereof). If you are
installing an IPA server you need<br>
: to install this package (in other words,
most people should NOT install<br>
: this package).<br>
<br>
<br>
</div>
here is the yum ipa-client package i am using:<br>
<br>
# yum info ipa-client<br>
Loaded plugins: fastestmirror, rhnplugin<br>
This system is receiving updates from RHN Classic or Red
Hat Satellite.<br>
Loading mirror speeds from cached hostfile<br>
* base: <a moz-do-not-send="true"
href="http://mirrors.usinternet.com">mirrors.usinternet.com</a><br>
* extras: <a moz-do-not-send="true"
href="http://mirror.oss.ou.edu">mirror.oss.ou.edu</a><br>
* updates: <a moz-do-not-send="true"
href="http://mirrors.gigenet.com">mirrors.gigenet.com</a><br>
Installed Packages<br>
Name : ipa-client<br>
Arch : x86_64<br>
Version : 4.1.0<br>
Release : 18.el7.centos.3<br>
Size : 440 k<br>
Repo : installed<br>
From repo : updates<br>
Summary : IPA authentication for use on clients<br>
URL : <a moz-do-not-send="true"
href="http://www.freeipa.org/">http://www.freeipa.org/</a><br>
License : GPLv3+<br>
Description : IPA is an integrated solution to provide
centrally managed Identity (machine,<br>
: user, virtual machines, groups,
authentication credentials), Policy<br>
: (configuration settings, access control
information) and Audit (events,<br>
: logs, analysis thereof). If your network
uses IPA for authentication,<br>
: this package should be installed on every
client machine.<br>
<br>
</div>
here is the /var/log/ipaserver-install.log:<br>
<br>
2015-05-08T17:47:16Z DEBUG stderr=Using existing
certificate '/etc/ipa/ca.crt'.<br>
Hostname: ###-####-centos7.<withheld>.com<br>
Realm: <withheld>.COM<br>
DNS Domain: <withheld>.com<br>
IPA Server: ####-#####-centos7.<withheld>.com<br>
BaseDN: dc=####,dc=####<br>
Configured sudoers in /etc/nsswitch.conf<br>
Configured /etc/sssd/sssd.conf<br>
trying
<a class="moz-txt-link-freetext" href="https://####-#####-centos7">https://####-#####-centos7</a>.<withheld>.com/ipa/json<br>
Forwarding 'ping' to json server
'<a class="moz-txt-link-freetext" href="https://###-#####-centos7">https://###-#####-centos7</a>.<withheld>.com/ipa/json'<br>
Traceback (most recent call last):<br>
File "/usr/sbin/ipa-client-install", line 2925, in
<module><br>
sys.exit(main())<br>
File "/usr/sbin/ipa-client-install", line 2906, in main<br>
rval = install(options, env, fstore, statestore)<br>
File "/usr/sbin/ipa-client-install", line 2609, in
install<br>
api.Backend.rpcclient.forward('ping')<br>
File "/usr/lib/python2.7/site-packages/ipalib/rpc.py",
line 883, in forward<br>
return self._call_command(command, params)<br>
File "/usr/lib/python2.7/site-packages/ipalib/rpc.py",
line 860, in _call_command<br>
return command(*params)<br>
File "/usr/lib/python2.7/site-packages/ipalib/rpc.py",
line 1011, in _call<br>
return self.__request(name, args)<br>
File "/usr/lib/python2.7/site-packages/ipalib/rpc.py",
line 980, in __request<br>
verbose=self.__verbose >= 3,<br>
File "/usr/lib64/python2.7/xmlrpclib.py", line 1228, in
request<br>
h = self.make_connection(host)<br>
File "/usr/lib/python2.7/site-packages/ipalib/rpc.py",
line 484, in make_connection<br>
if self._connection and host == self._connection[0]:<br>
AttributeError: KerbTransport instance has no attribute
'_connection'<br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
I would assume that this is an attempt to do some kerberos call that
failed.<br>
On server that most likely means that KDC was not started for some
reason. And it in turn might not start for different reasons. <br>
Please check the troubleshooting page.<br>
<a class="moz-txt-link-freetext" href="http://www.freeipa.org/page/Troubleshooting">http://www.freeipa.org/page/Troubleshooting</a><br>
<br>
Things to think about:<br>
- DNS configuration<br>
- Is hostname correct and properly resolvable<br>
- Is time correct (time zone?)<br>
- Are there any SELinux denials?<br>
<br>
<blockquote
cite="mid:CAJiL6dJ4Gt_=eYzDmfxeyfgKm6f=pu_oMEV4AxuiWjhgxPEhkA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div><br>
2015-05-08T17:47:16Z DEBUG File
"/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py",
line 646, in run_script<br>
return_value = main_function()<br>
<br>
File "/usr/sbin/ipa-server-install", line 1292, in main<br>
sys.exit("Configuration of client side components
failed!\nipa-client-install returned: " + str(e))<br>
<br>
</div>
please let me know of any thing i can give to help fix the
issue<br>
</div>
Thanks <br>
</div>
Jacob <br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Director of Engineering for IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>