<div dir="ltr"><div><div><div><div><div><div><div>Hello everyone.<br><br></div>I send you this mail because I have a problem with the installation of FreeIPA Server 3.0 on a VM running on RHEL 6.4.<br><br></div><div>First, when I performed the yum install ipa-server, I got an error but the installation finished finally with a complete.<br></div><div>Here it is :<br><br>############################<br>===========================================================================================================================================================================================================<br>Install 4 Package(s)<br><br>Total download size: 1.4 M<br>Installed size: 4.6 M<br>Is this ok [y/N]: y<br>Downloading Packages:<br>(1/4): ipa-admintools-3.0.0-42.el6.x86_64.rpm | 67 kB 00:00<br>(2/4): ipa-client-3.0.0-42.el6.x86_64.rpm | 145 kB 00:00<br>(3/4): ipa-server-3.0.0-42.el6.x86_64.rpm | 1.1 MB 00:00<br>(4/4): ipa-server-selinux-3.0.0-42.el6.x86_64.rpm | 66 kB 00:00<br>-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br>Total 7.3 MB/s | 1.4 MB 00:00<br>Total 7.3 MB/s | 1.4 MB 00:00<br>Running rpm_check_debug<br>Running Transaction Test<br>Transaction Test Succeeded<br>Running Transaction<br>Installing : ipa-client-3.0.0-42.el6.x86_64 1/4<br>Installing : ipa-admintools-3.0.0-42.el6.x86_64 2/4<br>Installing : ipa-server-3.0.0-42.el6.x86_64 3/4<br>Installing : ipa-server-selinux-3.0.0-42.el6.x86_64 4/4<br>libsepol.print_missing_requirements: ipa_dogtag's global requirements were not met: type/attribute pki_ca_t (No such file or directory).<br>libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory).<br>semodule: Failed!<br>Verifying : ipa-server-3.0.0-42.el6.x86_64 1/4<br>Verifying : ipa-server-selinux-3.0.0-42.el6.x86_64 2/4<br>Verifying : ipa-client-3.0.0-42.el6.x86_64 3/4<br>Verifying : ipa-admintools-3.0.0-42.el6.x86_64<br><br>Installed:<br>ipa-server.x86_64 0:3.0.0-42.el6<br><br>Dependency Installed:<br>ipa-admintools.x86_64 0:3.0.0-42.el6 ipa-client.x86_64 0:3.0.0-42.el6 ipa-server-selinux.x86_64 0:3.0.0-42.el6<br><br>Complete!<br>############################<div><div style="direction:ltr;color:rgb(0,0,0);font-size:9pt"><p></p></div></div>Are these two errors blocking in order to use FreeIPA Server ? Or is it fine ?<br></div><div>libsepol.print_missing_requirements: ipa_dogtag's global requirements were not met: type/attribute pki_ca_t (No such file or directory).<br>libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory).<br>semodule: Failed!<br><br></div><div>Furthermore, when I try a ipa-server-install, I got also an error message during step <br><br>############################<br>Configuring directory server (dirsrv): Estimated time 1 minute<br> [1/38]: creating directory server user<br> [2/38]: creating directory server instance<br>ipa : CRITICAL failed to create ds instance Command '/usr/sbin/<a href="http://setup-ds.pl">setup-ds.pl</a> --silent --logfile - -f /tmp/tmpPamNs8' returned non-zero exit status 1<br>############################<br><br></div><div>And when I checked in the log, here is what I see<br></div><div><br>Here is the message I see :<br>############################<br></div>2015-05-29T15:56:49Z DEBUG calling <a href="http://setup-ds.pl">setup-ds.pl</a><br>4944 2015-05-29T15:56:49Z DEBUG args=/usr/sbin/<a href="http://setup-ds.pl">setup-ds.pl</a> --silent --logfile - -f /tmp/tmpkCAtzh<br>4945 2015-05-29T15:56:49Z DEBUG stdout=[15/05/29:17:56:49] - [Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 32256. Output: sh: /var/lib/dirsrv/scripts-MyRealm/ldif2db: Permission denied<br>4946<br>4947 Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 32256. Output: sh: /var/lib/dirsrv/scripts-MyRealm/ldif2db: Permission denied<br>4948<br>4949 [15/05/29:17:56:49] - [Setup] Fatal Error: Could not create directory server instance 'MyRealm'.<br>4950 Error: Could not create directory server instance 'MyRealm'.<br>4951 [15/05/29:17:56:49] - [Setup] Fatal Exiting . . .<br>############################<br><br></div>When I check the perm on the folders, everything is fine :<br><br>############################<br>ls -ld /var/lib/dirsrv/<br>drwxrwxr-x 5 root dirsrv 4096 May 29 18:19 /var/lib/dirsrv/<br><br>ls -l /var/lib/dirsrv/<br>drwxrwx--- 2 dirsrv dirsrv 4096 May 29 18:19 scripts-MYREALM<br>drwxrwx--- 5 dirsrv dirsrv 4096 May 29 18:19 slapd-MYREALM<br>drwxrwx--- 5 pkisrv dirsrv 4096 May 29 18:18 slapd-PKI-IPA<br><br>ls -l /var/lib/dirsrv/scripts-MYREALM/<br>-r-xr-x--- 1 dirsrv dirsrv 1212 May 29 18:19 bak2db<br>-r-xr-x--- 1 dirsrv dirsrv 5661 May 29 18:19 <a href="http://bak2db.pl">bak2db.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 6018 May 29 18:19 <a href="http://cleanallruv.pl">cleanallruv.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 1134 May 29 18:19 db2bak<br>-r-xr-x--- 1 dirsrv dirsrv 5397 May 29 18:19 <a href="http://db2bak.pl">db2bak.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 759 May 29 18:19 db2index<br>-r-xr-x--- 1 dirsrv dirsrv 8129 May 29 18:19 <a href="http://db2index.pl">db2index.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 2053 May 29 18:19 db2ldif<br>-r-xr-x--- 1 dirsrv dirsrv 10093 May 29 18:19 <a href="http://db2ldif.pl">db2ldif.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 932 May 29 18:19 dbverify<br>-r-xr-x--- 1 dirsrv dirsrv 499 May 29 18:19 dn2rdn<br>-r-xr-x--- 1 dirsrv dirsrv 5560 May 29 18:19 <a href="http://fixup-linkedattrs.pl">fixup-linkedattrs.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 5896 May 29 18:19 <a href="http://fixup-memberof.pl">fixup-memberof.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 729 May 29 18:19 ldif2db<br>-r-xr-x--- 1 dirsrv dirsrv 8826 May 29 18:19 <a href="http://ldif2db.pl">ldif2db.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 412 May 29 18:19 ldif2ldap<br>-r-xr-x--- 1 dirsrv dirsrv 426 May 29 18:19 monitor<br>-r-xr-x--- 1 dirsrv dirsrv 21524 May 29 18:19 <a href="http://ns-accountstatus.pl">ns-accountstatus.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 21524 May 29 18:19 <a href="http://ns-activate.pl">ns-activate.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 21524 May 29 18:19 <a href="http://ns-inactivate.pl">ns-inactivate.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 10237 May 29 18:19 <a href="http://ns-newpwpolicy.pl">ns-newpwpolicy.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 318 May 29 18:19 restart-slapd<br>-r-xr-x--- 1 dirsrv dirsrv 650 May 29 18:19 restoreconfig<br>-r-xr-x--- 1 dirsrv dirsrv 654 May 29 18:19 saveconfig<br>-r-xr-x--- 1 dirsrv dirsrv 5405 May 29 18:19 <a href="http://schema-reload.pl">schema-reload.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 269 May 29 18:19 start-slapd<br>-r-xr-x--- 1 dirsrv dirsrv 248 May 29 18:19 stop-slapd<br>-r-xr-x--- 1 dirsrv dirsrv 489 May 29 18:19 suffix2instance<br>-r-xr-x--- 1 dirsrv dirsrv 5905 May 29 18:19 <a href="http://syntax-validate.pl">syntax-validate.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 1497 May 29 18:19 upgradednformat<br>-r-xr-x--- 1 dirsrv dirsrv 6143 May 29 18:19 <a href="http://usn-tombstone-cleanup.pl">usn-tombstone-cleanup.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 7588 May 29 18:19 <a href="http://verify-db.pl">verify-db.pl</a><br>-r-xr-x--- 1 dirsrv dirsrv 588 May 29 18:19 vlvindex<br>###############################<br><br></div>I don't really understand from where the problem is coming.<br></div>Any help please ?<br><br></div>Best regards.<br><br></div>Bahan<br><div><div><div><div><br><br></div></div></div></div></div>