<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1465502932136_7739">The setup is:</div><div id="yui_3_16_0_ym19_1_1465502932136_7740">AD 2008 domain,</div><div>Latest version of FreeIpa with integrated DNS,</div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7760">As the AD domain is not known to any DNS servers on the network I have<br>created a stub zone in Freeipa integrated dns server addomain.com,</div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7761">and created A-record for DC.addomain.com</div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7761">as well as _ldap.tcp.addomain.com and _kerberos.udp.addomain.com</div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7761">and checked with dig that they resolve correctly, </div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7761">138/139/145/389 are opened between the servers on both tcp and udp ports</div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7761">ipv6 enabled on the FreeIpa server. </div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7761">I am using pre-shared secret to establish the trust</div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7761"><br>Run:</div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7761">ipa trust-add --type=ad addomain.com --trust-secret <pre-shared key><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7874">and receive:<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7875"><i id="yui_3_16_0_ym19_1_1465502932136_7981">ipa: ERROR: CIFS server communication error: code "None",</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7876"><i id="yui_3_16_0_ym19_1_1465502932136_7980"> message "NT_STATUS_IO_TIMEOUT" (both may be "None"</i>)<br><br>I've enabled the logs as described in debugging section (I would be glad to forward the whole thing if needed)</div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7940">However, relevant error that I see is :<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7941"><i id="yui_3_16_0_ym19_1_1465502932136_7994">finddcs: DNS SRV response 0 at '<ipaddr>'</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7942"><i id="yui_3_16_0_ym19_1_1465502932136_8019">finddcs: performing CLDAP query on <ipaddr></i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7943"><i id="yui_3_16_0_ym19_1_1465502932136_8018">s4_tevent: Added timed event "tevent_req_timedout": 0x7f21302a8b10</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7944"><i id="yui_3_16_0_ym19_1_1465502932136_8017">s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f2130025090</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7945"><i id="yui_3_16_0_ym19_1_1465502932136_8016">s4_tevent: Run immediate event "tevent_req_trigger": 0x7f2130025090</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7946"><i id="yui_3_16_0_ym19_1_1465502932136_8015">s4_tevent: Added timed event "tevent_req_timedout": 0x7f213025cb90</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7947"><i id="yui_3_16_0_ym19_1_1465502932136_8014">s4_tevent: Running timer event 0x7f213025cb90 "tevent_req_timedout"</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7948"><i id="yui_3_16_0_ym19_1_1465502932136_8013">s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f2130045b50</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7949"><i id="yui_3_16_0_ym19_1_1465502932136_8012">s4_tevent: Ending timer event 0x7f213025cb90 "tevent_req_timedout"</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7950"><i id="yui_3_16_0_ym19_1_1465502932136_8011">s4_tevent: Run immediate event "tevent_req_trigger": 0x7f2130045b50</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7951"><i id="yui_3_16_0_ym19_1_1465502932136_8035">s4_tevent: Added timed event "tevent_req_timedout": 0x7f213025cb90</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7952"><i id="yui_3_16_0_ym19_1_1465502932136_8036">s4_tevent: Running timer event 0x7f213025cb90 "tevent_req_timedout"</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7953"><i id="yui_3_16_0_ym19_1_1465502932136_8010">s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f213001d230</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7954"><i id="yui_3_16_0_ym19_1_1465502932136_8009">s4_tevent: Ending timer event 0x7f213025cb90 "tevent_req_timedout"</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7955"><i id="yui_3_16_0_ym19_1_1465502932136_8008">s4_tevent: Run immediate event "tevent_req_trigger": 0x7f213001d230</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7956"><i id="yui_3_16_0_ym19_1_1465502932136_7991">s4_tevent: Added timed event "tevent_req_timedout": 0x7f213025cb90</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7957"><i id="yui_3_16_0_ym19_1_1465502932136_7990">s4_tevent: Running timer event 0x7f21302a8b10 "tevent_req_timedout"</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7958"><i id="yui_3_16_0_ym19_1_1465502932136_7989">s4_tevent: Destroying timer event 0x7f213025cb90 "tevent_req_timedout"</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7959"><i id="yui_3_16_0_ym19_1_1465502932136_7996"><b>finddcs: No matching CLDAP server found</b></i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7960"><i id="yui_3_16_0_ym19_1_1465502932136_7988">s4_tevent: Ending timer event 0x7f21302a8b10 "tevent_req_timedout"</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7961"><i id="yui_3_16_0_ym19_1_1465502932136_7987">[Thu Jun 09 20:39:38.703506 2016] [:error] [pid 2503] ipa: INFO: [jsonserver_session] admin@<ipadomain.com>: trust_add(u'addomain.com', trust_type=u'ad', trust_secret=</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7962"><i id="yui_3_16_0_ym19_1_1465502932136_7986">u'********', all=False, raw=False, version=u'2.156'): RemoteRetrieveError</i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7962"><i><br></i></div><div dir="ltr" id="yui_3_16_0_ym19_1_1465502932136_7962">Once again I would be glad to provide entire logs if needed. But would be grateful for suggestions on how to resolve the above error.</div></div></body></html>