Hello,
In installed IPA Server successfully with following command:
# ipa-server-install
--ca-cert-file /root/ca-hierarchy/rootCA.crt
--dirsrv-cert-file /root/ca-hierarchy/dirsrv.crt --dirsrv-cert-file
/root/ca-hierarchy/dirsrv.key --dirsrv-pin amit
--http-cert-file /root/ca-hierarchy/http.crt --http-cert-file
/root/ca-hierarchy/http.key --http-pin amit
--no-pkinit
Now when I tried installing replica using this process:
1. scp http.key, http.crt, dirsrv.key, dirsrv.crt to replica
2. Made replica as IPA client:
# vim /etc/hosts
<ipa-server-ip> <ipa-server-domain>
# ntpdate <ipa-ip-address>
# ipa-client-install --domain <ipa-server-domain-name> --server
<ipa-server-fdqn>
# kinit admin
# getent passwd admin; id admin; //Works
3. # ipa-replica-install --dirsrv-cert-file /root/dirsrv.crt
--dirsrv-cert-file /root/dirsrv.key --dirsrv-pin amit --http-cert-file
/root/http.crt --http-cert-file /root/http.key --http-pin amit --no-pkinit
WARNING: conflicting time&date synchronization service 'chronyd' will
be disabled in favor of ntpd
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.
ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall):
ERROR The full certificate chain is not present in /root/http.crt,
/root/http.key
ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall):
ERROR The ipa-replica-install command failed. See
/var/log/ipareplica-install.log for more information
[root@rhel7u4-7 site-packages]#
Attached ipareplica-install.log
Huge Thanks In Advance
Amit
2018-02-19T01:50:34Z DEBUG Logging to /var/log/ipareplica-install.log
2018-02-19T01:50:34Z DEBUG ipa-replica-install was invoked with arguments []
and options: {'no_dns_sshfp': False, 'skip_schema_check': False, 'no_ntp':
False, 'setup_kra': False, 'ip_addresses': None, 'secondary_rid_base': None,
'netbios_name': None, 'mkhomedir': False, 'http_cert_files': ['/root/http.crt',
'/root/http.key'], 'no_pkinit': True, 'principal': None, 'no_forwarders':
False, 'add_sids': False, 'keytab': None, 'ssh_trust_dns': False, 'no_msdcs':
False, 'domain_name': None, 'setup_adtrust': False, 'http_cert_name': None,
'dirsrv_cert_files': ['/root/dirsrv.crt', '/root/dirsrv.key'],
'no_dnssec_validation': False, 'no_reverse': False, 'pkinit_cert_files': None,
'unattended': False, 'skip_conncheck': False, 'auto_reverse': False,
'auto_forwarders': False, 'no_host_dns': False, 'dirsrv_cert_name': None,
'no_ui_redirect': False, 'dirsrv_config_file': None, 'forwarders': None,
'verbose': False, 'setup_ca': False, 'servers': None, 'pkinit_cert_name': None,
'no_ssh': False, 'enable_compat': False, 'add_agents': False, 'realm_name':
None, 'force_join': False, 'no_sshd': False, 'forward_policy': None,
'rid_base': None, 'quiet': False, 'setup_dns': False, 'host_name': None,
'log_file': None, 'reverse_zones': None, 'allow_zone_overlap': False}
2018-02-19T01:50:34Z DEBUG IPA version 4.5.0-22.el7_4
2018-02-19T01:50:34Z DEBUG Starting external process
2018-02-19T01:50:34Z DEBUG args=/usr/sbin/selinuxenabled
2018-02-19T01:50:34Z DEBUG Process finished, return code=1
2018-02-19T01:50:34Z DEBUG stdout=
2018-02-19T01:50:34Z DEBUG stderr=
2018-02-19T01:50:34Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2018-02-19T01:50:34Z DEBUG Loading Index file from
'/var/lib/ipa/sysrestore/sysrestore.index'
2018-02-19T01:50:34Z DEBUG httpd is not configured
2018-02-19T01:50:34Z DEBUG kadmin is not configured
2018-02-19T01:50:34Z DEBUG dirsrv is not configured
2018-02-19T01:50:34Z DEBUG pki-tomcatd is not configured
2018-02-19T01:50:34Z DEBUG install is not configured
2018-02-19T01:50:34Z DEBUG krb5kdc is not configured
2018-02-19T01:50:34Z DEBUG ntpd is not configured
2018-02-19T01:50:34Z DEBUG named is not configured
2018-02-19T01:50:34Z DEBUG filestore is tracking no files
2018-02-19T01:50:34Z DEBUG Starting external process
2018-02-19T01:50:34Z DEBUG args=/usr/sbin/httpd -t -D DUMP_VHOSTS
2018-02-19T01:50:34Z DEBUG Process finished, return code=0
2018-02-19T01:50:34Z DEBUG stdout=VirtualHost configuration:
*:8443 rhel7u4-7.gsslab.pnq2.redhat.com
(/etc/httpd/conf.d/nss.conf:83)
2018-02-19T01:50:34Z DEBUG stderr=
2018-02-19T01:50:34Z DEBUG Starting external process
2018-02-19T01:50:34Z DEBUG args=/bin/systemctl is-enabled chronyd.service
2018-02-19T01:50:34Z DEBUG Process finished, return code=0
2018-02-19T01:50:34Z DEBUG stdout=enabled
2018-02-19T01:50:34Z DEBUG stderr=
2018-02-19T01:50:34Z DEBUG Loading Index file from
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2018-02-19T01:50:34Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2018-02-19T01:50:34Z DEBUG Loading Index file from
'/var/lib/ipa/sysrestore/sysrestore.index'
2018-02-19T01:50:34Z DEBUG importing all plugin modules in ipaserver.plugins...
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.aci
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.automember
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.automount
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.baseldap
2018-02-19T01:50:34Z DEBUG ipaserver.plugins.baseldap is not a valid plugin
module
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.baseuser
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.batch
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.ca
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.caacl
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.cert
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.certmap
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.certprofile
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.config
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.delegation
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.dns
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.dnsserver
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.dogtag
2018-02-19T01:50:34Z DEBUG skipping plugin module ipaserver.plugins.dogtag:
dogtag not selected as RA plugin
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.domainlevel
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.group
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.hbac
2018-02-19T01:50:34Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.hbacrule
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.plugins.hbacsvcgroup
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.hbactest
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.host
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.hostgroup
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.idrange
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.idviews
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.internal
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.join
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.ldap2
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.location
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.migration
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.misc
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.netgroup
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.otp
2018-02-19T01:50:34Z DEBUG ipaserver.plugins.otp is not a valid plugin module
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.otpconfig
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.otptoken
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.passwd
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.permission
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.ping
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.pkinit
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.privilege
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.rabase
2018-02-19T01:50:34Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.plugins.realmdomains
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.role
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.schema
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.selfservice
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.plugins.selinuxusermap
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.server
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.serverrole
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.serverroles
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.service
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.plugins.servicedelegation
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.session
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.stageuser
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.sudo
2018-02-19T01:50:34Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.sudocmd
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.plugins.sudocmdgroup
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.sudorule
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.topology
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.trust
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.user
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.vault
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.virtual
2018-02-19T01:50:34Z DEBUG ipaserver.plugins.virtual is not a valid plugin
module
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.whoami
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.plugins.xmlserver
2018-02-19T01:50:34Z DEBUG importing all plugin modules in
ipaserver.install.plugins...
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.adtrust
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.ca_renewal_master
2018-02-19T01:50:34Z DEBUG importing plugin module ipaserver.install.plugins.dns
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.fix_replica_agreements
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.rename_managed
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_ca_topology
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_dna_shared_config
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_idranges
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_ldap_server_list
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_managed_permissions
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_nis
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_pacs
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_passsync
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_ra_cert_store
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_referint
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_services
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.update_uniqueness
2018-02-19T01:50:34Z DEBUG importing plugin module
ipaserver.install.plugins.upload_cacrt
2018-02-19T01:50:36Z DEBUG Starting external process
2018-02-19T01:50:36Z DEBUG args=/usr/bin/certutil -d /tmp/tmp4DdtYD -N -f
/tmp/tmp4DdtYD/pwdfile.txt -f /tmp/tmp4DdtYD/pwdfile.txt
2018-02-19T01:50:36Z DEBUG Process finished, return code=0
2018-02-19T01:50:36Z DEBUG stdout=
2018-02-19T01:50:36Z DEBUG stderr=
2018-02-19T01:50:36Z DEBUG Starting external process
2018-02-19T01:50:36Z DEBUG args=/usr/bin/openssl pkcs8 -topk8 -passout
file:/tmp/tmp4DdtYD/pwdfile.txt -passin file:/tmp/tmpaxUwz6
2018-02-19T01:50:36Z DEBUG Process finished, return code=0
2018-02-19T01:50:36Z DEBUG stdout=-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----
2018-02-19T01:50:36Z DEBUG stderr=
2018-02-19T01:50:36Z DEBUG Starting external process
2018-02-19T01:50:36Z DEBUG args=/usr/bin/certutil -d /tmp/tmp4DdtYD -A -n
[email protected],CN=rhel7u4-6.gsslab.pnq2.redhat.com,OU=IDM,O=RH,L=Punt,ST=Maha,C=IN
-t ,, -f /tmp/tmp4DdtYD/pwdfile.txt
2018-02-19T01:50:36Z DEBUG Process finished, return code=0
2018-02-19T01:50:36Z DEBUG stdout=
2018-02-19T01:50:36Z DEBUG stderr=
2018-02-19T01:50:36Z DEBUG Starting external process
2018-02-19T01:50:36Z DEBUG args=/usr/bin/openssl pkcs12 -export -in
/tmp/tmpymB6Uo -out /tmp/tmpChgE0J -passin file:/tmp/tmp4DdtYD/pwdfile.txt
-passout file:/tmp/tmpN9hp9l
2018-02-19T01:50:36Z DEBUG Process finished, return code=0
2018-02-19T01:50:36Z DEBUG stdout=
2018-02-19T01:50:36Z DEBUG stderr=
2018-02-19T01:50:36Z DEBUG Starting external process
2018-02-19T01:50:36Z DEBUG args=/usr/bin/pk12util -d /tmp/tmp4DdtYD -i
/tmp/tmpChgE0J -k /tmp/tmp4DdtYD/pwdfile.txt -v -w /tmp/tmpuXs1KP
2018-02-19T01:50:36Z DEBUG Process finished, return code=0
2018-02-19T01:50:36Z DEBUG stdout=pk12util: PKCS12 IMPORT SUCCESSFUL
2018-02-19T01:50:36Z DEBUG stderr=
2018-02-19T01:50:36Z DEBUG Starting external process
2018-02-19T01:50:36Z DEBUG args=/usr/bin/certutil -d /tmp/tmp4DdtYD -L -f
/tmp/tmp4DdtYD/pwdfile.txt
2018-02-19T01:50:36Z DEBUG Process finished, return code=0
2018-02-19T01:50:36Z DEBUG stdout=
Certificate Nickname Trust Attributes
SSL,S/MIME,JAR/XPI
[email protected],CN=rhel7u4-6.gsslab.pnq2.redhat.com,OU=IDM,O=RH,L=Punt,ST=Maha,C=IN
u,u,u
2018-02-19T01:50:36Z DEBUG stderr=
2018-02-19T01:50:36Z DEBUG Starting external process
2018-02-19T01:50:36Z DEBUG args=/usr/bin/certutil -d /tmp/tmp4DdtYD -O -n
[email protected],CN=rhel7u4-6.gsslab.pnq2.redhat.com,OU=IDM,O=RH,L=Punt,ST=Maha,C=IN
-f /tmp/tmp4DdtYD/pwdfile.txt
2018-02-19T01:50:36Z DEBUG Process finished, return code=0
2018-02-19T01:50:36Z DEBUG
stdout="[email protected],CN=rhel7u4-6.gsslab.pnq2.redhat.com,OU=IDM,O=RH,L=Punt,ST=Maha,C=IN"
[[email protected],CN=rhel7u4-6.gsslab.pnq2.redhat.com,OU=IDM,O=RH,L=Punt,ST=Maha,C=IN]
2018-02-19T01:50:36Z DEBUG stderr=
2018-02-19T01:50:36Z DEBUG File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
return_value = self.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 333,
in run
cfgr.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 366,
in run
self.validate()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 375,
in validate
for _nothing in self._validator():
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434,
in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 458,
in _handle_validate_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453,
in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424,
in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421,
in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81,
in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59,
in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 636,
in _configure
next(validator)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434,
in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 458,
in _handle_validate_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521,
in _handle_exception
self.__parent._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453,
in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518,
in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453,
in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424,
in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421,
in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81,
in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59,
in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63,
in _install
for _nothing in self._installer(self.parent):
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py",
line 613, in main
replica_promote_check(self)
File
"/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
line 386, in decorated
func(installer)
File
"/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
line 408, in decorated
func(installer)
File
"/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py",
line 1040, in promote_check
host_name=config.host_name)
File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py",
line 1059, in load_pkcs12
(", ".join(cert_files)))
2018-02-19T01:50:36Z DEBUG The ipa-replica-install command failed, exception:
ScriptError: The full certificate chain is not present in /root/http.crt,
/root/http.key
2018-02-19T01:50:36Z ERROR The full certificate chain is not present in
/root/http.crt, /root/http.key
2018-02-19T01:50:36Z ERROR The ipa-replica-install command failed. See
/var/log/ipareplica-install.log for more information
_______________________________________________
FreeIPA-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
