Trying to promote a client to a replica and it's failing with:
Upgrading IPA:. Estimated time: 1 minute 30 seconds  [1/9]: stopping
directory server  [2/9]: saving configuration  [3/9]: disabling
listeners  [4/9]: enabling DS global lock  [5/9]: starting directory
server  [6/9]: upgrading server  [7/9]: stopping directory server 
[8/9]: restoring configuration  [9/9]: starting directory
serverDone.Restarting the KDCYour system may be partly configured.Run
/usr/sbin/ipa-server-install --uninstall to clean up.
ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall):
ERROR    406 Client Error: Failed to validate message: No recipient
matched the provided key["Failed: [ValueError('Decryption
failed.',)]"]ipa.ipapython.install.cli.install_tool(CompatServerReplica
Install): ERROR    The ipa-replica-install command failed. See
/var/log/ipareplica-install.log for more information
The replica-install log:
2017-10-04T07:22:06Z DEBUG Restarting the KDC2017-10-04T07:22:06Z DEBUG
Starting external process2017-10-04T07:22:06Z DEBUG args=/bin/systemctl
restart krb5kdc.service2017-10-04T07:22:06Z DEBUG Process finished,
return code=02017-10-04T07:22:06Z DEBUG stdout=2017-10-04T07:22:06Z
DEBUG stderr=2017-10-04T07:22:06Z DEBUG Starting external process2017-
10-04T07:22:06Z DEBUG args=/bin/systemctl is-active
krb5kdc.service2017-10-04T07:22:06Z DEBUG Process finished, return
code=02017-10-04T07:22:06Z DEBUG stdout=active
2017-10-04T07:22:06Z DEBUG stderr=2017-10-04T07:22:06Z DEBUG   File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in
execute    return_value = self.run()  File "/usr/lib/python2.7/site-
packages/ipapython/install/cli.py", line 333, in run    cfgr.run() 
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
368, in run    self.execute()  File "/usr/lib/python2.7/site-
packages/ipapython/install/core.py", line 392, in execute    for
_nothing in self._executor():  File "/usr/lib/python2.7/site-
packages/ipapython/install/core.py", line 434, in
__runner    exc_handler(exc_info)  File "/usr/lib/python2.7/site-
packages/ipapython/install/core.py", line 463, in
_handle_execute_exception    self._handle_exception(exc_info)  File
"/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453,
in _handle_exception    six.reraise(*exc_info)  File
"/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424,
in __runner    step()  File "/usr/lib/python2.7/site-
packages/ipapython/install/core.py", line 421, in <lambda>    step =
lambda: next(self.__gen)  File "/usr/lib/python2.7/site-
packages/ipapython/install/util.py", line 81, in
run_generator_with_yield_from    six.reraise(*exc_info)  File
"/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59,
in run_generator_with_yield_from    value = gen.send(prev_value)  File
"/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 658,
in _configure    next(executor)  File "/usr/lib/python2.7/site-
packages/ipapython/install/core.py", line 434, in
__runner    exc_handler(exc_info)  File "/usr/lib/python2.7/site-
packages/ipapython/install/core.py", line 463, in
_handle_execute_exception    self._handle_exception(exc_info)  File
"/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521,
in _handle_exception    self.__parent._handle_exception(exc_info)  File
"/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453,
in _handle_exception    six.reraise(*exc_info)  File
"/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518,
in _handle_exception    super(ComponentBase,
self)._handle_exception(exc_info)  File "/usr/lib/python2.7/site-
packages/ipapython/install/core.py", line 453, in
_handle_exception    six.reraise(*exc_info)  File
"/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424,
in __runner    step()  File "/usr/lib/python2.7/site-
packages/ipapython/install/core.py", line 421, in <lambda>    step =
lambda: next(self.__gen)  File "/usr/lib/python2.7/site-
packages/ipapython/install/util.py", line 81, in
run_generator_with_yield_from    six.reraise(*exc_info)  File
"/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59,
in run_generator_with_yield_from    value = gen.send(prev_value)  File
"/usr/lib/python2.7/site-packages/ipapython/install/common.py", line
63, in _install    for _nothing in self._installer(self.parent):  File
"/usr/lib/python2.7/site-
packages/ipaserver/install/server/__init__.py", line 617, in
main    replica_install(self)  File "/usr/lib/python2.7/site-
packages/ipaserver/install/server/replicainstall.py", line 386, in
decorated    func(installer)  File "/usr/lib/python2.7/site-
packages/ipaserver/install/server/replicainstall.py", line 1477, in
install    custodia.import_dm_password(config.master_host_name)  File
"/usr/lib/python2.7/site-
packages/ipaserver/install/custodiainstance.py", line 124, in
import_dm_password    cli.fetch_key('dm/DMHash')  File
"/usr/lib/python2.7/site-packages/ipaserver/secrets/client.py", line
101, in fetch_key    r.raise_for_status()  File
"/usr/lib/python2.7/site-packages/requests/models.py", line 834, in
raise_for_status    raise HTTPError(http_error_msg, response=self)
2017-10-04T07:22:06Z DEBUG The ipa-replica-install command failed,
exception: HTTPError: 406 Client Error: Failed to validate message: No
recipient matched the provided key["Failed: [ValueError('Decryption
failed.',)]"]2017-10-04T07:22:06Z ERROR 406 Client Error: Failed to
validate message: No recipient matched the provided key["Failed:
[ValueError('Decryption failed.',)]"]2017-10-04T07:22:06Z ERROR The
ipa-replica-install command failed. See /var/log/ipareplica-install.log 
for more information
Not really sure where to look for what is causing the error from here.
Any help appreciated.

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to