On Fri, Sep 6, 2024 at 7:36 AM Sina Owolabi via FreeIPA-users < [email protected]> wrote: > > Hi > > Thanks for responding. > Im not sure how to downgrade since CentOS 7 is now cast down from the heavens, hence my ask about migrating to Debian 12 (Is this a good idea?) >
IIRC, Debian 12 only provides client packages, not the server. Rafael > The installed versions are: > # rpm -qa | grep ipa-server > ipa-server-common-4.6.8-5.el7.centos.17.noarch > ipa-server-4.6.8-5.el7.centos.17.x86_64 > ipa-server-dns-4.6.8-5.el7.centos.17.noarch > # rpm -qa | grep bind-dyndb-ldap > bind-dyndb-ldap-11.1-7.el7_9.1.x86_64 > # rpm -qa | grep bind > bind-libs-9.11.4-26.P2.el7_9.16.x86_64 > rpcbind-0.2.0-49.el7.x86_64 > bind-libs-lite-9.11.4-26.P2.el7_9.16.x86_64 > bind-pkcs11-9.11.4-26.P2.el7_9.16.x86_64 > bind-license-9.11.4-26.P2.el7_9.16.noarch > bind-9.11.4-26.P2.el7_9.16.x86_64 > bind-dyndb-ldap-11.1-7.el7_9.1.x86_64 > bind-utils-9.11.4-26.P2.el7_9.16.x86_64 > bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.x86_64 > bind-export-libs-9.11.4-26.P2.el7_9.16.x86_64 > bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.x86_64 > > cordially yours, > > Sina Owolabi > > > On Thu, Sep 5, 2024 at 5:44 PM Florence Blanc-Renaud <[email protected]> wrote: >> >> Hi, >> >> what are the versions of ipa-server, bind-dyndb-ldap and bind? You may be hitting the same issue as discussed in https://lists.fedorahosted.org/archives/list/[email protected]/thread/NC257TSJJXRQEKZNAXNYLPZOXNZFJCTL/ which was solved by dongrading the packages. >> >> flo >> >> On Thu, Sep 5, 2024 at 2:53 PM Sina Owolabi via FreeIPA-users < [email protected]> wrote: >>> >>> Hi all >>> >>> Really seeking for some help. >>> My IPA servers (CentOS 7.9, VERSION: 4.6.8, API_VERSION: 2.237) both have their named-pkcs11 service stop working, and they create core files when restart is attempted. >>> Ive been able to partially mitigate the issue by manually standing up a bind9 service on a Debian 12 vm for now. >>> >>> Please, how can I fix this, or if not possible, I would like to know if there are steps to follow to setup IPA on another Debian 12 Vm and hopefully migrate services and settings there. >>> >>> Typical logs from a named-pkcs11 restart attempt: >>> >>> journalctl -xeu named-pkcs11 >>> Sep 04 21:24:55 ipa0.qriospay.local named-pkcs11[30894]: #6 0x7f7422325b89 in ?? >>> Sep 04 21:24:55 ipa0.qriospay.local named-pkcs11[30894]: #7 0x7f742232f528 in ?? >>> Sep 04 21:24:55 ipa0.qriospay.local named-pkcs11[30894]: #8 0x7f742b286713 in ?? >>> Sep 04 21:24:55 ipa0.qriospay.local named-pkcs11[30894]: #9 0x7f742b28728b in ?? >>> Sep 04 21:24:55 ipa0.qriospay.local named-pkcs11[30894]: #10 0x7f742935cea5 in ?? >>> Sep 04 21:24:55 ipa0.qriospay.local named-pkcs11[30894]: #11 0x7f74283cfb0d in ?? >>> Sep 04 21:24:55 ipa0.qriospay.local named-pkcs11[30894]: exiting (due to assertion failure) >>> Sep 04 21:24:55 ipa0.qriospay.local systemd[1]: named-pkcs11.service: control process exited, code=exited status=1 >>> Sep 04 21:24:55 ipa0.qriospay.local systemd[1]: Failed to start Berkeley Internet Name Domain (DNS) with native PKCS#11. >>> -- Subject: Unit named-pkcs11.service has failed >>> -- Defined-By: systemd >>> -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel >>> -- >>> -- Unit named-pkcs11.service has failed. >>> -- >>> -- The result is failed. >>> Sep 04 21:24:55 ipa0.qriospay.local systemd[1]: Unit named-pkcs11.service entered failed state. >>> Sep 04 21:24:55 ipa0.qriospay.local systemd[1]: named-pkcs11.service failed. >>> >>> Core files: >>> ls /var/named/ >>> core.1569 core.22344 core.22692 core.30894 core.31834 core.3585 core.4117 core.6927 data dynamic named.ca named.localhost slaves >>> core.21923 core.22461 core.2584 core.31739 core.32646 core.3947 core.4723 core.6984 _default.tsigkeys dyndb-ldap named.empty named.loopback tmp-8bAnLCWdq7 >>> >>> cordially yours, >>> >>> Sina Owolabi >>> -- >>> _______________________________________________ >>> FreeIPA-users mailing list -- [email protected] >>> To unsubscribe send an email to [email protected] >>> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ >>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >>> List Archives: https://lists.fedorahosted.org/archives/list/[email protected] >>> Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue > > -- > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue -- Rafael Guterres Jeffman Senior Software Engineer FreeIPA - Red Hat
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
