On Thu, 23 Jan 2014, Zulkifal Ahmad wrote:
Hi , In reference to the following thread, I already have an entry for AD sever 
in the /etc/hosts file of ipaserver but the issue still remains. Both my DNS 
servers are resolving the records from the opposite side. Any other 
suggestionsto remove this error ?

root@ipaserver <mailto:root@ipaserver># ipa trust-add --type=ad
adexample.com --admin Administrator --password


ipa: ERROR: CIFS server communication error: code "-1073741801",
message "Memory allocation error" (both may be "None")
Add 'log level = 100' to /usr/share/ipa/smb.conf.empty in [global]
section and try again.

You'll get SMB traffic debugging in /var/log/httpd/error_log.

Adding and removing 'log level = 100' to /usr/share/ipa/smb.conf.empty
does not require restarting httpd.




Thanks

Zulkifal Ahmad




On 01/17/2014 06:29 PM, Zulkifal Ahmad wrote:
Hi List , Just wanted to find out if anyone has setup an ipa-AD trust
successfully, According to the instructions in the following link
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/trust-ipa-subdomain.html
everything went well until I hit the point where I had to check the
samba configuration, by typing the command
root@ipaserver <mailto:root@ipaserver># smbclient -L
ipaserver.ipaexample.com -k
smbclient: command not found
and similar for
root@ipaserver <mailto:root@ipaserver># wbinfo --online-status
wbinfo: command not found

I am pretty sure that the command "ipa-trust-install" command did
install samba4 packages as dependencies, anyways I thought these
packages were not necessary and went forward until I got really stuck
when I typed the command .
root@ipaserver <mailto:root@ipaserver># ipa trust-add --type=ad
adexample.com --admin Administrator --password
This gave me a very cruel message
ipa: ERROR: CIFS server communication error: code "-1073741801",
message "Memory allocation error" (both may be "None")
If its this bug " https://bugzilla.redhat.com/show_bug.cgi?id=878168 "

Yes. The solution is:

If configured, the Active Directory (AD) DNS server returns IPv4 and
IPv6 addresses of an AD server. If the FreeIPA server cannot connect to
the AD server with an IPv6 address, running the ipa trust-add command
will fail even if it would be possible to use IPv4. To work around this
problem, add the IPv4 address of the AD server to the /etc/hosts file.
In this case, the FreeIPA server will use only the IPv4 address and
executing ipa trust-add will be successful.

has anyone worked it out. Secondly cifs-utils has dependency on samba3
packages and ipa-ad-trust needs samba4 but samba3 and samba4 don't
like each other , so this is the story of my experience with ipa. Any
suggestions ?

Why do you need cifs-utils on the same server?
cifs-utils to make a system a client to MSFT file server, AFAIU you cant
make IPA server to be a cifs client.

SSSD 1.12 (in works) if going to be capable to work with cifs-utils
instead of samba winbind thus the limitation will be lifted.


My ipa server server OS : CentOS 6.5
ipa server version : 3
Active directory: server 2008 R2 Standard

Thank you
*/ Best Regards/*
//
/Sahibzada .Z. Ahmad/
/System Administrator/*
*


Best Regards

Sahibzada .Z. Ahmad
System Administrator
cell: 1(678)267-0265 (US)
cell: 1(647)339-5434  (Canada)








                                        

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


--
/ Alexander Bokovoy

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to