The ipareplica-install.log file in attachment ...
2015-04-16 2:22 GMT+02:00 Rob Crittenden <rcrit...@redhat.com>:
> Rich Megginson wrote:
> > On 04/15/2015 02:58 PM, James James wrote:
> >> Nothing on the replica .. maybye a process on the master. How can I
> >> check that ?
> >
> > I have no idea. But it seems highly unlikely that a process on the
> > master is able to shutdown a process on the replica . . .
> >
> > I would say that there is some problem with the ipa-replica-install not
> > properly checking the status - see below:
> >
> >>
> >> 2015-04-15 21:37 GMT+02:00 Rich Megginson <rmegg...@redhat.com
> >> <mailto:rmegg...@redhat.com>>:
> >>
> >> On 04/15/2015 12:43 PM, James James wrote:
> >>> Here the log
> >>>
> >>> 2015-04-15 18:58 GMT+02:00 Rich Megginson <rmegg...@redhat.com
> >>> <mailto:rmegg...@redhat.com>>:
> >>>
> >>> On 04/15/2015 09:46 AM, James James wrote:
> >>>> Hello,
> >>>>
> >>>> I have been looking to solve my problem but I 'm asking for
> >>>> some help.
> >>>>
> >>>> The replication begins but cannot be completed ....
> >>>>
> >>>> I want to install a new fresh replica but I've always got
> >>>> this error :
> >>>>
> >>>> [21/35]: configure dirsrv ccache
> >>>> [22/35]: enable SASL mapping fallback
> >>>> [23/35]: restarting directory server
> >>>> [24/35]: setting up initial replication
> >>>> Starting replication, please wait until this has completed.
> >>>> Update in progress, 127 seconds elapsed
> >>>> Update in progress yet not in progress
> >>>>
> >>>> Update in progress yet not in progress
> >>>
> >
> > in progress yet not in progress???? The error log below clearly shows
> > that replica init succeeded after 127 seconds.
> >
> > IPA-ers - wasn't there some bug about checking replica status properly?
> >
>
> The loop looks at nsds5BeginReplicaRefresh, nsds5replicaUpdateInProgress
> and nsds5ReplicaLastInitStatus.
>
> It loops looking for nsds5BeginReplicaRefresh. If there is no value it
> prints "Update in progress, %d seconds elapsed". Once it gets a status,
> the update is done, and it looks at nsds5ReplicaLastInitStatus. If it
> isn't empty, doesn't include 'replica busy' or 'Total update succeeded'
> then it looks to see if nsds5replicaUpdateInProgress is TRUE. If it is,
> ir prints Update in progress yet not in progress and tries the loop again.
>
> AFAICT this part of a replica install doesn't restart 389-ds.
>
> /var/log/ipareplica-install.log may hold some details.
>
> rob
>
>
2015-04-15T15:06:11Z DEBUG /usr/sbin/ipa-replica-install was invoked with argument "/var/lib/ipa/replica-info-ipa1.example.com.gpg" and options: {'no_forwarders': False, 'conf_ssh': True, 'skip_schema_check': False, 'ui_redirect': True, 'trust_sshfp': False, 'unattended': False, 'ip_addresses': [], 'no_host_dns': False, 'mkhomedir': False, 'no_reverse': False, 'setup_dns': False, 'create_sshfp': True, 'conf_sshd': True, 'forwarders': None, 'debug': False, 'conf_ntp': True, 'setup_ca': False, 'skip_conncheck': False, 'reverse_zones': []}
2015-04-15T15:06:11Z DEBUG IPA version 4.1.0-18.el7.centos.3
2015-04-15T15:06:11Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'
2015-04-15T15:06:11Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2015-04-15T15:06:11Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2015-04-15T15:06:11Z DEBUG Starting external process
2015-04-15T15:06:11Z DEBUG args='/usr/sbin/httpd' '-t' '-D' 'DUMP_VHOSTS'
2015-04-15T15:06:11Z DEBUG Process finished, return code=0
2015-04-15T15:06:11Z DEBUG stdout=VirtualHost configuration:
*:8443 is a NameVirtualHost
default server ipa1.example.com (/etc/httpd/conf.d/nss.conf:86)
port 8443 namevhost ipa1.example.com (/etc/httpd/conf.d/nss.conf:86)
port 8443 namevhost ipa1.example.com (/etc/httpd/conf.d/nss.conf:86)
2015-04-15T15:06:11Z DEBUG stderr=
2015-04-15T15:06:11Z DEBUG Starting external process
2015-04-15T15:06:11Z DEBUG args='/bin/systemctl' 'is-enabled' 'chronyd.service'
2015-04-15T15:06:11Z DEBUG Process finished, return code=1
2015-04-15T15:06:11Z DEBUG stdout=
2015-04-15T15:06:11Z DEBUG stderr=Failed to issue method call: No such file or directory
2015-04-15T15:06:11Z DEBUG Starting external process
2015-04-15T15:06:11Z DEBUG args='/bin/systemctl' 'is-active' 'chronyd.service'
2015-04-15T15:06:11Z DEBUG Process finished, return code=3
2015-04-15T15:06:11Z DEBUG stdout=unknown
2015-04-15T15:06:11Z DEBUG stderr=
2015-04-15T15:06:15Z DEBUG Starting external process
2015-04-15T15:06:15Z DEBUG args='/usr/bin/gpg-agent' '--batch' '--homedir' '/tmp/tmpxNp5r9ipa/ipa-8fobNZ/.gnupg' '--daemon' '/usr/bin/gpg' '--batch' '--homedir' '/tmp/tmpxNp5r9ipa/ipa-8fobNZ/.gnupg' '--passphrase-fd' '0' '--yes' '--no-tty' '-o' '/tmp/tmpxNp5r9ipa/files.tar' '-d' '/var/lib/ipa/replica-info-ipa1.example.com.gpg'
2015-04-15T15:06:15Z DEBUG Process finished, return code=0
2015-04-15T15:06:15Z DEBUG Starting external process
2015-04-15T15:06:15Z DEBUG args='tar' 'xf' '/tmp/tmpxNp5r9ipa/files.tar' '-C' '/tmp/tmpxNp5r9ipa'
2015-04-15T15:06:15Z DEBUG Process finished, return code=0
2015-04-15T15:06:15Z DEBUG stdout=
2015-04-15T15:06:15Z DEBUG stderr=
2015-04-15T15:06:15Z DEBUG Installing replica file with version 300 (0 means no version in prepared file).
2015-04-15T15:06:15Z DEBUG Check if ipa1.example.com is a primary hostname for localhost
2015-04-15T15:06:15Z DEBUG Primary hostname for localhost: ipa1.example.com
2015-04-15T15:06:15Z DEBUG Search DNS for ipa1.example.com
2015-04-15T15:06:15Z DEBUG Check if ipa1.example.com is not a CNAME
2015-04-15T15:06:15Z DEBUG Check reverse address of 193.55.176.68
2015-04-15T15:06:15Z DEBUG Found reverse name: ipa1.example.com
2015-04-15T15:06:15Z DEBUG Check if ipa.example.com is a primary hostname for localhost
2015-04-15T15:06:15Z DEBUG Primary hostname for localhost: ipa.example.com
2015-04-15T15:06:15Z DEBUG Search DNS for ipa.example.com
2015-04-15T15:06:15Z DEBUG Check if ipa.example.com is not a CNAME
2015-04-15T15:06:15Z DEBUG Check reverse address of 193.55.176.37
2015-04-15T15:06:15Z DEBUG Found reverse name: ipa.example.com
2015-04-15T15:06:15Z DEBUG Starting external process
2015-04-15T15:06:15Z DEBUG args='/usr/sbin/ipa-replica-conncheck' '--master' 'ipa.example.com' '--auto-master-check' '--realm' 'example.com' '--principal' 'admin' '--hostname' 'ipa1.example.com'
2015-04-15T15:06:20Z DEBUG Process finished, return code=0
2015-04-15T15:06:20Z DEBUG Starting external process
2015-04-15T15:06:20Z DEBUG args='/sbin/ip' '-family' 'inet' '-oneline' 'address' 'show'
2015-04-15T15:06:20Z DEBUG Process finished, return code=0
2015-04-15T15:06:20Z DEBUG stdout=1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever
2: eth0 inet 193.55.176.68/24 brd 193.55.176.255 scope global dynamic eth0\ valid_lft 40027sec preferred_lft 40027sec
2015-04-15T15:06:20Z DEBUG stderr=
2015-04-15T15:06:20Z DEBUG importing all plugin modules in '/usr/lib/python2.7/site-packages/ipalib/plugins'...
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/aci.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/automember.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/automount.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/baseldap.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/batch.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/cert.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/config.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/delegation.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/dns.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/group.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/hbacrule.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/hbacsvc.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/hbacsvcgroup.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/hbactest.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/host.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/hostgroup.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/idrange.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/idviews.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/internal.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/kerberos.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/krbtpolicy.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/migration.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/misc.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/netgroup.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/otptoken.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/otptoken_yubikey.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/passwd.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/permission.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/ping.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/pkinit.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/privilege.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/pwpolicy.py'
2015-04-15T15:06:20Z DEBUG Starting external process
2015-04-15T15:06:20Z DEBUG args='klist' '-V'
2015-04-15T15:06:20Z DEBUG Process finished, return code=0
2015-04-15T15:06:20Z DEBUG stdout=Kerberos 5 version 1.12.2
2015-04-15T15:06:20Z DEBUG stderr=
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/radiusproxy.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/realmdomains.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/role.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/rpcclient.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/selfservice.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/selinuxusermap.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/service.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/sudocmd.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/sudocmdgroup.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/sudorule.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/trust.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/user.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipalib/plugins/virtual.py'
2015-04-15T15:06:20Z DEBUG importing all plugin modules in '/usr/lib/python2.7/site-packages/ipaserver/install/plugins'...
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/adtrust.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/baseupdate.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/ca_renewal_master.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/dns.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/fix_replica_agreements.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/rename_managed.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_idranges.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_managed_permissions.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_pacs.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_passsync.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_referint.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_services.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/update_uniqueness.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/updateclient.py'
2015-04-15T15:06:20Z DEBUG importing plugin module '/usr/lib/python2.7/site-packages/ipaserver/install/plugins/upload_cacrt.py'
2015-04-15T15:06:22Z DEBUG group dirsrv exists
2015-04-15T15:06:22Z DEBUG user dirsrv exists
2015-04-15T15:06:22Z DEBUG Created connection context.ldap2_41905872
2015-04-15T15:06:22Z DEBUG flushing ldaps://ipa.example.com from SchemaCache
2015-04-15T15:06:22Z DEBUG retrieving schema for SchemaCache url=ldaps://ipa.example.com conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x289a758>
2015-04-15T15:06:22Z DEBUG Created connection context.ldap2
2015-04-15T15:06:22Z DEBUG flushing ldaps://ipa.example.com from SchemaCache
2015-04-15T15:06:22Z DEBUG retrieving schema for SchemaCache url=ldaps://ipa.example.com conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x3f0d5a8>
2015-04-15T15:06:22Z DEBUG Destroyed connection context.ldap2
2015-04-15T15:06:22Z DEBUG No IPA DNS servers, skipping forward/reverse resolution check
2015-04-15T15:06:22Z DEBUG Destroyed connection context.ldap2_41905872
2015-04-15T15:06:22Z DEBUG Starting external process
2015-04-15T15:06:22Z DEBUG args='/bin/systemctl' 'is-enabled' 'chronyd.service'
2015-04-15T15:06:22Z DEBUG Process finished, return code=1
2015-04-15T15:06:22Z DEBUG stdout=
2015-04-15T15:06:22Z DEBUG stderr=Failed to issue method call: No such file or directory
2015-04-15T15:06:22Z DEBUG Starting external process
2015-04-15T15:06:22Z DEBUG args='/bin/systemctl' 'is-active' 'chronyd.service'
2015-04-15T15:06:22Z DEBUG Process finished, return code=3
2015-04-15T15:06:22Z DEBUG stdout=unknown
2015-04-15T15:06:22Z DEBUG stderr=
2015-04-15T15:06:22Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2015-04-15T15:06:22Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2015-04-15T15:06:22Z DEBUG Configuring NTP daemon (ntpd)
2015-04-15T15:06:22Z DEBUG [1/4]: stopping ntpd
2015-04-15T15:06:22Z DEBUG Starting external process
2015-04-15T15:06:22Z DEBUG args='/bin/systemctl' 'is-active' 'ntpd.service'
2015-04-15T15:06:22Z DEBUG Process finished, return code=3
2015-04-15T15:06:22Z DEBUG stdout=unknown
2015-04-15T15:06:22Z DEBUG stderr=
2015-04-15T15:06:22Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2015-04-15T15:06:22Z DEBUG Starting external process
2015-04-15T15:06:22Z DEBUG args='/bin/systemctl' 'stop' 'ntpd.service'
2015-04-15T15:06:22Z DEBUG Process finished, return code=0
2015-04-15T15:06:22Z DEBUG stdout=
2015-04-15T15:06:22Z DEBUG stderr=
2015-04-15T15:06:22Z DEBUG duration: 0 seconds
2015-04-15T15:06:22Z DEBUG [2/4]: writing configuration
2015-04-15T15:06:22Z DEBUG Backing up system configuration file '/etc/ntp.conf'
2015-04-15T15:06:22Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2015-04-15T15:06:22Z DEBUG Backing up system configuration file '/etc/sysconfig/ntpd'
2015-04-15T15:06:22Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2015-04-15T15:06:22Z DEBUG duration: 0 seconds
2015-04-15T15:06:22Z DEBUG [3/4]: configuring ntpd to start on boot
2015-04-15T15:06:22Z DEBUG Starting external process
2015-04-15T15:06:22Z DEBUG args='/bin/systemctl' 'is-enabled' 'ntpd.service'
2015-04-15T15:06:22Z DEBUG Process finished, return code=1
2015-04-15T15:06:22Z DEBUG stdout=disabled
2015-04-15T15:06:22Z DEBUG stderr=
2015-04-15T15:06:22Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2015-04-15T15:06:22Z DEBUG Starting external process
2015-04-15T15:06:22Z DEBUG args='/bin/systemctl' 'enable' 'ntpd.service'
2015-04-15T15:06:22Z DEBUG Process finished, return code=0
2015-04-15T15:06:22Z DEBUG stdout=
2015-04-15T15:06:22Z DEBUG stderr=ln -s '/usr/lib/systemd/system/ntpd.service' '/etc/systemd/system/multi-user.target.wants/ntpd.service'
2015-04-15T15:06:22Z DEBUG duration: 0 seconds
2015-04-15T15:06:22Z DEBUG [4/4]: starting ntpd
2015-04-15T15:06:22Z DEBUG Starting external process
2015-04-15T15:06:22Z DEBUG args='/bin/systemctl' 'start' 'ntpd.service'
2015-04-15T15:06:22Z DEBUG Process finished, return code=0
2015-04-15T15:06:22Z DEBUG stdout=
2015-04-15T15:06:22Z DEBUG stderr=
2015-04-15T15:06:22Z DEBUG Starting external process
2015-04-15T15:06:22Z DEBUG args='/bin/systemctl' 'is-active' 'ntpd.service'
2015-04-15T15:06:22Z DEBUG Process finished, return code=0
2015-04-15T15:06:22Z DEBUG stdout=active
2015-04-15T15:06:22Z DEBUG stderr=
2015-04-15T15:06:22Z DEBUG duration: 0 seconds
2015-04-15T15:06:22Z DEBUG Done configuring NTP daemon (ntpd).
2015-04-15T15:06:22Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2015-04-15T15:06:22Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2015-04-15T15:06:22Z DEBUG Configuring directory server (dirsrv): Estimated time 1 minute
2015-04-15T15:06:22Z DEBUG [1/35]: creating directory server user
2015-04-15T15:06:22Z DEBUG group dirsrv exists
2015-04-15T15:06:22Z DEBUG user dirsrv exists
2015-04-15T15:06:22Z DEBUG duration: 0 seconds
2015-04-15T15:06:22Z DEBUG [2/35]: creating directory server instance
2015-04-15T15:06:22Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2015-04-15T15:06:22Z DEBUG Backing up system configuration file '/etc/sysconfig/dirsrv'
2015-04-15T15:06:22Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2015-04-15T15:06:22Z DEBUG
dn: dc=example,dc=com
objectClass: top
objectClass: domain
objectClass: pilotObject
dc: example
info: IPA V2.0
2015-04-15T15:06:22Z DEBUG writing inf template
2015-04-15T15:06:22Z DEBUG
[General]
FullMachineName= ipa1.example.com
SuiteSpotUserID= dirsrv
SuiteSpotGroup= dirsrv
ServerRoot= /usr/lib64/dirsrv
[slapd]
ServerPort= 389
ServerIdentifier= example.com
Suffix= dc=example,dc=com
RootDN= cn=Directory Manager
InstallLdifFile= /var/lib/dirsrv/boot.ldif
inst_dir= /var/lib/dirsrv/scripts-example.com
2015-04-15T15:06:22Z DEBUG calling setup-ds.pl
2015-04-15T15:06:22Z DEBUG Starting external process
2015-04-15T15:06:22Z DEBUG args='/usr/sbin/setup-ds.pl' '--silent' '--logfile' '-' '-f' '/tmp/tmpS7vKG0'
2015-04-15T15:06:24Z DEBUG Process finished, return code=0
2015-04-15T15:06:24Z DEBUG stdout=[15/04/15:17:06:24] - [Setup] Info Your new DS instance 'example.com' was successfully created.
Your new DS instance 'example.com' was successfully created.
[15/04/15:17:06:24] - [Setup] Success Exiting . . .
Log file is '-'
Exiting . . .
Log file is '-'
2015-04-15T15:06:24Z DEBUG stderr=
2015-04-15T15:06:24Z DEBUG completed creating ds instance
2015-04-15T15:06:24Z DEBUG restarting ds instance
2015-04-15T15:06:24Z DEBUG Starting external process
2015-04-15T15:06:24Z DEBUG args='/bin/systemctl' '--system' 'daemon-reload'
2015-04-15T15:06:24Z DEBUG Process finished, return code=0
2015-04-15T15:06:24Z DEBUG stdout=
2015-04-15T15:06:24Z DEBUG stderr=
2015-04-15T15:06:24Z DEBUG Starting external process
2015-04-15T15:06:24Z DEBUG args='/bin/systemctl' 'restart' 'dir...@example.com.service'
2015-04-15T15:06:25Z DEBUG Process finished, return code=0
2015-04-15T15:06:25Z DEBUG stdout=
2015-04-15T15:06:25Z DEBUG stderr=
2015-04-15T15:06:25Z DEBUG Starting external process
2015-04-15T15:06:25Z DEBUG args='/bin/systemctl' 'is-active' 'dir...@example.com.service'
2015-04-15T15:06:25Z DEBUG Process finished, return code=0
2015-04-15T15:06:25Z DEBUG stdout=active
2015-04-15T15:06:25Z DEBUG stderr=
2015-04-15T15:06:25Z DEBUG wait_for_open_ports: localhost [389] timeout 300
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/bin/systemctl' 'is-active' 'dir...@example.com.service'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=active
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG done restarting ds instance
2015-04-15T15:06:26Z DEBUG duration: 3 seconds
2015-04-15T15:06:26Z DEBUG [3/35]: adding default schema
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [4/35]: enabling memberof plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/memberof-conf.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpKARRsp'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=replace nsslapd-pluginenabled:
on
add memberofgroupattr:
memberUser
add memberofgroupattr:
memberHost
modifying entry "cn=MemberOf Plugin,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [5/35]: enabling winsync plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/ipa-winsync-conf.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpAuOVai'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
ipa-winsync
add nsslapd-pluginpath:
libipa_winsync
add nsslapd-plugininitfunc:
ipa_winsync_plugin_init
add nsslapd-pluginDescription:
Allows IPA to work with the DS windows sync feature
add nsslapd-pluginid:
ipa-winsync
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat
add nsslapd-plugintype:
preoperation
add nsslapd-pluginenabled:
on
add nsslapd-plugin-depends-on-type:
database
add ipaWinSyncRealmFilter:
(objectclass=krbRealmContainer)
add ipaWinSyncRealmAttr:
cn
add ipaWinSyncNewEntryFilter:
(cn=ipaConfig)
add ipaWinSyncNewUserOCAttr:
ipauserobjectclasses
add ipaWinSyncUserFlatten:
true
add ipaWinsyncHomeDirAttr:
ipaHomesRootDir
add ipaWinsyncLoginShellAttr:
ipaDefaultLoginShell
add ipaWinSyncDefaultGroupAttr:
ipaDefaultPrimaryGroup
add ipaWinSyncDefaultGroupFilter:
(gidNumber=*)(objectclass=posixGroup)(objectclass=groupOfNames)
add ipaWinSyncAcctDisable:
both
add ipaWinSyncForceSync:
true
add ipaWinSyncUserAttr:
uidNumber -1
gidNumber -1
adding new entry "cn=ipa-winsync,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [6/35]: configuring replication version plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/version-conf.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmp4X8u4g'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA Version Replication
add nsslapd-pluginpath:
libipa_repl_version
add nsslapd-plugininitfunc:
repl_version_plugin_init
add nsslapd-plugintype:
preoperation
add nsslapd-pluginenabled:
off
add nsslapd-pluginid:
ipa_repl_version
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA Replication version plugin
add nsslapd-plugin-depends-on-type:
database
add nsslapd-plugin-depends-on-named:
Multimaster Replication Plugin
adding new entry "cn=IPA Version Replication,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [7/35]: enabling IPA enrollment plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/tmp/tmptAjwL5' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmptAKCmE'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
ipa_enrollment_extop
add nsslapd-pluginpath:
libipa_enrollment_extop
add nsslapd-plugininitfunc:
ipaenrollment_init
add nsslapd-plugintype:
extendedop
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipa_enrollment_extop
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
RedHat
add nsslapd-plugindescription:
Enroll hosts into the IPA domain
add nsslapd-plugin-depends-on-type:
database
add nsslapd-realmTree:
dc=example,dc=com
adding new entry "cn=ipa_enrollment_extop,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [8/35]: enabling ldapi
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/tmp/tmpMUsUVB' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpKNbSoe'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=replace nsslapd-ldapilisten:
on
modifying entry "cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [9/35]: configuring uniqueness plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/tmp/tmpA4D8Xi' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpE8m5N9'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
krbPrincipalName uniqueness
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add nsslapd-pluginarg0:
krbPrincipalName
add nsslapd-pluginarg1:
dc=example,dc=com
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
add nsslapd-pluginDescription:
Enforce unique attribute values
adding new entry "cn=krbPrincipalName uniqueness,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
krbCanonicalName uniqueness
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add nsslapd-pluginarg0:
krbCanonicalName
add nsslapd-pluginarg1:
dc=example,dc=com
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
add nsslapd-pluginDescription:
Enforce unique attribute values
adding new entry "cn=krbCanonicalName uniqueness,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
netgroup uniqueness
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add nsslapd-pluginarg0:
cn
add nsslapd-pluginarg1:
cn=ng,cn=alt,dc=example,dc=com
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
add nsslapd-pluginDescription:
Enforce unique attribute values
adding new entry "cn=netgroup uniqueness,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
ipaUniqueID uniqueness
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add nsslapd-pluginarg0:
ipaUniqueID
add nsslapd-pluginarg1:
dc=example,dc=com
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
add nsslapd-pluginDescription:
Enforce unique attribute values
adding new entry "cn=ipaUniqueID uniqueness,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
sudorule name uniqueness
add nsslapd-pluginDescription:
Enforce unique attribute values
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add nsslapd-pluginarg0:
cn
add nsslapd-pluginarg1:
cn=sudorules,cn=sudo,dc=example,dc=com
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
adding new entry "cn=sudorule name uniqueness,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [10/35]: configuring uuid plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/uuid-conf.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmp_SmZO1'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA UUID
add nsslapd-pluginpath:
libipa_uuid
add nsslapd-plugininitfunc:
ipauuid_init
add nsslapd-plugintype:
preoperation
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipauuid_version
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA UUID plugin
add nsslapd-plugin-depends-on-type:
database
adding new entry "cn=IPA UUID,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/tmp/tmp0IYc0e' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpaofirx'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectclass:
top
extensibleObject
add cn:
IPA Unique IDs
add ipaUuidAttr:
ipaUniqueID
add ipaUuidMagicRegen:
autogenerate
add ipaUuidFilter:
(|(objectclass=ipaObject)(objectclass=ipaAssociation))
add ipaUuidScope:
dc=example,dc=com
add ipaUuidEnforce:
TRUE
adding new entry "cn=IPA Unique IDs,cn=IPA UUID,cn=plugins,cn=config"
modify complete
add objectclass:
top
extensibleObject
add cn:
IPK11 Unique IDs
add ipaUuidAttr:
ipk11UniqueID
add ipaUuidMagicRegen:
autogenerate
add ipaUuidFilter:
(objectclass=ipk11Object)
add ipaUuidScope:
dc=example,dc=com
add ipaUuidEnforce:
FALSE
adding new entry "cn=IPK11 Unique IDs,cn=IPA UUID,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [11/35]: configuring modrdn plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/modrdn-conf.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpmcJj9i'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA MODRDN
add nsslapd-pluginpath:
libipa_modrdn
add nsslapd-plugininitfunc:
ipamodrdn_init
add nsslapd-plugintype:
betxnpostoperation
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipamodrdn_version
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA MODRDN plugin
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginPrecedence:
60
adding new entry "cn=IPA MODRDN,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/tmp/tmp0fYJGT' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmp0aCM_l'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectclass:
top
extensibleObject
add cn:
Kerberos Principal Name
add ipaModRDNsourceAttr:
uid
add ipaModRDNtargetAttr:
krbPrincipalName
add ipaModRDNsuffix:
@example.com
add ipaModRDNfilter:
(&(objectclass=posixaccount)(objectclass=krbPrincipalAux))
add ipaModRDNscope:
dc=example,dc=com
adding new entry "cn=Kerberos Principal Name,cn=IPA MODRDN,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [12/35]: configuring DNS plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/ipa-dns-conf.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpN4X11b'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectclass:
top
nsslapdPlugin
extensibleObject
add cn:
IPA DNS
add nsslapd-plugindescription:
IPA DNS support plugin
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipa_dns
add nsslapd-plugininitfunc:
ipadns_init
add nsslapd-pluginpath:
libipa_dns.so
add nsslapd-plugintype:
preoperation
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-pluginversion:
1.0
add nsslapd-plugin-depends-on-type:
database
adding new entry "cn=IPA DNS,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [13/35]: enabling entryUSN plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/entryusn.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpnyPpNn'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=replace nsslapd-entryusn-global:
on
modifying entry "cn=config"
modify complete
replace nsslapd-entryusn-import-initval:
next
modifying entry "cn=config"
modify complete
replace nsslapd-pluginenabled:
on
modifying entry "cn=USN,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [14/35]: configuring lockout plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/lockout-conf.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpiFQmxk'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA Lockout
add nsslapd-pluginpath:
libipa_lockout
add nsslapd-plugininitfunc:
ipalockout_init
add nsslapd-plugintype:
object
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipalockout_version
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA Lockout plugin
add nsslapd-plugin-depends-on-type:
database
adding new entry "cn=IPA Lockout,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [15/35]: creating indices
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/indices.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmphaEyrG'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=add objectClass:
top
nsIndex
add cn:
krbPrincipalName
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=krbPrincipalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsIndex
add cn:
ou
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=ou,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsIndex
add cn:
carLicense
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=carLicense,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsIndex
add cn:
title
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=title,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsIndex
add cn:
manager
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=manager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsIndex
add cn:
secretary
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=secretary,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsIndex
add cn:
displayname
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=displayname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add nsIndexType:
sub
modifying entry "cn=uid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsIndex
add cn:
uidnumber
add nsSystemIndex:
false
add nsIndexType:
eq
add nsMatchingRule:
integerOrderingMatch
adding new entry "cn=uidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add objectClass:
top
nsIndex
add cn:
gidnumber
add nsSystemIndex:
false
add nsIndexType:
eq
add nsMatchingRule:
integerOrderingMatch
adding new entry "cn=gidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
replace nsIndexType:
eq,pres
modifying entry "cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
replace nsIndexType:
eq,pres
modifying entry "cn=ntUserDomainId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add ObjectClass:
top
nsIndex
add cn:
fqdn
add nsSystemIndex:
false
add nsIndexType:
eq
pres
adding new entry "cn=fqdn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add ObjectClass:
top
nsIndex
add cn:
macAddress
add nsSystemIndex:
false
add nsIndexType:
eq
pres
adding new entry "cn=macAddress,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
memberHost
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberHost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
memberUser
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberUser,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
sourcehost
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=sourcehost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
memberservice
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberservice,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
managedby
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=managedby,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
memberallowcmd
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberallowcmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
memberdenycmd
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberdenycmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
ipasudorunas
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=ipasudorunas,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
ipasudorunasgroup
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=ipasudorunasgroup,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
automountkey
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=automountkey,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
ipakrbprincipalalias
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=ipakrbprincipalalias,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
add cn:
ipauniqueid
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=ipauniqueid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [16/35]: enabling referential integrity plugin
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/referint-conf.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpzJyx7O'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=replace nsslapd-pluginenabled:
on
modifying entry "cn=referential integrity postoperation,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:26Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:26Z DEBUG duration: 0 seconds
2015-04-15T15:06:26Z DEBUG [17/35]: configuring ssl for ds instance
2015-04-15T15:06:26Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/certutil' '-d' '/etc/dirsrv/slapd-example.com/' '-N' '-f' '/etc/dirsrv/slapd-example.com//pwdfile.txt'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/pk12util' '-d' '/etc/dirsrv/slapd-example.com/' '-i' '/tmp/tmpxNp5r9ipa/realm_info/dscert.p12' '-k' '/etc/dirsrv/slapd-example.com//pwdfile.txt' '-v' '-w' '/dev/stdin'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=pk12util: no nickname for cert in PKCS12 file.
pk12util: using nickname: ipa1.example.com - CNRS
pk12util: PKCS12 IMPORT SUCCESSFUL
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/certutil' '-d' '/etc/dirsrv/slapd-example.com/' '-L'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=
Certificate Nickname Trust Attributes
SSL,S/MIME,JAR/XPI
ipa1.example.com - CNRS u,u,u
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/certutil' '-d' '/etc/dirsrv/slapd-example.com/' '-A' '-n' 'CA 1' '-t' ',,' '-a'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/certutil' '-d' '/etc/dirsrv/slapd-example.com/' '-O' '-n' 'ipa1.example.com - CNRS'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout="CA 1" [CN=CNRS2-Standard,O=CNRS,C=FR]
"ipa1.example.com - CNRS" [E=sys...@example.com,CN=ipa1.example.com,OU=UMR7161,O=CNRS,C=FR]
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/certutil' '-d' '/etc/dirsrv/slapd-example.com/' '-M' '-n' 'CA 1' '-t' 'C,,'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/certutil' '-d' '/etc/dirsrv/slapd-example.com/' '-O' '-n' 'ipa1.example.com - CNRS'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout="CA 1" [CN=CNRS2-Standard,O=CNRS,C=FR]
"ipa1.example.com - CNRS" [E=sys...@example.com,CN=ipa1.example.com,OU=UMR7161,O=CNRS,C=FR]
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/certutil' '-d' '/etc/dirsrv/slapd-example.com/' '-L' '-n' 'CA 1' '-a'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/certutil' '-d' '/etc/dirsrv/slapd-example.com/' '-L'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=
Certificate Nickname Trust Attributes
SSL,S/MIME,JAR/XPI
CA 1 C,,
ipa1.example.com - CNRS u,u,u
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG Starting external process
2015-04-15T15:06:26Z DEBUG args='/usr/bin/certutil' '-d' '/etc/dirsrv/slapd-example.com/' '-L' '-n' 'ipa1.example.com - CNRS' '-a'
2015-04-15T15:06:26Z DEBUG Process finished, return code=0
2015-04-15T15:06:26Z DEBUG stdout=-----BEGIN CERTIFICATE-----
MIIEGjCCAwKgAwIBAgIDAJlNMA0GCSqGSIb3DQEBBQUAMDUxCzAJBgNVBAYTAkZS
MQ0wCwYDVQQKEwRDTlJTMRcwFQYDVQQDEw5DTlJTMi1TdGFuZGFyZDAeFw0xNTA0
MTUxNDA2MzRaFw0xNzA0MTQxNDA2MzRaMH4xCzAJBgNVBAYTAkZSMQ0wCwYDVQQK
EwRDTlJTMRAwDgYDVQQLEwdVTVI3MTYxMSIwIAYDVQQDExlpcGExLmxpeC5wb2x5
dGVjaG5pcXVlLmZyMSowKAYJKoZIhvcNAQkBFhtzeXNyZXNAbGl4LnBvbHl0ZWNo
bmlxdWUuZnIwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANQbDXHSdqOwM4mD
w0qR4h2lmZ97E9a12ce1jcm8JLAJ6Un46mLlg/XiV76tbl1MCQ0vsLS7qa8kAuD2
Unt8bQTrPcMhQ9iq132LAEMnNpqPbqnz28bL4vC13JtzmhyXVZF1PHbAwBGXue/J
+cyRLfeL/jxenucYqDP4fh8B2yKxAgMBAAGjggFsMIIBaDAMBgNVHRMBAf8EAjAA
MBEGCWCGSAGG+EIBAQQEAwIGwDAOBgNVHQ8BAf8EBAMCBeAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMDAGCWCGSAGG+EIBDQQjFiFDZXJ0aWZpY2F0IHNl
cnZldXIgQ05SUzItU3RhbmRhcmQwHQYDVR0OBBYEFMIm3tp1V1B9VX88WoU9d3GN
VeVSMFQGA1UdIwRNMEuAFBHj2dFSRxtZsTwbeGZr9KGI7QpboTCkLjAsMQswCQYD
VQQGEwJGUjENMAsGA1UEChMEQ05SUzEOMAwGA1UEAxMFQ05SUzKCAQMwJgYDVR0R
BB8wHYEbc3lzcmVzQGxpeC5wb2x5dGVjaG5pcXVlLmZyMEcGA1UdHwRAMD4wPKA6
oDiGNmh0dHA6Ly9jcmxzLnNlcnZpY2VzLmNucnMuZnIvQ05SUzItU3RhbmRhcmQv
Z2V0ZGVyLmNybDANBgkqhkiG9w0BAQUFAAOCAQEAHAehn55/myJOrW8TF37gC0wc
o2rqIHXHLg6wPBBk+fINZhQjJo7NGhvOfVcLwvAz+yahOdiPUgJnAB4Ira8H2LWU
fLZFAF00jiZ+k9Am8rbaqFyxeaPQ6omv1xW2/fU4NY7X4q93/ugqxGg3w97iZqx5
zhSK5rNLbwLfCmwYsGldI2wieVlmwRXtB2uBLKTN3FrMLXBHxlSLzRNzEFpc8c3S
0cQi2kY0pP0LR8l4zImst5v2HDnnyN2h/m6xDTZnKZ7NUSNVmHycbj5kOGWKTDV2
np9ES/3gtyf4M4b6mev1M+zqEyhTQ1Zh/Sl602ikl+C4TovCsJ89PkXFBkHUQw==
-----END CERTIFICATE-----
2015-04-15T15:06:26Z DEBUG stderr=
2015-04-15T15:06:26Z DEBUG flushing ldap://ipa1.example.com:389 from SchemaCache
2015-04-15T15:06:26Z DEBUG retrieving schema for SchemaCache url=ldap://ipa1.example.com:389 conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x273cfc8>
2015-04-15T15:06:27Z DEBUG duration: 0 seconds
2015-04-15T15:06:27Z DEBUG [18/35]: configuring certmap.conf
2015-04-15T15:06:27Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
2015-04-15T15:06:27Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
2015-04-15T15:06:27Z DEBUG duration: 0 seconds
2015-04-15T15:06:27Z DEBUG [19/35]: configure autobind for root
2015-04-15T15:06:27Z DEBUG Starting external process
2015-04-15T15:06:27Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/usr/share/ipa/root-autobind.ldif' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmpDH3vVW'
2015-04-15T15:06:27Z DEBUG Process finished, return code=0
2015-04-15T15:06:27Z DEBUG stdout=add objectClass:
extensibleObject
top
add cn:
root-autobind
add uidNumber:
0
add gidNumber:
0
adding new entry "cn=root-autobind,cn=config"
modify complete
replace nsslapd-ldapiautobind:
on
modifying entry "cn=config"
modify complete
replace nsslapd-ldapimaptoentries:
on
modifying entry "cn=config"
modify complete
2015-04-15T15:06:27Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:27Z DEBUG duration: 0 seconds
2015-04-15T15:06:27Z DEBUG [20/35]: configure new location for managed entries
2015-04-15T15:06:27Z DEBUG Starting external process
2015-04-15T15:06:27Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/tmp/tmpyGDHM9' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmp13B2md'
2015-04-15T15:06:27Z DEBUG Process finished, return code=0
2015-04-15T15:06:27Z DEBUG stdout=add nsslapd-pluginConfigArea:
cn=Definitions,cn=Managed Entries,cn=etc,dc=example,dc=com
modifying entry "cn=Managed Entries,cn=plugins,cn=config"
modify complete
2015-04-15T15:06:27Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:27Z DEBUG duration: 0 seconds
2015-04-15T15:06:27Z DEBUG [21/35]: configure dirsrv ccache
2015-04-15T15:06:27Z DEBUG Backing up system configuration file '/etc/sysconfig/dirsrv'
2015-04-15T15:06:27Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2015-04-15T15:06:27Z DEBUG Starting external process
2015-04-15T15:06:27Z DEBUG args='/usr/sbin/selinuxenabled'
2015-04-15T15:06:27Z DEBUG Process finished, return code=0
2015-04-15T15:06:27Z DEBUG stdout=
2015-04-15T15:06:27Z DEBUG stderr=
2015-04-15T15:06:27Z DEBUG Starting external process
2015-04-15T15:06:27Z DEBUG args='/sbin/restorecon' '/etc/sysconfig/dirsrv'
2015-04-15T15:06:27Z DEBUG Process finished, return code=0
2015-04-15T15:06:27Z DEBUG stdout=
2015-04-15T15:06:27Z DEBUG stderr=
2015-04-15T15:06:27Z DEBUG duration: 0 seconds
2015-04-15T15:06:27Z DEBUG [22/35]: enable SASL mapping fallback
2015-04-15T15:06:27Z DEBUG Starting external process
2015-04-15T15:06:27Z DEBUG args='/usr/bin/ldapmodify' '-v' '-f' '/tmp/tmpk3N55V' '-H' 'ldap://ipa1.example.com:389' '-x' '-D' 'cn=Directory Manager' '-y' '/tmp/tmp7YWz3y'
2015-04-15T15:06:27Z DEBUG Process finished, return code=0
2015-04-15T15:06:27Z DEBUG stdout=replace nsslapd-sasl-mapping-fallback:
on
modifying entry "cn=config"
modify complete
2015-04-15T15:06:27Z DEBUG stderr=ldap_initialize( ldap://ipa1.example.com:389/??base )
2015-04-15T15:06:27Z DEBUG duration: 0 seconds
2015-04-15T15:06:27Z DEBUG [23/35]: restarting directory server
2015-04-15T15:06:27Z DEBUG Starting external process
2015-04-15T15:06:27Z DEBUG args='/bin/systemctl' '--system' 'daemon-reload'
2015-04-15T15:06:27Z DEBUG Process finished, return code=0
2015-04-15T15:06:27Z DEBUG stdout=
2015-04-15T15:06:27Z DEBUG stderr=
2015-04-15T15:06:27Z DEBUG Starting external process
2015-04-15T15:06:27Z DEBUG args='/bin/systemctl' 'restart' 'dir...@example.com.service'
2015-04-15T15:06:28Z DEBUG Process finished, return code=0
2015-04-15T15:06:28Z DEBUG stdout=
2015-04-15T15:06:28Z DEBUG stderr=
2015-04-15T15:06:28Z DEBUG Starting external process
2015-04-15T15:06:28Z DEBUG args='/bin/systemctl' 'is-active' 'dir...@example.com.service'
2015-04-15T15:06:28Z DEBUG Process finished, return code=0
2015-04-15T15:06:28Z DEBUG stdout=active
2015-04-15T15:06:28Z DEBUG stderr=
2015-04-15T15:06:28Z DEBUG wait_for_open_ports: localhost [389] timeout 300
2015-04-15T15:06:29Z DEBUG Starting external process
2015-04-15T15:06:29Z DEBUG args='/bin/systemctl' 'is-active' 'dir...@example.com.service'
2015-04-15T15:06:29Z DEBUG Process finished, return code=0
2015-04-15T15:06:29Z DEBUG stdout=active
2015-04-15T15:06:29Z DEBUG stderr=
2015-04-15T15:06:29Z DEBUG duration: 2 seconds
2015-04-15T15:06:29Z DEBUG [24/35]: setting up initial replication
2015-04-15T15:06:29Z DEBUG flushing ldapi://%2fvar%2frun%2fslapd-example.com.socket from SchemaCache
2015-04-15T15:06:29Z DEBUG retrieving schema for SchemaCache url=ldapi://%2fvar%2frun%2fslapd-example.com.socket conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x1d86e18>
2015-04-15T15:06:29Z DEBUG Starting external process
2015-04-15T15:06:29Z DEBUG args='/bin/systemctl' '--system' 'daemon-reload'
2015-04-15T15:06:29Z DEBUG Process finished, return code=0
2015-04-15T15:06:29Z DEBUG stdout=
2015-04-15T15:06:29Z DEBUG stderr=
2015-04-15T15:06:29Z DEBUG Starting external process
2015-04-15T15:06:29Z DEBUG args='/bin/systemctl' 'restart' 'dir...@example.com.service'
2015-04-15T15:06:31Z DEBUG Process finished, return code=0
2015-04-15T15:06:31Z DEBUG stdout=
2015-04-15T15:06:31Z DEBUG stderr=
2015-04-15T15:06:31Z DEBUG Starting external process
2015-04-15T15:06:31Z DEBUG args='/bin/systemctl' 'is-active' 'dir...@example.com.service'
2015-04-15T15:06:31Z DEBUG Process finished, return code=0
2015-04-15T15:06:31Z DEBUG stdout=active
2015-04-15T15:06:31Z DEBUG stderr=
2015-04-15T15:06:31Z DEBUG wait_for_open_ports: localhost [389] timeout 300
2015-04-15T15:06:32Z DEBUG flushing ldap://ipa.example.com:389 from SchemaCache
2015-04-15T15:06:32Z DEBUG retrieving schema for SchemaCache url=ldap://ipa.example.com:389 conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x484f4d0>
2015-04-15T15:06:32Z DEBUG flushing ldaps://ipa1.example.com:636 from SchemaCache
2015-04-15T15:06:32Z DEBUG retrieving schema for SchemaCache url=ldaps://ipa1.example.com:636 conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x4170290>
2015-04-15T15:08:44Z DEBUG Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 382, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 372, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 368, in __setup_replica
r_bindpw=self.dm_password)
File "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py", line 969, in setup_replication
raise RuntimeError("Failed to start replication")
RuntimeError: Failed to start replication
2015-04-15T15:08:44Z DEBUG [error] RuntimeError: Failed to start replication
2015-04-15T15:08:44Z DEBUG File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 646, in run_script
return_value = main_function()
File "/usr/sbin/ipa-replica-install", line 700, in main
ds = install_replica_ds(config)
File "/usr/sbin/ipa-replica-install", line 195, in install_replica_ds
ca_file=config.dir + "/ca.crt",
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 355, in create_replica
self.start_creation(runtime=60)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 382, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 372, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 368, in __setup_replica
r_bindpw=self.dm_password)
File "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py", line 969, in setup_replication
raise RuntimeError("Failed to start replication")
2015-04-15T15:08:44Z DEBUG The ipa-replica-install command failed, exception: RuntimeError: Failed to start replication
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
