On Sun, 01 May 2016, Matrix wrote:
Hi, list
I am trying to setup an integration env between IPA and AD Window 2012 R2.
Below error occurred while running "# echo 'RedHat1!' | ipa trust-add --type=ad
examplemedia.net --admin Administrator --password"
# echo 'RedHat1!' | ipa trust-add --type=ad examplemedia.net --admin
Administrator --password
ipa: ERROR: CIFS server configuration does not allow access to \\pipe\lsarpc
IPA / Samba Version, I am running with:
ipa-server-4.2.0-15.el7.x86_64
samba-4.2.3-12.el7_2.x86_64
# tailf /var/log/httpd/error_log
[Sun May 01 08:27:17.493412 2016] [:error] [pid 32267] ipa: INFO:
[jsonserver_session] ad...@dev.example.net: trust_add(u'examplemedia.net',
trust_type=u'ad', realm_admin=u'Administrator', realm_passwd=u'********',
all=False, raw=False, version=u'2.156'): RemoteRetrieveError
[Sun May 01 08:35:00.600654 2016] [:error] [pid 32266] ipa: INFO:
[jsonserver_session] ad...@dev.example.net: trust_add(u'examplemedia.net',
trust_type=u'ad', realm_admin=u'Administrator', realm_passwd=u'********',
all=False, raw=False, version=u'2.156'): RemoteRetrieveError
I have also tried latest ipa-server version shipped by RHEL. the same error
occurred.
It ssems that https://bugzilla.redhat.com/show_bug.cgi?id=1249455 did not fixed
it.
Add 'log level = 100' to /usr/share/ipa/smb.conf.empty and re-try
'ipa trust-add'. You'll get more detailed debugging output in error_log.
--
/ Alexander Bokovoy
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project