On 16.6.2016 21:51, Lukas Slebodnik wrote: > On (16/06/16 11:54), Günther J. Niederwimmer wrote: >> Hello >> >> on my system the ods-exporter i mean have a problem. >> >> I have this in the logs >> CentOS 7.(2) ipa 4.3.1 >> >> Jun 16 11:37:25 ipa systemd: ipa-ods-exporter.service holdoff time over, >> scheduling restart. >> Jun 16 11:37:25 ipa systemd: Started IPA OpenDNSSEC Signer replacement. >> Jun 16 11:37:25 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... >> Jun 16 11:37:25 ipa ipa-ods-exporter: ipa: WARNING: session memcached >> servers >> not running >> Jun 16 11:37:26 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor >> code >> may provide more information (Ticket expired) >> Jun 16 11:37:26 ipa ipa-ods-exporter: Traceback (most recent call last): >> Jun 16 11:37:26 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- >> exporter", line 656, in <module> >> Jun 16 11:37:26 ipa ipa-ods-exporter: ldap.gssapi_bind() >> Jun 16 11:37:26 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ >> ipapython/ipaldap.py", line 1085, in gssapi_bind >> Jun 16 11:37:26 ipa ipa-ods-exporter: '', auth_tokens, server_controls, >> client_controls) >> Jun 16 11:37:26 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ >> contextlib.py", line 35, in __exit__ >> Jun 16 11:37:26 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) >> Jun 16 11:37:26 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ >> ipapython/ipaldap.py", line 992, in error_handler >> Jun 16 11:37:26 ipa ipa-ods-exporter: raise errors.ACIError(info=info) >> Jun 16 11:37:26 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient >> access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. >> Minor code may provide more information (Ticket expired) >> Jun 16 11:37:26 ipa systemd: ipa-ods-exporter.service: main process exited, >> code=exited, status=1/FAILURE >> Jun 16 11:37:26 ipa systemd: Unit ipa-ods-exporter.service entered failed >> state. >> Jun 16 11:37:26 ipa systemd: ipa-ods-exporter.service failed. >> Jun 16 11:38:26 ipa systemd: ipa-ods-exporter.service holdoff time over, >> scheduling restart. >> Jun 16 11:38:26 ipa systemd: Started IPA OpenDNSSEC Signer replacement. >> Jun 16 11:38:26 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... >> Jun 16 11:38:27 ipa ipa-ods-exporter: ipa: WARNING: session memcached >> servers >> not running >> Jun 16 11:38:28 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor >> code >> may provide more information (Ticket expired) >> Jun 16 11:38:28 ipa ipa-ods-exporter: Traceback (most recent call last): >> Jun 16 11:38:28 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- >> exporter", line 656, in <module> >> Jun 16 11:38:28 ipa ipa-ods-exporter: ldap.gssapi_bind() >> Jun 16 11:38:28 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ >> ipapython/ipaldap.py", line 1085, in gssapi_bind >> Jun 16 11:38:28 ipa ipa-ods-exporter: '', auth_tokens, server_controls, >> client_controls) >> Jun 16 11:38:28 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ >> contextlib.py", line 35, in __exit__ >> Jun 16 11:38:28 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) >> Jun 16 11:38:28 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ >> ipapython/ipaldap.py", line 992, in error_handler >> Jun 16 11:38:28 ipa ipa-ods-exporter: raise errors.ACIError(info=info) >> Jun 16 11:38:28 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient >> access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. >> Minor code may provide more information (Ticket expired) > ^^^^^^^^^^^^^^ > Here seems to be a reason why it failed. > But I can't help you more.
Lukas is right. Interesting, this should never happen :-) Please enable debugging using procedure http://www.freeipa.org/page/Troubleshooting#ipa_command_crashes_or_returns_no_data and check logs after next ipa-ods-exporter restart. Thank you! -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
