Hello, Am Montag, 20. Juni 2016, 09:54:11 CEST schrieb Petr Spacek: > On 18.6.2016 15:03, Günther J. Niederwimmer wrote: > > hello, > > > > Am Freitag, 17. Juni 2016, 23:05:32 CEST schrieb Martin Basti: > >> On 17.06.2016 18:29, Günther J. Niederwimmer wrote: > >>> Hello, > >>> > >>> Am Freitag, 17. Juni 2016, 14:13:55 CEST schrieb Martin Basti: > >>>> On 17.06.2016 12:54, Günther J. Niederwimmer wrote: > >>>>> Hello List, > >>>>> > >>>>> Am Freitag, 17. Juni 2016, 07:51:45 CEST schrieb Petr Spacek: > >>>>>> On 16.6.2016 21:51, Lukas Slebodnik wrote: > >>>>>>> On (16/06/16 11:54), Günther J. Niederwimmer wrote: > >>>>>>>> Hello > >>>>>>>> > >>>>>>>> on my system the ods-exporter i mean have a problem. > >>>>>>>> > >>>>>>>> I have this in the logs > >>>>>>>> CentOS 7.(2) ipa 4.3.1 > >>>>>>>> > >>>>>>>> Jun 16 11:38:28 ipa ipa-ods-exporter: raise > >>>>>>>> errors.ACIError(info=info) > >>>>>>>> Jun 16 11:38:28 ipa ipa-ods-exporter: ipalib.errors.ACIError: > >>>>>>>> Insufficient > >>>>>>>> access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS > >>>>>>>> failure. > >>>>>>>> Minor code may provide more information (Ticket expired) > >>>>>>>> > >>>>>>> ^^^^^^^^^^^^^^ > >>>>>>> > >>>>>>> Here seems to be a reason why it failed. > >>>>>>> But I can't help you more. > >>>>>> > >>>>>> Lukas is right. Interesting, this should never happen :-) > >>>>> > >>>>> this have I also found ;-) > >>>>> > >>>>>> Please enable debugging using procedure > >>>>>> http://www.freeipa.org/page/Troubleshooting#ipa_command_crashes_or_re > >>>>>> tu > >>>>>> rn > >>>>>> s_n o_data and check logs after next ipa-ods-exporter restart. > >>>>>> Thank you! > >>>>> > >>>>> OK, > >>>>> > >>>>> I attache the messages log? > >>>>> > >>>>> I mean this is a problem with my DNS ? > >>>> > >>>> Hello, > >>>> can you check kerberos status of ipa-ods-exporter service in webUI? > >>>> > >>>> identity/services/ipa-ods-exported/<hostname> > >>>> There should be kerberos status in right top corner in details view > >>> > >>> I have a > >>> identity/services/ipa-ods-exporter/.. > >>> > >>> with a "Kerberos Key Present, Service Provisioned" > >>> > >>> but no Certificate ? > >> > >> Can you try, > >> > >> # kinit -kt /etc/ipa/dnssec/ipa-ods-exporter.keytab > >> ipa-ods-exporter/$(hostname) > > > > OK > > I can do a "kinit -kt /etc/ipa/dnssec/ipa-ods-exporter.keytab ipa-ods- > > exporter/$(hostname)" > > > > written on one line!! is this OK. > > > >> and do ldapsearch > >> # ldapsearch -Y GSSAPI > > > > and also ldapsearch is OK > > > >> It should show us if keytab is okay > > > > But the Error is present :-(. > > We need to see precise error. Please copy&paste it into the e-mail.
that is it. Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.login_password() at '/session/login_password' Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver() at '/xml' Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_session() at '/session/json' Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.sync_token() at '/session/sync_token' Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.login_kerberos() at '/session/login_kerberos' Jun 20 18:43:34 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_kerb() at '/json' Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.change_password() at '/session/change_password' Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: Initializing principal ipa- ods-exporter/ipa.4gjn.com using keytab /etc/ipa/dnssec/ipa-ods-exporter.keytab Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: using ccache /var/ opendnssec/tmp/ipa-ods-exporter.ccache Jun 20 18:43:35 ipa ipa-ods-exporter: ipa: DEBUG: Attempt 1/5: success Jun 20 18:43:35 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 20 18:43:35 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 20 18:43:35 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 20 18:43:35 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 20 18:43:35 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 20 18:43:35 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 20 18:43:35 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 20 18:43:35 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 20 18:43:35 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 20 18:43:35 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 20 18:43:35 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 20 18:43:35 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 20 18:43:35 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 20 18:43:35 ipa systemd: ipa-ods-exporter.service failed. Jun 20 18:44:35 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 20 18:44:35 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 20 18:44:35 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing all plugin modules in ipalib.plugins... Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.aci Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.automember Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.automount Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.baseldap Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.baseuser Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.batch Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.caacl Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.cert Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.certprofile Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.config Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.delegation Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.dns Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.domainlevel Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.group Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.hbacrule Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.hbacsvc Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.hbacsvcgroup Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.hbactest Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.host Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.hostgroup Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.idrange Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.idviews Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.internal Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.krbtpolicy Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.migration Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.misc Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.netgroup Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.otpconfig Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.otptoken Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.otptoken_yubikey Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.passwd Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.permission Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.ping Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.privilege Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.pwpolicy Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: Starting external process Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: args=klist -V Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: Process finished, return code=0 Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: stdout=Kerberos 5 version 1.13.2 Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: stderr= Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.radiusproxy Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.realmdomains Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.role Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.rpcclient Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.selfservice Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.selinuxusermap Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.server Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.service Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.servicedelegation Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.session Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.stageuser Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.sudocmd Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.sudocmdgroup Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.sudorule Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.topology Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.trust Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.user Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.vault Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipalib.plugins.virtual Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing all plugin modules in ipaserver.plugins... Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipaserver.plugins.dogtag Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipaserver.plugins.join Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipaserver.plugins.ldap2 Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipaserver.plugins.rabase Jun 20 18:44:35 ipa ipa-ods-exporter: ipa: DEBUG: importing plugin module ipaserver.plugins.xmlserver Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: SessionAuthManager.register: name=jsonserver_session_66359568 Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: SessionAuthManager.register: name=xmlserver_session_66361360 Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.sync_token() at '/session/sync_token' Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver_session() at '/session/xml' Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.login_password() at '/session/login_password' Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver() at '/xml' Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_session() at '/session/json' Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.change_password() at '/session/change_password' Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_kerb() at '/json' Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Mounting ipaserver.rpcserver.login_kerberos() at '/session/login_kerberos' Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: session_auth_duration: 0:20:00 Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Initializing principal ipa- ods-exporter/ipa.4gjn.com using keytab /etc/ipa/dnssec/ipa-ods-exporter.keytab Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: using ccache /var/ opendnssec/tmp/ipa-ods-exporter.ccache Jun 20 18:44:36 ipa ipa-ods-exporter: ipa: DEBUG: Attempt 1/5: success Jun 20 18:44:36 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 20 18:44:36 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 20 18:44:36 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 20 18:44:36 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 20 18:44:36 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 20 18:44:36 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 20 18:44:36 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 20 18:44:36 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 20 18:44:36 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 20 18:44:36 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 20 18:44:36 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 20 18:44:36 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 20 18:44:36 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 20 18:44:36 ipa systemd: ipa-ods-exporter.service failed. > It would be awesome if you could follow general rules for bug reporting: > http://www.chiark.greenend.org.uk/~sgtatham/bugs-de.html > > Besides other things it would allow us to help you in shorter time. > > Have a nice day! -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
