Hello Martin, Am Donnerstag, 23. Juni 2016, 15:02:18 CEST schrieb Martin Basti: > On 20.06.2016 18:48, Günther J. Niederwimmer wrote: > > Hello, > > > > Am Montag, 20. Juni 2016, 09:54:11 CEST schrieb Petr Spacek: > >> On 18.6.2016 15:03, Günther J. Niederwimmer wrote: > >>> hello, > >>> > >>> Am Freitag, 17. Juni 2016, 23:05:32 CEST schrieb Martin Basti: > >>>> On 17.06.2016 18:29, Günther J. Niederwimmer wrote: > >>>>> Hello, > >>>>> > >>>>> Am Freitag, 17. Juni 2016, 14:13:55 CEST schrieb Martin Basti: > >>>>>> On 17.06.2016 12:54, Günther J. Niederwimmer wrote: > >>>>>>> Hello List, > >>>>>>> > >>>>>>> Am Freitag, 17. Juni 2016, 07:51:45 CEST schrieb Petr Spacek: > >>>>>>>> On 16.6.2016 21:51, Lukas Slebodnik wrote: > >>>>>>>>> On (16/06/16 11:54), Günther J. Niederwimmer wrote: > >>>>>>>>>> Hello > >>>>>>>>>> > >>>>>>>>>> on my system the ods-exporter i mean have a problem. > >>>>>>>>>> > >>>>>>>>>> I have this in the logs > >>>>>>>>>> CentOS 7.(2) ipa 4.3.1 > >>>>>>>>>> > >>>>>>>>>> Jun 16 11:38:28 ipa ipa-ods-exporter: raise > >>>>>>>>>> errors.ACIError(info=info) > >>>>>>>>>> Jun 16 11:38:28 ipa ipa-ods-exporter: ipalib.errors.ACIError: > >>>>>>>>>> Insufficient > >>>>>>>>>> access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS > >>>>>>>>>> failure. > >>>>>>>>>> Minor code may provide more information (Ticket expired) > >>>>>>>>>> > >>>>>>>>> ^^^^^^^^^^^^^^ > >>>>>>>>> > >>>>>>>>> Here seems to be a reason why it failed. > >>>>>>>>> But I can't help you more. > >>>>>>>> > >>>>>>>> Lukas is right. Interesting, this should never happen :-) > >>>>>>> > >>>>>>> this have I also found ;-) > >>>>>>> > >>>>>>>> Please enable debugging using procedure > >>>>>>>> http://www.freeipa.org/page/Troubleshooting#ipa_command_crashes_or_ > >>>>>>>> re > >>>>>>>> tu > >>>>>>>> rn > >>>>>>>> s_n o_data and check logs after next ipa-ods-exporter restart. > >>>>>>>> Thank you! > >>>>>>> > >>>>>>> OK, > >>>>>>> > >>>>>>> I attache the messages log? > >>>>>>> > >>>>>>> I mean this is a problem with my DNS ? > >>>>>> > >>>>>> Hello, > >>>>>> can you check kerberos status of ipa-ods-exporter service in webUI? > >>>>>> > >>>>>> identity/services/ipa-ods-exported/<hostname> > >>>>>> There should be kerberos status in right top corner in details view > >>>>> > >>>>> I have a > >>>>> identity/services/ipa-ods-exporter/.. > >>>>> > >>>>> with a "Kerberos Key Present, Service Provisioned" > >>>>> > >>>>> but no Certificate ? > >>>> > >>>> Can you try, > >>>> > >>>> # kinit -kt /etc/ipa/dnssec/ipa-ods-exporter.keytab > >>>> ipa-ods-exporter/$(hostname) > >>> > >>> OK > >>> I can do a "kinit -kt /etc/ipa/dnssec/ipa-ods-exporter.keytab ipa-ods- > >>> exporter/$(hostname)" > >>> > >>> written on one line!! is this OK. > >>> > >>>> and do ldapsearch > >>>> # ldapsearch -Y GSSAPI > >>> > >>> and also ldapsearch is OK > >>> > >>>> It should show us if keytab is okay > >>> > >>> But the Error is present :-(. > >> > >> We need to see precise error. Please copy&paste it into the e-mail. > > > > that is it. > > > > Jun 20 18:44:36 ipa systemd: ipa-ods-exporter.service failed. > > > >> It would be awesome if you could follow general rules for bug reporting: > >> http://www.chiark.greenend.org.uk/~sgtatham/bugs-de.html > >> > >> Besides other things it would allow us to help you in shorter time. > >> > >> Have a nice day! > > This is weird, It looks like your kerberos keytab is valid, but I have > no idea why you are getting ticket expired messages. It should just > kinit again. > > Can you please remove this ccache file? > /var/opendnssec/tmp/ipa-ods-exporter.ccache
OK now i make a ipactl stop remove the ccache file and start ipa again. to start the ods-exporte I have to wait a long time 1-2 min. ;-) I send you the log without debug when you like this with debug tell me. Jun 23 14:57:56 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 14:57:56 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 14:57:56 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 14:57:56 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 14:57:56 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 14:57:56 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 14:57:56 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 14:57:56 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 14:57:56 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 14:57:56 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 14:57:56 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 14:57:56 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 14:57:56 ipa systemd: ipa-ods-exporter.service failed. Jun 23 14:58:01 ipa systemd: Created slice user-991.slice. Jun 23 14:58:01 ipa systemd: Starting user-991.slice. Jun 23 14:58:01 ipa systemd: Started Session 1580 of user pcp. Jun 23 14:58:01 ipa systemd: Starting Session 1580 of user pcp. Jun 23 14:58:01 ipa systemd: Removed slice user-991.slice. Jun 23 14:58:01 ipa systemd: Stopping user-991.slice. Jun 23 14:58:55 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da: 52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214 DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=59302 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0 Jun 23 14:58:56 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 14:58:56 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 14:58:56 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 14:58:57 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 14:58:57 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 14:58:57 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 14:58:57 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 14:58:57 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 14:58:57 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 14:58:57 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 14:58:57 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 14:58:57 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 14:58:57 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 14:58:57 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 14:58:57 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 14:58:58 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 14:58:58 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 14:58:58 ipa systemd: ipa-ods-exporter.service failed. Jun 23 14:59:58 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 14:59:58 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 14:59:58 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 14:59:58 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 14:59:59 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 14:59:59 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 14:59:59 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 14:59:59 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 14:59:59 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 14:59:59 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 14:59:59 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 14:59:59 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 14:59:59 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 14:59:59 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 14:59:59 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 14:59:59 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 14:59:59 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 14:59:59 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:00:01 ipa systemd: Started Session 1581 of user root. Jun 23 15:00:01 ipa systemd: Starting Session 1581 of user root. Jun 23 15:00:59 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:00:59 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:00:59 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:01:00 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:01:00 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:01:00 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:01:00 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:01:00 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:01:00 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:01:00 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:01:00 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:01:00 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:01:00 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:01:00 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:01:00 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:01:01 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:01:01 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:01:01 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:01:01 ipa systemd: Started Session 1582 of user root. Jun 23 15:01:01 ipa systemd: Starting Session 1582 of user root. Jun 23 15:02:01 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:02:01 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:02:01 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:02:01 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:02:02 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:02:02 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:02:02 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:02:02 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:02:02 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:02:02 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:02:02 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:02:02 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:02:02 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:02:02 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:02:02 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:02:02 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:02:02 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:02:02 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:03:02 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:03:02 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:03:02 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:03:03 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:03:03 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:03:03 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:03:03 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:03:03 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:03:03 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:03:03 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:03:03 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:03:03 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:03:03 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:03:03 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:03:03 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:03:04 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:03:04 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:03:04 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:03:57 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da: 52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214 DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=59303 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0 Jun 23 15:04:04 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:04:04 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:04:04 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:04:04 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:04:05 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:04:05 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:04:05 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:04:05 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:04:05 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:04:05 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:04:05 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:04:05 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:04:05 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:04:05 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:04:05 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:04:05 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:04:05 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:04:05 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:05:05 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:05:05 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:05:05 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:05:06 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:05:06 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:05:06 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:05:06 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:05:06 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:05:06 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:05:06 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:05:06 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:05:06 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:05:06 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:05:06 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:05:06 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:05:07 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:05:07 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:05:07 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:05:33 ipa named-pkcs11[7543]: error (connection refused) resolving 'centos.chi.host-engine.com/A/IN': 190.0.163.18#53 Jun 23 15:06:07 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:06:07 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:06:07 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:06:07 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:06:08 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:06:08 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:06:08 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:06:08 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:06:08 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:06:08 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:06:08 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:06:08 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:06:08 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:06:08 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:06:08 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:06:08 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:06:08 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:06:08 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:07:08 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:07:08 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:07:08 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:07:09 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:07:09 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:07:09 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:07:09 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:07:09 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:07:09 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:07:09 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:07:09 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:07:09 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:07:09 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:07:09 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:07:09 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:07:10 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:07:10 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:07:10 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:08:10 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:08:10 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:08:10 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:08:10 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:08:11 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:08:11 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:08:11 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:08:11 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:08:11 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:08:11 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:08:11 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:08:11 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:08:11 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:08:11 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:08:11 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:08:11 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:08:11 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:08:11 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:09:01 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da: 52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214 DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=59328 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0 Jun 23 15:09:11 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:09:11 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:09:11 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:09:12 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:09:12 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:09:12 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:09:12 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:09:12 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:09:12 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:09:12 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:09:12 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:09:12 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:09:12 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:09:12 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:09:12 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:09:13 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:09:13 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:09:13 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:10:01 ipa systemd: Started Session 1583 of user root. Jun 23 15:10:01 ipa systemd: Starting Session 1583 of user root. Jun 23 15:10:13 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:10:13 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:10:13 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:10:13 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:10:14 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:10:14 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:10:14 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:10:14 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:10:14 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:10:14 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:10:14 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:10:14 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:10:14 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:10:14 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:10:14 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:10:14 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:10:14 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:10:14 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:11:09 ipa kernel: freeipa-ldapIN=ens10 OUT= MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=54309 DF PROTO=TCP SPT=37400 DPT=389 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:09 ipa kernel: freeipa-ldapsIN=ens10 OUT= MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=4218 DF PROTO=TCP SPT=41544 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:09 ipa kernel: freeipa-ldapIN=ens10 OUT= MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=4218 DF PROTO=TCP SPT=41544 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:09 ipa kernel: freeipa-ldapsIN=ens10 OUT= MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=62257 DF PROTO=TCP SPT=41545 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:09 ipa kernel: freeipa-ldapIN=ens10 OUT= MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=62257 DF PROTO=TCP SPT=41545 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:09 ipa kernel: freeipa-ldapsIN=ens10 OUT= MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=43717 DF PROTO=TCP SPT=41546 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:09 ipa kernel: freeipa-ldapIN=ens10 OUT= MAC=52:54:00:90:fc:c3:0c:c4:7a:02:25:02:08:00 SRC=89.26.108.4 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=43717 DF PROTO=TCP SPT=41546 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:12 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da: 52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214 DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=59329 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0 Jun 23 15:11:14 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:11:14 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:11:14 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:11:15 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:11:15 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:11:15 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:11:15 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:11:15 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:11:15 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:11:15 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:11:15 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:11:15 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:11:15 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:11:15 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:11:15 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:11:16 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:11:16 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:11:16 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:11:54 ipa kernel: freeipa-ldapIN=ens10 OUT= MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=15401 DF PROTO=TCP SPT=35252 DPT=389 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:54 ipa kernel: freeipa-ldapsIN=ens10 OUT= MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=18772 DF PROTO=TCP SPT=59206 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:54 ipa kernel: freeipa-ldapIN=ens10 OUT= MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=18772 DF PROTO=TCP SPT=59206 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:54 ipa kernel: freeipa-ldapsIN=ens10 OUT= MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=61685 DF PROTO=TCP SPT=59207 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:11:54 ipa kernel: freeipa-ldapIN=ens10 OUT= MAC=52:54:00:90:fc:c3:52:54:00:47:17:d2:08:00 SRC=89.26.108.9 DST=89.26.108.6 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=61685 DF PROTO=TCP SPT=59207 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 23 15:12:16 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:12:16 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:12:16 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:12:16 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:12:17 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:12:17 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:12:17 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:12:17 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:12:17 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:12:17 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:12:17 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:12:17 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:12:17 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:12:17 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:12:17 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:12:17 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:12:17 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:12:17 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:12:18 ipa systemd-logind: New session 1584 of user root. Jun 23 15:12:18 ipa systemd: Started Session 1584 of user root. Jun 23 15:12:18 ipa systemd: Starting Session 1584 of user root. Jun 23 15:12:18 ipa dbus[534]: [system] Activating service name='org.freedesktop.problems' (using servicehelper) Jun 23 15:12:18 ipa dbus-daemon: dbus[534]: [system] Activating service name='org.freedesktop.problems' (using servicehelper) Jun 23 15:12:18 ipa dbus[534]: [system] Successfully activated service 'org.freedesktop.problems' Jun 23 15:12:18 ipa dbus-daemon: dbus[534]: [system] Successfully activated service 'org.freedesktop.problems' Jun 23 15:12:30 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da: 52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214 DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=59330 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0 Jun 23 15:12:30 ipa systemd: Stopping IPA key daemon... Jun 23 15:12:30 ipa ipa-dnskeysyncd: ipa : INFO Signal 15 received: Shutting down! Jun 23 15:12:30 ipa systemd: Stopped IPA key daemon. Jun 23 15:12:30 ipa systemd: Stopping OpenDNSSEC Enforcer daemon... Jun 23 15:12:30 ipa ods-enforcerd: Received SIGTERM, exiting... Jun 23 15:12:30 ipa ods-enforcerd: all done! hsm_close result: 0 Jun 23 15:12:30 ipa systemd: Stopped OpenDNSSEC Enforcer daemon. Jun 23 15:12:30 ipa systemd: Stopped IPA OpenDNSSEC Signer replacement. Jun 23 15:12:30 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:12:30 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:12:30 ipa systemd: Stopping ipa-otpd socket. Jun 23 15:12:30 ipa systemd: Closed ipa-otpd socket. Jun 23 15:12:30 ipa systemd: Stopped target PKI Tomcat Server. Jun 23 15:12:30 ipa systemd: Stopping PKI Tomcat Server. Jun 23 15:12:30 ipa systemd: Stopping PKI Tomcat Server pki-tomcat... Jun 23 15:12:30 ipa systemd: Stopping IPA Custodia Service... Jun 23 15:12:30 ipa systemd: Stopped IPA Custodia Service. Jun 23 15:12:30 ipa server: Java virtual machine used: /usr/lib/jvm/jre/bin/ java Jun 23 15:12:30 ipa server: classpath used: /usr/share/tomcat/bin/ bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/commons- daemon.jar Jun 23 15:12:30 ipa server: main class used: org.apache.catalina.startup.Bootstrap Jun 23 15:12:30 ipa server: flags used: -DRESTEASY_LIB=/usr/share/java/ resteasy-base -Djava.library.path=/usr/lib64/nuxwdog-jni Jun 23 15:12:30 ipa server: options used: -Dcatalina.base=/var/lib/pki/pki- tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= - Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/ var/lib/pki/pki-tomcat/conf/logging.properties - Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager Jun 23 15:12:30 ipa server: arguments used: stop Jun 23 15:12:30 ipa systemd: Stopping The Apache HTTP Server... Jun 23 15:12:31 ipa server: Jun 23, 2016 3:12:31 PM org.apache.catalina.core.StandardServer await Jun 23 15:12:31 ipa server: INFO: A valid shutdown command was received via the shutdown port. Stopping the Server instance. Jun 23 15:12:31 ipa server: PKIListener: org.apache.catalina.core.StandardServer[before_stop] Jun 23 15:12:31 ipa server: PKIListener: org.apache.catalina.core.StandardServer[stop] Jun 23 15:12:31 ipa server: PKIListener: org.apache.catalina.core.StandardServer[configure_stop] Jun 23 15:12:31 ipa server: Jun 23, 2016 3:12:31 PM org.apache.coyote.AbstractProtocol pause Jun 23 15:12:31 ipa server: INFO: Pausing ProtocolHandler ["http-bio-8080"] Jun 23 15:12:31 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:12:31 ipa systemd: Stopped PKI Tomcat Server pki-tomcat. Jun 23 15:12:32 ipa systemd: Stopped The Apache HTTP Server. Jun 23 15:12:32 ipa systemd: Stopping IPA memcached daemon, increases IPA server performance... Jun 23 15:12:32 ipa systemd: Stopped IPA memcached daemon, increases IPA server performance. Jun 23 15:12:32 ipa systemd: Stopping Berkeley Internet Name Domain (DNS) with native PKCS#11... Jun 23 15:12:32 ipa named-pkcs11[7543]: received control channel command 'stop' Jun 23 15:12:32 ipa named-pkcs11[7543]: shutting down: flushing changes Jun 23 15:12:32 ipa named-pkcs11[7543]: stopping command channel on 127.0.0.1#953 Jun 23 15:12:32 ipa named-pkcs11[7543]: stopping command channel on ::1#953 Jun 23 15:12:32 ipa named-pkcs11[7543]: zone 1.f.8.0.f. 6.0.0.0.7.4.0.1.0.0.2.ip6.arpa/IN: shutting down Jun 23 15:12:32 ipa named-pkcs11[7543]: zone 4gjn.com/IN (signed): shutting down Jun 23 15:12:32 ipa named-pkcs11[7543]: zone 4gjn.com/IN (unsigned): shutting down Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on ::#53 Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on 127.0.0.1#53 Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on 89.26.108.6#53 Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on 192.168.55.204#53 Jun 23 15:12:32 ipa named-pkcs11[7543]: no longer listening on 192.168.100.204#53 Jun 23 15:12:32 ipa named-pkcs11[7543]: exiting Jun 23 15:12:32 ipa systemd: Stopped Berkeley Internet Name Domain (DNS) with native PKCS#11. Jun 23 15:12:32 ipa systemd: Stopping Kerberos 5 Password-changing and Administration... Jun 23 15:12:32 ipa systemd: kadmin.service: main process exited, code=exited, status=2/INVALIDARGUMENT Jun 23 15:12:32 ipa systemd: Stopped Kerberos 5 Password-changing and Administration. Jun 23 15:12:32 ipa systemd: Unit kadmin.service entered failed state. Jun 23 15:12:32 ipa systemd: kadmin.service failed. Jun 23 15:12:32 ipa systemd: Stopping Kerberos 5 KDC... Jun 23 15:12:32 ipa systemd: Stopped Kerberos 5 KDC. Jun 23 15:12:32 ipa systemd: Stopping 389 Directory Server 4GJN-COM.... Jun 23 15:12:32 ipa python2: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:12:32 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:12:32 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 656, in <module> Jun 23 15:12:32 ipa ipa-ods-exporter: ldap.gssapi_bind() Jun 23 15:12:32 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 1085, in gssapi_bind Jun 23 15:12:32 ipa ipa-ods-exporter: '', auth_tokens, server_controls, client_controls) Jun 23 15:12:32 ipa ipa-ods-exporter: File "/usr/lib64/python2.7/ contextlib.py", line 35, in __exit__ Jun 23 15:12:32 ipa ipa-ods-exporter: self.gen.throw(type, value, traceback) Jun 23 15:12:32 ipa ipa-ods-exporter: File "/usr/lib/python2.7/site-packages/ ipapython/ipaldap.py", line 992, in error_handler Jun 23 15:12:32 ipa ipa-ods-exporter: raise errors.ACIError(info=info) Jun 23 15:12:32 ipa ipa-ods-exporter: ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Ticket expired) Jun 23 15:12:32 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:12:32 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:12:32 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:12:34 ipa systemd: Stopped 389 Directory Server 4GJN-COM.. Jun 23 15:13:30 ipa systemd: Starting 389 Directory Server 4GJN-COM.... Jun 23 15:13:30 ipa systemd: Started 389 Directory Server 4GJN-COM.. Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert: Security Initialization: Enabling default cipher set. Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert: Configured NSS Ciphers Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert: #011TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert: #011TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert: #011TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert: #011TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled Jun 23 15:13:30 ipa ns-slapd: [23/Jun/2016:15:13:30 +0200] - SSL alert: #011TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_RSA_WITH_AES_256_GCM_SHA384: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_RSA_WITH_AES_256_CBC_SHA: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_RSA_WITH_AES_256_CBC_SHA256: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_RSA_WITH_AES_128_GCM_SHA256: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_RSA_WITH_AES_128_CBC_SHA: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] - SSL alert: #011TLS_RSA_WITH_AES_128_CBC_SHA256: enabled Jun 23 15:13:31 ipa ns-slapd: [23/Jun/2016:15:13:31 +0200] SSL Initialization - Configured SSL version range: min: TLS1.0, max: TLS1.2 Jun 23 15:13:32 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:13:32 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:13:32 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:13:32 ipa [sssd[ldap_child[26829]]]: Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for realm '4GJN.COM'. Unable to create GSSAPI-encrypted LDAP connection. Jun 23 15:13:32 ipa [sssd[ldap_child[26829]]]: Cannot contact any KDC for realm '4GJN.COM' Jun 23 15:13:33 ipa systemd: Starting Kerberos 5 KDC... Jun 23 15:13:33 ipa systemd: PID file /var/run/krb5kdc.pid not readable (yet?) after start. Jun 23 15:13:33 ipa systemd: Started Kerberos 5 KDC. Jun 23 15:13:33 ipa systemd: Starting Kerberos 5 Password-changing and Administration... Jun 23 15:13:33 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:13:33 ipa systemd: PID file /var/run/kadmind.pid not readable (yet?) after start. Jun 23 15:13:33 ipa systemd: Started Kerberos 5 Password-changing and Administration. Jun 23 15:13:33 ipa systemd: Starting Generate rndc key for BIND (DNS)... Jun 23 15:13:33 ipa systemd: Started Generate rndc key for BIND (DNS). Jun 23 15:13:33 ipa systemd: Starting Berkeley Internet Name Domain (DNS) with native PKCS#11... Jun 23 15:13:33 ipa bash: zone localhost.localdomain/IN: loaded serial 0 Jun 23 15:13:33 ipa bash: zone localhost/IN: loaded serial 0 Jun 23 15:13:33 ipa bash: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0 Jun 23 15:13:33 ipa bash: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0 Jun 23 15:13:33 ipa bash: zone 0.in-addr.arpa/IN: loaded serial 0 Jun 23 15:13:33 ipa named-pkcs11[26870]: starting BIND 9.9.4- RedHat-9.9.4-29.el7_2.3 -u named Jun 23 15:13:33 ipa named-pkcs11[26870]: built with '--build=x86_64-redhat- linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--disable- dependency-tracking' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '-- includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '-- sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--with-libtool' '--localstatedir=/var' '--enable-threads' '--enable-ipv6' '-- enable-filter-aaaa' '--enable-rrl' '--with-pic' '--disable-static' '--disable- openssl-version-check' '--enable-exportlib' '--with-export-libdir=/usr/lib64' '--with-export-includedir=/usr/include' '--includedir=/usr/include/bind9' '-- enable-native-pkcs11' '--with-pkcs11=/usr/lib64/pkcs11/libsofthsm2.so' '-- with-dlopen=yes' '--with-dlz-ldap=yes' '--with-dlz-postgres=yes' '--with-dlz- mysql=yes' '--with-dlz-filesystem=yes' '--with-dlz-bdb=yes' '--with-gssapi=yes' '--disable-isc-spnego' '--enable-fixed-rrset' '--with-docbook-xsl=/usr/share/ sgml/docbook/xsl-stylesheets' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS= -O2 -g -pipe -Wall -Wp,- D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer- size=4 -grecord-gcc-switches -m64 -mtune=generic' 'LDFLAGS=-Wl,-z,relro ' 'CPPFLAGS= -DDIG_SIGCHASE' Jun 23 15:13:33 ipa named-pkcs11[26870]: ---------------------------------------------------- Jun 23 15:13:33 ipa named-pkcs11[26870]: BIND 9 is maintained by Internet Systems Consortium, Jun 23 15:13:33 ipa named-pkcs11[26870]: Inc. (ISC), a non-profit 501(c)(3) public-benefit Jun 23 15:13:33 ipa named-pkcs11[26870]: corporation. Support and training for BIND 9 are Jun 23 15:13:33 ipa named-pkcs11[26870]: available at https://www.isc.org/ support Jun 23 15:13:33 ipa named-pkcs11[26870]: ---------------------------------------------------- Jun 23 15:13:33 ipa named-pkcs11[26870]: adjusted limit on open files from 4096 to 1048576 Jun 23 15:13:33 ipa named-pkcs11[26870]: found 2 CPUs, using 2 worker threads Jun 23 15:13:33 ipa named-pkcs11[26870]: using 2 UDP listeners per interface Jun 23 15:13:33 ipa named-pkcs11[26870]: using up to 4096 sockets Jun 23 15:13:33 ipa named-pkcs11[26870]: loading configuration from '/etc/ named.conf' Jun 23 15:13:33 ipa named-pkcs11[26870]: reading built-in trusted keys from file '/etc/named.iscdlv.key' Jun 23 15:13:33 ipa named-pkcs11[26870]: using default UDP/IPv4 port range: [1024, 65535] Jun 23 15:13:33 ipa named-pkcs11[26870]: using default UDP/IPv6 port range: [1024, 65535] Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv6 interfaces, port 53 Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv4 interface lo, 127.0.0.1#53 Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv4 interface ens10, 89.26.108.6#53 Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv4 interface eth0, 192.168.55.204#53 Jun 23 15:13:33 ipa named-pkcs11[26870]: listening on IPv4 interface eth1, 192.168.100.204#53 Jun 23 15:13:33 ipa named-pkcs11[26870]: generating session key for dynamic DNS Jun 23 15:13:33 ipa named-pkcs11[26870]: sizing zone task pool based on 6 zones Jun 23 15:13:33 ipa named-pkcs11[26870]: /etc/named.conf:16: no forwarders seen; disabling forwarding Jun 23 15:13:33 ipa named-pkcs11[26870]: set up managed keys zone for view _default, file '/var/named/dynamic/managed-keys.bind' Jun 23 15:13:33 ipa named-pkcs11[26870]: bind-dyndb-ldap version 8.0 compiled at 15:16:02 Nov 20 2015, compiler 4.8.5 20150623 (Red Hat 4.8.5-4) Jun 23 15:13:33 ipa named-pkcs11[26870]: option 'serial_autoincrement' is not supported, ignoring Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 10.IN-ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 16.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 17.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 18.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 19.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 20.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 21.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 22.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 23.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 24.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 25.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 26.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 27.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 28.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 29.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 30.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 31.172.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 168.192.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 64.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 65.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 66.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 67.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 68.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 69.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 70.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 71.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 72.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 73.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 74.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 75.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 76.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 77.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 78.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 79.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 80.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 81.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 82.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 83.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 84.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 85.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 86.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 87.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 88.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 89.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 90.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 91.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 92.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 93.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 94.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 95.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 96.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 97.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 98.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 99.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 100.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 101.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 102.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 103.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 104.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 105.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 106.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 107.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 108.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 109.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 110.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 111.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 112.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 113.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 114.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 115.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 116.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 117.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 118.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 119.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 120.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 121.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 122.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 123.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 124.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 125.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 126.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 127.100.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 127.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 254.169.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 2.0.192.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 100.51.198.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 113.0.203.IN- ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: D.F.IP6.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 8.E.F.IP6.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 9.E.F.IP6.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: A.E.F.IP6.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: B.E.F.IP6.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: automatic empty zone: 8.B.D. 0.1.0.0.2.IP6.ARPA Jun 23 15:13:33 ipa named-pkcs11[26870]: /etc/named.conf:16: no forwarders seen; disabling forwarding Jun 23 15:13:33 ipa named-pkcs11[26870]: command channel listening on 127.0.0.1#953 Jun 23 15:13:33 ipa named-pkcs11[26870]: command channel listening on ::1#953 Jun 23 15:13:33 ipa named-pkcs11[26870]: managed-keys-zone: journal file is out of date: removing journal file Jun 23 15:13:33 ipa named-pkcs11[26870]: managed-keys-zone: loaded serial 97 Jun 23 15:13:33 ipa named-pkcs11[26870]: zone 0.in-addr.arpa/IN: loaded serial 0 Jun 23 15:13:33 ipa named-pkcs11[26870]: zone localhost/IN: loaded serial 0 Jun 23 15:13:33 ipa named-pkcs11[26870]: zone localhost.localdomain/IN: loaded serial 0 Jun 23 15:13:33 ipa named-pkcs11[26870]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0 Jun 23 15:13:33 ipa named-pkcs11[26870]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0 Jun 23 15:13:33 ipa named-pkcs11[26870]: all zones loaded Jun 23 15:13:33 ipa named-pkcs11[26870]: running Jun 23 15:13:33 ipa named-pkcs11[26870]: LDAP instance 'ipa' is being synchronized, please ignore message 'all zones loaded' Jun 23 15:13:33 ipa systemd: Started Berkeley Internet Name Domain (DNS) with native PKCS#11. Jun 23 15:13:33 ipa systemd: Starting IPA memcached daemon, increases IPA server performance... Jun 23 15:13:33 ipa systemd: PID file /var/run/ipa_memcached/ipa_memcached.pid not readable (yet?) after start. Jun 23 15:13:33 ipa systemd: Started IPA memcached daemon, increases IPA server performance. Jun 23 15:13:33 ipa systemd: Starting The Apache HTTP Server... Jun 23 15:13:33 ipa ipa-httpd-kdcproxy: ipa : INFO KDC proxy enabled Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN: reconfiguring NSEC3PARAM to '1 0 10 65ba2cbb5f87cba8' Jun 23 15:13:34 ipa systemd: Started The Apache HTTP Server. Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 1.f.8.0.f. 6.0.0.0.7.4.0.1.0.0.2.ip6.arpa/IN: loaded serial 1466687614 Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (unsigned): loaded serial 1466687614 Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): signing in progress Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): reconfiguring NSEC3PARAM to '1 0 10 65ba2cbb5f87cba8' Jun 23 15:13:34 ipa named-pkcs11[26870]: 2 master zones from LDAP instance 'ipa' loaded (2 zones defined, 0 inactive, 0 failed to load) Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): loaded serial 1466687614 Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): could not get zone keys for secure dynamic update Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): receive_secure_serial: unchanged Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 1.f.8.0.f. 6.0.0.0.7.4.0.1.0.0.2.ip6.arpa/IN: sending notifies (serial 1466687614) Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): sending notifies (serial 1466687615) Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): reconfiguring zone keys Jun 23 15:13:34 ipa systemd: Started IPA Custodia Service. Jun 23 15:13:34 ipa systemd: Starting IPA Custodia Service... Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): zone_addnsec3chain(1,INITIAL|CREATE,10,65BA2CBB5F87CBA8) Jun 23 15:13:34 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): next key event: 23-Jun-2016 16:13:34.510 Jun 23 15:13:34 ipa named-pkcs11[26870]: checkhints: unable to get root NS rrset from cache: not found Jun 23 15:13:34 ipa systemd: Configuration file /usr/lib/systemd/system/pki- tomcatd.target is marked executable. Please remove executable permission bits. Proceeding anyway. Jun 23 15:13:34 ipa systemd: Configuration file /lib/systemd/system/pki- [email protected] is marked executable. Please remove executable permission bits. Proceeding anyway. Jun 23 15:13:34 ipa systemd: Starting PKI Tomcat Server pki-tomcat... Jun 23 15:13:35 ipa ns-slapd: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available) Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: new replica keys in LDAP: set([]) Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: obsolete replica keys in local HSM: set([]) Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0xc223e02cb4ec2fb2abcb829a0548119e']) Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79', '0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1']) Jun 23 15:13:35 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79', '0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1']) Jun 23 15:13:35 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:13:35 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 694, in <module> Jun 23 15:13:35 ipa ipa-ods-exporter: send_systemd_reply(conn, msg) Jun 23 15:13:35 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 520, in send_systemd_reply Jun 23 15:13:35 ipa ipa-ods-exporter: conn.send(reply + '\n') Jun 23 15:13:35 ipa ipa-ods-exporter: socket.error: [Errno 32] Broken pipe Jun 23 15:13:35 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:13:35 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:13:35 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:13:36 ipa systemd: Started PKI Tomcat Server pki-tomcat. Jun 23 15:13:36 ipa systemd: Reached target PKI Tomcat Server. Jun 23 15:13:36 ipa systemd: Starting PKI Tomcat Server. Jun 23 15:13:36 ipa server: Java virtual machine used: /usr/lib/jvm/jre/bin/ java Jun 23 15:13:36 ipa server: classpath used: /usr/share/tomcat/bin/ bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/commons- daemon.jar Jun 23 15:13:36 ipa server: main class used: org.apache.catalina.startup.Bootstrap Jun 23 15:13:36 ipa server: flags used: -DRESTEASY_LIB=/usr/share/java/ resteasy-base -Djava.library.path=/usr/lib64/nuxwdog-jni Jun 23 15:13:36 ipa server: options used: -Dcatalina.base=/var/lib/pki/pki- tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= - Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/ var/lib/pki/pki-tomcat/conf/logging.properties - Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager - Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/ conf/catalina.policy Jun 23 15:13:36 ipa server: arguments used: start Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'enableOCSP' to 'false' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'ocspResponderURL' to 'http://ipa.4gjn.com:9080/ ca/ocsp' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'ocspResponderCertNickname' to 'ocspSigningCert cert-pki-ca' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'ocspCacheSize' to '1000' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'ocspMinCacheEntryDuration' to '60' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'ocspMaxCacheEntryDuration' to '120' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'ocspTimeout' to '10' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'strictCiphers' to 'true' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'sslOptions' to 'ssl2=false,ssl3=false,tls=true' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'ssl2Ciphers' to '-SSL2_RC4_128_WITH_MD5,- SSL2_RC4_128_EXPORT40_WITH_MD5,-SSL2_RC2_128_CBC_WITH_MD5,- SSL2_RC2_128_CBC_EXPORT40_WITH_MD5,-SSL2_DES_64_CBC_WITH_MD5,- SSL2_DES_192_EDE3_CBC_WITH_MD5' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'ssl3Ciphers' to '- SSL3_FORTEZZA_DMS_WITH_NULL_SHA,-SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA, +SSL3_RSA_WITH_RC4_128_SHA,-SSL3_RSA_EXPORT_WITH_RC4_40_MD5, +SSL3_RSA_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_DES_CBC_SHA,- SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5,-SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA,- SSL_RSA_FIPS_WITH_DES_CBC_SHA,+SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA,- SSL3_RSA_WITH_NULL_MD5,-TLS_RSA_EXPORT1024_WITH_RC4_56_SHA,- TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'tlsCiphers' to '- TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, +TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, +TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, +TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA, +TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA, +TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,- TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,- TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, +TLS_DHE_DSS_WITH_AES_128_CBC_SHA,+TLS_DHE_DSS_WITH_AES_256_CBC_SHA, +TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA, +TLS_DHE_RSA_WITH_AES_256_CBC_SHA' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'sslVersionRangeStream' to 'tls1_0:tls1_2' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'sslVersionRangeDatagram' to 'tls1_1:tls1_2' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'sslRangeCiphers' to '- TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,- TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,- TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,- TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA, +TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA,- TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,- TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,- TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,- TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA, +TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA, +TLS_DHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, +TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,+TLS_RSA_WITH_AES_128_CBC_SHA256, +TLS_RSA_WITH_AES_256_CBC_SHA256,+TLS_RSA_WITH_AES_128_GCM_SHA256, +TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,- TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,- TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'serverCertNickFile' to '/var/lib/pki/pki-tomcat/ conf/serverCertNick.conf' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'passwordFile' to '/var/lib/pki/pki-tomcat/conf/ password.conf' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'passwordClass' to 'org.apache.tomcat.util.net.jss.PlainPasswordFile' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetAllPropertiesRule]{Server/Service/ Connector} Setting property 'certdbDir' to '/var/lib/pki/pki-tomcat/alias' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.tomcat.util.digester.SetPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetPropertiesRule]{Server/Service/ Engine/Host} Setting property 'xmlValidation' to 'false' did not find a matching property. Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.tomcat.util.digester.SetPropertiesRule begin Jun 23 15:13:37 ipa server: WARNING: [SetPropertiesRule]{Server/Service/ Engine/Host} Setting property 'xmlNamespaceAware' to 'false' did not find a matching property. Jun 23 15:13:37 ipa server: PKIListener: org.apache.catalina.core.StandardServer[before_init] Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.coyote.AbstractProtocol init Jun 23 15:13:37 ipa server: INFO: Initializing ProtocolHandler ["http- bio-8080"] Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.coyote.AbstractProtocol init Jun 23 15:13:37 ipa server: INFO: Initializing ProtocolHandler ["http- bio-8443"] Jun 23 15:13:37 ipa server: Error: SSL cipher "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA" not recognized by tomcatjss Jun 23 15:13:37 ipa server: Error: SSL cipher "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA" not recognized by tomcatjss Jun 23 15:13:37 ipa server: Error: SSL cipher "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA" not recognized by tomcatjss Jun 23 15:13:37 ipa server: Error: SSL cipher "TLS_RSA_WITH_3DES_EDE_CBC_SHA" not recognized by tomcatjss Jun 23 15:13:37 ipa server: Error: SSL cipher "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA" not recognized by tomcatjss Jun 23 15:13:37 ipa server: Error: SSL cipher "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" not recognized by tomcatjss Jun 23 15:13:37 ipa server: Error: SSL cipher "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256" unsupported by NSS Jun 23 15:13:37 ipa server: Error: SSL cipher "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256" unsupported by NSS Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.coyote.AbstractProtocol init Jun 23 15:13:37 ipa server: INFO: Initializing ProtocolHandler ["ajp- bio-127.0.0.1-8009"] Jun 23 15:13:37 ipa server: PKIListener: org.apache.catalina.core.StandardServer[after_init] Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.Catalina load Jun 23 15:13:37 ipa server: INFO: Initialization processed in 613 ms Jun 23 15:13:37 ipa server: PKIListener: org.apache.catalina.core.StandardServer[before_start] Jun 23 15:13:37 ipa server: PKIListener: org.apache.catalina.core.StandardServer[configure_start] Jun 23 15:13:37 ipa server: PKIListener: org.apache.catalina.core.StandardServer[start] Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.core.StandardService startInternal Jun 23 15:13:37 ipa server: INFO: Starting service Catalina Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.core.StandardEngine startInternal Jun 23 15:13:37 ipa server: INFO: Starting Servlet Engine: Apache Tomcat/ 7.0.54 Jun 23 15:13:37 ipa server: Jun 23, 2016 3:13:37 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 23 15:13:37 ipa server: INFO: Deploying configuration descriptor /etc/pki/ pki-tomcat/Catalina/localhost/ROOT.xml Jun 23 15:13:38 ipa server: Jun 23, 2016 3:13:38 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 23 15:13:38 ipa server: INFO: Deployment of configuration descriptor /etc/ pki/pki-tomcat/Catalina/localhost/ROOT.xml has finished in 1,135 ms Jun 23 15:13:38 ipa server: Jun 23, 2016 3:13:38 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 23 15:13:38 ipa server: INFO: Deploying configuration descriptor /etc/pki/ pki-tomcat/Catalina/localhost/pki#admin.xml Jun 23 15:13:39 ipa server: Jun 23, 2016 3:13:39 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 23 15:13:39 ipa server: INFO: Deployment of configuration descriptor /etc/ pki/pki-tomcat/Catalina/localhost/pki#admin.xml has finished in 734 ms Jun 23 15:13:39 ipa server: Jun 23, 2016 3:13:39 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 23 15:13:39 ipa server: INFO: Deploying configuration descriptor /etc/pki/ pki-tomcat/Catalina/localhost/pki#js.xml Jun 23 15:13:39 ipa named-pkcs11[26870]: zone 1.f.8.0.f. 6.0.0.0.7.4.0.1.0.0.2.ip6.arpa/IN: sending notifies (serial 1466687614) Jun 23 15:13:39 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): sending notifies (serial 1466687634) Jun 23 15:13:40 ipa server: Jun 23, 2016 3:13:40 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 23 15:13:40 ipa server: INFO: Deployment of configuration descriptor /etc/ pki/pki-tomcat/Catalina/localhost/pki#js.xml has finished in 815 ms Jun 23 15:13:40 ipa server: Jun 23, 2016 3:13:40 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 23 15:13:40 ipa server: INFO: Deploying configuration descriptor /etc/pki/ pki-tomcat/Catalina/localhost/ca.xml Jun 23 15:13:40 ipa server: SSLAuthenticatorWithFallback: Creating SSL authenticator with fallback Jun 23 15:13:40 ipa server: SSLAuthenticatorWithFallback: Setting container Jun 23 15:13:41 ipa server: SSLAuthenticatorWithFallback: Initializing authenticators Jun 23 15:13:41 ipa server: SSLAuthenticatorWithFallback: Starting authenticators Jun 23 15:13:41 ipa server: CMSEngine.initializePasswordStore() begins Jun 23 15:13:41 ipa server: CMSEngine.initializePasswordStore(): tag=internaldb Jun 23 15:13:41 ipa server: CMSEngine.initializePasswordStore(): tag=replicationdb Jun 23 15:13:42 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da: 52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214 DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=59331 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0 Jun 23 15:13:45 ipa server: CA is started. Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 23 15:13:45 ipa server: INFO: Deployment of configuration descriptor /etc/ pki/pki-tomcat/Catalina/localhost/ca.xml has finished in 5,160 ms Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM org.apache.coyote.AbstractProtocol start Jun 23 15:13:45 ipa server: INFO: Starting ProtocolHandler ["http-bio-8080"] Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM org.apache.coyote.AbstractProtocol start Jun 23 15:13:45 ipa server: INFO: Starting ProtocolHandler ["http-bio-8443"] Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM org.apache.coyote.AbstractProtocol start Jun 23 15:13:45 ipa server: INFO: Starting ProtocolHandler ["ajp- bio-127.0.0.1-8009"] Jun 23 15:13:45 ipa server: PKIListener: org.apache.catalina.core.StandardServer[after_start] Jun 23 15:13:45 ipa server: PKIListener: Subsystem CA is running. Jun 23 15:13:45 ipa server: Jun 23, 2016 3:13:45 PM org.apache.catalina.startup.Catalina start Jun 23 15:13:45 ipa server: INFO: Server startup in 7934 ms Jun 23 15:13:45 ipa systemd: Listening on ipa-otpd socket. Jun 23 15:13:45 ipa systemd: Starting ipa-otpd socket. Jun 23 15:13:47 ipa named-pkcs11[26870]: client 217.196.154.211#36560 (4gjn.com): transfer of '4gjn.com/IN': AXFR-style IXFR started Jun 23 15:13:47 ipa named-pkcs11[26870]: client 217.196.154.211#36560 (4gjn.com): transfer of '4gjn.com/IN': AXFR-style IXFR ended Jun 23 15:14:35 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:14:35 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:14:35 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:14:35 ipa systemd: Starting OpenDNSSEC Enforcer daemon... Jun 23 15:14:35 ipa ods-enforcerd: opendnssec starting... Jun 23 15:14:35 ipa ods-enforcerd: opendnssec Parent exiting... Jun 23 15:14:35 ipa ods-enforcerd: OpenDNSSEC ods-enforcerd started (version 1.4.7), pid 27232 Jun 23 15:14:35 ipa systemd: PID file /var/run/opendnssec/enforcerd.pid not readable (yet?) after start. Jun 23 15:14:35 ipa ods-enforcerd: opendnssec forked OK... Jun 23 15:14:35 ipa ods-enforcerd: group set to: ods (998) Jun 23 15:14:35 ipa ods-enforcerd: user set to: ods (999) Jun 23 15:14:35 ipa ods-enforcerd: opendnssec started (version 1.4.7), pid 27232 Jun 23 15:14:35 ipa ods-enforcerd: HSM opened successfully. Jun 23 15:14:35 ipa ods-enforcerd: Checking database connection... Jun 23 15:14:35 ipa ods-enforcerd: Database connection ok. Jun 23 15:14:35 ipa ods-enforcerd: Reading config "/etc/opendnssec/conf.xml" Jun 23 15:14:35 ipa ods-enforcerd: Reading config schema "/usr/share/ opendnssec/conf.rng" Jun 23 15:14:35 ipa ods-enforcerd: Communication Interval: 3600 Jun 23 15:14:35 ipa ods-enforcerd: No DS Submit command supplied Jun 23 15:14:35 ipa ods-enforcerd: SQLite database set to: /var/opendnssec/ kasp.db Jun 23 15:14:35 ipa systemd: Started OpenDNSSEC Enforcer daemon. Jun 23 15:14:35 ipa ods-enforcerd: Log User set to: local0 Jun 23 15:14:35 ipa ods-enforcerd: Switched log facility to: local0 Jun 23 15:14:35 ipa ods-enforcerd: Connecting to Database... Jun 23 15:14:35 ipa ods-enforcerd: Policy default found. Jun 23 15:14:35 ipa ods-enforcerd: Key sharing is Off. Jun 23 15:14:35 ipa ods-enforcerd: 1 zone(s) found on policy "default" Jun 23 15:14:35 ipa ods-enforcerd: No new KSKs need to be created. Jun 23 15:14:35 ipa ods-enforcerd: No new ZSKs need to be created. Jun 23 15:14:35 ipa ods-enforcerd: zonelist filename set to /etc/opendnssec/ zonelist.xml. Jun 23 15:14:35 ipa ods-enforcerd: Zone 4gjn.com found. Jun 23 15:14:35 ipa ods-enforcerd: Policy for 4gjn.com set to default. Jun 23 15:14:35 ipa ods-enforcerd: Config will be output to /var/opendnssec/ signconf/4gjn.com.xml. Jun 23 15:14:35 ipa systemd: Started IPA key daemon. Jun 23 15:14:35 ipa systemd: Starting IPA key daemon... Jun 23 15:14:36 ipa ods-enforcerd: No change to: /var/opendnssec/signconf/ 4gjn.com.xml Jun 23 15:14:36 ipa ods-enforcerd: Disconnecting from Database... Jun 23 15:14:36 ipa ods-enforcerd: Sleeping for 3600 seconds. Jun 23 15:14:36 ipa ipa-dnskeysyncd: ipa: WARNING: session memcached servers not running Jun 23 15:14:36 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:14:37 ipa ipa-dnskeysyncd: ipa : INFO LDAP bind... Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa : INFO Commencing sync process Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr: INFO Key metadata cn=ZSK-20160513081559Z- d7fe5c98d5f3f89aefb9e8dfb92ebcb1,cn=keys,idnsname=4gjn.com.,cn=dns,dc=4gjn,dc=com added to zone 4gjn.com. Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr: INFO Key metadata cn=KSK-20160513081559Z-6145b3b71c448dfc1130d0f9d2caac79,cn=keys,idnsname=4gjn.com.,cn=dns,dc=4gjn,dc=com added to zone 4gjn.com. Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.keysyncer.KeySyncer: INFO Initial LDAP dump is done, sychronizing with ODS and BIND Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.odsmgr.ODSMgr: INFO Zones removed from LDAP: [] Jun 23 15:14:38 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.odsmgr.ODSMgr: INFO Zones added to LDAP: [] Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: new replica keys in LDAP: set([]) Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: obsolete replica keys in local HSM: set([]) Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0xc223e02cb4ec2fb2abcb829a0548119e']) Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79', '0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1']) Jun 23 15:14:38 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79', '0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1']) Jun 23 15:14:38 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:14:38 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 694, in <module> Jun 23 15:14:38 ipa ipa-ods-exporter: send_systemd_reply(conn, msg) Jun 23 15:14:38 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 520, in send_systemd_reply Jun 23 15:14:38 ipa ipa-ods-exporter: conn.send(reply + '\n') Jun 23 15:14:38 ipa ipa-ods-exporter: socket.error: [Errno 32] Broken pipe Jun 23 15:14:38 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:14:38 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:14:38 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:15:18 ipa dbus-daemon: dbus[534]: [system] Activating service name='org.freedesktop.problems' (using servicehelper) Jun 23 15:15:18 ipa dbus[534]: [system] Activating service name='org.freedesktop.problems' (using servicehelper) Jun 23 15:15:18 ipa dbus[534]: [system] Successfully activated service 'org.freedesktop.problems' Jun 23 15:15:18 ipa dbus-daemon: dbus[534]: [system] Successfully activated service 'org.freedesktop.problems' Jun 23 15:15:39 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:15:39 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:15:39 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:15:39 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: new replica keys in LDAP: set([]) Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: obsolete replica keys in local HSM: set([]) Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0xc223e02cb4ec2fb2abcb829a0548119e']) Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79', '0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1']) Jun 23 15:15:40 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79', '0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1']) Jun 23 15:15:40 ipa ipa-ods-exporter: Traceback (most recent call last): Jun 23 15:15:40 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 694, in <module> Jun 23 15:15:40 ipa ipa-ods-exporter: send_systemd_reply(conn, msg) Jun 23 15:15:40 ipa ipa-ods-exporter: File "/usr/libexec/ipa/ipa-ods- exporter", line 520, in send_systemd_reply Jun 23 15:15:40 ipa ipa-ods-exporter: conn.send(reply + '\n') Jun 23 15:15:40 ipa ipa-ods-exporter: socket.error: [Errno 32] Broken pipe Jun 23 15:15:40 ipa systemd: ipa-ods-exporter.service: main process exited, code=exited, status=1/FAILURE Jun 23 15:15:40 ipa systemd: Unit ipa-ods-exporter.service entered failed state. Jun 23 15:15:40 ipa systemd: ipa-ods-exporter.service failed. Jun 23 15:15:43 ipa kernel: freeipa-ldapIN=ens11 OUT= MAC=52:54:00:ce:9d:da: 52:54:00:b9:6d:73:86:dd SRC=2001:0470:006f:08f1:0000:0000:0000:0214 DST=2001:0470:006f:08f1:0000:0000:0000:0204 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=59332 DPT=389 WINDOW=28800 RES=0x00 SYN URGP=0 Jun 23 15:16:41 ipa systemd: ipa-ods-exporter.service holdoff time over, scheduling restart. Jun 23 15:16:41 ipa systemd: Started IPA OpenDNSSEC Signer replacement. Jun 23 15:16:41 ipa systemd: Starting IPA OpenDNSSEC Signer replacement... Jun 23 15:16:41 ipa ipa-ods-exporter: ipa: WARNING: session memcached servers not running Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: new replica keys in LDAP: set([]) Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: obsolete replica keys in local HSM: set([]) Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0xc223e02cb4ec2fb2abcb829a0548119e']) Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79', '0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1']) Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: keys in local HSM & LDAP: set(['0x6145b3b71c448dfc1130d0f9d2caac79', '0xd7fe5c98d5f3f89aefb9e8dfb92ebcb1']) Jun 23 15:16:42 ipa /usr/libexec/ipa/ipa-ods-exporter: HSM synchronization finished, skipping zone synchronization. Jun 23 15:16:42 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr: INFO Synchronizing zone 4gjn.com. Jun 23 15:16:42 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr: INFO attrs: {'idnsseckeyref': ['pkcs11:object=d7fe5c98d5f3f89aefb9e8dfb92ebcb1'], 'dn': 'cn=ZSK-20160513081559Z- d7fe5c98d5f3f89aefb9e8dfb92ebcb1,cn=keys,idnsname=4gjn.com.,cn=dns,dc=4gjn,dc=com', 'cn': ['ZSK-20160513081559Z-d7fe5c98d5f3f89aefb9e8dfb92ebcb1'], 'idnsseckeypublish': ['20160513081600Z'], 'objectclass': ['idnsSecKey'], 'idnssecalgorithm': ['RSASHA256'], 'idnsseckeyzone': ['TRUE'], 'idnsseckeycreated': ['20160513081559Z'], 'idnsseckeyactivate': ['20160513081600Z']} Jun 23 15:16:42 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr: INFO attrs: {'idnsseckeyref': ['pkcs11:object=6145b3b71c448dfc1130d0f9d2caac79'], 'dn': 'cn=KSK-20160513081559Z-6145b3b71c448dfc1130d0f9d2caac79,cn=keys,idnsname=4gjn.com.,cn=dns,dc=4gjn,dc=com', 'cn': ['KSK-20160513081559Z-6145b3b71c448dfc1130d0f9d2caac79'], 'idnsseckeypublish': ['20160513081600Z'], 'objectclass': ['idnsSecKey'], 'idnsseckeysep': ['TRUE'], 'idnssecalgorithm': ['RSASHA256'], 'idnsseckeyzone': ['TRUE'], 'idnsseckeycreated': ['20160513081559Z'], 'idnsseckeyactivate': ['20160513081600Z']} Jun 23 15:16:42 ipa named-pkcs11[26870]: received control channel command 'sign 4gjn.com.' Jun 23 15:16:42 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): reconfiguring zone keys Jun 23 15:16:42 ipa ipa-dnskeysyncd: ipa.ipapython.dnssec.bindmgr.BINDMgr: INFO Jun 23 15:16:43 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): next key event: 23-Jun-2016 16:16:42.953 Jun 23 15:16:43 ipa named-pkcs11[26870]: zone 4gjn.com/IN (signed): sending notifies (serial 1466687635) [root@ipa log]# > Martin -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
