Package: freeipa-client Version: 4.9.8-1+b1 Installing the IPA client is broken due to some chrony FUBAR [1], but I worked around that with a mock service:
| # cat /run/systemd/system/chrony.service | [Service] | Type=oneshot | ExecStart=/bin/true | # systemctl unmask chrony After that, joining a domain works: | # ipa-client-install --domain cockpit.lan --realm COCKPIT.LAN --principal admin -W | This program will set up IPA client. | Version 4.9.8 | | WARNING: conflicting time&date synchronization service 'ntp' will be disabled in favor of chronyd | | Discovery was successful! | Do you want to configure chrony with NTP server or pool address? [no]: | Client hostname: x0.cockpit.lan | Realm: COCKPIT.LAN | DNS Domain: cockpit.lan | IPA Server: f0.cockpit.lan | BaseDN: dc=cockpit,dc=lan | | Continue to configure the system with these values? [no]: yes | [...] | The ipa-client-install command was successful But leaving it crashes: | # ipa-client-install --uninstall | Unenrolling client from IPA server | Removing Kerberos service principals from /etc/krb5.keytab | Disabling client Kerberos and LDAP configurations | Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted | Restoring client configuration files | Unconfiguring the NIS domain. | nscd daemon is not installed, skip configuration | nslcd daemon is not installed, skip configuration | Some installation state for ntp has not been restored, see /var/lib/ipa/sysrestore/sysrestore.state | Some installation state has not been restored. | This may cause re-installation to fail. | It should be safe to remove /var/lib/ipa-client/sysrestore.state but it may | mean your system hasn't been restored to its pre-installation state. | Systemwide CA database updated. | Client uninstall complete. | The original nsswitch.conf configuration has been restored. | You may need to restart services or reboot the machine. | Do you want to reboot the machine? [no]: no | The ipa-client-install command failed. See /var/log/ipaclient-uninstall.log for more information | | root@x0:~# echo $? | 4 That log indeed has a rather non-descriptive stack trace: | 022-03-24T11:22:02Z DEBUG File "/usr/lib/python3/dist-packages/ipapython/admintool.py", line 180, in execute | return_value = self.run() | File "/usr/lib/python3/dist-packages/ipapython/install/cli.py", line 342, in run | return cfgr.run() | File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 360, in run | return self.execute() | [...] | File "/usr/lib/python3/dist-packages/ipaclient/install/client.py", line 3659, in uninstall | raise ScriptError(rval=rv) But this doesn't seem to be related to chronyd or my hack. (Fun fact: The uninstall log is *exactly* 66666 bytes. 👿) I attach the full install and uninstall logs for reference. Thanks, Martin [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1008195
ipaclient-install.log.xz
Description: application/xz
2022-03-24T11:21:56Z DEBUG Logging to /var/log/ipaclient-uninstall.log 2022-03-24T11:21:56Z DEBUG ipa-client-install was invoked with arguments [] and options: {'unattended': False, 'principal': None, 'prompt_password': False, 'on_master': False, 'ca_cert_files': None, 'force': False, 'configure_firefox': False, 'firefox_dir': None, 'keytab': None, 'mkhomedir': False, 'force_join': False, 'ntp_servers': None, 'ntp_pool': None, 'no_ntp': False, 'force_ntpd': False, 'nisdomain': None, 'no_nisdomain': False, 'ssh_trust_dns': False, 'no_ssh': False, 'no_sshd': False, 'no_sudo': False, 'no_dns_sshfp': False, 'kinit_attempts': None, 'request_cert': False, 'ip_addresses': None, 'all_ip_addresses': False, 'fixed_primary': False, 'permit': False, 'enable_dns_updates': False, 'no_krb5_offline_passwords': False, 'preserve_sssd': False, 'automount_location': None, 'domain_name': None, 'servers': None, 'realm_name': None, 'host_name': None, 'verbose': False, 'quiet': False, 'log_file': None, 'uninstall': True} 2022-03-24T11:21:56Z DEBUG IPA version 4.9.8 2022-03-24T11:21:56Z DEBUG IPA platform debian 2022-03-24T11:21:56Z DEBUG IPA os-release Debian GNU/Linux 2022-03-24T11:21:56Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-03-24T11:21:56Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:56Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:56Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2022-03-24T11:21:56Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2022-03-24T11:21:56Z DEBUG httpd is not configured 2022-03-24T11:21:56Z DEBUG kadmin is not configured 2022-03-24T11:21:56Z DEBUG dirsrv is not configured 2022-03-24T11:21:56Z DEBUG pki-tomcatd is not configured 2022-03-24T11:21:56Z DEBUG install is not configured 2022-03-24T11:21:56Z DEBUG krb5kdc is not configured 2022-03-24T11:21:56Z DEBUG named is not configured 2022-03-24T11:21:56Z DEBUG filestore is tracking no files 2022-03-24T11:21:56Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-03-24T11:21:56Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:56Z DEBUG Starting external process 2022-03-24T11:21:56Z DEBUG args=['/usr/sbin/ipa-client-automount', '--uninstall', '--debug'] 2022-03-24T11:21:56Z DEBUG Process finished, return code=0 2022-03-24T11:21:56Z DEBUG stdout=IPA automount is not configured on this system 2022-03-24T11:21:56Z DEBUG stderr=Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:56Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-03-24T11:21:56Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:56Z DEBUG Starting external process 2022-03-24T11:21:56Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/etc/ipa/nssdb', '-L', '-n', 'Local IPA host', '-a', '-f', '/etc/ipa/nssdb/pwdfile.txt'] 2022-03-24T11:21:56Z DEBUG Process finished, return code=255 2022-03-24T11:21:56Z DEBUG stdout= 2022-03-24T11:21:56Z DEBUG stderr=certutil: Could not find cert: Local IPA host : PR_FILE_NOT_FOUND_ERROR: File not found 2022-03-24T11:21:56Z DEBUG Starting external process 2022-03-24T11:21:56Z DEBUG args=['/bin/systemctl', 'stop', 'certmonger.service'] 2022-03-24T11:21:56Z DEBUG Process finished, return code=0 2022-03-24T11:21:56Z DEBUG stdout= 2022-03-24T11:21:56Z DEBUG stderr= 2022-03-24T11:21:56Z DEBUG Stop of certmonger.service complete 2022-03-24T11:21:56Z DEBUG Starting external process 2022-03-24T11:21:56Z DEBUG args=['/bin/systemctl', 'disable', 'certmonger.service'] 2022-03-24T11:21:57Z DEBUG Process finished, return code=0 2022-03-24T11:21:57Z DEBUG stdout= 2022-03-24T11:21:57Z DEBUG stderr=Synchronizing state of certmonger.service with SysV service script with /lib/systemd/systemd-sysv-install. Executing: /lib/systemd/systemd-sysv-install disable certmonger Removed /etc/systemd/system/multi-user.target.wants/certmonger.service. 2022-03-24T11:21:57Z INFO Unenrolling client from IPA server 2022-03-24T11:21:57Z DEBUG Starting external process 2022-03-24T11:21:57Z DEBUG args=['/usr/sbin/ipa-join', '--unenroll', '-h', 'x0.cockpit.lan', '-k', '/etc/krb5.keytab'] 2022-03-24T11:21:58Z DEBUG Process finished, return code=0 2022-03-24T11:21:58Z DEBUG stdout= 2022-03-24T11:21:58Z DEBUG stderr=Unenrollment successful. 2022-03-24T11:21:58Z INFO Removing Kerberos service principals from /etc/krb5.keytab 2022-03-24T11:21:58Z DEBUG Starting external process 2022-03-24T11:21:58Z DEBUG args=['/usr/sbin/ipa-rmkeytab', '-k', '/etc/krb5.keytab', '-r', 'COCKPIT.LAN'] 2022-03-24T11:21:58Z DEBUG Process finished, return code=0 2022-03-24T11:21:58Z DEBUG stdout= 2022-03-24T11:21:58Z DEBUG stderr=Removing principal host/x0.cockpit....@cockpit.lan 2022-03-24T11:21:58Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:58Z DEBUG Starting external process 2022-03-24T11:21:58Z DEBUG args=['/bin/systemctl', 'stop', 'oddjobd.service'] 2022-03-24T11:21:58Z DEBUG Process finished, return code=0 2022-03-24T11:21:58Z DEBUG stdout= 2022-03-24T11:21:58Z DEBUG stderr= 2022-03-24T11:21:58Z DEBUG Stop of oddjobd.service complete 2022-03-24T11:21:58Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:58Z DEBUG Starting external process 2022-03-24T11:21:58Z DEBUG args=['/bin/systemctl', 'disable', 'oddjobd.service'] 2022-03-24T11:21:58Z DEBUG Process finished, return code=0 2022-03-24T11:21:58Z DEBUG stdout= 2022-03-24T11:21:58Z DEBUG stderr=Removed /etc/systemd/system/multi-user.target.wants/oddjobd.service. 2022-03-24T11:21:58Z INFO Disabling client Kerberos and LDAP configurations 2022-03-24T11:21:58Z DEBUG Starting external process 2022-03-24T11:21:58Z DEBUG args=['pam-auth-update', '--package', '--remove', 'mkhomedir'] 2022-03-24T11:21:58Z DEBUG Process finished, return code=0 2022-03-24T11:21:58Z DEBUG stdout= 2022-03-24T11:21:58Z DEBUG stderr= 2022-03-24T11:21:58Z INFO Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted 2022-03-24T11:21:58Z DEBUG Starting external process 2022-03-24T11:21:58Z DEBUG args=['/bin/systemctl', 'stop', 'sssd.service'] 2022-03-24T11:21:58Z DEBUG Process finished, return code=0 2022-03-24T11:21:58Z DEBUG stdout= 2022-03-24T11:21:58Z DEBUG stderr= 2022-03-24T11:21:58Z DEBUG Stop of sssd.service complete 2022-03-24T11:21:58Z DEBUG Starting external process 2022-03-24T11:21:58Z DEBUG args=['/bin/systemctl', 'disable', 'sssd.service'] 2022-03-24T11:21:59Z DEBUG Process finished, return code=0 2022-03-24T11:21:59Z DEBUG stdout= 2022-03-24T11:21:59Z DEBUG stderr=Synchronizing state of sssd.service with SysV service script with /lib/systemd/systemd-sysv-install. Executing: /lib/systemd/systemd-sysv-install disable sssd Removed /etc/systemd/system/multi-user.target.wants/sssd.service. 2022-03-24T11:21:59Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:59Z INFO Restoring client configuration files 2022-03-24T11:21:59Z DEBUG Starting external process 2022-03-24T11:21:59Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-03-24T11:21:59Z DEBUG Process finished, return code=1 2022-03-24T11:21:59Z DEBUG stdout= 2022-03-24T11:21:59Z DEBUG stderr= 2022-03-24T11:21:59Z DEBUG Starting external process 2022-03-24T11:21:59Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-03-24T11:21:59Z DEBUG Process finished, return code=1 2022-03-24T11:21:59Z DEBUG stdout= 2022-03-24T11:21:59Z DEBUG stderr= 2022-03-24T11:21:59Z DEBUG Starting external process 2022-03-24T11:21:59Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-03-24T11:21:59Z DEBUG Process finished, return code=1 2022-03-24T11:21:59Z DEBUG stdout= 2022-03-24T11:21:59Z DEBUG stderr= 2022-03-24T11:21:59Z DEBUG Starting external process 2022-03-24T11:21:59Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-03-24T11:21:59Z DEBUG Process finished, return code=1 2022-03-24T11:21:59Z DEBUG stdout= 2022-03-24T11:21:59Z DEBUG stderr= 2022-03-24T11:21:59Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-03-24T11:21:59Z DEBUG -> no files, removing file 2022-03-24T11:21:59Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:59Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:59Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:59Z INFO Unconfiguring the NIS domain. 2022-03-24T11:21:59Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:59Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:59Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:21:59Z DEBUG Starting external process 2022-03-24T11:21:59Z DEBUG args=['/bin/systemctl', 'list-unit-files', '--full'] 2022-03-24T11:21:59Z DEBUG Process finished, return code=0 2022-03-24T11:21:59Z DEBUG stdout=UNIT FILE STATE VENDOR PRESET proc-sys-fs-binfmt_misc.automount static - -.mount generated - boot-efi.mount generated - dev-hugepages.mount static - dev-mqueue.mount static - proc-fs-nfsd.mount static - proc-sys-fs-binfmt_misc.mount disabled disabled run-qemu.mount disabled enabled run-rpc_pipefs.mount generated - sys-fs-fuse-connections.mount static - sys-kernel-config.mount static - sys-kernel-debug.mount static - sys-kernel-tracing.mount static - var-lib-machines.mount static - var-lib-nfs-rpc_pipefs.mount static - resolvconf-pull-resolved.path enabled enabled systemd-ask-password-console.path static - systemd-ask-password-wall.path static - session-3.scope transient - session-5.scope transient - apparmor.service enabled enabled apt-daily-upgrade.service static - apt-daily.service static - auth-rpcgss-module.service static - autovt@.service alias - blk-availability.service enabled enabled certmonger.service disabled enabled chrony.service enabled enabled chronyd.service alias - cni-dhcp.service disabled enabled cockpit-motd.service static - cockpit-wsinstance-http.service static - cockpit-wsinstance-https-factory@.service static - cockpit-wsinstance-https@.service static - cockpit.service static - console-getty.service disabled disabled container-getty@.service static - cron.service enabled enabled cryptdisks-early.service masked enabled cryptdisks.service masked enabled dbus-fi.w1.wpa_supplicant1.service alias - dbus-org.fedoraproject.FirewallD1.service alias - dbus-org.freedesktop.hostname1.service alias - dbus-org.freedesktop.import1.service alias - dbus-org.freedesktop.locale1.service alias - dbus-org.freedesktop.login1.service alias - dbus-org.freedesktop.machine1.service alias - dbus-org.freedesktop.ModemManager1.service alias - dbus-org.freedesktop.nm-dispatcher.service alias - dbus-org.freedesktop.portable1.service alias - dbus-org.freedesktop.timedate1.service alias - dbus-org.freedesktop.timesync1.service alias - dbus.service static - debug-shell.service disabled disabled dm-event.service static - dpkg-db-backup.service static - e2scrub@.service static - e2scrub_all.service static - e2scrub_fail@.service static - e2scrub_reap.service enabled enabled emergency.service static - exim4-base.service static - exim4.service generated - firewalld.service enabled enabled fstrim.service static - getty-static.service static - getty@.service enabled enabled hwclock.service masked enabled ifup@.service static - ifupdown-pre.service static - ifupdown-wait-online.service disabled enabled initrd-cleanup.service static - initrd-parse-etc.service static - initrd-switch-root.service static - initrd-udevadm-cleanup-db.service static - iscsi.service alias - iscsid.service disabled enabled kmod-static-nodes.service static - kmod.service alias - libvirt-guests.service enabled enabled libvirtd.service enabled enabled logrotate.service static - lvm2-lvmpolld.service static - lvm2-monitor.service enabled enabled lvm2-pvscan@.service static - lvm2.service masked enabled man-db.service static - mdadm-grow-continue@.service static - mdadm-last-resort@.service static - mdadm-shutdown.service enabled enabled mdadm-waitidle.service masked enabled mdadm.service masked enabled mdcheck_continue.service static - mdcheck_start.service static - mdmon@.service static - mdmonitor-oneshot.service static - mdmonitor.service static - ModemManager.service enabled enabled modprobe@.service static - networking.service enabled enabled NetworkManager-dispatcher.service enabled enabled NetworkManager-wait-online.service enabled enabled NetworkManager.service enabled enabled nfs-blkmap.service enabled enabled nfs-common.service masked enabled nfs-idmapd.service static - nfs-kernel-server.service alias - nfs-mountd.service static - nfs-server.service enabled enabled nfs-utils.service static - nfsdcld.service static - nm-priv-helper.service static - oddjobd.service disabled enabled open-iscsi.service enabled enabled packagekit-offline-update.service static - packagekit.service static - pcp.service generated - pmcd.service enabled enabled pmfind.service disabled enabled pmie.service enabled enabled pmie_check.service static - pmie_daily.service static - pmie_farm.service enabled enabled pmie_farm_check.service static - pmlogger.service enabled enabled pmlogger_check.service static - pmlogger_daily.service static - pmlogger_daily_report.service static - pmlogger_farm.service enabled enabled pmlogger_farm_check.service static - pmproxy.service enabled enabled podman-auto-update.service enabled enabled podman-restart.service enabled enabled podman.service enabled enabled polkit.service static - portmap.service alias - powertop.service disabled enabled procps.service alias - quotaon.service static - rc-local.service static - rc.service masked enabled rcS.service masked enabled realmd.service static - redis-server.service disabled enabled redis-server@.service disabled enabled rescue.service static - resolvconf-pull-resolved.service enabled enabled resolvconf.service enabled enabled rpc-gssd.service static - rpc-statd-notify.service static - rpc-statd.service static - rpc-svcgssd.service static - rpcbind.service enabled enabled rsyslog.service enabled enabled rtslib-fb-targetctl.service disabled enabled screen-cleanup.service masked enabled selinux-autorelabel-mark.service static - selinux-autorelabel.service static - serial-getty@.service indirect enabled ssh.service enabled enabled ssh@.service static - sshd.service alias - sssd-autofs.service indirect enabled sssd-ifp.service static - sssd-nss.service indirect enabled sssd-pac.service indirect enabled sssd-pam.service indirect enabled sssd-ssh.service indirect enabled sssd-sudo.service indirect enabled sssd.service disabled enabled sudo.service masked enabled syslog.service alias - system-update-cleanup.service static - systemd-ask-password-console.service static - systemd-ask-password-wall.service static - systemd-backlight@.service static - systemd-binfmt.service static - systemd-bless-boot.service static - systemd-boot-check-no-failures.service disabled disabled systemd-boot-system-token.service static - systemd-boot-update.service disabled enabled systemd-coredump@.service static - systemd-exit.service static - systemd-fsck-root.service enabled-runtime enabled systemd-fsck@.service static - systemd-fsckd.service static - systemd-growfs@-.service generated - systemd-halt.service static - systemd-hibernate-resume@.service static - systemd-hibernate.service static - systemd-hostnamed.service static - systemd-hybrid-sleep.service static - systemd-importd.service static - systemd-initctl.service static - systemd-journal-flush.service static - systemd-journald.service static - systemd-journald@.service static - systemd-kexec.service static - systemd-localed.service static - systemd-logind.service static - systemd-machine-id-commit.service static - systemd-machined.service static - systemd-modules-load.service static - systemd-network-generator.service disabled enabled systemd-networkd-wait-online.service disabled disabled systemd-networkd.service disabled enabled systemd-nspawn@.service disabled enabled systemd-portabled.service static - systemd-poweroff.service static - systemd-pstore.service enabled enabled systemd-quotacheck.service static - systemd-random-seed.service static - systemd-reboot.service static - systemd-remount-fs.service enabled-runtime enabled systemd-repart.service static - systemd-resolved.service disabled enabled systemd-rfkill.service static - systemd-suspend-then-hibernate.service static - systemd-suspend.service static - systemd-sysctl.service static - systemd-sysext.service disabled enabled systemd-sysusers.service static - systemd-time-wait-sync.service disabled disabled systemd-timedated.service static - systemd-timesyncd.service enabled enabled systemd-tmpfiles-clean.service static - systemd-tmpfiles-setup-dev.service static - systemd-tmpfiles-setup.service static - systemd-udev-settle.service static - systemd-udev-trigger.service static - systemd-udevd.service static - systemd-update-utmp-runlevel.service static - systemd-update-utmp.service static - systemd-user-sessions.service static - systemd-volatile-root.service static - tangd@.service static - targetclid.service disabled enabled tuned.service disabled enabled udev.service alias - udisks2.service enabled enabled unattended-upgrades.service enabled enabled usb_modeswitch@.service static - user-runtime-dir@.service static - user@.service static - uuidd.service indirect enabled virtlockd.service indirect enabled virtlogd.service indirect enabled wpa_supplicant-nl80211@.service disabled enabled wpa_supplicant-wired@.service disabled enabled wpa_supplicant.service enabled enabled wpa_supplicant@.service disabled enabled x11-common.service masked enabled machine.slice static - system-cockpithttps.slice static - system-systemd\x2dcryptsetup.slice static - user.slice static - cni-dhcp.socket disabled enabled cockpit-wsinstance-http.socket static - cockpit-wsinstance-https-factory.socket static - cockpit-wsinstance-https@.socket static - cockpit.socket disabled enabled dbus.socket static - dm-event.socket enabled enabled iscsid.socket enabled enabled libvirtd-admin.socket enabled enabled libvirtd-ro.socket enabled enabled libvirtd-tcp.socket disabled enabled libvirtd-tls.socket disabled enabled libvirtd.socket enabled enabled lvm2-lvmpolld.socket enabled enabled podman.socket enabled enabled rpcbind.socket enabled enabled ssh.socket disabled enabled sssd-autofs.socket enabled enabled sssd-nss.socket enabled enabled sssd-pac.socket enabled enabled sssd-pam-priv.socket enabled enabled sssd-pam.socket enabled enabled sssd-ssh.socket enabled enabled sssd-sudo.socket enabled enabled syslog.socket static - systemd-coredump.socket static - systemd-fsckd.socket static - systemd-initctl.socket static - systemd-journald-audit.socket static - systemd-journald-dev-log.socket static - systemd-journald-varlink@.socket static - systemd-journald.socket static - systemd-journald@.socket static - systemd-networkd.socket disabled enabled systemd-rfkill.socket static - systemd-udevd-control.socket static - systemd-udevd-kernel.socket static - tangd.socket enabled enabled targetclid.socket disabled enabled uuidd.socket enabled enabled virtlockd-admin.socket enabled enabled virtlockd.socket enabled enabled virtlogd-admin.socket enabled enabled virtlogd.socket enabled enabled basic.target static - blockdev@.target static - bluetooth.target static - boot-complete.target static - cryptsetup-pre.target static - cryptsetup.target static - ctrl-alt-del.target alias - default.target alias - emergency.target static - exit.target disabled disabled factory-reset.target static - final.target static - first-boot-complete.target static - getty-pre.target static - getty.target static - graphical.target static - halt.target disabled disabled hibernate.target static - hybrid-sleep.target static - initrd-fs.target static - initrd-root-device.target static - initrd-root-fs.target static - initrd-switch-root.target static - initrd-usr-fs.target static - initrd.target static - integritysetup-pre.target static - integritysetup.target static - kexec.target disabled disabled local-fs-pre.target static - local-fs.target static - machines.target enabled enabled multi-user.target static - network-online.target static - network-pre.target static - network.target static - nfs-client.target enabled enabled nss-lookup.target static - nss-user-lookup.target static - paths.target static - poweroff.target disabled disabled printer.target static - reboot.target disabled enabled remote-cryptsetup.target disabled enabled remote-fs-pre.target static - remote-fs.target enabled enabled remote-veritysetup.target disabled enabled rescue-ssh.target static - rescue.target static - rpc_pipefs.target generated - rpcbind.target static - runlevel0.target alias - runlevel1.target alias - runlevel2.target alias - runlevel3.target alias - runlevel4.target alias - runlevel5.target alias - runlevel6.target alias - selinux-autorelabel.target static - shutdown.target static - sigpwr.target static - sleep.target static - slices.target static - smartcard.target static - sockets.target static - sound.target static - suspend-then-hibernate.target static - suspend.target static - swap.target static - sysinit.target static - system-update-pre.target static - system-update.target static - time-set.target static - time-sync.target static - timers.target static - umount.target static - usb-gadget.target static - veritysetup-pre.target static - veritysetup.target static - virt-guest-shutdown.target static - apt-daily-upgrade.timer disabled enabled apt-daily.timer disabled enabled dpkg-db-backup.timer enabled enabled e2scrub_all.timer enabled enabled exim4-base.timer enabled enabled fstrim.timer disabled enabled logrotate.timer enabled enabled man-db.timer disabled enabled mdadm-last-resort@.timer static - mdcheck_continue.timer disabled enabled mdcheck_start.timer disabled enabled mdmonitor-oneshot.timer disabled enabled pmfind.timer disabled enabled pmie_check.timer disabled enabled pmie_daily.timer disabled enabled pmie_farm_check.timer disabled enabled pmlogger_check.timer disabled enabled pmlogger_daily.timer disabled enabled pmlogger_daily_report.timer disabled enabled pmlogger_farm_check.timer disabled enabled podman-auto-update.timer enabled enabled systemd-tmpfiles-clean.timer static - 401 unit files listed. 2022-03-24T11:21:59Z DEBUG stderr= 2022-03-24T11:21:59Z INFO nscd daemon is not installed, skip configuration 2022-03-24T11:21:59Z DEBUG Starting external process 2022-03-24T11:21:59Z DEBUG args=['/bin/systemctl', 'list-unit-files', '--full'] 2022-03-24T11:22:00Z DEBUG Process finished, return code=0 2022-03-24T11:22:00Z DEBUG stdout=UNIT FILE STATE VENDOR PRESET proc-sys-fs-binfmt_misc.automount static - -.mount generated - boot-efi.mount generated - dev-hugepages.mount static - dev-mqueue.mount static - proc-fs-nfsd.mount static - proc-sys-fs-binfmt_misc.mount disabled disabled run-qemu.mount disabled enabled run-rpc_pipefs.mount generated - sys-fs-fuse-connections.mount static - sys-kernel-config.mount static - sys-kernel-debug.mount static - sys-kernel-tracing.mount static - var-lib-machines.mount static - var-lib-nfs-rpc_pipefs.mount static - resolvconf-pull-resolved.path enabled enabled systemd-ask-password-console.path static - systemd-ask-password-wall.path static - session-3.scope transient - session-5.scope transient - apparmor.service enabled enabled apt-daily-upgrade.service static - apt-daily.service static - auth-rpcgss-module.service static - autovt@.service alias - blk-availability.service enabled enabled certmonger.service disabled enabled chrony.service enabled enabled chronyd.service alias - cni-dhcp.service disabled enabled cockpit-motd.service static - cockpit-wsinstance-http.service static - cockpit-wsinstance-https-factory@.service static - cockpit-wsinstance-https@.service static - cockpit.service static - console-getty.service disabled disabled container-getty@.service static - cron.service enabled enabled cryptdisks-early.service masked enabled cryptdisks.service masked enabled dbus-fi.w1.wpa_supplicant1.service alias - dbus-org.fedoraproject.FirewallD1.service alias - dbus-org.freedesktop.hostname1.service alias - dbus-org.freedesktop.import1.service alias - dbus-org.freedesktop.locale1.service alias - dbus-org.freedesktop.login1.service alias - dbus-org.freedesktop.machine1.service alias - dbus-org.freedesktop.ModemManager1.service alias - dbus-org.freedesktop.nm-dispatcher.service alias - dbus-org.freedesktop.portable1.service alias - dbus-org.freedesktop.timedate1.service alias - dbus-org.freedesktop.timesync1.service alias - dbus.service static - debug-shell.service disabled disabled dm-event.service static - dpkg-db-backup.service static - e2scrub@.service static - e2scrub_all.service static - e2scrub_fail@.service static - e2scrub_reap.service enabled enabled emergency.service static - exim4-base.service static - exim4.service generated - firewalld.service enabled enabled fstrim.service static - getty-static.service static - getty@.service enabled enabled hwclock.service masked enabled ifup@.service static - ifupdown-pre.service static - ifupdown-wait-online.service disabled enabled initrd-cleanup.service static - initrd-parse-etc.service static - initrd-switch-root.service static - initrd-udevadm-cleanup-db.service static - iscsi.service alias - iscsid.service disabled enabled kmod-static-nodes.service static - kmod.service alias - libvirt-guests.service enabled enabled libvirtd.service enabled enabled logrotate.service static - lvm2-lvmpolld.service static - lvm2-monitor.service enabled enabled lvm2-pvscan@.service static - lvm2.service masked enabled man-db.service static - mdadm-grow-continue@.service static - mdadm-last-resort@.service static - mdadm-shutdown.service enabled enabled mdadm-waitidle.service masked enabled mdadm.service masked enabled mdcheck_continue.service static - mdcheck_start.service static - mdmon@.service static - mdmonitor-oneshot.service static - mdmonitor.service static - ModemManager.service enabled enabled modprobe@.service static - networking.service enabled enabled NetworkManager-dispatcher.service enabled enabled NetworkManager-wait-online.service enabled enabled NetworkManager.service enabled enabled nfs-blkmap.service enabled enabled nfs-common.service masked enabled nfs-idmapd.service static - nfs-kernel-server.service alias - nfs-mountd.service static - nfs-server.service enabled enabled nfs-utils.service static - nfsdcld.service static - nm-priv-helper.service static - oddjobd.service disabled enabled open-iscsi.service enabled enabled packagekit-offline-update.service static - packagekit.service static - pcp.service generated - pmcd.service enabled enabled pmfind.service disabled enabled pmie.service enabled enabled pmie_check.service static - pmie_daily.service static - pmie_farm.service enabled enabled pmie_farm_check.service static - pmlogger.service enabled enabled pmlogger_check.service static - pmlogger_daily.service static - pmlogger_daily_report.service static - pmlogger_farm.service enabled enabled pmlogger_farm_check.service static - pmproxy.service enabled enabled podman-auto-update.service enabled enabled podman-restart.service enabled enabled podman.service enabled enabled polkit.service static - portmap.service alias - powertop.service disabled enabled procps.service alias - quotaon.service static - rc-local.service static - rc.service masked enabled rcS.service masked enabled realmd.service static - redis-server.service disabled enabled redis-server@.service disabled enabled rescue.service static - resolvconf-pull-resolved.service enabled enabled resolvconf.service enabled enabled rpc-gssd.service static - rpc-statd-notify.service static - rpc-statd.service static - rpc-svcgssd.service static - rpcbind.service enabled enabled rsyslog.service enabled enabled rtslib-fb-targetctl.service disabled enabled screen-cleanup.service masked enabled selinux-autorelabel-mark.service static - selinux-autorelabel.service static - serial-getty@.service indirect enabled ssh.service enabled enabled ssh@.service static - sshd.service alias - sssd-autofs.service indirect enabled sssd-ifp.service static - sssd-nss.service indirect enabled sssd-pac.service indirect enabled sssd-pam.service indirect enabled sssd-ssh.service indirect enabled sssd-sudo.service indirect enabled sssd.service disabled enabled sudo.service masked enabled syslog.service alias - system-update-cleanup.service static - systemd-ask-password-console.service static - systemd-ask-password-wall.service static - systemd-backlight@.service static - systemd-binfmt.service static - systemd-bless-boot.service static - systemd-boot-check-no-failures.service disabled disabled systemd-boot-system-token.service static - systemd-boot-update.service disabled enabled systemd-coredump@.service static - systemd-exit.service static - systemd-fsck-root.service enabled-runtime enabled systemd-fsck@.service static - systemd-fsckd.service static - systemd-growfs@-.service generated - systemd-halt.service static - systemd-hibernate-resume@.service static - systemd-hibernate.service static - systemd-hostnamed.service static - systemd-hybrid-sleep.service static - systemd-importd.service static - systemd-initctl.service static - systemd-journal-flush.service static - systemd-journald.service static - systemd-journald@.service static - systemd-kexec.service static - systemd-localed.service static - systemd-logind.service static - systemd-machine-id-commit.service static - systemd-machined.service static - systemd-modules-load.service static - systemd-network-generator.service disabled enabled systemd-networkd-wait-online.service disabled disabled systemd-networkd.service disabled enabled systemd-nspawn@.service disabled enabled systemd-portabled.service static - systemd-poweroff.service static - systemd-pstore.service enabled enabled systemd-quotacheck.service static - systemd-random-seed.service static - systemd-reboot.service static - systemd-remount-fs.service enabled-runtime enabled systemd-repart.service static - systemd-resolved.service disabled enabled systemd-rfkill.service static - systemd-suspend-then-hibernate.service static - systemd-suspend.service static - systemd-sysctl.service static - systemd-sysext.service disabled enabled systemd-sysusers.service static - systemd-time-wait-sync.service disabled disabled systemd-timedated.service static - systemd-timesyncd.service enabled enabled systemd-tmpfiles-clean.service static - systemd-tmpfiles-setup-dev.service static - systemd-tmpfiles-setup.service static - systemd-udev-settle.service static - systemd-udev-trigger.service static - systemd-udevd.service static - systemd-update-utmp-runlevel.service static - systemd-update-utmp.service static - systemd-user-sessions.service static - systemd-volatile-root.service static - tangd@.service static - targetclid.service disabled enabled tuned.service disabled enabled udev.service alias - udisks2.service enabled enabled unattended-upgrades.service enabled enabled usb_modeswitch@.service static - user-runtime-dir@.service static - user@.service static - uuidd.service indirect enabled virtlockd.service indirect enabled virtlogd.service indirect enabled wpa_supplicant-nl80211@.service disabled enabled wpa_supplicant-wired@.service disabled enabled wpa_supplicant.service enabled enabled wpa_supplicant@.service disabled enabled x11-common.service masked enabled machine.slice static - system-cockpithttps.slice static - system-systemd\x2dcryptsetup.slice static - user.slice static - cni-dhcp.socket disabled enabled cockpit-wsinstance-http.socket static - cockpit-wsinstance-https-factory.socket static - cockpit-wsinstance-https@.socket static - cockpit.socket disabled enabled dbus.socket static - dm-event.socket enabled enabled iscsid.socket enabled enabled libvirtd-admin.socket enabled enabled libvirtd-ro.socket enabled enabled libvirtd-tcp.socket disabled enabled libvirtd-tls.socket disabled enabled libvirtd.socket enabled enabled lvm2-lvmpolld.socket enabled enabled podman.socket enabled enabled rpcbind.socket enabled enabled ssh.socket disabled enabled sssd-autofs.socket enabled enabled sssd-nss.socket enabled enabled sssd-pac.socket enabled enabled sssd-pam-priv.socket enabled enabled sssd-pam.socket enabled enabled sssd-ssh.socket enabled enabled sssd-sudo.socket enabled enabled syslog.socket static - systemd-coredump.socket static - systemd-fsckd.socket static - systemd-initctl.socket static - systemd-journald-audit.socket static - systemd-journald-dev-log.socket static - systemd-journald-varlink@.socket static - systemd-journald.socket static - systemd-journald@.socket static - systemd-networkd.socket disabled enabled systemd-rfkill.socket static - systemd-udevd-control.socket static - systemd-udevd-kernel.socket static - tangd.socket enabled enabled targetclid.socket disabled enabled uuidd.socket enabled enabled virtlockd-admin.socket enabled enabled virtlockd.socket enabled enabled virtlogd-admin.socket enabled enabled virtlogd.socket enabled enabled basic.target static - blockdev@.target static - bluetooth.target static - boot-complete.target static - cryptsetup-pre.target static - cryptsetup.target static - ctrl-alt-del.target alias - default.target alias - emergency.target static - exit.target disabled disabled factory-reset.target static - final.target static - first-boot-complete.target static - getty-pre.target static - getty.target static - graphical.target static - halt.target disabled disabled hibernate.target static - hybrid-sleep.target static - initrd-fs.target static - initrd-root-device.target static - initrd-root-fs.target static - initrd-switch-root.target static - initrd-usr-fs.target static - initrd.target static - integritysetup-pre.target static - integritysetup.target static - kexec.target disabled disabled local-fs-pre.target static - local-fs.target static - machines.target enabled enabled multi-user.target static - network-online.target static - network-pre.target static - network.target static - nfs-client.target enabled enabled nss-lookup.target static - nss-user-lookup.target static - paths.target static - poweroff.target disabled disabled printer.target static - reboot.target disabled enabled remote-cryptsetup.target disabled enabled remote-fs-pre.target static - remote-fs.target enabled enabled remote-veritysetup.target disabled enabled rescue-ssh.target static - rescue.target static - rpc_pipefs.target generated - rpcbind.target static - runlevel0.target alias - runlevel1.target alias - runlevel2.target alias - runlevel3.target alias - runlevel4.target alias - runlevel5.target alias - runlevel6.target alias - selinux-autorelabel.target static - shutdown.target static - sigpwr.target static - sleep.target static - slices.target static - smartcard.target static - sockets.target static - sound.target static - suspend-then-hibernate.target static - suspend.target static - swap.target static - sysinit.target static - system-update-pre.target static - system-update.target static - time-set.target static - time-sync.target static - timers.target static - umount.target static - usb-gadget.target static - veritysetup-pre.target static - veritysetup.target static - virt-guest-shutdown.target static - apt-daily-upgrade.timer disabled enabled apt-daily.timer disabled enabled dpkg-db-backup.timer enabled enabled e2scrub_all.timer enabled enabled exim4-base.timer enabled enabled fstrim.timer disabled enabled logrotate.timer enabled enabled man-db.timer disabled enabled mdadm-last-resort@.timer static - mdcheck_continue.timer disabled enabled mdcheck_start.timer disabled enabled mdmonitor-oneshot.timer disabled enabled pmfind.timer disabled enabled pmie_check.timer disabled enabled pmie_daily.timer disabled enabled pmie_farm_check.timer disabled enabled pmlogger_check.timer disabled enabled pmlogger_daily.timer disabled enabled pmlogger_daily_report.timer disabled enabled pmlogger_farm_check.timer disabled enabled podman-auto-update.timer enabled enabled systemd-tmpfiles-clean.timer static - 401 unit files listed. 2022-03-24T11:22:00Z DEBUG stderr= 2022-03-24T11:22:00Z INFO nslcd daemon is not installed, skip configuration 2022-03-24T11:22:00Z DEBUG Starting external process 2022-03-24T11:22:00Z DEBUG args=['/bin/systemctl', 'is-active', 'sshd.service'] 2022-03-24T11:22:00Z DEBUG Process finished, return code=0 2022-03-24T11:22:00Z DEBUG stdout=active 2022-03-24T11:22:00Z DEBUG stderr= 2022-03-24T11:22:00Z DEBUG Starting external process 2022-03-24T11:22:00Z DEBUG args=['/bin/systemctl', 'restart', 'sshd.service'] 2022-03-24T11:22:00Z DEBUG Process finished, return code=0 2022-03-24T11:22:00Z DEBUG stdout= 2022-03-24T11:22:00Z DEBUG stderr= 2022-03-24T11:22:00Z DEBUG Starting external process 2022-03-24T11:22:00Z DEBUG args=['/bin/systemctl', 'is-active', 'sshd.service'] 2022-03-24T11:22:00Z DEBUG Process finished, return code=0 2022-03-24T11:22:00Z DEBUG stdout=active 2022-03-24T11:22:00Z DEBUG stderr= 2022-03-24T11:22:00Z DEBUG Restart of sshd.service complete 2022-03-24T11:22:00Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:22:00Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-03-24T11:22:00Z ERROR Some installation state for ntp has not been restored, see /var/lib/ipa/sysrestore/sysrestore.state 2022-03-24T11:22:00Z WARNING Some installation state has not been restored. This may cause re-installation to fail. It should be safe to remove /var/lib/ipa-client/sysrestore.state but it may mean your system hasn't been restored to its pre-installation state. 2022-03-24T11:22:00Z DEBUG Starting external process 2022-03-24T11:22:00Z DEBUG args=['/usr/sbin/update-ca-certificates'] 2022-03-24T11:22:00Z DEBUG Process finished, return code=0 2022-03-24T11:22:00Z DEBUG stdout=Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done. 2022-03-24T11:22:00Z DEBUG stderr= 2022-03-24T11:22:00Z INFO Systemwide CA database updated. 2022-03-24T11:22:00Z INFO Client uninstall complete. 2022-03-24T11:22:00Z INFO The original nsswitch.conf configuration has been restored. 2022-03-24T11:22:00Z INFO You may need to restart services or reboot the machine. 2022-03-24T11:22:02Z DEBUG File "/usr/lib/python3/dist-packages/ipapython/admintool.py", line 180, in execute return_value = self.run() File "/usr/lib/python3/dist-packages/ipapython/install/cli.py", line 342, in run return cfgr.run() File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 360, in run return self.execute() File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 386, in execute for rval in self._executor(): File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 431, in __runner exc_handler(exc_info) File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 460, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 450, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python3/dist-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 421, in __runner step() File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 418, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python3/dist-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python3/dist-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3/dist-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 655, in _configure next(executor) File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 431, in __runner exc_handler(exc_info) File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 460, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 518, in _handle_exception self.__parent._handle_exception(exc_info) File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 450, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python3/dist-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 515, in _handle_exception super(ComponentBase, self)._handle_exception(exc_info) File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 450, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python3/dist-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 421, in __runner step() File "/usr/lib/python3/dist-packages/ipapython/install/core.py", line 418, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python3/dist-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python3/dist-packages/six.py", line 719, in reraise raise value File "/usr/lib/python3/dist-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python3/dist-packages/ipapython/install/common.py", line 73, in _uninstall for unused in self._uninstaller(self.parent): File "/usr/lib/python3/dist-packages/ipaclient/install/client.py", line 3956, in main uninstall(self) File "/usr/lib/python3/dist-packages/ipaclient/install/client.py", line 3659, in uninstall raise ScriptError(rval=rv) 2022-03-24T11:22:02Z DEBUG The ipa-client-install command failed, exception: ScriptError: 2022-03-24T11:22:02Z ERROR The ipa-client-install command failed. See /var/log/ipaclient-uninstall.log for more information