Re: [Freeipa-users] server installation but client part fails
On 02/23/2016 05:38 PM, lejeczek wrote: > On 23/02/16 15:04, Rob Crittenden wrote: >> lejeczek wrote: >>> hi everybody >>> >>> I'm trying server installation but it fails, I think very last leg, and >>> I was hoping you could suggest places which I should start looking at. >>> >>>[7/7]: configuring ipa-dnskeysyncd to start on boot >>> Done configuring DNS key synchronization service (ipa-dnskeysyncd). >>> Restarting ipa-dnskeysyncd >>> Restarting named >>> Restarting the web server >>> ipa.ipapython.install.cli.install_tool(Server): ERROR Configuration of >>> client side components failed! >>> ipa-client-install returned: Command ''/usr/sbin/ipa-client-install' >>> '--on-master' '--unattended' '--domain' '.private.my.private' '--server' >>> '.private.my.private' '--realm' 'PRIVATE.MY.PRIVATE' '--hostname' >>> '.private.my.private'' returned non-zero exit status 1 >>> >>> many thanks >>> >> Look in /var/log/ipaserver-install.log and >> /var/log/ipaclient-install.log for a more detailed reason. >> >> rob >> > thanks Rob, I was missing client part of logs. > I just have to be careful with my finely grained configuration & config files. > If anybody stumbles upon similar errors - first thing to do is to make sure > your already existing httpd config(s) does not exclude *.conf from Apache's > main dir, which is where IPA renders its files. > This looks as a "+1" to this FreeIPA RFE: https://fedorahosted.org/freeipa/ticket/4431 If we carry our own minimal hardened httpd.conf, issues like this should not happen... -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] server installation but client part fails
On 23/02/16 15:04, Rob Crittenden wrote: lejeczek wrote: hi everybody I'm trying server installation but it fails, I think very last leg, and I was hoping you could suggest places which I should start looking at. [7/7]: configuring ipa-dnskeysyncd to start on boot Done configuring DNS key synchronization service (ipa-dnskeysyncd). Restarting ipa-dnskeysyncd Restarting named Restarting the web server ipa.ipapython.install.cli.install_tool(Server): ERROR Configuration of client side components failed! ipa-client-install returned: Command ''/usr/sbin/ipa-client-install' '--on-master' '--unattended' '--domain' '.private.my.private' '--server' '.private.my.private' '--realm' 'PRIVATE.MY.PRIVATE' '--hostname' '.private.my.private'' returned non-zero exit status 1 many thanks Look in /var/log/ipaserver-install.log and /var/log/ipaclient-install.log for a more detailed reason. rob thanks Rob, I was missing client part of logs. I just have to be careful with my finely grained configuration & config files. If anybody stumbles upon similar errors - first thing to do is to make sure your already existing httpd config(s) does not exclude *.conf from Apache's main dir, which is where IPA renders its files. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
[Freeipa-users] server installation but client part fails
hi everybody I'm trying server installation but it fails, I think very last leg, and I was hoping you could suggest places which I should start looking at. [7/7]: configuring ipa-dnskeysyncd to start on boot Done configuring DNS key synchronization service (ipa-dnskeysyncd). Restarting ipa-dnskeysyncd Restarting named Restarting the web server ipa.ipapython.install.cli.install_tool(Server): ERROR Configuration of client side components failed! ipa-client-install returned: Command ''/usr/sbin/ipa-client-install' '--on-master' '--unattended' '--domain' '.private.my.private' '--server' '.private.my.private' '--realm' 'PRIVATE.MY.PRIVATE' '--hostname' '.private.my.private'' returned non-zero exit status 1 many thanks -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project