Re: [Freeipa-users] server installation but client part fails

2016-02-24 Thread Martin Kosek
On 02/23/2016 05:38 PM, lejeczek wrote:
> On 23/02/16 15:04, Rob Crittenden wrote:
>> lejeczek wrote:
>>> hi everybody
>>>
>>> I'm trying server installation but it fails, I think very last leg, and
>>> I was hoping you could suggest places which I should start looking at.
>>>
>>>[7/7]: configuring ipa-dnskeysyncd to start on boot
>>> Done configuring DNS key synchronization service (ipa-dnskeysyncd).
>>> Restarting ipa-dnskeysyncd
>>> Restarting named
>>> Restarting the web server
>>> ipa.ipapython.install.cli.install_tool(Server): ERROR Configuration of
>>> client side components failed!
>>> ipa-client-install returned: Command ''/usr/sbin/ipa-client-install'
>>> '--on-master' '--unattended' '--domain' '.private.my.private' '--server'
>>> '.private.my.private' '--realm' 'PRIVATE.MY.PRIVATE' '--hostname'
>>> '.private.my.private'' returned non-zero exit status 1
>>>
>>> many thanks
>>>
>> Look in /var/log/ipaserver-install.log and
>> /var/log/ipaclient-install.log for a more detailed reason.
>>
>> rob
>>
> thanks Rob, I was missing client part of logs.
> I just have to be careful with my finely grained configuration & config files.
> If anybody stumbles upon similar errors - first thing to do is to make sure
> your already existing httpd config(s) does not exclude *.conf from Apache's
> main dir, which is where IPA renders its files.
> 

This looks as a "+1" to this FreeIPA RFE:
https://fedorahosted.org/freeipa/ticket/4431

If we carry our own minimal hardened httpd.conf, issues like this should not
happen...

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] server installation but client part fails

2016-02-23 Thread lejeczek

On 23/02/16 15:04, Rob Crittenden wrote:

lejeczek wrote:

hi everybody

I'm trying server installation but it fails, I think very last leg, and
I was hoping you could suggest places which I should start looking at.

   [7/7]: configuring ipa-dnskeysyncd to start on boot
Done configuring DNS key synchronization service (ipa-dnskeysyncd).
Restarting ipa-dnskeysyncd
Restarting named
Restarting the web server
ipa.ipapython.install.cli.install_tool(Server): ERROR Configuration of
client side components failed!
ipa-client-install returned: Command ''/usr/sbin/ipa-client-install'
'--on-master' '--unattended' '--domain' '.private.my.private' '--server'
'.private.my.private' '--realm' 'PRIVATE.MY.PRIVATE' '--hostname'
'.private.my.private'' returned non-zero exit status 1

many thanks


Look in /var/log/ipaserver-install.log and
/var/log/ipaclient-install.log for a more detailed reason.

rob


thanks Rob, I was missing client part of logs.
I just have to be careful with my finely grained 
configuration & config files.
If anybody stumbles upon similar errors - first thing to do 
is to make sure your already existing httpd config(s) does 
not exclude *.conf from Apache's main dir, which is where 
IPA renders its files.


--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


[Freeipa-users] server installation but client part fails

2016-02-23 Thread lejeczek

hi everybody

I'm trying server installation but it fails, I think very 
last leg, and I was hoping you could suggest places which I 
should start looking at.


  [7/7]: configuring ipa-dnskeysyncd to start on boot
Done configuring DNS key synchronization service 
(ipa-dnskeysyncd).

Restarting ipa-dnskeysyncd
Restarting named
Restarting the web server
ipa.ipapython.install.cli.install_tool(Server): ERROR 
Configuration of client side components failed!
ipa-client-install returned: Command 
''/usr/sbin/ipa-client-install' '--on-master' '--unattended' 
'--domain' '.private.my.private' '--server' 
'.private.my.private' '--realm' 'PRIVATE.MY.PRIVATE' 
'--hostname' '.private.my.private'' returned non-zero exit 
status 1


many thanks

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project