Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-17 Thread Robert L. Harris
Ok, I reverted to a completely fresh install, literally just after the first reboot. It installed cleanly. So there's something in a package upgrade that's breaking things. I may try to figure it out later. On Tue, May 16, 2017 at 3:08 PM Dagan McGregor wrote: > On 17 May

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Dagan McGregor
On 17 May 2017 8:50:02 AM NZST, "Robert L. Harris" wrote: >I can, though that's what I did 2 days ago, fresh install from latest >ISO. > > >On Tue, May 16, 2017 at 2:40 PM Andrew Holway >wrote: > >> I have a feeling that there is something

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Robert L. Harris
I can, though that's what I did 2 days ago, fresh install from latest ISO. On Tue, May 16, 2017 at 2:40 PM Andrew Holway wrote: > I have a feeling that there is something broken with your image. Could you > try installing Centos from ISO? > > > On 16 May 2017 at

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Andrew Holway
I have a feeling that there is something broken with your image. Could you try installing Centos from ISO? On 16 May 2017 at 22:37, Robert L. Harris wrote: > > I left SELinux enabled, no change, still streaming the same error: > > [Tue May 16 14:36:48.957848 2017]

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Robert L. Harris
I left SELinux enabled, no change, still streaming the same error: [Tue May 16 14:36:48.957848 2017] [:error] [pid 10780] NSS_Initialize failed. Certificate database: /etc/httpd/alias. [Tue May 16 14:36:48.957883 2017] [:error] [pid 10780] SSL Library Error: -8038 SEC_ERROR_NOT_INITIALIZED [Tue

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Andrew Holway
Yea, I would try installing IPA then making the changes that you want. I think SELinux should be left enabled however. It makes admin super fun! :) On 16 May 2017 at 21:57, Robert L. Harris wrote: > > I did disable selinux as it gave errors setting up my standard

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Robert L. Harris
I did disable selinux as it gave errors setting up my standard users, etc. I can roll back the snapshot, set it at 4Gigs of RAM and re-enable selinux and then try again. On Tue, May 16, 2017 at 1:52 PM Andrew Holway wrote: > This is pretty weird. FreeIPA installation

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Andrew Holway
This is pretty weird. FreeIPA installation normally works. Has the operating system image been changed or optimised somehow? Perhaps SELinux has been disabled? Have you tried installing Centos7 from the ISO? On 16 May 2017 at 21:48, Robert L. Harris wrote: > >2

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Robert L. Harris
2 Gigs, it's a VM. The VM didn't report any memory issues ( no alarms on VMWare ) On Tue, May 16, 2017 at 12:29 PM Andrew Holway wrote: > Hallo, > > How much memory do you have on the machine. I have a sneaking suspicion > that you're running out. > > Ta, > >

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Andrew Holway
Hallo, How much memory do you have on the machine. I have a sneaking suspicion that you're running out. Ta, Andrew On 16 May 2017 at 17:16, Robert L. Harris wrote: > > Last night I rolled back my snapshot. Here's what I have after the yum > install > > "minimal"

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-16 Thread Robert L. Harris
Last night I rolled back my snapshot. Here's what I have after the yum install "minimal" install of Centos7 + basic build. {0}:/var/log>cat /etc/*elease CentOS Linux release 7.3.1611 (Core) NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7"

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-12 Thread Rob Crittenden
Robert L. Harris wrote: > > Hmmm > > {0}:/var/log>ls > anaconda btmp dmesg grubby maillog pppsecure > tallylog wtmp > audit cron dmesg.old grubby_prune_debug messages rhsm spooler > tuned yum.log > boot.log cups firewalld lastlog

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-12 Thread Robert L. Harris
Hmmm {0}:/var/log>ls anaconda btmp dmesg grubby maillog pppsecure tallylog wtmp audit cron dmesg.old grubby_prune_debug messages rhsm spooler tuned yum.log boot.log cups firewalld lastlog ntpstats samba sssd

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-12 Thread Martin Bašti
That's weird, it should be super fast, anything in /var/log/httpd/error_log? On 11.05.2017 22:23, Robert L. Harris wrote: Odd, must have clicked reply instead of reply-all. Anyway, I did the revert and re-install. Actual install went through fine then the "ipa-server-install" ran until

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-11 Thread Robert L. Harris
Odd, must have clicked reply instead of reply-all. Anyway, I did the revert and re-install. Actual install went through fine then the "ipa-server-install" ran until this: [8/9]: restoring configuration [9/9]: starting directory server Done. Restarting the directory server Restarting the KDC

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-11 Thread Martin Bašti
Please keep freeipa-users in CC Snapshot is always better, so I suggest to use it. Otherwise there is an option --ignore-last-of-role to unblock uninstallation. Martin On 11.05.2017 16:00, Robert L. Harris wrote: Looks like you hit it, apache didn't have a group: -- Logs begin at Wed

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-11 Thread Martin Bašti
Hello, comments inline On 11.05.2017 06:06, Robert L. Harris wrote: Sigh... Sorry, it's been a long day, I thought I put that log in the first pastebin. It's in this one: https://pastebin.com/18PAXXNS Could you please provide journalctl -u httpd and /var/log/httpd/error_log ? Also,

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-10 Thread Robert L. Harris
Sigh... Sorry, it's been a long day, I thought I put that log in the first pastebin. It's in this one: https://pastebin.com/18PAXXNS Also, Anyone else get the constant spam when mailing this list? Got an address to block for it? Robert On Wed, May 10, 2017 at 9:56 PM Lachlan Musicman

Re: [Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-10 Thread Lachlan Musicman
Robert, did you look in /var/log/ipaserver-install.log as it says? Was there any other information? cheers L. -- "Mission Statement: To provide hope and inspiration for collective action, to build collective power, to achieve collective transformation, rooted in grief and rage but pointed

[Freeipa-users] Fresh Install of FreeIPA-Server - CentOS7

2017-05-10 Thread Robert L. Harris
Ok, I gave up on Ubuntu. I'm now trying the latest CentOS7. I built out a "minimal server" with some normal base packages which did include the freeipa-client but otherwise, just standard tools. Here's a pastebin of the output of the install: https://pastebin.com/zAWCgkUU Robert -- Manage