[Freeipa-users] Re: IPA server upgrade fails with KDC error

2018-11-23 Thread Zarko D via FreeIPA-users 
> Hi, have you found resolution here? 
> 
> I get same/similar error while troubleshooting expired certificates, for 
> example going
> back in time when all certs are valid and restarting certmonger, then I see 
> this error.

sorry, please ignore. Apologies. 
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2018-11-23 Thread Zarko D via FreeIPA-users 
Hi, have you found resolution here? 

I get same/similar error while troubleshooting expired certificates, for 
example going back in time when all certs are valid and restarting certmonger, 
then I see this error. 
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-18 Thread Johannes Brandstetter via FreeIPA-users 
So I finally reverted to a snapshot with version 4.4 before the inadvertent 
update. After some 15min of no output the instance came back up again.
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-18 Thread Johannes Brandstetter via FreeIPA-users 
I've rebuilt the RPM from the src.rpm and installed that but it didn't help. 
Any other ideas on how to solve the mismatch?
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Robbie Harwood via FreeIPA-users 
Alexander Bokovoy  writes:

> On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote:
>>
>> I'm trying to upgrade FreeIPA through ipa-server-upgrade from 4.4 to
>> 4.5. The command fails with an "ACIError: Insufficient access:" . I
>> find in the kdc log that it complains about " Database module does
>> not match KDC version - while initializing database for realm..."
>
> You should make sure your system is fully upgraded. Not just 'yum
> install freeipa-server' to upgrade but all related packages too.  In
> particular, MIT Kerberos has database driver version that may change
> with a version update and we have to rebuild FreeIPA driver against
> it.

We have some packaging logic coming in to prevent krb5 mismatch (in
Fedora), but it's not in RHEL right now.

Thanks,
--Robbie


signature.asc
Description: PGP signature
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Johannes Brandstetter via FreeIPA-users 
[17/Oct/2017:04:15:07.895680200 +] - WARN - Security Initialization - SSL 
alert: Sending pin request to SVRCore. You may need to run 
systemd-tty-ask-password-agent to provide the password.
[17/Oct/2017:04:15:07.901635774 +] - INFO - Security Initialization - SSL 
info: Enabling default cipher set.
[17/Oct/2017:04:15:07.904597449 +] - INFO - Security Initialization - SSL 
info: Configured NSS Ciphers
[17/Oct/2017:04:15:07.908676932 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled
[17/Oct/2017:04:15:07.914619071 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled
[17/Oct/2017:04:15:07.918711184 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled
[17/Oct/2017:04:15:07.922188082 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled
[17/Oct/2017:04:15:07.925705727 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled
[17/Oct/2017:04:15:07.928951599 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled
[17/Oct/2017:04:15:07.933094418 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled
[17/Oct/2017:04:15:07.937219183 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[17/Oct/2017:04:15:07.938938509 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled
[17/Oct/2017:04:15:07.942369175 +] - INFO - Security Initialization - SSL 
info: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled
[17/Oct/2017:04:15:07.945127590 +] - INFO - Security Initialization - SSL 
info: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled
[17/Oct/2017:04:15:07.948679956 +] - INFO - Security Initialization - SSL 
info: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled
[17/Oct/2017:04:15:07.952511577 +] - INFO - Security Initialization - SSL 
info: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled
[17/Oct/2017:04:15:07.956519881 +] - INFO - Security Initialization - SSL 
info: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled
[17/Oct/2017:04:15:07.960004200 +] - INFO - Security Initialization - SSL 
info: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled
[17/Oct/2017:04:15:07.961410725 +] - INFO - Security Initialization - SSL 
info: TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled
[17/Oct/2017:04:15:07.963576251 +] - INFO - Security Initialization - SSL 
info: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled
[17/Oct/2017:04:15:07.965149796 +] - INFO - Security Initialization - SSL 
info: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled
[17/Oct/2017:04:15:07.968188865 +] - INFO - Security Initialization - SSL 
info: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled
[17/Oct/2017:04:15:07.970678447 +] - INFO - Security Initialization - SSL 
info: TLS_RSA_WITH_AES_256_GCM_SHA384: enabled
[17/Oct/2017:04:15:07.972819595 +] - INFO - Security Initialization - SSL 
info: TLS_RSA_WITH_AES_256_CBC_SHA: enabled
[17/Oct/2017:04:15:07.976585917 +] - INFO - Security Initialization - SSL 
info: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled
[17/Oct/2017:04:15:07.977963593 +] - INFO - Security Initialization - SSL 
info: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled
[17/Oct/2017:04:15:07.980765706 +] - INFO - Security Initialization - SSL 
info: TLS_RSA_WITH_AES_128_CBC_SHA: enabled
[17/Oct/2017:04:15:07.982822399 +] - INFO - Security Initialization - SSL 
info: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled
[17/Oct/2017:04:15:07.984100976 +] - INFO - Security Initialization - SSL 
info: TLS_AES_128_GCM_SHA256: enabled
[17/Oct/2017:04:15:07.986608371 +] - INFO - Security Initialization - SSL 
info: TLS_CHACHA20_POLY1305_SHA256: enabled
[17/Oct/2017:04:15:07.990063097 +] - INFO - Security Initialization - SSL 
info: TLS_AES_256_GCM_SHA384: enabled
[17/Oct/2017:04:15:08.001170916 +] - INFO - Security Initialization - 
slapd_ssl_init2 - Configured SSL version range: min: TLS1.0, max: TLS1.2
[17/Oct/2017:04:15:08.005667838 +] - INFO - main - 389-Directory/1.3.6.1 
B2017.249.1616 starting up
[17/Oct/2017:04:15:08.020017949 +] - INFO - 
ldbm_instance_config_cachememsize_set - force a minimal value 512000
[17/Oct/2017:04:15:08.038101811 +] - WARN - default_mr_indexer_create - 
Plugin [caseIgnoreIA5Match] does not handle caseExactIA5Match
[17/Oct/2017:04:15:08.045327240 +] - INFO - 
ldbm_instance_config_cachememsize_set - force a minimal value 512000
[17/Oct/2017:04:15:08.054350703 +] - NOTICE - ldbm_back_start - found 
3688396k physical memory
[17/Oct/2017:04:15:08.056339877 +] - NOTICE - ldbm_back_start - found 
3095684k available
[17/Oct/2017:04:15:08.058704865 +] -

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Alexander Bokovoy via FreeIPA-users 

On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote:

Hi,

it was all done in one yum upgrade session. I just grepped the output for ipa 
and krb and didn't bother to put them back in the correct order.

If I run ipa-server-upgrade directly I get the following output which leads to 
the log entry stated above:

[jbrandstetter@ip-172-29-1-184 ~]$ sudo ipa-server-upgrade
Upgrading IPA:. Estimated time: 1 minute 30 seconds
 [1/8]: saving configuration
 [2/8]: disabling listeners
 [3/8]: enabling DS global lock
 [4/8]: starting directory server
 [error] ACIError: Insufficient access:
 [cleanup]: stopping directory server
 [cleanup]: restoring configuration
IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command 
ipa-server-upgrade manually.
Insufficient access:
The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more 
information

what do you have in /var/log/dirsrv/slapd-$INSTANCE/errors ?

--
/ Alexander Bokovoy
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Johannes Brandstetter via FreeIPA-users 
Hi,

it was all done in one yum upgrade session. I just grepped the output for ipa 
and krb and didn't bother to put them back in the correct order. 

If I run ipa-server-upgrade directly I get the following output which leads to 
the log entry stated above:

[jbrandstetter@ip-172-29-1-184 ~]$ sudo ipa-server-upgrade
Upgrading IPA:. Estimated time: 1 minute 30 seconds
  [1/8]: saving configuration
  [2/8]: disabling listeners
  [3/8]: enabling DS global lock
  [4/8]: starting directory server
  [error] ACIError: Insufficient access:
  [cleanup]: stopping directory server
  [cleanup]: restoring configuration
IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command 
ipa-server-upgrade manually.
Insufficient access:
The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more 
information

Cheers,

Johannes
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Alexander Bokovoy via FreeIPA-users 

On ti, 17 loka 2017, Alexander Bokovoy via FreeIPA-users wrote:

On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote:

Hi,

I'm trying to upgrade FreeIPA through ipa-server-upgrade from 4.4 to 4.5. The command fails with an 
"ACIError: Insufficient access:" . I find in the kdc log that it complains about " 
Database module does not match KDC version - while initializing database for realm..."

Does anybody know how to fix this?

You should make sure your system is fully upgraded. Not just 'yum
install freeipa-server' to upgrade but all related packages too.
In particular, MIT Kerberos has database driver version that may change
with a version update and we have to rebuild FreeIPA driver against it.





Some more info:
$ cat /etc/redhat-release
CentOS Linux release 7.4.1708 (Core)

$ tail /var/log/krb5kdc.log
krb5kdc: Server error - while fetching master key K/M for realm XXX
krb5kdc: Database module does not match KDC version - while initializing 
database for realm XXX

$ sudo less /var/log/ipaupgrade.log
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Saving StateFile to 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Saving StateFile to 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG   duration: 0 seconds
2017-10-16T13:04:13Z ERROR IPA server upgrade failed: Inspect 
/var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
2017-10-16T13:04:14Z DEBUG   File 
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
  return_value = self.run()
File 
"/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py", 
line 46, in run
  server.upgrade()
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", 
line 1896, in upgrade
  data_upgrade.create_instance()
File "/usr/lib/python2.7/site-packages/ipaserver/install/upgradeinstance.py", 
line 124, in create_instance
  runtime=90)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, 
in start_creation
  run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, 
in run_step
  method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/upgradeinstance.py", 
line 96, in __start
  api.Backend.ldap2.connect()
File "/usr/lib/python2.7/site-packages/ipalib/backend.py", line 66, in connect
  conn = self.create_connection(*args, **kw)
File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 190, 
in create_connection
  client_controls=clientctrls)
File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line , in 
external_bind
  '', auth_tokens, server_controls, client_controls)
File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
  self.gen.throw(type, value, traceback)
File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1007, in 
error_handler
  raise errors.ACIError(info=info)

2017-10-16T13:04:14Z DEBUG The ipa-server-upgrade command failed, exception: 
ACIError: Insufficient access:
2017-10-16T13:04:14Z ERROR Insufficient access:
2017-10-16T13:04:14Z ERROR The ipa-server-upgrade command failed. See 
/var/log/ipaupgrade.log for more information

$ sudo less /var/log/yum.log
Oct 16 05:36:02 Updated: ipa-common-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:36:02 Updated: ipa-client-common-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:36:25 Updated: libipa_hbac-1.15.2-50.el7_4.2.x86_64
Oct 16 05:36:53 Updated: python-libipa_hbac-1.15.2-50.el7_4.2.x86_64
Oct 16 05:36:55 Updated: python2-ipalib-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:36:55 Updated: python2-ipaclient-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:37:23 Updated: ipa-python-compat-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:38:43 Updated: ipa-server-common-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:38:44 Updated: python2-ipaserver-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:38:44 Updated: sssd-ipa-1.15.2-50.el7_4.2.x86_64
Oct 16 05:39:01 Installed: ipa-client-4.5.0-21.el7.centos.1.2.x86_64
Oct 16 05:39:28 Updated: ipsilon-tools-ipa-2.0.2-5.el7.centos.noarch
Oct 16 05:39:29 Updated: ipa-server-4.5.0-21.el7.centos.1.2.x86_64
Oct 16 05:40:48 Erased: ipa-admintools-4.4.0-14.el7.centos.7.noarch
Oct 16 05:19:30 Updated: krb5-libs-1.15.1-8.el7.x86_64
Oct 16 05:19:30 Updated: krb5-workstation-1.15.1-8.el7.x86_64
Oct 16 05:19:31 Updated: krb5-server-1.15.1-8.el7.x86_64
Oct 16 05:19:31 Updated: krb5-pkinit-1.15.1-8.el7.x86_64
Oct 16 05:38:22 Updated: sssd-krb5-common-1.15.2-50.el7_4.2.x86_64
Oct 16 05:38:57 Updated:

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Johannes Brandstetter via FreeIPA-users 
Hi,

the system is fully upgraded "No packages marked for update"

Cheers,

Johannes
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

[Freeipa-users] Re: IPA server upgrade fails with KDC error

2017-10-17 Thread Alexander Bokovoy via FreeIPA-users 

On ti, 17 loka 2017, Johannes Brandstetter via FreeIPA-users wrote:

Hi,

I'm trying to upgrade FreeIPA through ipa-server-upgrade from 4.4 to 4.5. The command fails with an 
"ACIError: Insufficient access:" . I find in the kdc log that it complains about " 
Database module does not match KDC version - while initializing database for realm..."

Does anybody know how to fix this?

You should make sure your system is fully upgraded. Not just 'yum
install freeipa-server' to upgrade but all related packages too.
In particular, MIT Kerberos has database driver version that may change
with a version update and we have to rebuild FreeIPA driver against it.





Some more info:
$ cat /etc/redhat-release
CentOS Linux release 7.4.1708 (Core)

$ tail /var/log/krb5kdc.log
krb5kdc: Server error - while fetching master key K/M for realm XXX
krb5kdc: Database module does not match KDC version - while initializing 
database for realm XXX

$ sudo less /var/log/ipaupgrade.log
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Saving StateFile to 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Saving StateFile to 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG Loading StateFile from 
'/var/lib/ipa/sysrestore/sysrestore.state'
2017-10-16T13:04:13Z DEBUG   duration: 0 seconds
2017-10-16T13:04:13Z ERROR IPA server upgrade failed: Inspect 
/var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
2017-10-16T13:04:14Z DEBUG   File 
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
   return_value = self.run()
 File 
"/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py", 
line 46, in run
   server.upgrade()
 File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", 
line 1896, in upgrade
   data_upgrade.create_instance()
 File "/usr/lib/python2.7/site-packages/ipaserver/install/upgradeinstance.py", 
line 124, in create_instance
   runtime=90)
 File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 
504, in start_creation
   run_step(full_msg, method)
 File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 
494, in run_step
   method()
 File "/usr/lib/python2.7/site-packages/ipaserver/install/upgradeinstance.py", 
line 96, in __start
   api.Backend.ldap2.connect()
 File "/usr/lib/python2.7/site-packages/ipalib/backend.py", line 66, in connect
   conn = self.create_connection(*args, **kw)
 File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 190, 
in create_connection
   client_controls=clientctrls)
 File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line , in 
external_bind
   '', auth_tokens, server_controls, client_controls)
 File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
   self.gen.throw(type, value, traceback)
 File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1007, in 
error_handler
   raise errors.ACIError(info=info)

2017-10-16T13:04:14Z DEBUG The ipa-server-upgrade command failed, exception: 
ACIError: Insufficient access:
2017-10-16T13:04:14Z ERROR Insufficient access:
2017-10-16T13:04:14Z ERROR The ipa-server-upgrade command failed. See 
/var/log/ipaupgrade.log for more information

$ sudo less /var/log/yum.log
Oct 16 05:36:02 Updated: ipa-common-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:36:02 Updated: ipa-client-common-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:36:25 Updated: libipa_hbac-1.15.2-50.el7_4.2.x86_64
Oct 16 05:36:53 Updated: python-libipa_hbac-1.15.2-50.el7_4.2.x86_64
Oct 16 05:36:55 Updated: python2-ipalib-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:36:55 Updated: python2-ipaclient-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:37:23 Updated: ipa-python-compat-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:38:43 Updated: ipa-server-common-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:38:44 Updated: python2-ipaserver-4.5.0-21.el7.centos.1.2.noarch
Oct 16 05:38:44 Updated: sssd-ipa-1.15.2-50.el7_4.2.x86_64
Oct 16 05:39:01 Installed: ipa-client-4.5.0-21.el7.centos.1.2.x86_64
Oct 16 05:39:28 Updated: ipsilon-tools-ipa-2.0.2-5.el7.centos.noarch
Oct 16 05:39:29 Updated: ipa-server-4.5.0-21.el7.centos.1.2.x86_64
Oct 16 05:40:48 Erased: ipa-admintools-4.4.0-14.el7.centos.7.noarch
Oct 16 05:19:30 Updated: krb5-libs-1.15.1-8.el7.x86_64
Oct 16 05:19:30 Updated: krb5-workstation-1.15.1-8.el7.x86_64
Oct 16 05:19:31 Updated: krb5-server-1.15.1-8.el7.x86_64
Oct 16 05:19:31 Updated: krb5-pkinit-1.15.1-8.el7.x86_64
Oct 16 05:38:22 Updated: sssd-krb5-common-1.15.2-50.el7_4.2.x86_64
Oct 16 05:38:57 Updated: sssd-krb5-1.15.2-50.el7_4.2.x86_64


Cheers,

Johannes