Re: [Freeipa-users] Preparing for domain trust breaks IPA services, RHEL 6.4 IPA 3.0

2013-03-07 Thread Martin Kosek
On 03/07/2013 10:26 AM, Dale Macartney wrote:
> 
> Hi all
> 
> I've been trying to document the domain trust process for the past two 
> days and I am seeing the same results no matter the configuration.
> 
> Basically I have nuked and rebuilt my environment several times and all 
> yields the same results.
> 
> Steps to reproduce
> 
> 1, Clean install of RHEL 6.4 2, yum install ipa-server bind
> bind-dyndb-ldap 3, ipa-server-install --setup-dns 4, yum install
> ipa-server-trust-ad 5, kinit admin 6, ipa-adtrust-install
> 
> all the above steps work perfectly, however I thought the problem was an 
> issue in running "ipa trust-add" but I have just tried "ipa host-find" and
> get the same output.
> 
> If someone is able to reproduce the issue to remove myself from the 
> equation that would be fantastic. Its either something I'm doing wrong or
> there is a bug here somewhere.. (note, no problems at all with same 
> procedure with Fedora 18 and IPA 3.1)
> 
> output is below from adding "debug=true" to /etc/ipa/default.conf
> 
> [root@ds01 ~]# ipa host-find ipa: DEBUG: importing all plugin modules in 
> '/usr/lib/python2.6/site-packages/ipalib/plugins'... ipa: DEBUG: importing
> plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py' 
> ipa: DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/automember.py' ipa:
> DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/automount.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/batch.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/config.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/delegation.py' ipa:
> DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/dns.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/group.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacrule.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvc.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvcgroup.py' ipa:
> DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/hbactest.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/host.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/hostgroup.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/idrange.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/internal.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/kerberos.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/krbtpolicy.py' ipa:
> DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/migration.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/misc.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/netgroup.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/passwd.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/permission.py' ipa:
> DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/ping.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/privilege.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py' ipa: DEBUG:
> args=klist -V ipa: DEBUG: stdout=Kerberos 5 version 1.10.3
> 
> ipa: DEBUG: stderr= ipa: DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/role.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py' ipa:
> DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/selinuxusermap.py' ipa:
> DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/service.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py' ipa:
> DEBUG: importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py' ipa: DEBUG:
> importing plugin module 
> '/usr/lib/python2.6/site-packages/ipalib/plugins/trust.py' ipa: DEBUG:
> importing plugin module 
> '/us

[Freeipa-users] Preparing for domain trust breaks IPA services, RHEL 6.4 IPA 3.0

2013-03-07 Thread Dale Macartney

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi all

I've been trying to document the domain trust process for the past two
days and I am seeing the same results no matter the configuration.

Basically I have nuked and rebuilt my environment several times and all
yields the same results.

Steps to reproduce

1, Clean install of RHEL 6.4
2, yum install ipa-server bind bind-dyndb-ldap
3, ipa-server-install --setup-dns
4, yum install ipa-server-trust-ad
5, kinit admin
6, ipa-adtrust-install

all the above steps work perfectly, however I thought the problem was an
issue in running "ipa trust-add" but I have just tried "ipa host-find"
and get the same output.

If someone is able to reproduce the issue to remove myself from the
equation that would be fantastic. Its either something I'm doing wrong
or there is a bug here somewhere.. (note, no problems at all with same
procedure with Fedora 18 and IPA 3.1)

output is below from adding "debug=true" to /etc/ipa/default.conf

[root@ds01 ~]# ipa host-find
ipa: DEBUG: importing all plugin modules in
'/usr/lib/python2.6/site-packages/ipalib/plugins'...
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/automember.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/automount.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/batch.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/config.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/delegation.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/dns.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/group.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hbacrule.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvc.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvcgroup.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hbactest.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/host.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/hostgroup.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/idrange.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/internal.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/kerberos.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/krbtpolicy.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/migration.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/misc.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/netgroup.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/passwd.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/permission.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/ping.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/privilege.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py'
ipa: DEBUG: args=klist -V
ipa: DEBUG: stdout=Kerberos 5 version 1.10.3

ipa: DEBUG: stderr=
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/role.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/selinuxusermap.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/service.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/trust.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/user.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py'
ipa: DEBUG: importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py