Hi Everyone,
Server:
RHEL 6.2
ipa-admintools-2.1.3-9.el6.x86_64
ipa-client-2.1.3-9.el6.x86_64
ipa-pki-ca-theme-9.0.3-7.el6.noarch
ipa-pki-common-theme-9.0.3-7.el6.noarch
ipa-python-2.1.3-9.el6.x86_64
ipa-server-2.1.3-9.el6.x86_64
ipa-server-selinux-2.1.3-9.el6.x86_64
libipa_hbac-1.5.1-66.el6_2.3.x86_64
libipa_hbac-python-1.5.1-66.el6_2.3.x86_64
python-iniparse-0.3.1-2.1.el6.noarch
Client:
CentOS release 5.2 (Final) x86_64
Kernel: 2.6.18-92.1.18.el5
ipa-client-2.1.3-1.el5
sssd-client-1.5.1-49.el5_8.1
sssd-1.5.1-49.el5_8.1
Error:
During the ipa-client-install, the client just hangs with no
explanation. I've been trying to debug the log file (shown before), I
figure being an older CentOS, that the IPA client must need new versions
of it's dependencies?
Debug Log:
2012-05-16 18:04:28,487 DEBUG /usr/sbin/ipa-client-install was invoked
with options: {'conf_ntp': True, 'domain': None, 'uninstall': False,
'force': False, 'sssd': True, 'krb5_offline_passwords': True,
'hostname': None, 'permit': False, 'server': None, 'prompt_password':
False, 'mkhomedir': False, 'dns_updates': False, 'preserve_sssd': False,
'debug': False, 'on_master': False, 'ntp_server': None, 'realm_name':
None, 'unattended': None, 'principal': None}
2012-05-16 18:04:28,487 DEBUG missing options might be asked for
interactively later
2012-05-16 18:04:28,487 DEBUG Loading Index file from
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2012-05-16 18:04:28,499 DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2012-05-16 18:04:28,536 DEBUG [ipadnssearchldap(example.com)]
2012-05-16 18:04:28,537 DEBUG [ipadnssearchkrb]
2012-05-16 18:04:28,538 DEBUG [ipacheckldap]
2012-05-16 18:04:28,604 DEBUG args=/usr/bin/wget -O
/tmp/tmpdbXm98/ca.crt -T 15 -t 2
http://sysvm-ipa.example.com/ipa/config/ca.crt
2012-05-16 18:04:28,604 DEBUG stdout=
2012-05-16 18:04:28,605 DEBUG stderr=--18:04:28--
http://sysvm-ipa.example.com/ipa/config/ca.crt
Resolving sysvm-ipa.example.com... 192.168.0.214
Connecting to sysvm-ipa.example.com|192.168.0.214|:80...
connected.
HTTP request sent, awaiting response... 200 OK
Length: 1353 (1.3K) [application/x-x509-ca-cert]
Saving to: `/tmp/tmpdbXm98/ca.crt'
0K . 100%
215M=0s
18:04:28 (215 MB/s) - `/tmp/tmpdbXm98/ca.crt' saved [1353/1353]
2012-05-16 18:04:28,605 DEBUG Init ldap with:
ldap://sysvm-ipa.example.com:389
2012-05-16 18:04:28,664 DEBUG Search LDAP server for IPA base DN
2012-05-16 18:04:28,666 DEBUG Check if naming context
'dc=example,dc=com' is for IPA
2012-05-16 18:04:28,667 DEBUG Naming context
'dc=example,dc=com' is a valid IPA context
2012-05-16 18:04:28,667 DEBUG Search for (objectClass=krbRealmContainer)
in dc=example,dc=com(sub)
2012-05-16 18:04:28,668 DEBUG Found:
[('cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com',
{'krbSubTrees': ['dc=example,dc=com'], 'cn':
['EXAMPLE.COM'], 'krbDefaultEncSaltTypes':
['aes256-cts:special', 'aes128-cts:special', 'des3-hmac-sha1:special',
'arcfour-hmac:special'], 'objectClass': ['top', 'krbrealmcontainer',
'krbticketpolicyaux'], 'krbSearchScope': ['2'],
'krbSupportedEncSaltTypes': ['aes256-cts:normal', 'aes256-cts:special',
'aes128-cts:normal', 'aes128-cts:special', 'des3-hmac-sha1:normal',
'des3-hmac-sha1:special', 'arcfour-hmac:normal', 'arcfour-hmac:special',
'des-hmac-sha1:normal', 'des-cbc-md5:normal', 'des-cbc-crc:normal',
'des-cbc-crc:v4', 'des-cbc-crc:afs3'], 'krbMaxTicketLife': ['86400'],
'krbMaxRenewableAge': ['604800']})]
2012-05-16 18:04:28,668 DEBUG will use domain: example.com
2012-05-16 18:04:28,668 DEBUG will use server:
sysvm-ipa.example.com
2012-05-16 18:04:28,669 DEBUG will use cli_realm: EXAMPLE.COM
2012-05-16 18:04:28,669 DEBUG will use cli_basedn:
dc=example,dc=com
2012-05-16 18:04:32,172 DEBUG will use principal: admin
2012-05-16 18:04:32,237 DEBUG args=/usr/bin/wget -O /etc/ipa/ca.crt
http://sysvm-ipa.example.com/ipa/config/ca.crt
2012-05-16 18:04:32,237 DEBUG stdout=
2012-05-16 18:04:32,237 DEBUG stderr=--18:04:32--
http://sysvm-ipa.example.com/ipa/config/ca.crt
Resolving sysvm-ipa.example.com... 192.168.0.214
Connecting to sysvm-ipa.example.com|192.168.0.214|:80...
connected.
HTTP request sent, awaiting response... 200 OK
Length: 1353 (1.3K) [application/x-x509-ca-cert]
Saving to: `/etc/ipa/ca.crt'
0K . 100%
215M=0s
18:04:32 (215 MB/s) - `/etc/ipa/ca.crt' saved [1353/1353]
2012-05-16 18:04:32,256 DEBUG args=/usr/sbin/ntpdate -U ntp -s -b
sysvm-ipa.example.com
2012-05-16 18:04:32,256 DEBUG stdout=
2012-05-16 18:04:32,256 DEBUG stderr=
2012-05-16 18:04:32,264 DEBUG args=/usr/sbin/ntpdate -U ntp -s -b
sysvm-ipa.example.com
2012-05-16 18:04:32,265 DEBUG stdout=
2012-05-16 18:04:32,265 DEBUG stderr=
2012-05-16 18:04:32,275 DEBUG args=/usr/sbin/ntpdate -U ntp -s -b
sysvm-ipa.example.com
2012-05-16 18:04:32,276 DEBUG stdout=
2012-05-16 18:04:32,276 DEBUG stderr=
2012-05-16 18:04:32,285 DEBUG args=/usr/sbin/ntpdate -U ntp -s -b
sysvm-ipa.example.com
2012-05-16 18:04:32,285 DEBUG stdout=
2012-05-16 18:04:32,285 DEBUG stderr=
2012-05-16 18:04:32,293 DEBUG args=/usr/sbin/ntpdate -U ntp -s -b
sysvm-ipa.example.com
2012-05-16 18:04:32,294 DEBUG stdout=
2012-05-16 18:04:32,294 DEBUG stderr=
2012-05-16 18:04:32,302 DEBUG args=/usr/sbin/ntpdate -U ntp -s -b
sysvm-ipa.example.com
2012-05-16 18:04:32,302 DEBUG stdout=
2012-05-16 18:04:32,302 DEBUG stderr=
2012-05-16 18:04:32,303 DEBUG Writing Kerberos configuration to
/tmp/tmpVmLJZu:
#File modified by ipa-client-install
[libdefaults]
default_realm = EXAMPLE.COM
dns_lookup_realm = true
dns_lookup_kdc = true
rdns = false
ticket_lifetime = 24h
forwardable = yes
[realms]
EXAMPLE.COM = {
pkinit_anchors = FILE:/etc/ipa/ca.crt
}
[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM
2012-05-16 18:04:36,006 DEBUG args=kinit ad...@example.com
2012-05-16 18:04:36,006 DEBUG stdout=Password for
ad...@example.com:
2012-05-16 18:04:36,006 DEBUG stderr=
2012-05-16 18:06:01,902 DEBUG args=kdestroy
2012-05-16 18:06:01,902 DEBUG stdout=
2012-05-16 18:06:01,902 DEBUG stderr=
_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users
