Re: [Freeipa-users] CentOS 6.5 client install failing
The last line in the log should be: 2014-02-06T16:27:48Z DEBUG Caught fault 1101 from server https://mgmt-001.domain/ipa/xml: did not receive Kerberos credentials The python modules import happened after I tried to re-install again. Sorry for the confusion. ipa-client-3.0.0-37.el6.x86_64 On Tue, Feb 11, 2014 at 9:54 AM, Rob Crittenden rcrit...@redhat.com wrote: Dave Jablonski wrote: I've attached the whole client log. Thank you. Not sure if it is related to the failure or not but the log seems cut off at the end. Can you double-check it, it ends with a bunch of python imports. Also, what is the output of rpm -q ipa-client ? I see the fallback code in 3.0.0-37 but it doesn't seem to be executing here. rob On Sat, Feb 8, 2014 at 7:48 AM, Rob Crittenden rcrit...@redhat.com mailto:rcrit...@redhat.com wrote: Dave Jablonski wrote: FreeIPA Server: Fedora 16, freeipa 2.1.4 Latest CentOS 6.5 client When running: ipa-client-install --mkhomedir --enable-dns-updates The install fails with: trying https://server-name/ipa/xml Forwarding 'env' to server u'https://server-name/ipa/__xml' Traceback (most recent call last): File /usr/sbin/ipa-client-install__, line 2377, in module sys.exit(main()) File /usr/sbin/ipa-client-install__, line 2363, in main rval = install(options, env, fstore, statestore) File /usr/sbin/ipa-client-install__, line 2167, in install remote_env = api.Command['env'](server=__True)['result'] File /usr/lib/python2.6/site-__packages/ipalib/frontend.py, line 435, in __call__ ret = self.run(*args, **options) File /usr/lib/python2.6/site-__packages/ipalib/frontend.py, line 1073, in run return self.forward(*args, **options) File /usr/lib/python2.6/site-__packages/ipalib/frontend.py, line 769, in forward return self.Backend.xmlclient.__forward(self.name http://self.name http://self.name, *args, **kw) File /usr/lib/python2.6/site-__packages/ipalib/rpc.py, line 736, in forward raise error(message=e.faultString) ipalib.errors.CCacheError: did not receive Kerberos credentials In /var/log/ipaclient-install.__log: 2014-02-06T18:19:53Z DEBUG approved_usage = SSLServer intended_usage = SSLServer 2014-02-06T18:19:53Z DEBUG cert valid True for CN=server-name,O=domain 2014-02-06T18:19:53Z DEBUG handshake complete, peer = 10.1.1.111:443 http://10.1.1.111:443 http://10.1.1.111:443 2014-02-06T18:19:53Z DEBUG Caught fault 1101 from server https://server-name/ipa/xml: did not receive Kerberos credentials We need to see more context from the client install log, preferably the whole thing. IPA v2 doesn't support session cookies but the 3.x client should have support for falling back to using TGT delegation. rob -- David Jablonski Performance Gateway Email: _djablonski@p mailto:djablon...@gatewaysolutions.comerformancegateway.com http://erformancegateway.com_ _ _ IMPORTANT: This e-mail (including any attachments) is intended for the use of the individual or entity to which it is addressed and may contain information that is classified, private, or confidential. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this communication in error, please notify us immediately by replying to this e-mail. Thank you. IMPORTANT: This e-mail (including any attachments) is intended for the use of the individual or entity to which it is addressed and may contain information that is classified, private, or confidential. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this communication in error, please notify us immediately by replying to this e-mail. Thank you. -- David Jablonski Performance Gateway Email: *djablonski@p djablon...@gatewaysolutions.comerformancegateway.com http://erformancegateway.com* IMPORTANT: This e-mail (including any attachments) is intended for the use of the individual or entity to which it is addressed and may contain information that is classified, private, or confidential. If the reader of this message is not the intended recipient, or the employee or agent responsible for
Re: [Freeipa-users] CentOS 6.5 client install failing
On 02/08/2014 08:48 AM, Rob Crittenden wrote: Dave Jablonski wrote: FreeIPA Server: Fedora 16, freeipa 2.1.4 Latest CentOS 6.5 client When running: ipa-client-install --mkhomedir --enable-dns-updates The install fails with: trying https://server-name/ipa/xml Forwarding 'env' to server u'https://server-name/ipa/xml' Traceback (most recent call last): File /usr/sbin/ipa-client-install, line 2377, in module sys.exit(main()) File /usr/sbin/ipa-client-install, line 2363, in main rval = install(options, env, fstore, statestore) File /usr/sbin/ipa-client-install, line 2167, in install remote_env = api.Command['env'](server=True)['result'] File /usr/lib/python2.6/site-packages/ipalib/frontend.py, line 435, in __call__ ret = self.run(*args, **options) File /usr/lib/python2.6/site-packages/ipalib/frontend.py, line 1073, in run return self.forward(*args, **options) File /usr/lib/python2.6/site-packages/ipalib/frontend.py, line 769, in forward return self.Backend.xmlclient.forward(self.name http://self.name, *args, **kw) File /usr/lib/python2.6/site-packages/ipalib/rpc.py, line 736, in forward raise error(message=e.faultString) ipalib.errors.CCacheError: did not receive Kerberos credentials In /var/log/ipaclient-install.log: 2014-02-06T18:19:53Z DEBUG approved_usage = SSLServer intended_usage = SSLServer 2014-02-06T18:19:53Z DEBUG cert valid True for CN=server-name,O=domain 2014-02-06T18:19:53Z DEBUG handshake complete, peer = 10.1.1.111:443 http://10.1.1.111:443 2014-02-06T18:19:53Z DEBUG Caught fault 1101 from server https://server-name/ipa/xml: did not receive Kerberos credentials We need to see more context from the client install log, preferably the whole thing. IPA v2 doesn't support session cookies but the 3.x client should have support for falling back to using TGT delegation. rob ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users Any chance to upgrade the server to something more modern? -- Thank you, Dmitri Pal Sr. Engineering Manager for IdM portfolio Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] CentOS 6.5 client install failing
Unfortunately no. I don't have access to the server. On Feb 10, 2014 2:36 PM, Dmitri Pal d...@redhat.com wrote: On 02/08/2014 08:48 AM, Rob Crittenden wrote: Dave Jablonski wrote: FreeIPA Server: Fedora 16, freeipa 2.1.4 Latest CentOS 6.5 client When running: ipa-client-install --mkhomedir --enable-dns-updates The install fails with: trying https://server-name/ipa/xml Forwarding 'env' to server u'https://server-name/ipa/xml' Traceback (most recent call last): File /usr/sbin/ipa-client-install, line 2377, in module sys.exit(main()) File /usr/sbin/ipa-client-install, line 2363, in main rval = install(options, env, fstore, statestore) File /usr/sbin/ipa-client-install, line 2167, in install remote_env = api.Command['env'](server=True)['result'] File /usr/lib/python2.6/site-packages/ipalib/frontend.py, line 435, in __call__ ret = self.run(*args, **options) File /usr/lib/python2.6/site-packages/ipalib/frontend.py, line 1073, in run return self.forward(*args, **options) File /usr/lib/python2.6/site-packages/ipalib/frontend.py, line 769, in forward return self.Backend.xmlclient.forward(self.name http://self.name, *args, **kw) File /usr/lib/python2.6/site-packages/ipalib/rpc.py, line 736, in forward raise error(message=e.faultString) ipalib.errors.CCacheError: did not receive Kerberos credentials In /var/log/ipaclient-install.log: 2014-02-06T18:19:53Z DEBUG approved_usage = SSLServer intended_usage = SSLServer 2014-02-06T18:19:53Z DEBUG cert valid True for CN=server-name,O=domain 2014-02-06T18:19:53Z DEBUG handshake complete, peer = 10.1.1.111:443 http://10.1.1.111:443 2014-02-06T18:19:53Z DEBUG Caught fault 1101 from server https://server-name/ipa/xml: did not receive Kerberos credentials We need to see more context from the client install log, preferably the whole thing. IPA v2 doesn't support session cookies but the 3.x client should have support for falling back to using TGT delegation. rob ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users Any chance to upgrade the server to something more modern? -- Thank you, Dmitri Pal Sr. Engineering Manager for IdM portfolio Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users -- IMPORTANT: This e-mail (including any attachments) is intended for the use of the individual or entity to which it is addressed and may contain information that is classified, private, or confidential. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this communication in error, please notify us immediately by replying to this e-mail. Thank you. ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] CentOS 6.5 client install failing
Dave Jablonski wrote: FreeIPA Server: Fedora 16, freeipa 2.1.4 Latest CentOS 6.5 client When running: ipa-client-install --mkhomedir --enable-dns-updates The install fails with: trying https://server-name/ipa/xml Forwarding 'env' to server u'https://server-name/ipa/xml' Traceback (most recent call last): File /usr/sbin/ipa-client-install, line 2377, in module sys.exit(main()) File /usr/sbin/ipa-client-install, line 2363, in main rval = install(options, env, fstore, statestore) File /usr/sbin/ipa-client-install, line 2167, in install remote_env = api.Command['env'](server=True)['result'] File /usr/lib/python2.6/site-packages/ipalib/frontend.py, line 435, in __call__ ret = self.run(*args, **options) File /usr/lib/python2.6/site-packages/ipalib/frontend.py, line 1073, in run return self.forward(*args, **options) File /usr/lib/python2.6/site-packages/ipalib/frontend.py, line 769, in forward return self.Backend.xmlclient.forward(self.name http://self.name, *args, **kw) File /usr/lib/python2.6/site-packages/ipalib/rpc.py, line 736, in forward raise error(message=e.faultString) ipalib.errors.CCacheError: did not receive Kerberos credentials In /var/log/ipaclient-install.log: 2014-02-06T18:19:53Z DEBUG approved_usage = SSLServer intended_usage = SSLServer 2014-02-06T18:19:53Z DEBUG cert valid True for CN=server-name,O=domain 2014-02-06T18:19:53Z DEBUG handshake complete, peer = 10.1.1.111:443 http://10.1.1.111:443 2014-02-06T18:19:53Z DEBUG Caught fault 1101 from server https://server-name/ipa/xml: did not receive Kerberos credentials We need to see more context from the client install log, preferably the whole thing. IPA v2 doesn't support session cookies but the 3.x client should have support for falling back to using TGT delegation. rob ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
