#1019 Adding client on RHEL 6 fails to get DNS entry
Closed: Fixed None Opened 13 years ago by admiyo.

I updated the reolve.conf of the client machine to point to the server and ran:

[root@vm-060 ~]# ipa-client-install --domain idm.lab.bos.redhat.com -p admin -w freeipa4all
Discovery was successful!
Realm: IDM.LAB.BOS.REDHAT.COM
DNS Domain: idm.lab.bos.redhat.com
IPA Server: vm-051.idm.lab.bos.redhat.com
BaseDN: dc=idm,dc=lab,dc=bos,dc=redhat,dc=com

Continue to configure the system with these values? [no]: yes

Enrolled in IPA realm IDM.LAB.BOS.REDHAT.COM
Created /etc/ipa/default.conf
Configured /etc/sssd/sssd.conf
Configured /etc/krb5.conf for IPA realm IDM.LAB.BOS.REDHAT.COM
certmonger request for host certificate failed
Warning: Hostname (vm-060.idm.lab.bos.redhat.com) not found in DNS
Failed to obtain host TGT.
Failed to update DNS A record. (Command 'x' returned non-zero exit status 1)
SSSD enabled
Kerberos 5 enabled
NTP enabled
Client configuration complete.

Is this a sign of a cert server issue? THis is the first time running with dogtag.

Here's the last couple of lines from the ipa-server-log/ They look fine to me.

[Thu Feb 24 20:41:06 2011] [error] ipa: INFO: admin@IDM.LAB.BOS.REDHAT.COM: host_find(u, all=True): SUCCESS
[Thu Feb 24 20:41:14 2011] [error] ipa: INFO: admin@IDM.LAB.BOS.REDHAT.COM: batch(({u'params': [[u'vm-060.idm.lab.bos.redhat.com'], {}], u'method': u'host_del'},)): SUCCESS
[Thu Feb 24 20:41:15 2011] [error] ipa: INFO: admin@IDM.LAB.BOS.REDHAT.COM: host_find(u
, all=True): SUCCESS
[Thu Feb 24 20:46:04 2011] [error] ipa: INFO: admin@IDM.LAB.BOS.REDHAT.COM: join(u'vm-060.idm.lab.bos.redhat.com', nshardwareplatform=u'x86_64', nsosversion=u'2.6.32-114.0.1.el6.x86_64'): SUCCESS

This machine had client installed before, but I've since uninstalled and reinstalled both the server and client, and rebooted the client as well.

There is no file /etc/ipa/.dns_update.txt


Info from Simo:

Ok this happens becaue /etc/hosts doesn't have an entry for the
hostname and DNS doesn't still resolve it (chicken/egg)

Please open a ticket, the fix is to pass the principal name as argument
of the kinit command so that it doesn't have to go thorugh name
resolution to understand what name to use.

Metadata Update from @admiyo:
- Issue assigned to simo
- Issue set to the milestone: FreeIPA 2.0.3 RC3 (bug fixing)

7 years ago

Login to comment on this ticket.

Metadata