#4966 client enrollment when already enrolled errors
Closed: Fixed None Opened 9 years ago by rcritten.

Seen on Fedoora 22 alpha using freeipa-client-4.1.3-3.fc22.x86_64

I was testing an Openstack installation using a Fedora 22 alpha cloud image.

I enrolled a client image then hosed the root partition so blew away the instance and re-created it, without formally un-enrolling or un-installing the client.

Here is what I saw when trying to re-install:

# ipa-client-install  --hostname demo2.example.com
Discovery was successful!
Hostname: demo2.example.com
Realm: EXAMPLE.COM
DNS Domain: example.com
IPA Server: demo1.example.com
BaseDN: dc=example,dc=com

Continue to configure the system with these values? [no]: y 
Synchronizing time with KDC...
Attempting to sync time using ntpd.  Will timeout after 15 seconds
User authorized to enroll computers: admin
Password for admin@EXAMPLE.COM: 
Successfully retrieved CA cert
    Subject:     CN=Certificate Authority,O=EXAMPLE.COM
    Issuer:      CN=Certificate Authority,O=EXAMPLE.COM
    Valid From:  Sun Mar 29 02:49:10 2015 UTC
    Valid Until: Thu Mar 29 02:49:10 2035 UTC

Joining realm failed: Host is already joined.

Use --force-join option to override the host entry on the server and force client enrollment.
Installation failed. Rolling back changes.
Failed to list certificates in /etc/ipa/nssdb: Command ''/usr/bin/certutil' '-d' '/etc/ipa/nssdb' '-L'' returned non-zero exit status 255
Failed to remove /etc/ipa/nssdb/cert8.db: [Errno 2] No such file or directory: '/etc/ipa/nssdb/cert8.db'
Failed to remove /etc/ipa/nssdb/key3.db: [Errno 2] No such file or directory: '/etc/ipa/nssdb/key3.db'
Failed to remove /etc/ipa/nssdb/secmod.db: [Errno 2] No such file or directory: '/etc/ipa/nssdb/secmod.db'
Failed to remove /etc/ipa/nssdb/pwdfile.txt: [Errno 2] No such file or directory: '/etc/ipa/nssdb/pwdfile.txt'
Disabling client Kerberos and LDAP configurations
Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted
Restoring client configuration files
nscd daemon is not installed, skip configuration
nslcd daemon is not installed, skip configuration
/etc/ipa/default.conf could not be removed: [Errno 2] No such file or directory: '/etc/ipa/default.conf'
Please remove /etc/ipa/default.conf manually, as it can cause subsequent installation to fail.
Client uninstall complete.

When I did a host-disable on the master I was able to enroll ok.

The errors are somewhat scary at first glance but mostly a lot of unnecessary noise.


master:

  • 9837658 suppress errors arising from deleting non-existent files during client uninstall

ipa-4-1:

  • b04435a suppress errors arising from deleting non-existent files during client uninstall

Metadata Update from @rcritten:
- Issue assigned to mbabinsk
- Issue set to the milestone: FreeIPA 4.1.5

7 years ago

Login to comment on this ticket.

Metadata