root@imqa-d1-cl05:/# rpm -qa | grep ipa-client
root@imqa-d1-cl05:/# ipa-client-install --uninstall
Unenrolling client from IPA server
Removing Kerberos service principals from /etc/krb5.keytab
Disabling client Kerberos and LDAP configurations
The original configuration of SSSD included other domains than the IPA-based one.
Original pre-IPA SSSD configuration file was restored to /etc/sssd/sssd.conf.bkp.
IPA domain removed from current one, restarting SSSD service
SSSD service restart was unsuccessful.
Restoring client configuration files
Unconfiguring the NIS domain.
Traceback (most recent call last):
File "/sbin/ipa-client-install", line 2925, in <module>
File "/sbin/ipa-client-install", line 2897, in main
return uninstall(options, env)
File "/sbin/ipa-client-install", line 681, in uninstall
File "/sbin/ipa-client-install", line 1494, in unconfigure_nisdomain
File "/usr/lib/python2.7/site-packages/ipaplatform/redhat/tasks.py", line 133, in set_nisdomain
File "/usr/lib/python2.7/site-packages/ipaplatform/redhat/authconfig.py", line 86, in execute
ipautil.run(["/usr/sbin/authconfig"] + args)
File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 346, in run
raise CalledProcessError(p.returncode, arg_string, stdout)
subprocess.CalledProcessError: Command ''/usr/sbin/authconfig' '--update' '--nisdomain' ''' returned non-zero exit status 1
Based on a discussion in IRC this seems to have been related to an error in sssd.conf where 'debug_level ='.
Seems to be user error but it would be helpful to catch the CalledProcessError and display stdout/stderr as the failure.
the SSSD restart issue should be displayed
Metadata Update from @jbaird:
- Issue assigned to akasurde
- Issue set to the milestone: FreeIPA 4.5 backlog
to comment on this ticket.