Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1319912
Description of problem: Using hostname/ip-address args with ipa-server-install fails if new hostname added to /etc/hosts. The failure seen during install is: Done configuring DNS key synchronization service (ipa-dnskeysyncd). Restarting ipa-dnskeysyncd Restarting named ipa : ERROR Named service failed to start (Command ''/bin/systemctl' 'restart' 'named-pkcs11.service'' returned non-zero exit status 1) named service failed to start Restarting the web server ipa.ipapython.install.cli.install_tool(Server): ERROR Command ''/bin/systemctl' 'restart' 'ipa.service'' returned non-zero exit status 1 In /var/log/messages I see references to EXAMPLE.COM: Mar 21 13:09:00 vm1 named-pkcs11[12688]: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Server krbtgt/EXAMPLE.COM@TESTRELM.TEST not found in Kerberos database) Mar 21 13:09:00 vm1 named-pkcs11[12688]: LDAP error: Local error: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Server krbtgt/EXAMPLE.COM@TESTRELM.TEST not found in Kerberos database): bind to LDAP server failed Version-Release number of selected component (if applicable): ipa-server-4.2.0-15.el7_2.6.x86_64 also seen in: ipa-server-4.2.0-15.el7_2.12.x86_64 How reproducible: Unknown but has been seen in a couple different test environments. Steps to Reproduce: 1. yum install ipa-server-dns 2. echo "$(hostname -i) master.testrelm.test" >> /etc/hosts 3. ipa-server-install --setup-dns --forwarder=$FORWARDER --hostname=master.testrelm.test --ip-address=$(hostname -i) -n testrelm.test -r TESTRELM.TEST -a Secret123 -p Secret123 -U Actual results: Fails as shown above. Expected results: No failure. Changes hostname everywhere expected. Additional info:
see the bugzilla discussion and mainly: https://bugzilla.redhat.com/show_bug.cgi?id=1319912#c12
master:
Metadata Update from @pvoborni: - Issue assigned to mbasti - Issue set to the milestone: FreeIPA 4.4
Login to comment on this ticket.