#5794 ipa-server-install does not completely change hostname and named-pkcs11 fails
Closed: Fixed None Opened 6 years ago by pvoborni.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1319912

Description of problem:

Using hostname/ip-address args with ipa-server-install fails if new hostname
added to /etc/hosts.  The failure seen during install is:

Done configuring DNS key synchronization service (ipa-dnskeysyncd).
Restarting ipa-dnskeysyncd
Restarting named
ipa         : ERROR    Named service failed to start (Command ''/bin/systemctl'
'restart' 'named-pkcs11.service'' returned non-zero exit status 1)
named service failed to start
Restarting the web server
ipa.ipapython.install.cli.install_tool(Server): ERROR    Command
''/bin/systemctl' 'restart' 'ipa.service'' returned non-zero exit status 1

In /var/log/messages I see references to EXAMPLE.COM:

Mar 21 13:09:00 vm1 named-pkcs11[12688]: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information (Server
krbtgt/EXAMPLE.COM@TESTRELM.TEST not found in Kerberos database)

Mar 21 13:09:00 vm1 named-pkcs11[12688]: LDAP error: Local error: SASL(-1):
generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide
more information (Server krbtgt/EXAMPLE.COM@TESTRELM.TEST not found in Kerberos
database): bind to LDAP server failed


Version-Release number of selected component (if applicable):
ipa-server-4.2.0-15.el7_2.6.x86_64
also seen in:
ipa-server-4.2.0-15.el7_2.12.x86_64

How reproducible:
Unknown but has been seen in a couple different test environments.

Steps to Reproduce:
1.  yum install ipa-server-dns
2.  echo "$(hostname -i) master.testrelm.test" >> /etc/hosts
3.  ipa-server-install --setup-dns --forwarder=$FORWARDER
--hostname=master.testrelm.test --ip-address=$(hostname -i) -n testrelm.test -r
TESTRELM.TEST -a Secret123 -p Secret123 -U

Actual results:

Fails as shown above.

Expected results:

No failure. Changes hostname everywhere expected.

Additional info:

master:

  • c568629 Always set hostname
  • 30f3d19 Remove deprecated hostname restoration from Fedora18
  • d3ac512 Remove unused hostname variables
  • 5e10b2e Log errors from backup_and_replace hostname to logger
  • 813aab1 Tasks: raise NotImplementedError for not implemented methods

Metadata Update from @pvoborni:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.4

5 years ago

Login to comment on this ticket.

Metadata