Fresh install of freeipa on fresh install of fc33 workstation on 3/5/2021. ipa-dnskeysyncd crashes trying to run a command that doesn't exist, as follows:
... Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipaserver.dnssec.keysyncer: INFO Initial LDAP dump is done, sychronizing with ODS and BIND Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG Starting external process Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG args=['/usr/sbin/ods-enforcer', 'zonelist', 'export'] Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG Process finished, return code=0 Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG stdout=Exported zonelist to /etc/opendnssec/zonelist.xml successfully Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG stderr= Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipaserver.dnssec.odsmgr: DEBUG ODS zones: {'30cfc086-7de0-11eb-80ac-9ffa9dc748cf': <DNS name 1.quietfountain.com.>, '392afa05-7de6-11eb-80ac-9ffa9dc748cf': <DNS name quietfountain.com.>, '5cee4007-> Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipaserver.dnssec.odsmgr: INFO Zones removed from LDAP: [] Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipaserver.dnssec.odsmgr: INFO Zones added to LDAP: [] Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG Starting external process Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG args=['/usr/sbin/ods-signer', 'ipa-hsm-update'] Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG Process finished, return code=1 Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG stdout=Unknown command ipa-hsm-update. Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: Commands: Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG stderr= Mar 05 15:06:09 registry1.1.quietfountain.com python3[10824]: detected unhandled Python exception in '/usr/libexec/ipa/ipa-dnskeysyncd' Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: Traceback (most recent call last): Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: File "/usr/libexec/ipa/ipa-dnskeysyncd", line 113, in <module> Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: while ldap_connection.syncrepl_poll(all=1, msgid=ldap_search): Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: File "/usr/lib64/python3.9/site-packages/ldap/syncrepl.py", line 465, in syncrepl_poll Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: self.syncrepl_refreshdone() Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: File "/usr/lib/python3.9/site-packages/ipaserver/dnssec/keysyncer.py", line 127, in syncrepl_refreshdone Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: self.hsm_master_sync() Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: File "/usr/lib/python3.9/site-packages/ipaserver/dnssec/keysyncer.py", line 202, in hsm_master_sync Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipautil.run([paths.ODS_SIGNER, 'ipa-hsm-update']) Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: File "/usr/lib/python3.9/site-packages/ipapython/ipautil.py", line 598, in run Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: raise CalledProcessError( Mar 05 15:06:10 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil.CalledProcessError: CalledProcessError(Command ['/usr/sbin/ods-signer', 'ipa-hsm-update'] returned non-zero exit status 1: '') Mar 05 15:06:12 registry1.1.quietfountain.com systemd[1]: ipa-dnskeysyncd.service: Main process exited, code=exited, status=1/FAILURE Mar 05 15:06:12 registry1.1.quietfountain.com systemd[1]: ipa-dnskeysyncd.service: Failed with result 'exit-code'. Mar 05 15:06:12 registry1.1.quietfountain.com systemd[1]: ipa-dnskeysyncd.service: Consumed 10.630s CPU time. ...
What version of opendnssec is installed?
Did you check to see if /usr/sbin/ods-signer exists?
Completely fresh install of fc33 workstation as of today. Whatever dnf provides for freeipa-server, dns, & related support packages installed. Whatever it is they included, are included, whatever not, not.
[root@registry1 ~]# ls -l /usr/sbin/ods-signer* -rwxr-xr-x. 1 root root 24568 Dec 8 20:26 /usr/sbin/ods-signer -rwxr-xr-x. 1 root root 375416 Dec 8 20:26 /usr/sbin/ods-signerd
[root@registry1 ~]# date Fri Mar 5 03:47:01 PM CST 2021
[root@registry1 ~]# free -h total used free shared buff/cache available Mem: 4.8Gi 1.6Gi 2.3Gi 8.0Mi 936Mi 3.0Gi Swap: 255Mi 0B 255Mi [root@registry1 ~]# df -h Filesystem Size Used Avail Use% Mounted on devtmpfs 2.4G 0 2.4G 0% /dev tmpfs 2.5G 100K 2.5G 1% /dev/shm tmpfs 985M 1.5M 983M 1% /run myfs 1.4T 229G 700G 25% / tmpfs 2.5G 112K 2.5G 1% /tmp tmpfs 493M 56K 493M 1% /run/user/0 tmpfs 493M 92K 493M 1% /run/user/42
rpm -q <package> will tell you (and us) the package versions. We can't assume what versions of packages you have based on a date. You initially claimed that /usr/sbin/ods-signer does not exist so this is important.
Complete fresh install using what options?
[root@registry1 ~]# dnf history userinstalled Packages installed by user anaconda-33.25.4-1.fc33.x86_64 anaconda-install-env-deps-33.25.4-1.fc33.x86_64 anaconda-live-33.25.4-1.fc33.x86_64 autofs-1:5.1.6-11.fc33.x86_64 ceph-common-2:15.2.8-2.fc33.x86_64 chkconfig-1.14-3.fc33.x86_64 dracut-live-050-64.git20200529.fc33.x86_64 fail2ban-0.11.2-1.fc33.noarch firewall-config-0.8.6-1.fc33.noarch freeipa-server-4.9.2-4.fc33.x86_64 freeipa-server-dns-4.9.2-4.fc33.noarch freeipa-server-trust-ad-4.9.2-4.fc33.x86_64 gerbera-1.6.4-5.fc33.x86_64 gnome-remote-desktop-0.1.9-2.fc33.x86_64 haveged-1.9.14-2.fc33.x86_64 initscripts-10.04-2.fc33.x86_64 kernel-5.10.9-201.fc33.x86_64 kernel-5.10.11-200.fc33.x86_64 kernel-5.10.16-200.fc33.x86_64 kernel-core-5.10.9-201.fc33.x86_64 kernel-core-5.10.11-200.fc33.x86_64 kernel-core-5.10.16-200.fc33.x86_64 kernel-modules-5.10.9-201.fc33.x86_64 kernel-modules-5.10.11-200.fc33.x86_64 kernel-modules-5.10.16-200.fc33.x86_64 kernel-modules-extra-5.10.9-201.fc33.x86_64 kernel-modules-extra-5.10.11-200.fc33.x86_64 kernel-modules-extra-5.10.16-200.fc33.x86_64 krb5-devel-1.18.2-29.fc33.x86_64 langpacks-en-3.0-4.fc33.noarch patch-2.7.6-13.fc33.x86_64 pwgen-2.08-5.fc33.x86_64 python3-Cython-0.29.21-3.fc33.x86_64 python3-devel-3.9.1-2.fc33.x86_64 python3-psutil-5.7.2-2.fc33.x86_64 python3-pyroute2-0.5.6-4.fc33.noarch python3-wheel-1:0.34.2-1.fc33.noarch python3.8-3.8.7-2.fc33.x86_64 setools-console-4.3.0-5.fc33.x86_64 spice-gtk-tools-0.39-1.fc33.x86_64 tuned-2.15.0-1.fc33.noarch watchdog-5.15-8.fc33.x86_64
Actually, the debug log claimed it didn't exist. I didn't claim more than the debug log was as it appears. From above:
Mar 05 15:06:09 registry1.1.quietfountain.com ipa-dnskeysyncd[10824]: ipapython.ipautil: DEBUG stdout=Unknown command ipa-hsm-update.
[root@registry1 log]# cat ipaserver-dns-install.log 2021-03-05T18:46:51Z DEBUG /usr/sbin/ipa-dns-install was invoked with options: {'debug': False, 'ip_addresses': [], 'forwarders': None, 'no_forwarders': True, 'auto_forwarders': False, 'forward_policy': None, 'reverse_zones': [], 'no_reverse': False, 'auto_reverse': True, 'allow_zone_overlap': True, 'no_dnssec_validation': False, 'dnssec_master': True, 'zonemgr': 'administrator@quietfountain.com', 'unattended': True, 'disable_dnssec_master': False, 'kasp_db_file': None, 'force': None} 2021-03-05T18:46:51Z DEBUG missing options might be asked for interactively later
2021-03-05T18:46:51Z DEBUG IPA version 4.9.2-4.fc33 2021-03-05T18:46:51Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:46:51Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:46:51Z DEBUG importing all plugin modules in ipaserver.plugins... 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.aci 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.automember 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.automount 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.baseldap 2021-03-05T18:46:51Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.baseuser 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.batch 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.ca 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.caacl 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.cert 2021-03-05T18:46:51Z DEBUG importing plugin module ipaserver.plugins.certmap 2021-03-05T18:46:52Z DEBUG importing plugin module ipaserver.plugins.certprofile 2021-03-05T18:46:52Z DEBUG importing plugin module ipaserver.plugins.config 2021-03-05T18:46:52Z DEBUG importing plugin module ipaserver.plugins.delegation 2021-03-05T18:46:52Z DEBUG importing plugin module ipaserver.plugins.dns 2021-03-05T18:46:52Z DEBUG importing plugin module ipaserver.plugins.dnsserver 2021-03-05T18:46:52Z DEBUG importing plugin module ipaserver.plugins.dogtag 2021-03-05T18:46:52Z DEBUG importing plugin module ipaserver.plugins.domainlevel 2021-03-05T18:46:52Z DEBUG importing plugin module ipaserver.plugins.group 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.hbac 2021-03-05T18:46:53Z DEBUG ipaserver.plugins.hbac is not a valid plugin module 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.hbacrule 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.hbacsvc 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.hbactest 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.host 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.hostgroup 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.idrange 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.idviews 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.internal 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.join 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.ldap2 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.location 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.migration 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.misc 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.netgroup 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.otp 2021-03-05T18:46:53Z DEBUG ipaserver.plugins.otp is not a valid plugin module 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.otpconfig 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.otptoken 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.passwd 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.permission 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.ping 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.pkinit 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.privilege 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.pwpolicy 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.rabase 2021-03-05T18:46:53Z DEBUG ipaserver.plugins.rabase is not a valid plugin module 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.radiusproxy 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.realmdomains 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.role 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.schema 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.selfservice 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.server 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.serverrole 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.serverroles 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.service 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.servicedelegation 2021-03-05T18:46:53Z DEBUG importing plugin module ipaserver.plugins.session 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.stageuser 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.sudo 2021-03-05T18:46:54Z DEBUG ipaserver.plugins.sudo is not a valid plugin module 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.sudocmd 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.sudorule 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.topology 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.trust 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.user 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.vault 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.virtual 2021-03-05T18:46:54Z DEBUG ipaserver.plugins.virtual is not a valid plugin module 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.whoami 2021-03-05T18:46:54Z DEBUG importing plugin module ipaserver.plugins.xmlserver 2021-03-05T18:46:56Z DEBUG Created connection context.ldap2_139832595295872 2021-03-05T18:46:56Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:46:56Z DEBUG raw: dns_is_enabled(version='2.240') 2021-03-05T18:46:56Z DEBUG dns_is_enabled(version='2.240') 2021-03-05T18:46:56Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-1-QUIETFOUNTAIN-COM.socket conn=<ldap.ldapobject.SimpleLDAPObject object at 0x7f2d4fa08b20> 2021-03-05T18:46:57Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:46:57Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:46:57Z DEBUG Name registry1.1.quietfountain.com resolved to {UnsafeIPAddress('fc00:1002:c7::2'), UnsafeIPAddress('10.12.112.2')} 2021-03-05T18:46:57Z DEBUG Searching for an interface of IP address: fc00:1002:c7::2 2021-03-05T18:46:57Z DEBUG Testing local IP address: ::1/128 (interface: lo) 2021-03-05T18:46:57Z DEBUG Testing local IP address: fc00:1002:c7::1/64 (interface: enp3s0) 2021-03-05T18:46:57Z DEBUG Testing local IP address: fc00:1002:c7::2/64 (interface: enp3s0) 2021-03-05T18:46:57Z DEBUG Searching for an interface of IP address: 10.12.112.2 2021-03-05T18:46:57Z DEBUG Testing local IP address: 127.0.0.1/255.0.0.0 (interface: lo) 2021-03-05T18:46:57Z DEBUG Testing local IP address: 10.12.112.2/255.255.240.0 (interface: enp3s0) 2021-03-05T18:46:57Z DEBUG IP address 10.12.112.2 belongs to a private range, using forward policy only 2021-03-05T18:46:57Z DEBUG will use DNS forwarders: []
2021-03-05T18:46:57Z DEBUG raw: dnszone_show('2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('c.f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('f.ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('ip6.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('2.112.12.10.in-addr.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 2.112.12.10.in-addr.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('112.12.10.in-addr.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 112.12.10.in-addr.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('12.10.in-addr.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 12.10.in-addr.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('10.in-addr.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name 10.in-addr.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('in-addr.arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name in-addr.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:57Z DEBUG raw: dnszone_show('arpa.', version='2.240') 2021-03-05T18:46:57Z DEBUG dnszone_show(<DNS name arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:46:58Z INFO Reverse zone 0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa. will be created 2021-03-05T18:46:58Z INFO Reverse zone 112.12.10.in-addr.arpa. will be created 2021-03-05T18:46:58Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:46:58Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:46:58Z INFO dnssec-validation yes 2021-03-05T18:46:58Z DEBUG Starting external process 2021-03-05T18:46:58Z DEBUG args=['/bin/systemctl', 'stop', 'named.service'] 2021-03-05T18:47:00Z DEBUG Process finished, return code=0 2021-03-05T18:47:00Z DEBUG stdout= 2021-03-05T18:47:00Z DEBUG stderr= 2021-03-05T18:47:00Z DEBUG Stop of named.service complete 2021-03-05T18:47:00Z DEBUG raw: dnszone_show('1.quietfountain.com', version='2.240') 2021-03-05T18:47:00Z DEBUG dnszone_show(<DNS name 1.quietfountain.com.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:00Z DEBUG Configuring DNS (named) 2021-03-05T18:47:00Z DEBUG [1/9]: generating rndc key file 2021-03-05T18:47:00Z DEBUG Starting external process 2021-03-05T18:47:00Z DEBUG args=['/usr/libexec/generate-rndc-key.sh'] 2021-03-05T18:47:00Z DEBUG Process finished, return code=0 2021-03-05T18:47:00Z DEBUG stdout= 2021-03-05T18:47:00Z DEBUG stderr= 2021-03-05T18:47:00Z DEBUG step duration: named __generate_rndc_key 0.47 sec 2021-03-05T18:47:00Z DEBUG [2/9]: setting up reverse zone 2021-03-05T18:47:00Z DEBUG raw: dnszone_add('0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', idnssoamname='registry1.1.quietfountain.com.', idnssoarname='hostmaster.1.quietfountain.com.', idnsupdatepolicy='grant 1.QUIETFOUNTAIN.COM krb5-subdomain 0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa. PTR;', idnsallowdynupdate=True, idnsallowquery='any', idnsallowtransfer='none', skip_overlap_check=True, force=True, version='2.240') 2021-03-05T18:47:00Z DEBUG dnszone_add(<DNS name 0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, idnssoamname=<DNS name registry1.1.quietfountain.com.>, idnssoarname=<DNS name hostmaster.1.quietfountain.com.>, idnssoaserial=1614970020, idnssoarefresh=3600, idnssoaretry=900, idnssoaexpire=1209600, idnssoaminimum=3600, idnsupdatepolicy='grant 1.QUIETFOUNTAIN.COM krb5-subdomain 0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa. PTR;', idnsallowdynupdate=True, idnsallowquery='any;', idnsallowtransfer='none;', skip_overlap_check=True, force=True, skip_nameserver_check=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:01Z DEBUG raw: dnszone_add('112.12.10.in-addr.arpa.', idnssoamname='registry1.1.quietfountain.com.', idnssoarname='hostmaster.1.quietfountain.com.', idnsupdatepolicy='grant 1.QUIETFOUNTAIN.COM krb5-subdomain 112.12.10.in-addr.arpa. PTR;', idnsallowdynupdate=True, idnsallowquery='any', idnsallowtransfer='none', skip_overlap_check=True, force=True, version='2.240') 2021-03-05T18:47:01Z DEBUG dnszone_add(<DNS name 112.12.10.in-addr.arpa.>, idnssoamname=<DNS name registry1.1.quietfountain.com.>, idnssoarname=<DNS name hostmaster.1.quietfountain.com.>, idnssoaserial=1614970021, idnssoarefresh=3600, idnssoaretry=900, idnssoaexpire=1209600, idnssoaminimum=3600, idnsupdatepolicy='grant 1.QUIETFOUNTAIN.COM krb5-subdomain 112.12.10.in-addr.arpa. PTR;', idnsallowdynupdate=True, idnsallowquery='any;', idnsallowtransfer='none;', skip_overlap_check=True, force=True, skip_nameserver_check=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG step duration: named __setup_reverse_zone 1.45 sec 2021-03-05T18:47:02Z DEBUG [3/9]: setting up our own record 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('1.quietfountain.com', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 1.quietfountain.com.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnsrecord_add('1.quietfountain.com', 'registry1', aaaarecord='fc00:1002:c7::2', version='2.240') 2021-03-05T18:47:02Z DEBUG dnsrecord_add(<DNS name 1.quietfountain.com.>, <DNS name registry1>, a_extra_create_reverse=False, aaaarecord=('fc00:1002:c7::2',), aaaa_extra_create_reverse=False, force=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnszone_show('0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnszone_show(<DNS name 0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:02Z DEBUG raw: dnsrecord_add('0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', '2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0', ptrrecord='registry1.1.quietfountain.com.', version='2.240') 2021-03-05T18:47:02Z DEBUG dnsrecord_add(<DNS name 0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, <DNS name 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0>, a_extra_create_reverse=False, aaaa_extra_create_reverse=False, ptrrecord=('registry1.1.quietfountain.com.',), force=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:03Z DEBUG raw: dnszone_show('1.quietfountain.com', version='2.240') 2021-03-05T18:47:03Z DEBUG dnszone_show(<DNS name 1.quietfountain.com.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:03Z DEBUG raw: dnsrecord_add('1.quietfountain.com', 'registry1', arecord='10.12.112.2', version='2.240') 2021-03-05T18:47:03Z DEBUG dnsrecord_add(<DNS name 1.quietfountain.com.>, <DNS name registry1>, arecord=('10.12.112.2',), a_extra_create_reverse=False, aaaa_extra_create_reverse=False, force=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:03Z DEBUG raw: dnszone_show('2.112.12.10.in-addr.arpa.', version='2.240') 2021-03-05T18:47:03Z DEBUG dnszone_show(<DNS name 2.112.12.10.in-addr.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:03Z DEBUG raw: dnszone_show('112.12.10.in-addr.arpa.', version='2.240') 2021-03-05T18:47:03Z DEBUG dnszone_show(<DNS name 112.12.10.in-addr.arpa.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:03Z DEBUG raw: dnsrecord_add('112.12.10.in-addr.arpa.', '2', ptrrecord='registry1.1.quietfountain.com.', version='2.240') 2021-03-05T18:47:03Z DEBUG dnsrecord_add(<DNS name 112.12.10.in-addr.arpa.>, <DNS name 2>, a_extra_create_reverse=False, aaaa_extra_create_reverse=False, ptrrecord=('registry1.1.quietfountain.com.',), force=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:03Z DEBUG step duration: named __add_self 1.15 sec 2021-03-05T18:47:03Z DEBUG [4/9]: adding NS record to the zones 2021-03-05T18:47:03Z DEBUG raw: dnszone_find(None, version='2.240') 2021-03-05T18:47:03Z DEBUG dnszone_find(None, forward_only=False, all=False, raw=False, version='2.240', pkey_only=False) 2021-03-05T18:47:03Z DEBUG adding self NS to zone 112.12.10.in-addr.arpa. apex 2021-03-05T18:47:03Z DEBUG raw: dnsrecord_add('112.12.10.in-addr.arpa.', '@', nsrecord='registry1.1.quietfountain.com.', force=True, version='2.240') 2021-03-05T18:47:03Z DEBUG dnsrecord_add(<DNS name 112.12.10.in-addr.arpa.>, <DNS name @>, a_extra_create_reverse=False, aaaa_extra_create_reverse=False, nsrecord=('registry1.1.quietfountain.com.',), force=True, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:03Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG adding self NS to zone 0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa. apex 2021-03-05T18:47:03Z DEBUG raw: dnsrecord_add('0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.', '@', nsrecord='registry1.1.quietfountain.com.', force=True, version='2.240') 2021-03-05T18:47:03Z DEBUG dnsrecord_add(<DNS name 0.0.0.0.7.c.0.0.2.0.0.1.0.0.c.f.ip6.arpa.>, <DNS name @>, a_extra_create_reverse=False, aaaa_extra_create_reverse=False, nsrecord=('registry1.1.quietfountain.com.',), force=True, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:03Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG adding self NS to zone 1.quietfountain.com. apex 2021-03-05T18:47:03Z DEBUG raw: dnsrecord_add('1.quietfountain.com.', '@', nsrecord='registry1.1.quietfountain.com.', force=True, version='2.240') 2021-03-05T18:47:03Z DEBUG dnsrecord_add(<DNS name 1.quietfountain.com.>, <DNS name @>, a_extra_create_reverse=False, aaaa_extra_create_reverse=False, nsrecord=('registry1.1.quietfountain.com.',), force=True, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:03Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:03Z DEBUG step duration: named __add_self_ns 0.20 sec 2021-03-05T18:47:03Z DEBUG [5/9]: setting up kerberos principal 2021-03-05T18:47:03Z DEBUG Starting external process 2021-03-05T18:47:03Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM', '-x', 'ipa-setup-override-restrictions'] 2021-03-05T18:47:07Z DEBUG Process finished, return code=0 2021-03-05T18:47:07Z DEBUG stdout=Authenticating as principal root/admin@1.QUIETFOUNTAIN.COM with password.
2021-03-05T18:47:07Z DEBUG stderr=No policy specified for DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM; defaulting to no policy add_principal: Principal or policy already exists while creating "DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM".
2021-03-05T18:47:07Z DEBUG Backing up system configuration file '/etc/named.keytab' 2021-03-05T18:47:07Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:47:07Z DEBUG Starting external process 2021-03-05T18:47:07Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'ktadd -k /etc/named.keytab DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM', '-x', 'ipa-setup-override-restrictions'] 2021-03-05T18:47:10Z DEBUG Process finished, return code=0 2021-03-05T18:47:10Z DEBUG stdout=Authenticating as principal root/admin@1.QUIETFOUNTAIN.COM with password. Entry for principal DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/named.keytab. Entry for principal DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/named.keytab. Entry for principal DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type aes128-cts-hmac-sha256-128 added to keytab WRFILE:/etc/named.keytab. Entry for principal DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type aes256-cts-hmac-sha384-192 added to keytab WRFILE:/etc/named.keytab. Entry for principal DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/named.keytab. Entry for principal DNS/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/named.keytab.
2021-03-05T18:47:10Z DEBUG stderr= 2021-03-05T18:47:10Z DEBUG step duration: named __setup_principal 6.58 sec 2021-03-05T18:47:10Z DEBUG [6/9]: setting up named.conf 2021-03-05T18:47:10Z DEBUG /etc/named.conf is unmodified 2021-03-05T18:47:10Z INFO named user config '/etc/named/ipa-ext.conf' already exists 2021-03-05T18:47:10Z INFO named user config '/etc/named/ipa-options-ext.conf' already exists 2021-03-05T18:47:10Z DEBUG step duration: named setup_named_conf 0.07 sec 2021-03-05T18:47:10Z DEBUG [7/9]: setting up server configuration 2021-03-05T18:47:10Z DEBUG cn=servers,cn=dns container already exists 2021-03-05T18:47:10Z DEBUG raw: dnsserver_add('registry1.1.quietfountain.com', idnssoamname=<DNS name registry1.1.quietfountain.com.>, version='2.240') 2021-03-05T18:47:10Z DEBUG dnsserver_add('registry1.1.quietfountain.com', idnssoamname=<DNS name registry1.1.quietfountain.com.>, all=False, raw=False, version='2.240') 2021-03-05T18:47:10Z DEBUG raw: dnsserver_mod('registry1.1.quietfountain.com', idnsforwarders=[], idnsforwardpolicy='only', version='2.240') 2021-03-05T18:47:10Z DEBUG dnsserver_mod('registry1.1.quietfountain.com', idnsforwarders=None, idnsforwardpolicy='only', rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:47:10Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' 2021-03-05T18:47:10Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' 2021-03-05T18:47:10Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state' 2021-03-05T18:47:10Z DEBUG step duration: named __setup_server_configuration 0.15 sec 2021-03-05T18:47:10Z DEBUG [8/9]: configuring named to start on boot 2021-03-05T18:47:10Z DEBUG Starting external process 2021-03-05T18:47:10Z DEBUG args=['/bin/systemctl', 'stop', 'named-pkcs11.service'] 2021-03-05T18:47:10Z DEBUG Process finished, return code=0 2021-03-05T18:47:10Z DEBUG stdout= 2021-03-05T18:47:10Z DEBUG stderr= 2021-03-05T18:47:10Z DEBUG Stop of named-pkcs11.service complete 2021-03-05T18:47:10Z DEBUG Starting external process 2021-03-05T18:47:10Z DEBUG args=['/bin/systemctl', 'mask', 'named-pkcs11.service'] 2021-03-05T18:47:18Z DEBUG Process finished, return code=0 2021-03-05T18:47:18Z DEBUG stdout= 2021-03-05T18:47:18Z DEBUG stderr=Created symlink /etc/systemd/system/named-pkcs11.service → /dev/null.
2021-03-05T18:47:18Z DEBUG Starting external process 2021-03-05T18:47:18Z DEBUG args=['/bin/systemctl', 'unmask', 'named.service'] 2021-03-05T18:47:25Z DEBUG Process finished, return code=0 2021-03-05T18:47:25Z DEBUG stdout= 2021-03-05T18:47:25Z DEBUG stderr= 2021-03-05T18:47:25Z DEBUG Starting external process 2021-03-05T18:47:25Z DEBUG args=['/bin/systemctl', 'disable', 'named.service'] 2021-03-05T18:47:33Z DEBUG Process finished, return code=0 2021-03-05T18:47:33Z DEBUG stdout= 2021-03-05T18:47:33Z DEBUG stderr= 2021-03-05T18:47:33Z DEBUG service DNS has all config values set 2021-03-05T18:47:33Z DEBUG step duration: named switch_service 23.43 sec 2021-03-05T18:47:33Z DEBUG [9/9]: changing resolv.conf to point to ourselves 2021-03-05T18:47:33Z DEBUG Starting external process 2021-03-05T18:47:33Z DEBUG args=['/bin/systemctl', 'is-enabled', 'NetworkManager.service'] 2021-03-05T18:47:34Z DEBUG Process finished, return code=1 2021-03-05T18:47:34Z DEBUG stdout=disabled
2021-03-05T18:47:34Z DEBUG stderr= 2021-03-05T18:47:34Z DEBUG Neither Network Manager nor systemd-resolved are enabled, write /etc/resolv.conf directly. 2021-03-05T18:47:34Z DEBUG step duration: named setup_resolv_conf 1.01 sec 2021-03-05T18:47:34Z DEBUG Done configuring DNS (named). 2021-03-05T18:47:34Z DEBUG service duration: named 34.57 sec 2021-03-05T18:47:34Z DEBUG Starting external process 2021-03-05T18:47:34Z DEBUG args=['/bin/systemctl', 'restart', 'httpd.service'] 2021-03-05T18:47:48Z DEBUG Process finished, return code=0 2021-03-05T18:47:48Z DEBUG stdout= 2021-03-05T18:47:48Z DEBUG stderr= 2021-03-05T18:47:48Z DEBUG Starting external process 2021-03-05T18:47:48Z DEBUG args=['/bin/systemctl', 'is-active', 'httpd.service'] 2021-03-05T18:47:49Z DEBUG Process finished, return code=0 2021-03-05T18:47:49Z DEBUG stdout=active
2021-03-05T18:47:49Z DEBUG stderr= 2021-03-05T18:47:49Z DEBUG Restart of httpd.service complete 2021-03-05T18:47:49Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:49Z DEBUG Starting external process 2021-03-05T18:47:49Z DEBUG args=['/bin/systemctl', 'stop', 'ipa-dnskeysyncd.service'] 2021-03-05T18:47:54Z DEBUG Process finished, return code=0 2021-03-05T18:47:54Z DEBUG stdout= 2021-03-05T18:47:54Z DEBUG stderr= 2021-03-05T18:47:54Z DEBUG Stop of ipa-dnskeysyncd.service complete 2021-03-05T18:47:54Z DEBUG Configuring DNS key synchronization service (ipa-dnskeysyncd) 2021-03-05T18:47:54Z DEBUG [1/7]: checking status 2021-03-05T18:47:54Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:54Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:47:54Z DEBUG step duration: ipa-dnskeysyncd __check_dnssec_status 0.15 sec 2021-03-05T18:47:54Z DEBUG [2/7]: setting up bind-dyndb-ldap working directory 2021-03-05T18:47:54Z DEBUG step duration: ipa-dnskeysyncd set_dyndb_ldap_workdir_permissions 0.01 sec 2021-03-05T18:47:54Z DEBUG [3/7]: setting up kerberos principal 2021-03-05T18:47:54Z DEBUG Removing service keytab: /etc/ipa/dnssec/ipa-dnskeysyncd.keytab 2021-03-05T18:47:54Z DEBUG Starting external process 2021-03-05T18:47:54Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM', '-x', 'ipa-setup-override-restrictions'] 2021-03-05T18:47:56Z DEBUG Process finished, return code=0 2021-03-05T18:47:56Z DEBUG stdout=Authenticating as principal root/admin@1.QUIETFOUNTAIN.COM with password.
2021-03-05T18:47:56Z DEBUG stderr=No policy specified for ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM; defaulting to no policy add_principal: Principal or policy already exists while creating "ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM".
2021-03-05T18:47:57Z DEBUG Starting external process 2021-03-05T18:47:57Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'ktadd -k /etc/ipa/dnssec/ipa-dnskeysyncd.keytab ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM', '-x', 'ipa-setup-override-restrictions'] 2021-03-05T18:47:59Z DEBUG Process finished, return code=0 2021-03-05T18:47:59Z DEBUG stdout=Authenticating as principal root/admin@1.QUIETFOUNTAIN.COM with password. Entry for principal ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/ipa/dnssec/ipa-dnskeysyncd.keytab. Entry for principal ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/ipa/dnssec/ipa-dnskeysyncd.keytab. Entry for principal ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type aes128-cts-hmac-sha256-128 added to keytab WRFILE:/etc/ipa/dnssec/ipa-dnskeysyncd.keytab. Entry for principal ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type aes256-cts-hmac-sha384-192 added to keytab WRFILE:/etc/ipa/dnssec/ipa-dnskeysyncd.keytab. Entry for principal ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/ipa/dnssec/ipa-dnskeysyncd.keytab. Entry for principal ipa-dnskeysyncd/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 3, encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/ipa/dnssec/ipa-dnskeysyncd.keytab.
2021-03-05T18:47:59Z DEBUG stderr= 2021-03-05T18:48:00Z DEBUG step duration: ipa-dnskeysyncd __setup_principal 5.35 sec 2021-03-05T18:48:00Z DEBUG [4/7]: setting up SoftHSM 2021-03-05T18:48:00Z DEBUG Creating new softhsm config file 2021-03-05T18:48:00Z DEBUG Setup OpenSSL config for BIND 2021-03-05T18:48:00Z DEBUG Setup BIND sysconfig 2021-03-05T18:48:00Z DEBUG Backing up system configuration file '/etc/sysconfig/named' 2021-03-05T18:48:00Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:48:00Z DEBUG Setup ipa-dnskeysyncd sysconfig 2021-03-05T18:48:00Z DEBUG step duration: ipa-dnskeysyncd __setup_softhsm 0.26 sec 2021-03-05T18:48:00Z DEBUG [5/7]: adding DNSSEC containers 2021-03-05T18:48:00Z INFO DNSSEC container exists (step skipped) 2021-03-05T18:48:00Z DEBUG step duration: ipa-dnskeysyncd __setup_dnssec_containers 0.02 sec 2021-03-05T18:48:00Z DEBUG [6/7]: creating replica keys 2021-03-05T18:48:01Z DEBUG Creating replica's key pair 2021-03-05T18:48:02Z DEBUG Storing replica public key to LDAP, ipk11UniqueId=autogenerate,cn=keys,cn=sec,cn=dns,dc=1,dc=quietfountain,dc=com 2021-03-05T18:48:03Z DEBUG Replica public key stored 2021-03-05T18:48:03Z DEBUG Setting CKA_WRAP=False for old replica keys 2021-03-05T18:48:04Z DEBUG Changing ownership of token files 2021-03-05T18:48:04Z DEBUG step duration: ipa-dnskeysyncd __setup_replica_keys 3.82 sec 2021-03-05T18:48:04Z DEBUG [7/7]: configuring ipa-dnskeysyncd to start on boot 2021-03-05T18:48:04Z DEBUG Starting external process 2021-03-05T18:48:04Z DEBUG args=['/bin/systemctl', 'unmask', 'ipa-dnskeysyncd.service'] 2021-03-05T18:48:18Z DEBUG Process finished, return code=0 2021-03-05T18:48:18Z DEBUG stdout= 2021-03-05T18:48:18Z DEBUG stderr= 2021-03-05T18:48:18Z DEBUG Starting external process 2021-03-05T18:48:18Z DEBUG args=['/bin/systemctl', 'disable', 'ipa-dnskeysyncd.service'] 2021-03-05T18:48:25Z DEBUG Process finished, return code=0 2021-03-05T18:48:25Z DEBUG stdout= 2021-03-05T18:48:25Z DEBUG stderr= 2021-03-05T18:48:25Z DEBUG service DNSKeySync has all config values set 2021-03-05T18:48:25Z DEBUG step duration: ipa-dnskeysyncd __enable 21.20 sec 2021-03-05T18:48:25Z DEBUG Done configuring DNS key synchronization service (ipa-dnskeysyncd). 2021-03-05T18:48:25Z DEBUG service duration: ipa-dnskeysyncd 30.86 sec 2021-03-05T18:48:25Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:25Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:48:25Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:25Z DEBUG Starting external process 2021-03-05T18:48:25Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ipa-ods-exporter.service'] 2021-03-05T18:48:26Z DEBUG Process finished, return code=1 2021-03-05T18:48:26Z DEBUG stdout=disabled
2021-03-05T18:48:26Z DEBUG stderr= 2021-03-05T18:48:26Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:26Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:26Z DEBUG Starting external process 2021-03-05T18:48:26Z DEBUG args=['/bin/systemctl', 'is-active', 'ipa-ods-exporter.service'] 2021-03-05T18:48:26Z DEBUG Process finished, return code=3 2021-03-05T18:48:26Z DEBUG stdout=inactive
2021-03-05T18:48:26Z DEBUG stderr= 2021-03-05T18:48:26Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:26Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:26Z DEBUG Starting external process 2021-03-05T18:48:26Z DEBUG args=['/bin/systemctl', 'stop', 'ipa-ods-exporter.service'] 2021-03-05T18:48:27Z DEBUG Process finished, return code=0 2021-03-05T18:48:27Z DEBUG stdout= 2021-03-05T18:48:27Z DEBUG stderr= 2021-03-05T18:48:27Z DEBUG Stop of ipa-ods-exporter.service complete 2021-03-05T18:48:27Z DEBUG Configuring IPA OpenDNSSEC exporter daemon (ipa-ods-exporter) 2021-03-05T18:48:27Z DEBUG [1/5]: setting up DNS Key Exporter 2021-03-05T18:48:27Z DEBUG step duration: ipa-ods-exporter __setup_key_exporter 0.03 sec 2021-03-05T18:48:27Z DEBUG [2/5]: setting up kerberos principal 2021-03-05T18:48:27Z DEBUG Starting external process 2021-03-05T18:48:27Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM', '-x', 'ipa-setup-override-restrictions'] 2021-03-05T18:48:28Z DEBUG Process finished, return code=0 2021-03-05T18:48:28Z DEBUG stdout=Authenticating as principal root/admin@1.QUIETFOUNTAIN.COM with password. Principal "ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM" created.
2021-03-05T18:48:28Z DEBUG stderr=No policy specified for ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM; defaulting to no policy
2021-03-05T18:48:28Z DEBUG Starting external process 2021-03-05T18:48:28Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'ktadd -k /etc/ipa/dnssec/ipa-ods-exporter.keytab ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM', '-x', 'ipa-setup-override-restrictions'] 2021-03-05T18:48:30Z DEBUG Process finished, return code=0 2021-03-05T18:48:30Z DEBUG stdout=Authenticating as principal root/admin@1.QUIETFOUNTAIN.COM with password. Entry for principal ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/ipa/dnssec/ipa-ods-exporter.keytab. Entry for principal ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/ipa/dnssec/ipa-ods-exporter.keytab. Entry for principal ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 2, encryption type aes128-cts-hmac-sha256-128 added to keytab WRFILE:/etc/ipa/dnssec/ipa-ods-exporter.keytab. Entry for principal ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 2, encryption type aes256-cts-hmac-sha384-192 added to keytab WRFILE:/etc/ipa/dnssec/ipa-ods-exporter.keytab. Entry for principal ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 2, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/ipa/dnssec/ipa-ods-exporter.keytab. Entry for principal ipa-ods-exporter/registry1.1.quietfountain.com@1.QUIETFOUNTAIN.COM with kvno 2, encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/ipa/dnssec/ipa-ods-exporter.keytab.
2021-03-05T18:48:30Z DEBUG stderr= 2021-03-05T18:48:31Z DEBUG step duration: ipa-ods-exporter __setup_principal 3.91 sec 2021-03-05T18:48:31Z DEBUG [3/5]: disabling default signer daemon 2021-03-05T18:48:31Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:31Z DEBUG Starting external process 2021-03-05T18:48:31Z DEBUG args=['/bin/systemctl', 'is-active', 'ods-signerd.service'] 2021-03-05T18:48:31Z DEBUG Process finished, return code=3 2021-03-05T18:48:31Z DEBUG stdout=inactive
2021-03-05T18:48:31Z DEBUG stderr= 2021-03-05T18:48:31Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:31Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:31Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:31Z DEBUG Starting external process 2021-03-05T18:48:31Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ods-signerd.service'] 2021-03-05T18:48:32Z DEBUG Process finished, return code=1 2021-03-05T18:48:32Z DEBUG stdout=disabled
2021-03-05T18:48:32Z DEBUG stderr= 2021-03-05T18:48:32Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:32Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:32Z DEBUG Starting external process 2021-03-05T18:48:32Z DEBUG args=['/bin/systemctl', 'stop', 'ods-signerd.service'] 2021-03-05T18:48:33Z DEBUG Process finished, return code=0 2021-03-05T18:48:33Z DEBUG stdout= 2021-03-05T18:48:33Z DEBUG stderr= 2021-03-05T18:48:33Z DEBUG Stop of ods-signerd.service complete 2021-03-05T18:48:33Z DEBUG Starting external process 2021-03-05T18:48:33Z DEBUG args=['/bin/systemctl', 'mask', 'ods-signerd.service'] 2021-03-05T18:48:41Z DEBUG Process finished, return code=0 2021-03-05T18:48:41Z DEBUG stdout= 2021-03-05T18:48:41Z DEBUG stderr=Created symlink /etc/systemd/system/ods-signerd.service → /dev/null.
2021-03-05T18:48:41Z DEBUG step duration: ipa-ods-exporter __disable_signerd 9.76 sec 2021-03-05T18:48:41Z DEBUG [4/5]: starting DNS Key Exporter 2021-03-05T18:48:41Z DEBUG Starting external process 2021-03-05T18:48:41Z DEBUG args=['/bin/systemctl', 'start', 'ipa-ods-exporter.service'] 2021-03-05T18:48:41Z DEBUG Process finished, return code=0 2021-03-05T18:48:41Z DEBUG stdout= 2021-03-05T18:48:41Z DEBUG stderr= 2021-03-05T18:48:41Z DEBUG Starting external process 2021-03-05T18:48:41Z DEBUG args=['/bin/systemctl', 'is-active', 'ipa-ods-exporter.service'] 2021-03-05T18:48:42Z DEBUG Process finished, return code=0 2021-03-05T18:48:42Z DEBUG stdout=active
2021-03-05T18:48:42Z DEBUG stderr= 2021-03-05T18:48:42Z DEBUG Start of ipa-ods-exporter.service complete 2021-03-05T18:48:42Z DEBUG step duration: ipa-ods-exporter __start 1.21 sec 2021-03-05T18:48:42Z DEBUG [5/5]: configuring DNS Key Exporter to start on boot 2021-03-05T18:48:42Z DEBUG Starting external process 2021-03-05T18:48:42Z DEBUG args=['/bin/systemctl', 'unmask', 'ipa-ods-exporter.service'] 2021-03-05T18:48:49Z DEBUG Process finished, return code=0 2021-03-05T18:48:49Z DEBUG stdout= 2021-03-05T18:48:49Z DEBUG stderr= 2021-03-05T18:48:49Z DEBUG Starting external process 2021-03-05T18:48:49Z DEBUG args=['/bin/systemctl', 'disable', 'ipa-ods-exporter.service'] 2021-03-05T18:48:56Z DEBUG Process finished, return code=0 2021-03-05T18:48:56Z DEBUG stdout= 2021-03-05T18:48:56Z DEBUG stderr= 2021-03-05T18:48:57Z DEBUG step duration: ipa-ods-exporter __enable 14.60 sec 2021-03-05T18:48:57Z DEBUG Done configuring IPA OpenDNSSEC exporter daemon (ipa-ods-exporter). 2021-03-05T18:48:57Z DEBUG service duration: ipa-ods-exporter 29.55 sec 2021-03-05T18:48:57Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:57Z DEBUG Starting external process 2021-03-05T18:48:57Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ods-enforcerd.service'] 2021-03-05T18:48:57Z DEBUG Process finished, return code=1 2021-03-05T18:48:57Z DEBUG stdout=disabled
2021-03-05T18:48:57Z DEBUG stderr= 2021-03-05T18:48:57Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:57Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:57Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:57Z DEBUG Starting external process 2021-03-05T18:48:57Z DEBUG args=['/bin/systemctl', 'is-active', 'ods-enforcerd.service'] 2021-03-05T18:48:58Z DEBUG Process finished, return code=3 2021-03-05T18:48:58Z DEBUG stdout=inactive
2021-03-05T18:48:58Z DEBUG stderr= 2021-03-05T18:48:58Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:58Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:48:58Z DEBUG Starting external process 2021-03-05T18:48:58Z DEBUG args=['/bin/systemctl', 'stop', 'ods-enforcerd.service'] 2021-03-05T18:48:58Z DEBUG Process finished, return code=0 2021-03-05T18:48:58Z DEBUG stdout= 2021-03-05T18:48:58Z DEBUG stderr= 2021-03-05T18:48:58Z DEBUG Stop of ods-enforcerd.service complete 2021-03-05T18:48:58Z DEBUG Configuring OpenDNSSEC enforcer daemon (ods-enforcerd) 2021-03-05T18:48:58Z DEBUG [1/7]: setting up configuration files 2021-03-05T18:48:58Z DEBUG Backing up system configuration file '/etc/opendnssec/conf.xml' 2021-03-05T18:48:58Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:48:58Z DEBUG Backing up system configuration file '/etc/opendnssec/kasp.xml' 2021-03-05T18:48:58Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:48:58Z DEBUG Backing up system configuration file '/etc/opendnssec/zonelist.xml' 2021-03-05T18:48:59Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:48:59Z DEBUG Backing up system configuration file '/etc/sysconfig/ods' 2021-03-05T18:48:59Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:48:59Z DEBUG step duration: ods-enforcerd __setup_conf_files 0.38 sec 2021-03-05T18:48:59Z DEBUG [2/7]: setting up ownership and file mode bits 2021-03-05T18:48:59Z DEBUG step duration: ods-enforcerd __setup_ownership_file_modes 0.07 sec 2021-03-05T18:48:59Z DEBUG [3/7]: generating master key 2021-03-05T18:48:59Z DEBUG Creating master key 2021-03-05T18:49:00Z DEBUG Changing ownership of token files 2021-03-05T18:49:00Z DEBUG step duration: ods-enforcerd __generate_master_key 0.88 sec 2021-03-05T18:49:00Z DEBUG [4/7]: setting up OpenDNSSEC 2021-03-05T18:49:00Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:49:00Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:49:00Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2021-03-05T18:49:00Z DEBUG Backing up system configuration file '/var/opendnssec/kasp.db' 2021-03-05T18:49:00Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index' 2021-03-05T18:49:00Z DEBUG Starting external process 2021-03-05T18:49:00Z DEBUG args=['/usr/sbin/ods-enforcer-db-setup'] 2021-03-05T18:49:00Z DEBUG runas=ods (UID 971, GID 970) 2021-03-05T18:49:14Z DEBUG Process finished, return code=0 2021-03-05T18:49:14Z DEBUG stdout=WARNING This will erase all data in the database; are you sure? [y/N] Database setup successfully.
2021-03-05T18:49:14Z DEBUG stderr= 2021-03-05T18:49:14Z DEBUG step duration: ods-enforcerd __setup_dnssec 13.98 sec 2021-03-05T18:49:14Z DEBUG [5/7]: setting up ipa-dnskeysyncd 2021-03-05T18:49:14Z DEBUG step duration: ods-enforcerd __setup_dnskeysyncd 0.03 sec 2021-03-05T18:49:14Z DEBUG [6/7]: starting OpenDNSSEC enforcer 2021-03-05T18:49:14Z DEBUG Starting external process 2021-03-05T18:49:14Z DEBUG args=['/bin/systemctl', 'restart', 'ods-enforcerd.service'] 2021-03-05T18:49:15Z DEBUG Process finished, return code=0 2021-03-05T18:49:15Z DEBUG stdout= 2021-03-05T18:49:15Z DEBUG stderr= 2021-03-05T18:49:15Z DEBUG Starting external process 2021-03-05T18:49:15Z DEBUG args=['/bin/systemctl', 'is-active', 'ods-enforcerd.service'] 2021-03-05T18:49:15Z DEBUG Process finished, return code=0 2021-03-05T18:49:15Z DEBUG stdout=active
2021-03-05T18:49:15Z DEBUG stderr= 2021-03-05T18:49:15Z DEBUG Restart of ods-enforcerd.service complete 2021-03-05T18:49:15Z DEBUG Starting external process 2021-03-05T18:49:15Z DEBUG args=['/usr/sbin/ods-enforcer', 'policy', 'import'] 2021-03-05T18:49:15Z DEBUG runas=ods (UID 971, GID 970) 2021-03-05T18:49:16Z DEBUG Process finished, return code=0 2021-03-05T18:49:16Z DEBUG stdout=Created policy default successfully
2021-03-05T18:49:16Z DEBUG stderr= 2021-03-05T18:49:16Z DEBUG step duration: ods-enforcerd __start 2.00 sec 2021-03-05T18:49:16Z DEBUG [7/7]: configuring OpenDNSSEC enforcer to start on boot 2021-03-05T18:49:16Z DEBUG Starting external process 2021-03-05T18:49:16Z DEBUG args=['/bin/systemctl', 'unmask', 'ods-enforcerd.service'] 2021-03-05T18:49:22Z DEBUG Process finished, return code=0 2021-03-05T18:49:22Z DEBUG stdout= 2021-03-05T18:49:22Z DEBUG stderr= 2021-03-05T18:49:22Z DEBUG Starting external process 2021-03-05T18:49:22Z DEBUG args=['/bin/systemctl', 'disable', 'ods-enforcerd.service'] 2021-03-05T18:49:28Z DEBUG Process finished, return code=0 2021-03-05T18:49:28Z DEBUG stdout= 2021-03-05T18:49:28Z DEBUG stderr= 2021-03-05T18:49:28Z DEBUG step duration: ods-enforcerd __enable 12.79 sec 2021-03-05T18:49:28Z DEBUG Done configuring OpenDNSSEC enforcer daemon (ods-enforcerd). 2021-03-05T18:49:28Z DEBUG service duration: ods-enforcerd 30.17 sec 2021-03-05T18:49:28Z DEBUG Starting external process 2021-03-05T18:49:28Z DEBUG args=['/bin/systemctl', 'restart', 'ipa-dnskeysyncd.service'] 2021-03-05T18:49:29Z DEBUG Process finished, return code=0 2021-03-05T18:49:29Z DEBUG stdout= 2021-03-05T18:49:29Z DEBUG stderr= 2021-03-05T18:49:29Z DEBUG Starting external process 2021-03-05T18:49:29Z DEBUG args=['/bin/systemctl', 'is-active', 'ipa-dnskeysyncd.service'] 2021-03-05T18:49:29Z DEBUG Process finished, return code=0 2021-03-05T18:49:29Z DEBUG stdout=active
2021-03-05T18:49:29Z DEBUG stderr= 2021-03-05T18:49:29Z DEBUG Restart of ipa-dnskeysyncd.service complete 2021-03-05T18:49:29Z DEBUG Restarting named 2021-03-05T18:49:29Z DEBUG Starting external process 2021-03-05T18:49:29Z DEBUG args=['/bin/systemctl', 'restart', 'named.service'] 2021-03-05T18:49:33Z DEBUG Process finished, return code=0 2021-03-05T18:49:33Z DEBUG stdout= 2021-03-05T18:49:33Z DEBUG stderr= 2021-03-05T18:49:33Z DEBUG Starting external process 2021-03-05T18:49:33Z DEBUG args=['/bin/systemctl', 'is-active', 'named.service'] 2021-03-05T18:49:33Z DEBUG Process finished, return code=0 2021-03-05T18:49:33Z DEBUG stdout=active
2021-03-05T18:49:33Z DEBUG stderr= 2021-03-05T18:49:33Z DEBUG Restart of named.service complete 2021-03-05T18:49:34Z DEBUG Set service ['DNS'] for registry1.1.quietfountain.com to enabledService 2021-03-05T18:49:34Z DEBUG Set service ['DNSKeySync'] for registry1.1.quietfountain.com to enabledService 2021-03-05T18:49:34Z DEBUG Set service ['DNSKeyExporter'] for registry1.1.quietfountain.com to enabledService 2021-03-05T18:49:35Z DEBUG Set service ['DNSSEC'] for registry1.1.quietfountain.com to enabledService 2021-03-05T18:49:35Z DEBUG Updating DNS system records 2021-03-05T18:49:35Z DEBUG raw: server_find(None, version='2.240', no_members=False, servrole='IPA master') 2021-03-05T18:49:35Z DEBUG server_find(None, all=False, raw=False, version='2.240', no_members=False, pkey_only=False, servrole=('IPA master',)) 2021-03-05T18:49:35Z DEBUG raw: server_role_find(None, server_server=None, role_servrole='IPA master', status='enabled', include_master=True, version='2.240') 2021-03-05T18:49:35Z DEBUG server_role_find(None, server_server=None, role_servrole='IPA master', status='enabled', include_master=True, all=False, raw=False, version='2.240') 2021-03-05T18:49:35Z DEBUG raw: topologysuffix_find(None, all=True, raw=True, version='2.240') 2021-03-05T18:49:35Z DEBUG topologysuffix_find(None, all=True, raw=True, version='2.240', pkey_only=False) 2021-03-05T18:49:35Z DEBUG raw: server_role_find(None, server_server='registry1.1.quietfountain.com', status='enabled', include_master=True, version='2.240') 2021-03-05T18:49:35Z DEBUG server_role_find(None, server_server='registry1.1.quietfountain.com', status='enabled', include_master=True, all=False, raw=False, version='2.240') 2021-03-05T18:49:35Z DEBUG raw: dnszone_show(<DNS name 1.quietfountain.com.>, version='2.240') 2021-03-05T18:49:35Z DEBUG dnszone_show(<DNS name 1.quietfountain.com.>, rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:35Z DEBUG Name registry1.1.quietfountain.com. resolved to {UnsafeIPAddress('fc00:1002:c7::2'), UnsafeIPAddress('10.12.112.2'), UnsafeIPAddress('fc00:1003:a:1::22'), UnsafeIPAddress('192.168.168.34'), UnsafeIPAddress('10.12.112.1'), UnsafeIPAddress('fc00:1002:c7::1')} 2021-03-05T18:49:35Z DEBUG raw: dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos.1.quietfountain.com.>, txtrecord=['"1.QUIETFOUNTAIN.COM"'], version='2.240') 2021-03-05T18:49:35Z DEBUG dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos.1.quietfountain.com.>, txtrecord=('"1.QUIETFOUNTAIN.COM"',), rights=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:35Z DEBUG raw: dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _ldap._tcp.1.quietfountain.com.>, srvrecord=['0 100 389 registry1.1.quietfountain.com.'], setattr=['idnsTemplateAttribute;cnamerecord=_ldap._tcp.\{substitutionvariable_ipalocation\}._locations'], addattr=['objectclass=idnsTemplateObject'], version='2.240') 2021-03-05T18:49:36Z DEBUG dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _ldap._tcp.1.quietfountain.com.>, srvrecord=('0 100 389 registry1.1.quietfountain.com.',), setattr=('idnsTemplateAttribute;cnamerecord=_ldap._tcp.\{substitutionvariable_ipalocation\}._locations',), addattr=('objectclass=idnsTemplateObject',), rights=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:36Z DEBUG raw: dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos._tcp.1.quietfountain.com.>, srvrecord=['0 100 88 registry1.1.quietfountain.com.'], setattr=['idnsTemplateAttribute;cnamerecord=_kerberos._tcp.\{substitutionvariable_ipalocation\}._locations'], addattr=['objectclass=idnsTemplateObject'], version='2.240') 2021-03-05T18:49:36Z DEBUG dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos._tcp.1.quietfountain.com.>, srvrecord=('0 100 88 registry1.1.quietfountain.com.',), setattr=('idnsTemplateAttribute;cnamerecord=_kerberos._tcp.\{substitutionvariable_ipalocation\}._locations',), addattr=('objectclass=idnsTemplateObject',), rights=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:36Z DEBUG raw: dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos._udp.1.quietfountain.com.>, srvrecord=['0 100 88 registry1.1.quietfountain.com.'], setattr=['idnsTemplateAttribute;cnamerecord=_kerberos._udp.\{substitutionvariable_ipalocation\}._locations'], addattr=['objectclass=idnsTemplateObject'], version='2.240') 2021-03-05T18:49:36Z DEBUG dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos._udp.1.quietfountain.com.>, srvrecord=('0 100 88 registry1.1.quietfountain.com.',), setattr=('idnsTemplateAttribute;cnamerecord=_kerberos._udp.\{substitutionvariable_ipalocation\}._locations',), addattr=('objectclass=idnsTemplateObject',), rights=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:36Z DEBUG raw: dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos-master._tcp.1.quietfountain.com.>, srvrecord=['0 100 88 registry1.1.quietfountain.com.'], setattr=['idnsTemplateAttribute;cnamerecord=_kerberos-master._tcp.\{substitutionvariable_ipalocation\}._locations'], addattr=['objectclass=idnsTemplateObject'], version='2.240') 2021-03-05T18:49:36Z DEBUG dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos-master._tcp.1.quietfountain.com.>, srvrecord=('0 100 88 registry1.1.quietfountain.com.',), setattr=('idnsTemplateAttribute;cnamerecord=_kerberos-master._tcp.\{substitutionvariable_ipalocation\}._locations',), addattr=('objectclass=idnsTemplateObject',), rights=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:36Z DEBUG raw: dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos-master._udp.1.quietfountain.com.>, srvrecord=['0 100 88 registry1.1.quietfountain.com.'], setattr=['idnsTemplateAttribute;cnamerecord=_kerberos-master._udp.\{substitutionvariable_ipalocation\}._locations'], addattr=['objectclass=idnsTemplateObject'], version='2.240') 2021-03-05T18:49:36Z DEBUG dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kerberos-master._udp.1.quietfountain.com.>, srvrecord=('0 100 88 registry1.1.quietfountain.com.',), setattr=('idnsTemplateAttribute;cnamerecord=_kerberos-master._udp.\{substitutionvariable_ipalocation\}._locations',), addattr=('objectclass=idnsTemplateObject',), rights=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:36Z DEBUG raw: dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kpasswd._tcp.1.quietfountain.com.>, srvrecord=['0 100 464 registry1.1.quietfountain.com.'], setattr=['idnsTemplateAttribute;cnamerecord=_kpasswd._tcp.\{substitutionvariable_ipalocation\}._locations'], addattr=['objectclass=idnsTemplateObject'], version='2.240') 2021-03-05T18:49:36Z DEBUG dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kpasswd._tcp.1.quietfountain.com.>, srvrecord=('0 100 464 registry1.1.quietfountain.com.',), setattr=('idnsTemplateAttribute;cnamerecord=_kpasswd._tcp.\{substitutionvariable_ipalocation\}._locations',), addattr=('objectclass=idnsTemplateObject',), rights=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:36Z DEBUG raw: dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kpasswd._udp.1.quietfountain.com.>, srvrecord=['0 100 464 registry1.1.quietfountain.com.'], setattr=['idnsTemplateAttribute;cnamerecord=_kpasswd._udp.\{substitutionvariable_ipalocation\}._locations'], addattr=['objectclass=idnsTemplateObject'], version='2.240') 2021-03-05T18:49:36Z DEBUG dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name _kpasswd._udp.1.quietfountain.com.>, srvrecord=('0 100 464 registry1.1.quietfountain.com.',), setattr=('idnsTemplateAttribute;cnamerecord=_kpasswd._udp.\{substitutionvariable_ipalocation\}._locations',), addattr=('objectclass=idnsTemplateObject',), rights=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:36Z DEBUG raw: dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name ipa-ca.1.quietfountain.com.>, arecord=['10.12.112.2', '192.168.168.34', '10.12.112.1'], aaaarecord=['fc00:1002:c7::2', 'fc00:1003:a:1::22', 'fc00:1002:c7::1'], version='2.240') 2021-03-05T18:49:36Z DEBUG dnsrecord_mod(<DNS name 1.quietfountain.com.>, <DNS name ipa-ca.1.quietfountain.com.>, arecord=('10.12.112.2', '192.168.168.34', '10.12.112.1'), aaaarecord=('fc00:1002:c7::2', 'fc00:1003:a:1::22', 'fc00:1002:c7::1'), rights=False, structured=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:36Z DEBUG raw: location_find(None, version='2.240') 2021-03-05T18:49:36Z DEBUG location_find(None, all=False, raw=False, version='2.240', pkey_only=False) 2021-03-05T18:49:36Z DEBUG raw: dnsconfig_show(version='2.240') 2021-03-05T18:49:36Z DEBUG dnsconfig_show(rights=False, all=False, raw=False, version='2.240') 2021-03-05T18:49:36Z DEBUG Starting external process 2021-03-05T18:49:36Z DEBUG args=['/usr/sbin/ipactl', 'start', '--ignore-service-failures'] 2021-03-05T18:50:06Z DEBUG Process finished, return code=0 2021-03-05T18:50:06Z DEBUG stdout=Starting Directory Service Starting krb5kdc Service Starting kadmin Service Starting named Service Starting httpd Service Starting ipa-custodia Service Starting pki-tomcatd Service Starting ipa-otpd Service Starting ipa-ods-exporter Service Starting ods-enforcerd Service Starting ipa-dnskeysyncd Service
2021-03-05T18:50:06Z DEBUG stderr=Existing service file detected! Assuming stale, cleaning and proceeding ipa: INFO: The ipactl command was successful
2021-03-05T18:50:06Z DEBUG Destroyed connection context.ldap2_139832595295872 2021-03-05T18:50:06Z INFO The ipa-dns-install command was successful
Sorry, left out the one you asked for: [root@registry1 log]# rpm -q opendnssec opendnssec-2.1.7-2.fc33.x86_64
I don't know if it's related, but there's something really, well, 'hackish' about these messages:
Mar 05 17:58:42 registry1.1.quietfountain.com ipa-dnskeysyncd[2203]: ipaserver.dnssec.bindmgr: DEBUG Fixing file permissions: /var/lib/ipa/dnssec/tokens/7d80f832-3eb7-d013-ef8c-2f1c1c58bc55/b575bd04-7078-25d9-f953-2aa8b2a6a335.object Mar 05 17:58:42 registry1.1.quietfountain.com ipa-dnskeysyncd[2203]: ipaserver.dnssec.bindmgr: DEBUG Fixing file permissions: /var/lib/ipa/dnssec/tokens/7d80f832-3eb7-d013-ef8c-2f1c1c58bc55/b575bd04-7078-25d9-f953-2aa8b2a6a335.lock
There are a whole lot of them, they appear shortly after reboots.
Hi @hcoin looks like a few clarifications are needed... The ods-signer command allows to communicate with ods-signerd daemon through a socket. When ipa DNS server is installed as dnssec master, the ods-signerd service is disabled and replaced with ipa-ods-exporter: the ods-signer command now communicates with ipa-ods-exporter instead of ods-signerd.
ods-signerd doesn't understand the subcommand "ipa-hsm-update", but ipa-ods-exporter does.
What is the output on your system of the following commands?
systemctl status ods-signerd systemctl status ipa-ods-exporter.service systemctl status ipa-ods-exporter.socket
Thanks for the focus! The results are below. Related: named has log entries peppered with such as: Mar 08 11:50:09 registry1.1.quietfountain.com named[131428]: dns_dnssec_findmatchingkeys: error reading key file Kquietfountain.com.+008+10890.private: no engine
Meanwhile I'm going to freeze and sideline the vm that lead to this, create a new blank fc33 workstation, then re-install all of this to see if intervening updates change anything.
Note: For the security concerned: none of the keys, domains mentioned below have meaningful content, the entire 'mini-ecosystem' will be reinstalled from scratch someday if this ever works.
[root@registry1 dns]# systemctl status ods-signerd ● ods-signerd.service - OpenDNSSEC signer daemon Loaded: loaded (/usr/lib/systemd/system/ods-signerd.service; disabled; vendor preset: disabled) Active: inactive (dead) [root@registry1 dns]# systemctl status ipa-ods-exporter.service ● ipa-ods-exporter.service - IPA OpenDNSSEC Signer replacement Loaded: loaded (/usr/lib/systemd/system/ipa-ods-exporter.service; disabled; vendor preset: disabled) Active: inactive (dead) since Mon 2021-03-08 10:45:29 CST; 1h 23min ago TriggeredBy: ● ipa-ods-exporter.socket Process: 132993 ExecStart=/usr/libexec/ipa/ipa-ods-exporter (code=exited, status=0/SUCCESS) Main PID: 132993 (code=exited, status=0/SUCCESS) CPU: 15.880s Mar 08 10:45:14 registry1.1.quietfountain.com ipa-ods-exporter[132993]: ipa-ods-exporter: INFO master2ldap_zone_keys: keys in local HSM & LDAP: {'0x3c8> Mar 08 10:45:20 registry1.1.quietfountain.com ipa-ods-exporter[132993]: ipa-ods-exporter: INFO master2ldap_zone_keys: keys in local HSM & LDAP: {'0x3c8> Mar 08 10:45:28 registry1.1.quietfountain.com ipa-ods-exporter[132993]: ipa-ods-exporter: DEBUG accepting new connection Mar 08 10:45:28 registry1.1.quietfountain.com ipa-ods-exporter[132993]: ipa-ods-exporter: DEBUG accepted new connection <ipaserver.dnssec._ods21.ODSSign> Mar 08 10:45:28 registry1.1.quietfountain.com ipa-ods-exporter[132993]: ipa-ods-exporter: DEBUG received command "ipa-hsm-update" from systemd socket Mar 08 10:45:28 registry1.1.quietfountain.com ipa-ods-exporter[132993]: ipa-ods-exporter: DEBUG parse_command returned msg: HSM synchronization finished> Mar 08 10:45:28 registry1.1.quietfountain.com ipa-ods-exporter[132993]: ipa-ods-exporter: DEBUG parse_command returned cmd: ipa-hsm-update Mar 08 10:45:28 registry1.1.quietfountain.com ipa-ods-exporter[132993]: ipa-ods-exporter: INFO HSM synchronization finished, skipping zone synchronizat> Mar 08 10:45:29 registry1.1.quietfountain.com systemd[1]: ipa-ods-exporter.service: Succeeded. Mar 08 10:45:29 registry1.1.quietfountain.com systemd[1]: ipa-ods-exporter.service: Consumed 15.880s CPU time. [root@registry1 dns]# systemctl status ipa-ods-exporter.socket ● ipa-ods-exporter.socket Loaded: loaded (/usr/lib/systemd/system/ipa-ods-exporter.socket; disabled; vendor preset: disabled) Active: active (listening) since Sun 2021-03-07 16:06:27 CST; 20h ago Triggers: ● ipa-ods-exporter.service Listen: /run/opendnssec/engine.sock (Stream) Tasks: 0 (limit: 5862) Memory: 0B CPU: 22ms CGroup: /system.slice/ipa-ods-exporter.socket Mar 07 16:06:27 registry1.1.quietfountain.com systemd[1]: Starting ipa-ods-exporter.socket. Mar 07 16:06:27 registry1.1.quietfountain.com systemd[1]: Listening on ipa-ods-exporter.socket. [root@registry1 dns]# [ods@registry1 ~]$ echo $SOFTHSM2_CONF /etc/ipa/dnssec/softhsm2.conf [ods@registry1 ~]$ ods-signed ipa-full-update bash: ods-signed: command not found... ^C [ods@registry1 ~]$ ods-signer ipa-full-update Synchronization of all zones was finished.[ods@registry1 ~]$ whoami ods [ods@registry1 ~]$ ... ]# journalctl -r -- Logs begin at Fri 2020-10-09 12:55:21 CDT, end at Mon 2021-03-08 12:18:45 CST. -- ... Mar 08 12:18:00 registry1.1.quietfountain.com systemd[1]: ipa-ods-exporter.service: Consumed 17.472s CPU time. Mar 08 12:18:00 registry1.1.quietfountain.com audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ipa-ods-exporter comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 08 12:18:00 registry1.1.quietfountain.com systemd[1]: ipa-ods-exporter.service: Succeeded. Mar 08 12:17:59 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG Done Mar 08 12:17:59 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG zone keys deleted from local HSM but present in LDAP: set() Mar 08 12:17:59 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG zone keys in local HSM: {'0x80abffa335aafa5ec55243ffde538238',.... ... Mar 08 12:17:52 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG quietfountain.com: updating key metadata "cn=KSK-20210305190937Z-82de8f5f21d129ac2f64bd8f19edf9b5,cn=keys,idnsname=quietfountain.com.,cn=dns,dc=1,dc=quietfountain,dc=com" > Mar 08 12:17:52 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG quietfountain.com: updating key metadata "cn=ZSK-20210305190926Z-a34f13135fc6529c6e1f0bf74d098fe0,cn=keys,idnsname=quietfountain.com.,cn=dns,dc=1,dc=quietfountain,dc=com" > Mar 08 12:17:52 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: INFO quietfountain.com: key metadata in LDAP & ODS: {'ZSK-20210305190926Z-a34f13135fc6529c6e1f0bf74d098fe0', 'KSK-20210305190937Z-82de8f5f21d129ac2f64bd8f19edf9b5'} Mar 08 12:17:52 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: INFO quietfountain.com: deleted key metadata in LDAP: set() Mar 08 12:17:52 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: INFO quietfountain.com: new key metadata from ODS: set() Mar 08 12:17:52 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG key ZSK-20210305190926Z-a34f13135fc6529c6e1f0bf74d098fe0 metadata: {'idnsSecKeyZONE': 'TRUE', 'idnsSecKeyCreated': datetime.datetime(2021, 3, 5, 19, 9, 26, tzinfo=tzfile('> Mar 08 12:17:52 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG key KSK-20210305190937Z-82de8f5f21d129ac2f64bd8f19edf9b5 metadata: {'idnsSecKeyZONE': 'TRUE', 'idnsSecKeySEP': 'TRUE', 'idnsSecKeyCreated': datetime.datetime(2021, 3, 5, 1> Mar 08 12:17:52 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG quietfountain.com: synchronizing zone "quietfountain.com" Mar 08 12:17:51 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG 1.quietfountain.com: synchronizing zone "1.quietfountain.com" Mar 08 12:17:51 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG Synchronization of all zones was finished. Mar 08 12:17:51 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG parse_command returned cmd: ipa-full-update Mar 08 12:17:51 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG parse_command returned msg: Synchronization of all zones was finished. Mar 08 12:17:51 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG received command "ipa-full-update" from systemd socket Mar 08 12:17:51 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG accepted new connection <ipaserver.dnssec._ods21.ODSSignerConn object at 0x7f58943e8cd0> Mar 08 12:17:51 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG accepting new connection ... Mar 08 12:16:20 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: INFO master2ldap_zone_keys: keys in local HSM & LDAP: {'0x80abffa335aafa5ec55243ffde538238', '0xf0996ed415438670ce0828ab4bbd56c0', '0x09eb40c04cc227c845361db2a441fe25', '0x1c6c> Mar 08 12:16:12 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: INFO master2ldap_zone_keys: keys in local HSM & LDAP: {'0x80abffa335aafa5ec55243ffde538238', '0xf0996ed415438670ce0828ab4bbd56c0', '0x09eb40c04cc227c845361db2a441fe25', '0x1c6c> Mar 08 12:16:12 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG new zone keys in local HSM: set() Mar 08 12:16:12 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG zone keys in local HSM: {'0x80abffa335aafa5ec55243ffde538238', '0xf0996ed415438670ce0828ab4bbd56c0', '0x09eb40c04cc227c845361db2a441fe25', '0x969cc509b8eeee0fc99738687600d> Mar 08 12:16:07 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG zone keys in LDAP: {'0x80abffa335aafa5ec55243ffde538238', '0xf0996ed415438670ce0828ab4bbd56c0', '0x09eb40c04cc227c845361db2a441fe25', '0x1c6c16637ee98a4ae875e52ac0f7425f',> Mar 08 12:16:07 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG master key 0x3fbeed1f8a7d92b32cc92b12dee1a764 is not wrapped with replica keys set() Mar 08 12:16:06 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG processing master key data: 0x3fbeed1f8a7d92b32cc92b12dee1a764 Mar 08 12:16:06 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG enabled replica key ids: {'0x1117d162222805a60f51d206c888f9e8'} Mar 08 12:16:05 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG synchronizing master key metadata: 0x3fbeed1f8a7d92b32cc92b12dee1a764 Mar 08 12:16:05 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG master keys in LDAP after flush: {'0x3fbeed1f8a7d92b32cc92b12dee1a764'} Mar 08 12:16:05 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG new master keys in local HSM: set() Mar 08 12:16:05 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG master keys in LDAP HSM: {'0x3fbeed1f8a7d92b32cc92b12dee1a764'} Mar 08 12:16:05 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG master keys in local HSM: {'0x3fbeed1f8a7d92b32cc92b12dee1a764'} Mar 08 12:16:03 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: INFO ldap2master_replica: keys in local HSM & LDAP: {'0x1117d162222805a60f51d206c888f9e8'} Mar 08 12:16:03 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: INFO obsolete replica keys in local HSM: set() Mar 08 12:16:03 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: INFO new replica keys in LDAP: set() Mar 08 12:16:02 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG replica pub keys in SoftHSM: {'0x1117d162222805a60f51d206c888f9e8'} Mar 08 12:16:02 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG replica pub keys in LDAP: {'0x1117d162222805a60f51d206c888f9e8'} Mar 08 12:16:01 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipapython.ipaldap: DEBUG retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-1-QUIETFOUNTAIN-COM.socket conn=<ldap.ldapobject.SimpleLDAPObject object at 0x7f589572e040> Mar 08 12:16:01 registry1.1.quietfountain.com python3[143133]: Configuration.cpp(124): Missing slots.removable in configuration. Using default value: false Mar 08 12:16:01 registry1.1.quietfountain.com python3[143133]: Configuration.cpp(96): Missing slots.mechanisms in configuration. Using default value: ALL Mar 08 12:16:00 registry1.1.quietfountain.com python3[143133]: Configuration.cpp(96): Missing log.level in configuration. Using default value: INFO Mar 08 12:16:00 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG Connected Mar 08 12:16:00 registry1.1.quietfountain.com python3[143133]: GSSAPI client step 1 Mar 08 12:16:00 registry1.1.quietfountain.com python3[143133]: GSSAPI client step 1 Mar 08 12:16:00 registry1.1.quietfountain.com python3[143133]: GSSAPI client step 1 Mar 08 12:16:00 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG Connecting to LDAP Mar 08 12:16:00 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipa-ods-exporter: DEBUG Got TGT Mar 08 12:16:00 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipalib.install.kinit: DEBUG Attempt 1/5: success .. Mar 08 12:15:57 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipalib.plugable: DEBUG ipaserver.plugins.virtual is not a valid plugin module ... Mar 08 12:15:57 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipalib.plugable: DEBUG ipaserver.plugins.sudo is not a valid plugin module ... Mar 08 12:15:57 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipalib.plugable: DEBUG ipaserver.plugins.rabase is not a valid plugin module ... Mar 08 12:15:57 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipalib.plugable: DEBUG ipaserver.plugins.otp is not a valid plugin module ... Mar 08 12:15:56 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipalib.plugable: DEBUG ipaserver.plugins.hbac is not a valid plugin module ... Mar 08 12:15:54 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipalib.plugable: DEBUG ipaserver.plugins.baseldap is not a valid plugin module ... Mar 08 12:15:53 registry1.1.quietfountain.com ipa-ods-exporter[143133]: ipalib.plugable: DEBUG importing all plugin modules in ipaserver.plugins... Mar 08 12:15:44 registry1.1.quietfountain.com systemd[1]: Started IPA OpenDNSSEC Signer replacement.
The only thing likely different about this install vs others is that it's a testbed vm atop an older baremetal xeon server. So it's much slower than 'usual', with slower disk-io as well I'd expect. The reason for using this is as a test bed is -- for more confidence of 'fewer failures under load conditions' on faster systems. I notice there don't seem to be many others having these issues (at least so far, maybe they don't use fedora...) so it's a puzzle.
DS records don't make it into named, but all the opendnssec debugging tips look normal.
Every zone has a record like:
Mar 08 11:50:09 registry1.1.quietfountain.com named[131428]: dns_dnssec_findmatchingkeys: error reading key file Kquietfountain.com.+008+10890.private: no engine
and named won't publish the ds key rrs for any zone.
A re-install on fc33 no longer generates messages about modules not starting or not being found --- even though on the same vm on the same host running the same test suite.
I'll open a different bug report since it appears I can't reproduce this on an install on a later date. Still probably some race condition.
Thanks for the help so far.
Metadata Update from @hcoin: - Issue close_status updated to: insufficientinfo - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.