hello I want to copy a CA node. I tried many times but failed. Can you help me find out the reason?thank you
1:#apt install -y freeipa-server 2:root@fs-hiido-ca2-65-155:/var/log# ipa-client-install --domain=hiido.host.yydevops.com --realm=YYDEVOPS.COM --server=fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com --force-join Autodiscovery of servers for failover cannot work with this configuration. If you proceed with the installation, services will be configured to always access the discovered server for all operations and will not fail over to other servers in case of failure. Proceed with fixed values and no DNS discovery? [no]: yes Client hostname: fs-hiido-ca2-65-155.hiido.host.yydevops.com Realm: YYDEVOPS.COM DNS Domain: hiido.host.yydevops.com IPA Server: fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com BaseDN: dc=yydevops,dc=com Continue to configure the system with these values? [no]: yes Synchronizing time with KDC... Attempting to sync time using ntpd. Will timeout after 15 seconds Unable to sync time with NTP server, assuming the time is in sync. Please check that 123 UDP port is opened. User authorized to enroll computers: admin Password for [email protected]: Successfully retrieved CA cert Subject: CN=Certificate Authority,O=YYDEVOPS.COM Issuer: CN=Certificate Authority,O=YYDEVOPS.COM Valid From: Tue Sep 10 11:23:06 2019 UTC Valid Until: Sat Sep 10 11:23:06 2039 UTC Enrolled in IPA realm YYDEVOPS.COM Created /etc/ipa/default.conf New SSSD config will be created Configured sudoers in /etc/nsswitch.conf Configured /etc/sssd/sssd.conf Configured /etc/krb5.conf for IPA realm YYDEVOPS.COM trying https://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com/ipa/json Forwarding 'ping' to json server 'https://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com/ipa/json' Forwarding 'ca_is_enabled' to json server 'https://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com/ipa/json' Systemwide CA database updated. Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub Forwarding 'host_mod' to json server 'https://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com/ipa/json' Could not update DNS SSHFP records. SSSD enabled Configured /etc/openldap/ldap.conf No SRV records of NTP servers found. IPA server address will be used NTP enabled Configured /etc/ssh/ssh_config Configured /etc/ssh/sshd_config Configuring hiido.host.yydevops.com as NIS domain. Client configuration complete 3:#strace ipa-replica-install --skip-conncheck ....... read(10, "):\n self.gensvc_name = ge"..., 4096) = 1289 read(10, "", 4096) = 0 close(10) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/service.py", {st_mode=S_IFREG|0644, st_size=21769, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py", {st_mode=S_IFREG|0644, st_size=53222, ...}) = 0 open("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0644, st_size=53222, ...}) = 0 fstat(10, {st_mode=S_IFREG|0644, st_size=53222, ...}) = 0 read(10, "# Authors: Karl MacMillan <kmacm"..., 8192) = 8192 read(10, "d_winsync_module)\n self.s"..., 4096) = 4096 read(10, ".__add_automember_config)\n "..., 4096) = 4096 read(10, "ey may conflict.\n\n if not"..., 4096) = 4096 read(10, " # Must be readable for dirs"..., 4096) = 4096 read(10, "_mod(\"entryusn.ldif\")\n\n def _"..., 4096) = 4096 read(10, "dirname(self.serverid)\n d"..., 4096) = 4096 read(10, "tstrap-template.ldif\", self.sub_"..., 4096) = 4096 read(10, "pd-port')\n self.restore_s"..., 4096) = 4096 read(10, "od(\"ds-nfiles.ldif\", nf_sub_dict"..., 4096) = 4096 read(10, "_is_running:\n try:\n "..., 4096) = 4096 read(10, "ck for open secure port 636 from"..., 4096) = 4070 read(10, "", 4096) = 0 close(10) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py", {st_mode=S_IFREG|0644, st_size=53222, ...}) = 0 write(3, "2022-06-02T11:34:08Z DEBUG Trace"..., 562) = 562 write(3, "2022-06-02T11:34:08Z DEBUG [er"..., 51) = 51 write(1, " [error] SystemExit: 1\n", 24 [error] SystemExit: 1 ) = 24 stat("/etc/ipa/default.conf.ipabkp", {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 stat("/etc/ipa/default.conf", {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 stat("/etc/ipa/default.conf.ipabkp", {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 stat("/etc/ipa/default.conf", {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 stat("/etc/ipa/default.conf.ipabkp", {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 open("/etc/ipa/default.conf", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 open("/etc/ipa/default.conf.ipabkp", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 11 fstat(11, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 fstat(10, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 read(10, "#File modified by ipa-client-ins"..., 16384) = 343 read(10, "", 12288) = 0 fstat(11, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 read(10, "", 16384) = 0 write(11, "#File modified by ipa-client-ins"..., 343) = 343 close(11) = 0 close(10) = 0 stat("/etc/ipa/default.conf", {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 utimes("/etc/ipa/default.conf.ipabkp", [{1654169619, 110154}, {1654169545, 586153}]) = 0 chmod("/etc/ipa/default.conf.ipabkp", 0644) = 0 open("/etc/ipa/default.conf", O_RDWR|O_CREAT, 0644) = 10 fcntl(10, F_SETLKW, {l_type=F_WRLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0 fstat(10, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 fcntl(10, F_GETFL) = 0x8002 (flags O_RDWR|O_LARGEFILE) fstat(10, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 read(10, "#File modified by ipa-client-ins"..., 8192) = 343 read(10, "", 4096) = 0 read(10, "", 8192) = 0 lseek(10, 0, SEEK_SET) = 0 ftruncate(10, 0) = 0 lseek(10, 0, SEEK_SET) = 0 write(10, "#File modified by ipa-client-ins"..., 453) = 453 close(10) = 0 chmod("/etc/ipa/default.conf", 0644) = 0 lstat("/tmp/tmpeNi6VXipa", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 open("/tmp/tmpeNi6VXipa", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 10 fstat(10, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents(10, /* 2 entries */, 32768) = 48 getdents(10, /* 0 entries */, 32768) = 0 close(10) = 0 rmdir("/tmp/tmpeNi6VXipa") = 0 stat("/tmp/krbcc7XNEZ3/ccache", {st_mode=S_IFREG|0600, st_size=2651, ...}) = 0 unlink("/tmp/krbcc7XNEZ3/ccache") = 0 rmdir("/tmp/krbcc7XNEZ3") = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/admintool.py", {st_mode=S_IFREG|0644, st_size=11123, ...}) = 0 open("/usr/lib/python2.7/dist-packages/ipapython/admintool.py", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0644, st_size=11123, ...}) = 0 fstat(10, {st_mode=S_IFREG|0644, st_size=11123, ...}) = 0 read(10, "# Authors:\n# Petr Viktorin <pv"..., 8192) = 8192 read(10, "nfo()`, `self.log.warning()`, et"..., 4096) = 2931 read(10, "", 4096) = 0 close(10) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/cli.py", {st_mode=S_IFREG|0644, st_size=12457, ...}) = 0 open("/usr/lib/python2.7/dist-packages/ipapython/install/cli.py", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0644, st_size=12457, ...}) = 0 fstat(10, {st_mode=S_IFREG|0644, st_size=12457, ...}) = 0 read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 8192 read(10, "self.option_parser.error(\"Too ma"..., 4096) = 4096 read(10, "lse:\n return super(In"..., 4096) = 169 read(10, "", 4096) = 0 close(10) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 open("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 fstat(10, {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 8192 read(10, " runs the validation part of the"..., 4096) = 4096 read(10, " comp_cls.knobs():\n "..., 4096) = 3912 read(10, "", 4096) = 0 close(10) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/util.py", {st_mode=S_IFREG|0644, st_size=4230, ...}) = 0 open("/usr/lib/python2.7/dist-packages/ipapython/install/util.py", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0644, st_size=4230, ...}) = 0 fstat(10, {st_mode=S_IFREG|0644, st_size=4230, ...}) = 0 read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 4230 read(10, "", 4096) = 0 close(10) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/util.py", {st_mode=S_IFREG|0644, st_size=4230, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/util.py", {st_mode=S_IFREG|0644, st_size=4230, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/util.py", {st_mode=S_IFREG|0644, st_size=4230, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipapython/install/common.py", {st_mode=S_IFREG|0644, st_size=2843, ...}) = 0 open("/usr/lib/python2.7/dist-packages/ipapython/install/common.py", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0644, st_size=2843, ...}) = 0 fstat(10, {st_mode=S_IFREG|0644, st_size=2843, ...}) = 0 read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 2843 read(10, "", 4096) = 0 close(10) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py", {st_mode=S_IFREG|0644, st_size=59950, ...}) = 0 open("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0644, st_size=59950, ...}) = 0 fstat(10, {st_mode=S_IFREG|0644, st_size=59950, ...}) = 0 read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 8192 read(10, " pass\n else:\n "..., 4096) = 4096 read(10, "\n pass\n\n\ndef common_clean"..., 4096) = 4096 mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6ebd177000 read(10, "tall it first before configuring"..., 4096) = 4096 read(10, "ver cert is not valid. Please ru"..., 4096) = 4096 read(10, "xit(0)\n else:\n "..., 4096) = 4096 read(10, " CA.configure_certmonger_ren"..., 4096) = 4096 read(10, "\n options = installer\n\n in"..., 4096) = 4096 read(10, " pkinit_pin, pkinit_ca_cert = lo"..., 4096) = 4096 read(10, "plica-manage del %s --force\" %\n "..., 4096) = 4096 read(10, "ptions.host_name = config.host_n"..., 4096) = 4096 read(10, "ance.NTPInstance()\n ntp.c"..., 4096) = 4096 read(10, "a[0], ca_data[1])\n\n kra ="..., 4096) = 4096 read(10, "f.admin_password:\n "..., 4096) = 2606 read(10, "", 4096) = 0 close(10) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py", {st_mode=S_IFREG|0644, st_size=59950, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py", {st_mode=S_IFREG|0644, st_size=59950, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py", {st_mode=S_IFREG|0644, st_size=59950, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py", {st_mode=S_IFREG|0644, st_size=53222, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/service.py", {st_mode=S_IFREG|0644, st_size=21769, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/service.py", {st_mode=S_IFREG|0644, st_size=21769, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py", {st_mode=S_IFREG|0644, st_size=53222, ...}) = 0 stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py", {st_mode=S_IFREG|0644, st_size=53222, ...}) = 0 write(3, "2022-06-02T11:34:08Z DEBUG Fil"..., 3867) = 3867 write(3, "2022-06-02T11:34:08Z DEBUG The i"..., 92) = 92 write(3, "2022-06-02T11:34:08Z ERROR The i"..., 124) = 124 write(2, "ipa.ipapython.install.cli.instal"..., 155ipa.ipapython.install.cli.install_tool(Replica): ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information ) = 155 close(3) = 0 rt_sigaction(SIGINT, {SIG_DFL, [], SA_RESTORER, 0x7f6ed4ddd390}, {0x53d9d0, [], SA_RESTORER, 0x7f6ed4ddd390}, 8) = 0 rt_sigaction(SIGTERM, {SIG_DFL, [], SA_RESTORER, 0x7f6ed4ddd390}, {0x53d9d0, [], SA_RESTORER, 0x7f6ed4ddd390}, 8) = 0 munmap(0x7f6ebd3f7000, 262144) = 0 munmap(0x7f6ebd377000, 262144) = 0 munmap(0x7f6ebd1f7000, 262144) = 0 munmap(0x7f6ebd337000, 262144) = 0 munmap(0x7f6ebd237000, 262144) = 0 munmap(0x7f6ebd4e2000, 262144) = 0 close(8) = 0 exit_group(1) = ? +++ exited with 1 +++ What do I need to do? _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
