> It is timing out with SSSD trying to get a Kerberos ticket for itself.
>
> (2022-10-19 10:18:43): [be[example.com]] [sdap_kinit_done] (0x0080):
> Communication with KDC timed out, trying the next one
>
> What method of enrollment are you using, a one-time password or a
> Kerberos principal?
The installation is done with username/password
>
> Can you share the full /var/log/ipaclient-install.log?
Here is the complete log:
2022-10-19T19:47:55Z DEBUG Logging to /var/log/ipaclient-install.log
2022-10-19T19:47:55Z DEBUG ipa-client-install was invoked with arguments [] and
options: {'no_dns_sshfp': False, 'force': False, 'verbose': False,
'ip_addresses': None, 'configure_firefox': False, 'realm_name': 'EXAMPLE.COM',
'force_ntpd': False, 'on_master': False, 'no_nisdomain': False,
'ssh_trust_dns': False, 'principal': 'username', 'keytab': None, 'no_ntp':
True, 'domain_name': 'example.com', 'request_cert': False, 'fixed_primary':
False, 'no_ac': False, 'no_sudo': False, 'ca_cert_files': None,
'all_ip_addresses': False, 'kinit_attempts': None, 'ntp_servers': None,
'enable_dns_updates': False, 'no_sshd': False, 'no_sssd': False,
'no_krb5_offline_passwords': False, 'servers': None, 'no_ssh': False,
'force_join': True, 'firefox_dir': None, 'unattended': True, 'quiet': False,
'nisdomain': None, 'prompt_password': False, 'host_name': 'newclient.test.com',
'permit': False, 'automount_location': None, 'preserve_sssd': False,
'mkhomedir': True, 'log_file': None, 'uninstall': False}
2022-10-19T19:47:55Z DEBUG IPA version 4.6.8-5.el7_9.10.cloudlinux
2022-10-19T19:47:55Z DEBUG Loading Index file from
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2022-10-19T19:47:55Z DEBUG Starting external process
2022-10-19T19:47:55Z DEBUG args=/usr/sbin/selinuxenabled
2022-10-19T19:47:55Z DEBUG Process finished, return code=1
2022-10-19T19:47:55Z DEBUG stdout=
2022-10-19T19:47:55Z DEBUG stderr=
2022-10-19T19:47:55Z DEBUG [IPA Discovery]
2022-10-19T19:47:55Z DEBUG Starting IPA discovery with domain=example.com,
servers=None, hostname=newclient.test.com
2022-10-19T19:47:55Z DEBUG Search for LDAP SRV record in example.com
2022-10-19T19:47:55Z DEBUG Search DNS for SRV record of _ldap._tcp.example.com
2022-10-19T19:47:55Z DEBUG DNS record found: 0 100 389 freeipa1.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 0 100 389 freeipa2.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 0 0 389 freeipa4.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 0 100 389 freeipa3.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa6.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa12.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa11.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa7.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa9.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa6.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa8.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa5.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa10.example.com.
2022-10-19T19:47:55Z DEBUG [Kerberos realm search]
2022-10-19T19:47:55Z DEBUG Kerberos realm forced
2022-10-19T19:47:55Z DEBUG Search DNS for SRV record of
_kerberos._udp.example.com
2022-10-19T19:47:55Z DEBUG DNS record found: 0 100 88 freeipa1.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 0 100 88 freeipa2.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 0 100 88 freeipa3.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 0 0 88 freeipa4.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 88 freeipa8.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 88 freeipa9.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 88 freeipa12.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 88 freeipa6.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 88 freeipa5.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 88 freeipa11.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 88 freeipa6.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 88 freeipa10.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 88 freeipa7.example.com.
2022-10-19T19:47:55Z DEBUG [LDAP server check]
2022-10-19T19:47:55Z DEBUG Verifying that freeipa1.example.com (realm
EXAMPLE.COM) is an IPA server
2022-10-19T19:47:55Z DEBUG Init LDAP connection to:
ldap://freeipa1.example.com:389
2022-10-19T19:47:55Z DEBUG Search LDAP server for IPA base DN
2022-10-19T19:47:55Z DEBUG Check if naming context 'dc=example,dc=com' is for
IPA
2022-10-19T19:47:55Z DEBUG LDAP Error: Anonymous access not allowed
2022-10-19T19:47:55Z DEBUG Generated basedn from realm: dc=example,dc=com
2022-10-19T19:47:55Z DEBUG Discovery result: NO_ACCESS_TO_LDAP; server=None,
domain=example.com,
kdc=freeipa1.example.com,freeipa2.example.com,freeipa3.example.com,freeipa4.example.com,freeipa8.example.com,freeipa9.example.com,freeipa12.example.com,freeipa6.example.com,freeipa5.example.com,freeipa11.example.com,freeipa6.example.com,freeipa10.example.com,freeipa7.example.com,
basedn=dc=example,dc=com
2022-10-19T19:47:55Z DEBUG Validated servers: freeipa1.example.com
2022-10-19T19:47:55Z DEBUG will use discovered domain: example.com
2022-10-19T19:47:55Z DEBUG Start searching for LDAP SRV record in "example.com"
(Validating DNS Discovery) and its sub-domains
2022-10-19T19:47:55Z DEBUG Search DNS for SRV record of _ldap._tcp.example.com
2022-10-19T19:47:55Z DEBUG DNS record found: 0 100 389 freeipa2.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 0 100 389 freeipa1.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 0 100 389 freeipa3.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 0 0 389 freeipa4.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa5.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa6.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa6.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa7.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa8.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa9.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa10.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa11.example.com.
2022-10-19T19:47:55Z DEBUG DNS record found: 50 100 389 freeipa12.example.com.
2022-10-19T19:47:55Z DEBUG DNS validated, enabling discovery
2022-10-19T19:47:55Z DEBUG will use discovered server: freeipa1.example.com
2022-10-19T19:47:55Z INFO Discovery was successful!
2022-10-19T19:47:55Z DEBUG will use discovered realm: EXAMPLE.COM
2022-10-19T19:47:55Z DEBUG will use discovered basedn: dc=example,dc=com
2022-10-19T19:47:55Z INFO Client hostname: newclient.test.com
2022-10-19T19:47:55Z DEBUG Hostname source: Provided as option
2022-10-19T19:47:55Z INFO Realm: EXAMPLE.COM
2022-10-19T19:47:55Z DEBUG Realm source: Forced
2022-10-19T19:47:55Z INFO DNS Domain: example.com
2022-10-19T19:47:55Z DEBUG DNS Domain source: Discovered LDAP SRV records from
example.com
2022-10-19T19:47:55Z INFO IPA Server: freeipa1.example.com
2022-10-19T19:47:55Z DEBUG IPA Server source: Discovered LDAP SRV records from
example.com
2022-10-19T19:47:55Z INFO BaseDN: dc=example,dc=com
2022-10-19T19:47:55Z DEBUG BaseDN source: Generated from Kerberos realm
2022-10-19T19:47:55Z DEBUG Loading Index file from
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2022-10-19T19:47:55Z DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:47:55Z DEBUG Starting external process
2022-10-19T19:47:55Z DEBUG args=/usr/sbin/ipa-rmkeytab -k /etc/krb5.keytab -r
EXAMPLE.COM
2022-10-19T19:47:55Z DEBUG Process finished, return code=3
2022-10-19T19:47:55Z DEBUG stdout=
2022-10-19T19:47:55Z DEBUG stderr=Failed to open keytab '/etc/krb5.keytab': No
such file or directory
2022-10-19T19:47:55Z DEBUG Backing up system configuration file '/etc/hostname'
2022-10-19T19:47:55Z DEBUG Saving Index File to
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2022-10-19T19:47:55Z DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:47:55Z DEBUG Saving StateFile to
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:47:55Z DEBUG Starting external process
2022-10-19T19:47:55Z DEBUG args=/bin/hostnamectl set-hostname newclient.test.com
2022-10-19T19:47:55Z DEBUG Process finished, return code=0
2022-10-19T19:47:55Z DEBUG stdout=
2022-10-19T19:47:55Z DEBUG stderr=
2022-10-19T19:47:55Z INFO Skipping synchronizing time with NTP server.
2022-10-19T19:47:55Z DEBUG Starting external process
2022-10-19T19:47:55Z DEBUG args=/usr/bin/keyctl get_persistent @s 0
2022-10-19T19:47:55Z DEBUG Process finished, return code=0
2022-10-19T19:47:55Z DEBUG stdout=635140192
2022-10-19T19:47:55Z DEBUG stderr=
2022-10-19T19:47:55Z DEBUG Enabling persistent keyring CCACHE
2022-10-19T19:47:55Z DEBUG Writing Kerberos configuration to /tmp/tmp0mQ2cE:
2022-10-19T19:47:55Z DEBUG #File modified by ipa-client-install
includedir /etc/krb5.conf.d/
includedir /var/lib/sss/pubconf/krb5.include.d/
[libdefaults]
default_realm = EXAMPLE.COM
dns_lookup_realm = false
dns_lookup_kdc = false
rdns = false
dns_canonicalize_hostname = false
ticket_lifetime = 24h
forwardable = true
udp_preference_limit = 0
default_ccache_name = KEYRING:persistent:%{uid}
[realms]
EXAMPLE.COM = {
kdc = freeipa1.example.com:88
master_kdc = freeipa1.example.com:88
admin_server = freeipa1.example.com:749
kpasswd_server = freeipa1.example.com:464
default_domain = example.com
pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem
pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem
}
[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM
newclient.test.com = EXAMPLE.COM
.test.com = EXAMPLE.COM
test.com = EXAMPLE.COM
2022-10-19T19:47:55Z DEBUG Initializing principal [email protected] using
password
2022-10-19T19:47:55Z DEBUG Starting external process
2022-10-19T19:47:55Z DEBUG args=/usr/bin/kinit [email protected] -c
/tmp/krbccSV5NrN/ccache
2022-10-19T19:47:57Z DEBUG Process finished, return code=0
2022-10-19T19:47:57Z DEBUG stdout=Password for [email protected]:
2022-10-19T19:47:57Z DEBUG stderr=
2022-10-19T19:47:57Z DEBUG trying to retrieve CA cert via LDAP from
freeipa1.example.com
2022-10-19T19:47:58Z DEBUG retrieving schema for SchemaCache
url=ldap://freeipa1.example.com:389 conn=<ldap.ldapobject.SimpleLDAPObject
instance at 0x7f5e6516d488>
2022-10-19T19:47:59Z INFO Successfully retrieved CA cert
Subject: CN=Certificate Authority,O=EXAMPLE.COM
Issuer: CN=Certificate Authority,O=EXAMPLE.COM
Valid From: 2020-12-04 02:53:05
Valid Until: 2040-12-04 02:53:05
2022-10-19T19:47:59Z DEBUG Starting external process
2022-10-19T19:47:59Z DEBUG args=/usr/sbin/ipa-join -s freeipa1.example.com -b
dc=example,dc=com -h newclient.test.com -f
2022-10-19T19:48:01Z DEBUG Process finished, return code=0
2022-10-19T19:48:01Z DEBUG stdout=
2022-10-19T19:48:01Z DEBUG stderr=Failed to parse result: Insufficient access
rights
Retrying with pre-4.0 keytab retrieval method...
Failed to retrieve encryption type Camellia-128 CTS mode with CMAC (#25)
Failed to retrieve encryption type Camellia-256 CTS mode with CMAC (#26)
Keytab successfully retrieved and stored in: /etc/krb5.keytab
Certificate subject base is: O=EXAMPLE.COM
2022-10-19T19:48:01Z INFO Enrolled in IPA realm EXAMPLE.COM
2022-10-19T19:48:01Z DEBUG Starting external process
2022-10-19T19:48:01Z DEBUG args=/usr/bin/kdestroy
2022-10-19T19:48:01Z DEBUG Process finished, return code=0
2022-10-19T19:48:01Z DEBUG stdout=
2022-10-19T19:48:01Z DEBUG stderr=
2022-10-19T19:48:01Z DEBUG Initializing principal
host/[email protected] using keytab /etc/krb5.keytab
2022-10-19T19:48:01Z DEBUG using ccache /etc/ipa/.dns_ccache
2022-10-19T19:48:03Z DEBUG Attempt 1/5: success
2022-10-19T19:48:03Z DEBUG Backing up system configuration file
'/etc/ipa/default.conf'
2022-10-19T19:48:03Z DEBUG -> Not backing up - '/etc/ipa/default.conf'
doesn't exist
2022-10-19T19:48:03Z INFO Created /etc/ipa/default.conf
2022-10-19T19:48:03Z DEBUG Backing up system configuration file
'/etc/sssd/sssd.conf'
2022-10-19T19:48:03Z DEBUG -> Not backing up - '/etc/sssd/sssd.conf' doesn't
exist
2022-10-19T19:48:03Z INFO New SSSD config will be created
2022-10-19T19:48:03Z DEBUG Backing up system configuration file
'/etc/nsswitch.conf'
2022-10-19T19:48:03Z DEBUG Saving Index File to
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2022-10-19T19:48:03Z INFO Configured sudoers in /etc/nsswitch.conf
2022-10-19T19:48:03Z INFO Configured /etc/sssd/sssd.conf
2022-10-19T19:48:03Z DEBUG Backing up system configuration file '/etc/krb5.conf'
2022-10-19T19:48:03Z DEBUG Saving Index File to
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2022-10-19T19:48:03Z DEBUG Starting external process
2022-10-19T19:48:03Z DEBUG args=/usr/bin/keyctl get_persistent @s 0
2022-10-19T19:48:03Z DEBUG Process finished, return code=0
2022-10-19T19:48:03Z DEBUG stdout=635140192
2022-10-19T19:48:03Z DEBUG stderr=
2022-10-19T19:48:03Z DEBUG Enabling persistent keyring CCACHE
2022-10-19T19:48:03Z DEBUG Writing Kerberos configuration to /etc/krb5.conf:
2022-10-19T19:48:03Z DEBUG #File modified by ipa-client-install
includedir /etc/krb5.conf.d/
includedir /var/lib/sss/pubconf/krb5.include.d/
[libdefaults]
default_realm = EXAMPLE.COM
dns_lookup_realm = true
dns_lookup_kdc = true
rdns = false
dns_canonicalize_hostname = false
ticket_lifetime = 24h
forwardable = true
udp_preference_limit = 0
default_ccache_name = KEYRING:persistent:%{uid}
[realms]
EXAMPLE.COM = {
pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem
pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem
}
[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM
newclient.test.com = EXAMPLE.COM
.test.com = EXAMPLE.COM
test.com = EXAMPLE.COM
2022-10-19T19:48:03Z INFO Configured /etc/krb5.conf for IPA realm EXAMPLE.COM
2022-10-19T19:48:03Z DEBUG Starting external process
2022-10-19T19:48:03Z DEBUG args=/usr/bin/certutil -d dbm:/tmp/tmpFPlEFc -N -f
/tmp/tmpFPlEFc/pwdfile.txt -f /tmp/tmpFPlEFc/pwdfile.txt
2022-10-19T19:48:03Z DEBUG Process finished, return code=0
2022-10-19T19:48:03Z DEBUG stdout=
2022-10-19T19:48:03Z DEBUG stderr=
2022-10-19T19:48:03Z DEBUG Starting external process
2022-10-19T19:48:03Z DEBUG args=/usr/bin/certutil -d dbm:/tmp/tmpFPlEFc -A -n
CA certificate 1 -t C,, -a -f /tmp/tmpFPlEFc/pwdfile.txt
2022-10-19T19:48:03Z DEBUG Process finished, return code=0
2022-10-19T19:48:03Z DEBUG stdout=
2022-10-19T19:48:03Z DEBUG stderr=
2022-10-19T19:48:03Z DEBUG failed to find session_cookie in persistent storage
for principal 'host/[email protected]'
2022-10-19T19:48:03Z INFO trying https://freeipa1.example.com/ipa/json
2022-10-19T19:48:03Z DEBUG New HTTP connection (freeipa1.example.com)
2022-10-19T19:48:16Z DEBUG received Set-Cookie (<type
'list'>)'['ipa_session=MagBearerToken=7%2bTd9OYLyPZ1zZKMFIB4T8lJR1uqCABezRvzis2yjbA2a0Jha%2b4aoYsVkt7fIE1%2fvQN%2bFDnW65O2lKY3JOhXre6Gc6mv7Nu9Aev7PXy%2f2ub4ILaXa%2fC0eQeL8jifc%2f3Zhb8dtDBnAGqQ0ih76K5kY8xZn1qMmgId4pkJvDBBO%2fXojYFGe3zGqhxoJ8U4i5L6Az6KhUe87Kv0si78%2bqtFT9XuRyCpeGtMDIqHoJvJBYaEF%2fc9c8lwsVUtTb6DzLzMUNURsXCcLqkN6FeRWPIFZA%3d%3d;path=/ipa;httponly;secure;']'
2022-10-19T19:48:16Z DEBUG storing cookie
'ipa_session=MagBearerToken=7%2bTd9OYLyPZ1zZKMFIB4T8lJR1uqCABezRvzis2yjbA2a0Jha%2b4aoYsVkt7fIE1%2fvQN%2bFDnW65O2lKY3JOhXre6Gc6mv7Nu9Aev7PXy%2f2ub4ILaXa%2fC0eQeL8jifc%2f3Zhb8dtDBnAGqQ0ih76K5kY8xZn1qMmgId4pkJvDBBO%2fXojYFGe3zGqhxoJ8U4i5L6Az6KhUe87Kv0si78%2bqtFT9XuRyCpeGtMDIqHoJvJBYaEF%2fc9c8lwsVUtTb6DzLzMUNURsXCcLqkN6FeRWPIFZA%3d%3d;'
for principal host/[email protected]
2022-10-19T19:48:16Z DEBUG Created connection context.rpcclient_140043379415120
2022-10-19T19:48:16Z INFO [try 1]: Forwarding 'schema' to json server
'https://freeipa1.example.com/ipa/json'
2022-10-19T19:48:16Z DEBUG HTTP connection keep-alive (freeipa1.example.com)
2022-10-19T19:48:17Z DEBUG received Set-Cookie (<type
'list'>)'['ipa_session=MagBearerToken=2iLTCkPdIpYJbpa0xvbbTZjbKVvZjnxKU5b6t8xR6WQab0pMxiU9koCjmUrlb8MvJGz6o0g7vaYKA1%2fgmlfp6W7cGbhAfJdmYm%2bUV2rQht5svbj%2fH%2bR00F6YUBuDzxRMXIUa9GXPOzkrQrxU1eHmUwJNeb%2fkK6%2f5Frq645PRRoqbG41UOQ1iTij1tEc2njnrDzv7H%2fG6srtjIOQSA1e9AmKssVIldtTZVVpX7DYGghsat9lGeynfjXv1n34%2f1QR1p7w30lqm6stRR3VR5oKgMw%3d%3d;path=/ipa;httponly;secure;']'
2022-10-19T19:48:17Z DEBUG storing cookie
'ipa_session=MagBearerToken=2iLTCkPdIpYJbpa0xvbbTZjbKVvZjnxKU5b6t8xR6WQab0pMxiU9koCjmUrlb8MvJGz6o0g7vaYKA1%2fgmlfp6W7cGbhAfJdmYm%2bUV2rQht5svbj%2fH%2bR00F6YUBuDzxRMXIUa9GXPOzkrQrxU1eHmUwJNeb%2fkK6%2f5Frq645PRRoqbG41UOQ1iTij1tEc2njnrDzv7H%2fG6srtjIOQSA1e9AmKssVIldtTZVVpX7DYGghsat9lGeynfjXv1n34%2f1QR1p7w30lqm6stRR3VR5oKgMw%3d%3d;'
for principal host/[email protected]
2022-10-19T19:48:17Z DEBUG Destroyed connection
context.rpcclient_140043379415120
2022-10-19T19:48:17Z DEBUG importing all plugin modules in
ipaclient.remote_plugins.schema$eee8903e...
2022-10-19T19:48:17Z DEBUG importing plugin module
ipaclient.remote_plugins.schema$eee8903e.plugins
2022-10-19T19:48:17Z DEBUG importing all plugin modules in ipaclient.plugins...
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.automember
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.automount
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.ca
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.cert
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.certmap
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.certprofile
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.csrgen
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.dns
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.hbacrule
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.hbactest
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.host
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.idrange
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.internal
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.location
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.migration
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.misc
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.otptoken
2022-10-19T19:48:17Z DEBUG importing plugin module
ipaclient.plugins.otptoken_yubikey
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.passwd
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.permission
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.rpcclient
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.server
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.service
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.sudorule
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.topology
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.trust
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.user
2022-10-19T19:48:17Z DEBUG importing plugin module ipaclient.plugins.vault
2022-10-19T19:48:18Z DEBUG found session_cookie in persistent storage for
principal 'host/[email protected]', cookie:
'ipa_session=MagBearerToken=2iLTCkPdIpYJbpa0xvbbTZjbKVvZjnxKU5b6t8xR6WQab0pMxiU9koCjmUrlb8MvJGz6o0g7vaYKA1%2fgmlfp6W7cGbhAfJdmYm%2bUV2rQht5svbj%2fH%2bR00F6YUBuDzxRMXIUa9GXPOzkrQrxU1eHmUwJNeb%2fkK6%2f5Frq645PRRoqbG41UOQ1iTij1tEc2njnrDzv7H%2fG6srtjIOQSA1e9AmKssVIldtTZVVpX7DYGghsat9lGeynfjXv1n34%2f1QR1p7w30lqm6stRR3VR5oKgMw%3d%3d'
2022-10-19T19:48:18Z DEBUG setting session_cookie into context
'ipa_session=MagBearerToken=2iLTCkPdIpYJbpa0xvbbTZjbKVvZjnxKU5b6t8xR6WQab0pMxiU9koCjmUrlb8MvJGz6o0g7vaYKA1%2fgmlfp6W7cGbhAfJdmYm%2bUV2rQht5svbj%2fH%2bR00F6YUBuDzxRMXIUa9GXPOzkrQrxU1eHmUwJNeb%2fkK6%2f5Frq645PRRoqbG41UOQ1iTij1tEc2njnrDzv7H%2fG6srtjIOQSA1e9AmKssVIldtTZVVpX7DYGghsat9lGeynfjXv1n34%2f1QR1p7w30lqm6stRR3VR5oKgMw%3d%3d;'
2022-10-19T19:48:18Z INFO trying https://freeipa1.example.com/ipa/session/json
2022-10-19T19:48:18Z DEBUG New HTTP connection (freeipa1.example.com)
2022-10-19T19:48:18Z DEBUG received Set-Cookie (<type 'list'>)'[]'
2022-10-19T19:48:18Z DEBUG Created connection context.rpcclient_140043347728208
2022-10-19T19:48:18Z DEBUG Try RPC connection
2022-10-19T19:48:18Z INFO [try 1]: Forwarding 'ping' to json server
'https://freeipa1.example.com/ipa/session/json'
2022-10-19T19:48:18Z DEBUG HTTP connection keep-alive (freeipa1.example.com)
2022-10-19T19:48:18Z DEBUG received Set-Cookie (<type 'list'>)'[]'
2022-10-19T19:48:18Z INFO [try 1]: Forwarding 'ca_is_enabled' to json server
'https://freeipa1.example.com/ipa/session/json'
2022-10-19T19:48:18Z DEBUG HTTP connection keep-alive (freeipa1.example.com)
2022-10-19T19:48:18Z DEBUG received Set-Cookie (<type 'list'>)'[]'
2022-10-19T19:48:18Z DEBUG Starting external process
2022-10-19T19:48:18Z DEBUG args=/usr/bin/certutil -d dbm:/etc/ipa/nssdb -N -f
/etc/ipa/nssdb/pwdfile.txt -f /etc/ipa/nssdb/pwdfile.txt
2022-10-19T19:48:18Z DEBUG Process finished, return code=0
2022-10-19T19:48:18Z DEBUG stdout=
2022-10-19T19:48:18Z DEBUG stderr=
2022-10-19T19:48:31Z DEBUG Adding CA certificates to the IPA NSS database.
2022-10-19T19:48:31Z DEBUG Starting external process
2022-10-19T19:48:31Z DEBUG args=/usr/bin/certutil -d dbm:/etc/ipa/nssdb -A -n
EXAMPLE.COM IPA CA -t CT,C,C -a -f /etc/ipa/nssdb/pwdfile.txt
2022-10-19T19:48:31Z DEBUG Process finished, return code=0
2022-10-19T19:48:31Z DEBUG stdout=
2022-10-19T19:48:31Z DEBUG stderr=
2022-10-19T19:48:31Z DEBUG Starting external process
2022-10-19T19:48:31Z DEBUG args=/usr/bin/update-ca-trust
2022-10-19T19:48:33Z DEBUG Process finished, return code=0
2022-10-19T19:48:33Z DEBUG stdout=
2022-10-19T19:48:33Z DEBUG stderr=
2022-10-19T19:48:33Z INFO Systemwide CA database updated.
2022-10-19T19:48:33Z DEBUG found 1 A records for newclient.test.com.:
66.198.240.41
2022-10-19T19:48:33Z DEBUG
2022-10-19T19:48:33Z INFO Adding SSH public key from
/etc/ssh/ssh_host_ed25519_key.pub
2022-10-19T19:48:33Z INFO Adding SSH public key from
/etc/ssh/ssh_host_rsa_key.pub
2022-10-19T19:48:33Z INFO Adding SSH public key from
/etc/ssh/ssh_host_ecdsa_key.pub
2022-10-19T19:48:33Z INFO [try 1]: Forwarding 'host_mod' to json server
'https://freeipa1.example.com/ipa/session/json'
2022-10-19T19:48:33Z DEBUG HTTP connection keep-alive (freeipa1.example.com)
2022-10-19T19:48:33Z DEBUG received Set-Cookie (<type 'list'>)'[]'
2022-10-19T19:48:33Z DEBUG Writing nsupdate commands to
/etc/ipa/.dns_update.txt:
2022-10-19T19:48:33Z DEBUG debug
update delete newclient.test.com. IN SSHFP
show
send
update add newclient.test.com. 1200 IN SSHFP 4 1
DB9876964708C2B53ECA1BF55C9C7F5CB2279EBD
update add newclient.test.com. 1200 IN SSHFP 4 2
0F015485F8355C7AC3BD125B2C1834C3EB893D9B714A1FA7F00DA10E4CE3ED84
update add newclient.test.com. 1200 IN SSHFP 1 1
4BF9A8AA4D04BC1F181EF08AF36C97E911A4703E
update add newclient.test.com. 1200 IN SSHFP 1 2
CC312C6FE9E9B29411F21C501866CE3CD46BA63A3418E3ED14A05840211F9CFF
update add newclient.test.com. 1200 IN SSHFP 3 1
51D349ADAE18611DB476FC7BBCE6845FC2245015
update add newclient.test.com. 1200 IN SSHFP 3 2
49D26AEF326E7FF99A72533FEEA3BE3EC7F2018BC81C5CF1D7C6BEC8ABE40C8E
show
send
2022-10-19T19:48:33Z DEBUG Starting external process
2022-10-19T19:48:33Z DEBUG args=/usr/bin/nsupdate -g /etc/ipa/.dns_update.txt
2022-10-19T19:49:26Z DEBUG Process finished, return code=2
2022-10-19T19:49:26Z DEBUG stdout=Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
newclient.test.com. 0 ANY SSHFP
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
newclient.test.com. 1200 IN SSHFP 4 1
DB9876964708C2B53ECA1BF55C9C7F5CB2279EBD
newclient.test.com. 1200 IN SSHFP 4 2
0F015485F8355C7AC3BD125B2C1834C3EB893D9B714A1FA7F00DA10E 4CE3ED84
newclient.test.com. 1200 IN SSHFP 1 1
4BF9A8AA4D04BC1F181EF08AF36C97E911A4703E
newclient.test.com. 1200 IN SSHFP 1 2
CC312C6FE9E9B29411F21C501866CE3CD46BA63A3418E3ED14A05840 211F9CFF
newclient.test.com. 1200 IN SSHFP 3 1
51D349ADAE18611DB476FC7BBCE6845FC2245015
newclient.test.com. 1200 IN SSHFP 3 2
49D26AEF326E7FF99A72533FEEA3BE3EC7F2018BC81C5CF1D7C6BEC8 ABE40C8E
2022-10-19T19:49:26Z DEBUG stderr=Reply from SOA query:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11795
;; flags: qr rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;newclient.test.com. IN SOA
;; AUTHORITY SECTION:
test.com. 60 IN SOA dns.test.com. staff.test.com.
2022072754 3600 3600 3600 3600
Found zone name: test.com
The master is: dns.test.com
start_gssrequest
Found realm from ticket: EXAMPLE.COM
tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code
may provide more information, Minor = Server DNS/[email protected] not
found in Kerberos database.
Reply from SOA query:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2558
;; flags: qr rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;newclient.test.com. IN SOA
;; AUTHORITY SECTION:
test.com. 34 IN SOA dns.test.com. staff.test.com.
2022072754 3600 3600 3600 3600
Found zone name: test.com
The master is: dns.test.com
start_gssrequest
tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code
may provide more information, Minor = Server DNS/[email protected] not
found in Kerberos database.
2022-10-19T19:49:26Z DEBUG nsupdate failed: Command '/usr/bin/nsupdate -g
/etc/ipa/.dns_update.txt' returned non-zero exit status 2
2022-10-19T19:49:26Z WARNING Could not update DNS SSHFP records.
2022-10-19T19:49:26Z DEBUG Starting external process
2022-10-19T19:49:26Z DEBUG args=/bin/systemctl list-unit-files --full
2022-10-19T19:49:26Z DEBUG Process finished, return code=0
2022-10-19T19:49:26Z DEBUG stdout=UNIT FILE
STATE
proc-sys-fs-binfmt_misc.automount static
dev-hugepages.mount static
dev-mqueue.mount static
proc-fs-nfsd.mount static
proc-sys-fs-binfmt_misc.mount static
sys-fs-fuse-connections.mount static
sys-kernel-config.mount static
sys-kernel-debug.mount static
tmp.mount disabled
var-lib-nfs-rpc_pipefs.mount static
var-lve-dbgovernor\x2dshm.mount enabled
brandbot.path disabled
systemd-ask-password-console.path static
systemd-ask-password-plymouth.path static
systemd-ask-password-wall.path static
session-c46446.scope static
session-c46494.scope static
session-c46504.scope static
session-c46505.scope static
aibolit-resident.service enabled
alt-php-internal-fpm.service disabled
alt-php53-fpm.service disabled
alt-php54-fpm.service disabled
alt-php55-fpm.service disabled
alt-php56-fpm.service disabled
alt-php70-fpm.service disabled
alt-php70-newrelic-daemon.service disabled
alt-php71-fpm.service disabled
alt-php71-newrelic-daemon.service disabled
alt-php72-fpm.service disabled
alt-php72-newrelic-daemon.service disabled
alt-php73-fpm.service disabled
alt-php73-newrelic-daemon.service disabled
alt-php74-fpm.service disabled
alt-php74-newrelic-daemon.service disabled
alt-php80-fpm.service disabled
alt-php80-newrelic-daemon.service disabled
alt-php81-fpm.service disabled
alt-php81-newrelic-daemon.service disabled
alt-redis-sentinel.service disabled
alt-redis.service disabled
apache_php_fpm.service static
arp-ethers.service disabled
atd.service enabled
atop-rotate.service static
atop.service disabled
atopacct.service disabled
auditd.service enabled
auth-rpcgss-module.service static
autofs.service disabled
[email protected] enabled
blk-availability.service disabled
brandbot.service static
cagefs.service enabled
certmonger.service disabled
[email protected] static
cl_wmt_scanner.service disabled
clamd.service enabled
cloudlinux-file-change-collector.service enabled
console-getty.service disabled
console-shell.service disabled
[email protected] static
cpanalyticsd.service disabled
cpanel.service enabled
cpanel_php_fpm.service disabled
cpanellogd.service disabled
cpanelquotaonboot.service enabled
cpcleartaskqueue.service static
cpdavd.service disabled
cpgreylistd.service disabled
cphulkd.service disabled
cpipv6.service enabled
cpupower.service disabled
criu.service disabled
crond.service enabled
[email protected] static
db_governor.service enabled
dbus-org.freedesktop.hostname1.service static
dbus-org.freedesktop.import1.service static
dbus-org.freedesktop.locale1.service static
dbus-org.freedesktop.login1.service static
dbus-org.freedesktop.machine1.service static
dbus-org.freedesktop.timedate1.service static
dbus.service static
debug-shell.service disabled
dnsadmin.service disabled
dovecot.service enabled
dracut-cmdline.service static
dracut-initqueue.service static
dracut-mount.service static
dracut-pre-mount.service static
dracut-pre-pivot.service static
dracut-pre-trigger.service static
dracut-pre-udev.service static
dracut-shutdown.service static
ea-php74-php-fpm.service disabled
ebtables.service disabled
emergency.service static
exim.service enabled
fastmail.service enabled
firebird-superserver.service disabled
firewalld.service disabled
fstrim.service static
garb.service disabled
[email protected] enabled
gssproxy.service disabled
halt-local.service static
htcacheclean.service static
httpd.service enabled
imunify-auditd-log-reader.service disabled
imunify-notifier.service enabled
imunify-realtime-av-fchange-installer.service static
imunify-realtime-av.service disabled
imunify360-pam.service enabled
imunify360-php-daemon.service enabled
imunify360-pure.service disabled
imunify360-unified-access-logger.service disabled
imunify360-wafd.service enabled
imunify360-webshield-ssl-cache.service disabled
imunify360-webshield.service enabled
imunify360.service enabled
initrd-cleanup.service static
initrd-parse-etc.service static
initrd-switch-root.service static
initrd-udevadm-cleanup-db.service static
ipaliases.service enabled
ipmi.service disabled
ipmievd.service disabled
iprdump.service disabled
iprinit.service disabled
iprupdate.service disabled
irqbalance.service enabled
kdump.service enabled
kernel-triggers.service enabled
kmod-static-nodes.service static
libcare.service static
lsapi-cache.service enabled
lshttpd.service enabled
lsws.service enabled
lve.service enabled
lve_namespaces.service enabled
lvectl.service enabled
lvemanager.service disabled
lvestats.service enabled
mailman.service enabled
mariadb.service enabled
[email protected] disabled
[email protected] static
[email protected] static
mdcheck_continue.service static
mdcheck_start.service static
[email protected] static
mdmonitor-oneshot.service static
mdmonitor.service enabled
messagebus.service static
microcode.service enabled
mysql.service enabled
mysqld.service enabled
named-setup-rndc.service static
named.service enabled
nfs-blkmap.service disabled
nfs-config.service static
nfs-idmap.service static
nfs-idmapd.service static
nfs-lock.service static
nfs-mountd.service static
nfs-rquotad.service disabled
nfs-secure.service static
nfs-server.service disabled
nfs-utils.service static
nfs.service disabled
nfslock.service static
nscd.service enabled
nslcd.service enabled
ntpd.service enabled
ntpdate.service disabled
oddjobd.service enabled
osqueryd.service enabled
ossec-hids-authd.service disabled
ossec-hids-hybrid.service disabled
ossec-hids.service disabled
p0f.service disabled
plymouth-halt.service disabled
plymouth-kexec.service disabled
plymouth-poweroff.service disabled
plymouth-quit-wait.service disabled
plymouth-quit.service disabled
plymouth-read-write.service disabled
plymouth-reboot.service disabled
plymouth-start.service disabled
plymouth-switch-root.service static
polkit.service static
postgresql-9.6.service enabled
postgresql.service enabled
postgresql9.service disabled
proxyexecd.service enabled
pure-authd.service enabled
pure-ftpd.service enabled
queueprocd.service disabled
quotaon.service static
rc-local.service static
rdisc.service disabled
rescue.service static
rhel-autorelabel-mark.service enabled
rhel-autorelabel.service enabled
rhel-configure.service enabled
rhel-dmesg.service enabled
rhel-domainname.service disabled
rhel-import-state.service enabled
rhel-loadmodules.service enabled
rhel-readonly.service enabled
rpc-gssd.service static
rpc-rquotad.service disabled
rpc-statd-notify.service static
rpc-statd.service static
rpcbind.service enabled
rpcgssd.service static
rpcidmapd.service static
rsyncd.service disabled
[email protected] static
rsyslog.service enabled
salt-minion.service enabled
[email protected] disabled
saslauthd.service disabled
securetmp.service enabled
[email protected] static
[email protected] disabled
smartd.service enabled
smtpmailgidonly.service disabled
spamd.service enabled
ssa-agent.service enabled
sshd-keygen.service static
sshd.service enabled
[email protected] static
sssd-autofs.service indirect
sssd-ifp.service static
sssd-nss.service indirect
sssd-pac.service indirect
sssd-pam.service indirect
sssd-secrets.service indirect
sssd-ssh.service indirect
sssd-sudo.service indirect
sssd.service disabled
svnserve.service disabled
sw-engine.service enabled
sysstat.service enabled
systemd-ask-password-console.service static
systemd-ask-password-plymouth.service static
systemd-ask-password-wall.service static
[email protected] static
systemd-binfmt.service static
systemd-bootchart.service disabled
systemd-firstboot.service static
systemd-fsck-root.service static
[email protected] static
systemd-halt.service static
[email protected] static
systemd-hibernate.service static
systemd-hostnamed.service static
systemd-hwdb-update.service static
systemd-hybrid-sleep.service static
systemd-importd.service static
systemd-initctl.service static
systemd-journal-catalog-update.service static
systemd-journal-flush.service static
systemd-journald.service static
systemd-kexec.service static
systemd-localed.service static
systemd-logind.service static
systemd-machine-id-commit.service static
systemd-machined.service static
systemd-modules-load.service static
[email protected] disabled
systemd-poweroff.service static
systemd-quotacheck.service static
systemd-random-seed.service static
systemd-readahead-collect.service enabled
systemd-readahead-done.service indirect
systemd-readahead-drop.service enabled
systemd-readahead-replay.service enabled
systemd-reboot.service static
systemd-remount-fs.service static
[email protected] static
systemd-shutdownd.service static
systemd-suspend.service static
systemd-sysctl.service static
systemd-timedated.service static
systemd-tmpfiles-clean.service static
systemd-tmpfiles-setup-dev.service static
systemd-tmpfiles-setup.service static
systemd-udev-settle.service static
systemd-udev-trigger.service static
systemd-udevd.service static
systemd-update-done.service static
systemd-update-utmp-runlevel.service static
systemd-update-utmp.service static
systemd-user-sessions.service static
systemd-vconsole-setup.service static
tailwatchd.service disabled
tcsd.service disabled
tuned.service enabled
wazuh-agent.service enabled
wp-toolkit-background-tasks.service enabled
wp-toolkit-scheduled-tasks.service enabled
xinetd.service enabled
yum-cron.service enabled
-.slice static
machine.slice static
system.slice static
user-0.slice static
user-10016.slice static
user.slice static
aibolit-resident.socket enabled
check_mk.socket disabled
criu.socket disabled
cvs.socket disabled
dbus.socket static
imunify-notifier.socket enabled
imunify360-php-daemon.socket enabled
libcare.socket enabled
nscd.socket enabled
rpcbind.socket enabled
rsyncd.socket disabled
ssa-agent.socket disabled
sshd.socket disabled
sssd-autofs.socket disabled
sssd-nss.socket disabled
sssd-pac.socket disabled
sssd-pam-priv.socket disabled
sssd-pam.socket disabled
sssd-secrets.socket disabled
sssd-ssh.socket disabled
sssd-sudo.socket disabled
syslog.socket static
systemd-initctl.socket static
systemd-journald.socket static
systemd-shutdownd.socket static
systemd-udevd-control.socket static
systemd-udevd-kernel.socket static
basic.target static
bluetooth.target static
cryptsetup-pre.target static
cryptsetup.target static
ctrl-alt-del.target disabled
cvs.target static
default.target enabled
emergency.target static
final.target static
getty-pre.target static
getty.target static
graphical.target static
halt.target disabled
hibernate.target static
hybrid-sleep.target static
initrd-fs.target static
initrd-root-fs.target static
initrd-switch-root.target static
initrd.target static
iprutils.target disabled
kexec.target disabled
local-fs-pre.target static
local-fs.target static
machines.target disabled
multi-user.target enabled
network-online.target static
network-pre.target static
network.target static
nfs-client.target enabled
nss-lookup.target static
nss-user-lookup.target static
paths.target static
poweroff.target disabled
printer.target static
reboot.target disabled
remote-cryptsetup.target disabled
remote-fs-pre.target static
remote-fs.target enabled
rescue.target disabled
rpc_pipefs.target static
rpcbind.target static
runlevel0.target disabled
runlevel1.target disabled
runlevel2.target enabled
runlevel3.target enabled
runlevel4.target enabled
runlevel5.target static
runlevel6.target disabled
shutdown.target static
sigpwr.target static
sleep.target static
slices.target static
smartcard.target static
sockets.target static
sound.target static
suspend.target static
swap.target static
sysinit.target static
system-update.target static
time-sync.target static
timers.target static
umount.target static
atop-rotate.timer enabled
fstrim.timer disabled
[email protected] static
mdcheck_continue.timer disabled
mdcheck_start.timer disabled
mdmonitor-oneshot.timer disabled
systemd-readahead-done.timer indirect
systemd-tmpfiles-clean.timer static
409 unit files listed.
2022-10-19T19:49:26Z DEBUG stderr=
2022-10-19T19:49:26Z DEBUG Starting external process
2022-10-19T19:49:26Z DEBUG args=/bin/systemctl is-enabled nscd.service
2022-10-19T19:49:26Z DEBUG Process finished, return code=0
2022-10-19T19:49:26Z DEBUG stdout=enabled
2022-10-19T19:49:26Z DEBUG stderr=
2022-10-19T19:49:26Z DEBUG Starting external process
2022-10-19T19:49:26Z DEBUG args=/bin/systemctl is-active nscd.service
2022-10-19T19:49:26Z DEBUG Process finished, return code=0
2022-10-19T19:49:26Z DEBUG stdout=active
2022-10-19T19:49:26Z DEBUG stderr=
2022-10-19T19:49:26Z DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Saving StateFile to
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Saving StateFile to
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Starting external process
2022-10-19T19:49:26Z DEBUG args=/bin/systemctl stop nscd.service
2022-10-19T19:49:26Z DEBUG Process finished, return code=0
2022-10-19T19:49:26Z DEBUG stdout=
2022-10-19T19:49:26Z DEBUG stderr=Warning: Stopping nscd.service, but it can
still be activated by:
nscd.socket
2022-10-19T19:49:26Z DEBUG Stop of nscd.service complete
2022-10-19T19:49:26Z DEBUG Starting external process
2022-10-19T19:49:26Z DEBUG args=/bin/systemctl disable nscd.service
2022-10-19T19:49:26Z DEBUG Process finished, return code=0
2022-10-19T19:49:26Z DEBUG stdout=
2022-10-19T19:49:26Z DEBUG stderr=Removed symlink
/etc/systemd/system/multi-user.target.wants/nscd.service.
Removed symlink /etc/systemd/system/sockets.target.wants/nscd.socket.
2022-10-19T19:49:26Z DEBUG Starting external process
2022-10-19T19:49:26Z DEBUG args=/bin/systemctl list-unit-files --full
2022-10-19T19:49:26Z DEBUG Process finished, return code=0
2022-10-19T19:49:26Z DEBUG stdout=UNIT FILE
STATE
proc-sys-fs-binfmt_misc.automount static
dev-hugepages.mount static
dev-mqueue.mount static
proc-fs-nfsd.mount static
proc-sys-fs-binfmt_misc.mount static
sys-fs-fuse-connections.mount static
sys-kernel-config.mount static
sys-kernel-debug.mount static
tmp.mount disabled
var-lib-nfs-rpc_pipefs.mount static
var-lve-dbgovernor\x2dshm.mount enabled
brandbot.path disabled
systemd-ask-password-console.path static
systemd-ask-password-plymouth.path static
systemd-ask-password-wall.path static
session-c46446.scope static
session-c46494.scope static
session-c46504.scope static
session-c46505.scope static
aibolit-resident.service enabled
alt-php-internal-fpm.service disabled
alt-php53-fpm.service disabled
alt-php54-fpm.service disabled
alt-php55-fpm.service disabled
alt-php56-fpm.service disabled
alt-php70-fpm.service disabled
alt-php70-newrelic-daemon.service disabled
alt-php71-fpm.service disabled
alt-php71-newrelic-daemon.service disabled
alt-php72-fpm.service disabled
alt-php72-newrelic-daemon.service disabled
alt-php73-fpm.service disabled
alt-php73-newrelic-daemon.service disabled
alt-php74-fpm.service disabled
alt-php74-newrelic-daemon.service disabled
alt-php80-fpm.service disabled
alt-php80-newrelic-daemon.service disabled
alt-php81-fpm.service disabled
alt-php81-newrelic-daemon.service disabled
alt-redis-sentinel.service disabled
alt-redis.service disabled
apache_php_fpm.service static
arp-ethers.service disabled
atd.service enabled
atop-rotate.service static
atop.service disabled
atopacct.service disabled
auditd.service enabled
auth-rpcgss-module.service static
autofs.service disabled
[email protected] enabled
blk-availability.service disabled
brandbot.service static
cagefs.service enabled
certmonger.service disabled
[email protected] static
cl_wmt_scanner.service disabled
clamd.service enabled
cloudlinux-file-change-collector.service enabled
console-getty.service disabled
console-shell.service disabled
[email protected] static
cpanalyticsd.service disabled
cpanel.service enabled
cpanel_php_fpm.service disabled
cpanellogd.service disabled
cpanelquotaonboot.service enabled
cpcleartaskqueue.service static
cpdavd.service disabled
cpgreylistd.service disabled
cphulkd.service disabled
cpipv6.service enabled
cpupower.service disabled
criu.service disabled
crond.service enabled
[email protected] static
db_governor.service enabled
dbus-org.freedesktop.hostname1.service static
dbus-org.freedesktop.import1.service static
dbus-org.freedesktop.locale1.service static
dbus-org.freedesktop.login1.service static
dbus-org.freedesktop.machine1.service static
dbus-org.freedesktop.timedate1.service static
dbus.service static
debug-shell.service disabled
dnsadmin.service disabled
dovecot.service enabled
dracut-cmdline.service static
dracut-initqueue.service static
dracut-mount.service static
dracut-pre-mount.service static
dracut-pre-pivot.service static
dracut-pre-trigger.service static
dracut-pre-udev.service static
dracut-shutdown.service static
ea-php74-php-fpm.service disabled
ebtables.service disabled
emergency.service static
exim.service enabled
fastmail.service enabled
firebird-superserver.service disabled
firewalld.service disabled
fstrim.service static
garb.service disabled
[email protected] enabled
gssproxy.service disabled
halt-local.service static
htcacheclean.service static
httpd.service enabled
imunify-auditd-log-reader.service disabled
imunify-notifier.service enabled
imunify-realtime-av-fchange-installer.service static
imunify-realtime-av.service disabled
imunify360-pam.service enabled
imunify360-php-daemon.service enabled
imunify360-pure.service disabled
imunify360-unified-access-logger.service disabled
imunify360-wafd.service enabled
imunify360-webshield-ssl-cache.service disabled
imunify360-webshield.service enabled
imunify360.service enabled
initrd-cleanup.service static
initrd-parse-etc.service static
initrd-switch-root.service static
initrd-udevadm-cleanup-db.service static
ipaliases.service enabled
ipmi.service disabled
ipmievd.service disabled
iprdump.service disabled
iprinit.service disabled
iprupdate.service disabled
irqbalance.service enabled
kdump.service enabled
kernel-triggers.service enabled
kmod-static-nodes.service static
libcare.service static
lsapi-cache.service enabled
lshttpd.service enabled
lsws.service enabled
lve.service enabled
lve_namespaces.service enabled
lvectl.service enabled
lvemanager.service disabled
lvestats.service enabled
mailman.service enabled
mariadb.service enabled
[email protected] disabled
[email protected] static
[email protected] static
mdcheck_continue.service static
mdcheck_start.service static
[email protected] static
mdmonitor-oneshot.service static
mdmonitor.service enabled
messagebus.service static
microcode.service enabled
mysql.service enabled
mysqld.service enabled
named-setup-rndc.service static
named.service enabled
nfs-blkmap.service disabled
nfs-config.service static
nfs-idmap.service static
nfs-idmapd.service static
nfs-lock.service static
nfs-mountd.service static
nfs-rquotad.service disabled
nfs-secure.service static
nfs-server.service disabled
nfs-utils.service static
nfs.service disabled
nfslock.service static
nscd.service disabled
nslcd.service enabled
ntpd.service enabled
ntpdate.service disabled
oddjobd.service enabled
osqueryd.service enabled
ossec-hids-authd.service disabled
ossec-hids-hybrid.service disabled
ossec-hids.service disabled
p0f.service disabled
plymouth-halt.service disabled
plymouth-kexec.service disabled
plymouth-poweroff.service disabled
plymouth-quit-wait.service disabled
plymouth-quit.service disabled
plymouth-read-write.service disabled
plymouth-reboot.service disabled
plymouth-start.service disabled
plymouth-switch-root.service static
polkit.service static
postgresql-9.6.service enabled
postgresql.service enabled
postgresql9.service disabled
proxyexecd.service enabled
pure-authd.service enabled
pure-ftpd.service enabled
queueprocd.service disabled
quotaon.service static
rc-local.service static
rdisc.service disabled
rescue.service static
rhel-autorelabel-mark.service enabled
rhel-autorelabel.service enabled
rhel-configure.service enabled
rhel-dmesg.service enabled
rhel-domainname.service disabled
rhel-import-state.service enabled
rhel-loadmodules.service enabled
rhel-readonly.service enabled
rpc-gssd.service static
rpc-rquotad.service disabled
rpc-statd-notify.service static
rpc-statd.service static
rpcbind.service enabled
rpcgssd.service static
rpcidmapd.service static
rsyncd.service disabled
[email protected] static
rsyslog.service enabled
salt-minion.service enabled
[email protected] disabled
saslauthd.service disabled
securetmp.service enabled
[email protected] static
[email protected] disabled
smartd.service enabled
smtpmailgidonly.service disabled
spamd.service enabled
ssa-agent.service enabled
sshd-keygen.service static
sshd.service enabled
[email protected] static
sssd-autofs.service indirect
sssd-ifp.service static
sssd-nss.service indirect
sssd-pac.service indirect
sssd-pam.service indirect
sssd-secrets.service indirect
sssd-ssh.service indirect
sssd-sudo.service indirect
sssd.service disabled
svnserve.service disabled
sw-engine.service enabled
sysstat.service enabled
systemd-ask-password-console.service static
systemd-ask-password-plymouth.service static
systemd-ask-password-wall.service static
[email protected] static
systemd-binfmt.service static
systemd-bootchart.service disabled
systemd-firstboot.service static
systemd-fsck-root.service static
[email protected] static
systemd-halt.service static
[email protected] static
systemd-hibernate.service static
systemd-hostnamed.service static
systemd-hwdb-update.service static
systemd-hybrid-sleep.service static
systemd-importd.service static
systemd-initctl.service static
systemd-journal-catalog-update.service static
systemd-journal-flush.service static
systemd-journald.service static
systemd-kexec.service static
systemd-localed.service static
systemd-logind.service static
systemd-machine-id-commit.service static
systemd-machined.service static
systemd-modules-load.service static
[email protected] disabled
systemd-poweroff.service static
systemd-quotacheck.service static
systemd-random-seed.service static
systemd-readahead-collect.service enabled
systemd-readahead-done.service indirect
systemd-readahead-drop.service enabled
systemd-readahead-replay.service enabled
systemd-reboot.service static
systemd-remount-fs.service static
[email protected] static
systemd-shutdownd.service static
systemd-suspend.service static
systemd-sysctl.service static
systemd-timedated.service static
systemd-tmpfiles-clean.service static
systemd-tmpfiles-setup-dev.service static
systemd-tmpfiles-setup.service static
systemd-udev-settle.service static
systemd-udev-trigger.service static
systemd-udevd.service static
systemd-update-done.service static
systemd-update-utmp-runlevel.service static
systemd-update-utmp.service static
systemd-user-sessions.service static
systemd-vconsole-setup.service static
tailwatchd.service disabled
tcsd.service disabled
tuned.service enabled
wazuh-agent.service enabled
wp-toolkit-background-tasks.service enabled
wp-toolkit-scheduled-tasks.service enabled
xinetd.service enabled
yum-cron.service enabled
-.slice static
machine.slice static
system.slice static
user-0.slice static
user-10016.slice static
user.slice static
aibolit-resident.socket enabled
check_mk.socket disabled
criu.socket disabled
cvs.socket disabled
dbus.socket static
imunify-notifier.socket enabled
imunify360-php-daemon.socket enabled
libcare.socket enabled
nscd.socket disabled
rpcbind.socket enabled
rsyncd.socket disabled
ssa-agent.socket disabled
sshd.socket disabled
sssd-autofs.socket disabled
sssd-nss.socket disabled
sssd-pac.socket disabled
sssd-pam-priv.socket disabled
sssd-pam.socket disabled
sssd-secrets.socket disabled
sssd-ssh.socket disabled
sssd-sudo.socket disabled
syslog.socket static
systemd-initctl.socket static
systemd-journald.socket static
systemd-shutdownd.socket static
systemd-udevd-control.socket static
systemd-udevd-kernel.socket static
basic.target static
bluetooth.target static
cryptsetup-pre.target static
cryptsetup.target static
ctrl-alt-del.target disabled
cvs.target static
default.target enabled
emergency.target static
final.target static
getty-pre.target static
getty.target static
graphical.target static
halt.target disabled
hibernate.target static
hybrid-sleep.target static
initrd-fs.target static
initrd-root-fs.target static
initrd-switch-root.target static
initrd.target static
iprutils.target disabled
kexec.target disabled
local-fs-pre.target static
local-fs.target static
machines.target disabled
multi-user.target enabled
network-online.target static
network-pre.target static
network.target static
nfs-client.target enabled
nss-lookup.target static
nss-user-lookup.target static
paths.target static
poweroff.target disabled
printer.target static
reboot.target disabled
remote-cryptsetup.target disabled
remote-fs-pre.target static
remote-fs.target enabled
rescue.target disabled
rpc_pipefs.target static
rpcbind.target static
runlevel0.target disabled
runlevel1.target disabled
runlevel2.target enabled
runlevel3.target enabled
runlevel4.target enabled
runlevel5.target static
runlevel6.target disabled
shutdown.target static
sigpwr.target static
sleep.target static
slices.target static
smartcard.target static
sockets.target static
sound.target static
suspend.target static
swap.target static
sysinit.target static
system-update.target static
time-sync.target static
timers.target static
umount.target static
atop-rotate.timer enabled
fstrim.timer disabled
[email protected] static
mdcheck_continue.timer disabled
mdcheck_start.timer disabled
mdmonitor-oneshot.timer disabled
systemd-readahead-done.timer indirect
systemd-tmpfiles-clean.timer static
409 unit files listed.
2022-10-19T19:49:26Z DEBUG stderr=
2022-10-19T19:49:26Z DEBUG Starting external process
2022-10-19T19:49:26Z DEBUG args=/bin/systemctl is-enabled nslcd.service
2022-10-19T19:49:26Z DEBUG Process finished, return code=0
2022-10-19T19:49:26Z DEBUG stdout=enabled
2022-10-19T19:49:26Z DEBUG stderr=
2022-10-19T19:49:26Z DEBUG Starting external process
2022-10-19T19:49:26Z DEBUG args=/bin/systemctl is-active nslcd.service
2022-10-19T19:49:26Z DEBUG Process finished, return code=0
2022-10-19T19:49:26Z DEBUG stdout=active
2022-10-19T19:49:26Z DEBUG stderr=
2022-10-19T19:49:26Z DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Saving StateFile to
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Saving StateFile to
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Saving StateFile to
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Saving StateFile to
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Loading StateFile from
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Saving StateFile to
'/var/lib/ipa-client/sysrestore/sysrestore.state'
2022-10-19T19:49:26Z DEBUG Starting external process
2022-10-19T19:49:26Z DEBUG args=/usr/sbin/authconfig --enablesssdauth
--enablemkhomedir --update --enablesssd
2022-10-19T19:49:27Z DEBUG Process finished, return code=0
2022-10-19T19:49:27Z DEBUG stdout=
2022-10-19T19:49:27Z DEBUG stderr=getsebool: SELinux is disabled
2022-10-19T19:49:27Z INFO SSSD enabled
2022-10-19T19:49:27Z DEBUG Starting external process
2022-10-19T19:49:27Z DEBUG args=/bin/systemctl restart sssd.service
2022-10-19T19:49:27Z DEBUG Process finished, return code=0
2022-10-19T19:49:27Z DEBUG stdout=
2022-10-19T19:49:27Z DEBUG stderr=
2022-10-19T19:49:27Z DEBUG Starting external process
2022-10-19T19:49:27Z DEBUG args=/bin/systemctl is-active sssd.service
2022-10-19T19:49:27Z DEBUG Process finished, return code=0
2022-10-19T19:49:27Z DEBUG stdout=active
2022-10-19T19:49:27Z DEBUG stderr=
2022-10-19T19:49:27Z DEBUG Restart of sssd.service complete
2022-10-19T19:49:27Z DEBUG Starting external process
2022-10-19T19:49:27Z DEBUG args=/bin/systemctl enable sssd.service
2022-10-19T19:49:27Z DEBUG Process finished, return code=0
2022-10-19T19:49:27Z DEBUG stdout=
2022-10-19T19:49:27Z DEBUG stderr=
2022-10-19T19:49:27Z DEBUG Backing up system configuration file
'/etc/openldap/ldap.conf'
2022-10-19T19:49:27Z DEBUG Saving Index File to
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2022-10-19T19:49:27Z INFO Configured /etc/openldap/ldap.conf
2022-10-19T19:49:27Z DEBUG Starting external process
2022-10-19T19:49:27Z DEBUG args=/usr/bin/getent passwd [email protected]
2022-10-19T19:50:57Z DEBUG Process finished, return code=2
2022-10-19T19:50:57Z DEBUG stdout=
2022-10-19T19:50:57Z DEBUG stderr=
2022-10-19T19:50:58Z DEBUG Starting external process
2022-10-19T19:50:58Z DEBUG args=/usr/bin/getent passwd [email protected]
2022-10-19T19:51:35Z DEBUG Process interrupted
2022-10-19T19:51:35Z DEBUG File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 178, in execute
return_value = self.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 319,
in run
return cfgr.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 360,
in run
return self.execute()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 386,
in execute
for rval in self._executor():
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 431,
in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 460,
in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 450,
in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421,
in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 418,
in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81,
in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59,
in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 655,
in _configure
next(executor)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 431,
in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 460,
in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518,
in _handle_exception
self.__parent._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 450,
in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 515,
in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 450,
in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421,
in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 418,
in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81,
in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59,
in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 65,
in _install
for unused in self._installer(self.parent):
File "/usr/lib/python2.7/site-packages/ipaclient/install/client.py", line
3670, in main
install(self)
File "/usr/lib/python2.7/site-packages/ipaclient/install/client.py", line
2391, in install
_install(options)
File "/usr/lib/python2.7/site-packages/ipaclient/install/client.py", line
2967, in _install
ipautil.run([paths.GETENT, "passwd", user])
File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 511, in run
stdout, stderr = p.communicate(stdin)
File "/usr/lib64/python2.7/subprocess.py", line 800, in communicate
return self._communicate(input)
File "/usr/lib64/python2.7/subprocess.py", line 1401, in _communicate
stdout, stderr = self._communicate_with_poll(input)
File "/usr/lib64/python2.7/subprocess.py", line 1455, in
_communicate_with_poll
ready = poller.poll()
2022-10-19T19:51:35Z DEBUG The ipa-client-install command failed, exception:
KeyboardInterrupt:
2022-10-19T19:51:35Z ERROR The ipa-client-install command failed. See
/var/log/ipaclient-install.log for more information
2022-10-19T19:53:05Z DEBUG Restoring system configuration file
'/etc/nsswitch.conf'
2022-10-19T19:53:05Z DEBUG Starting external process
2022-10-19T19:53:05Z DEBUG args=/usr/sbin/selinuxenabled
2022-10-19T19:53:05Z DEBUG Process finished, return code=1
2022-10-19T19:53:05Z DEBUG stdout=
2022-10-19T19:53:05Z DEBUG stderr=
2022-10-19T19:53:05Z DEBUG Saving Index File to
'/var/lib/ipa-client/sysrestore/sysrestore.index'
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
