Hi, thank you for your reply,

but it's exactly what the original post is about. replica > master all
good, but master to replica is saying "internal error"

on replica
Connection from replica to master is OK.
Start listening on required ports for remote master check
Get credentials to log in to remote master
Check RPC connection to remote master
Execute check on remote master
ERROR: Remote master check failed with following error message(s):
an internal error has occurred
[root@gcp-nas-vm01 asafonov]#

on master:
[Wed Oct 16 13:43:00.892514 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208] ipa: ERROR: non-public: DBusException:
org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible
causes include: the remote application did not send a reply, the
message bus security policy blocked the reply, the reply timeout
expired, or the network connection was broken.
[Wed Oct 16 13:43:00.892606 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208] Traceback (most recent call last):
[Wed Oct 16 13:43:00.892621 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]   File
"/usr/lib/python3.9/site-packages/ipaserver/rpcserver.py", line 417,
in wsgi_execute
[Wed Oct 16 13:43:00.892635 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]     result = command(*args, **options)
[Wed Oct 16 13:43:00.892675 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]   File
"/usr/lib/python3.9/site-packages/ipalib/frontend.py", line 471, in
__call__
[Wed Oct 16 13:43:00.892690 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]     return self.__do_call(*args, **options)
[Wed Oct 16 13:43:00.892703 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]   File
"/usr/lib/python3.9/site-packages/ipalib/frontend.py", line 499, in
__do_call
[Wed Oct 16 13:43:00.892716 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]     ret = self.run(*args, **options)
[Wed Oct 16 13:43:00.892728 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]   File
"/usr/lib/python3.9/site-packages/ipalib/frontend.py", line 816, in
run
[Wed Oct 16 13:43:00.892741 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]     return self.execute(*args, **options)
[Wed Oct 16 13:43:00.892754 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]   File
"/usr/lib/python3.9/site-packages/ipaserver/plugins/server.py", line
948, in execute
[Wed Oct 16 13:43:00.892767 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]     ret, stdout, _stderr =
server.conncheck(keys[-1])
[Wed Oct 16 13:43:00.892779 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]   File
"/usr/lib64/python3.9/site-packages/dbus/proxies.py", line 72, in
__call__
[Wed Oct 16 13:43:00.892792 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]     return self._proxy_method(*args,
**keywords)
[Wed Oct 16 13:43:00.892805 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]   File
"/usr/lib64/python3.9/site-packages/dbus/proxies.py", line 141, in
__call__
[Wed Oct 16 13:43:00.892818 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]     return
self._connection.call_blocking(self._named_service,
[Wed Oct 16 13:43:00.892830 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]   File
"/usr/lib64/python3.9/site-packages/dbus/connection.py", line 652, in
call_blocking
[Wed Oct 16 13:43:00.892843 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208]     reply_message =
self.send_message_with_reply_and_block(
[Wed Oct 16 13:43:00.892856 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208] dbus.exceptions.DBusException:
org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible
causes include: the remote application did not send a reply, the
message bus security policy blocked the reply, the reply timeout
expired, or the network connection was broken.
[Wed Oct 16 13:43:00.893568 2024] [wsgi:error] [pid 273866:tid 274098]
[remote 10.128.0.52:52208] ipa: INFO: [jsonserver_session]
[email protected]:
server_conncheck('qb-mum-vm02.int.quantbox.in',
'gcp-nas-vm01.int.quantbox.in', version='2.162'): InternalError
~


IPA version is 4.11.0.15

The only difference is that I'm setting this IPA replica in google
cloud. it might be somehow related to dbus per-user
OS is rocky 9.4

вт, 15 окт. 2024 г. в 17:27, Florence Blanc-Renaud <[email protected]>:
>
> Hi,
>
> On Mon, Oct 14, 2024 at 5:02 PM alexey safonov via FreeIPA-users 
> <[email protected]> wrote:
>>
>> Did you resolve that issue? I'm seeing the same. I'm like 100% sure no
>> FW between hosts or network problem. so what to look here?
>
>
> If the replica installation is failing during the connection check step, have 
> a look at /var/log/ipareplica-conncheck.log. You will be able to find which 
> server is contacted and what's the issue. You can also check 
> /var/log/httpd/error_log on the server and find if the call actually reached 
> the server. Look for a line with server_conncheck, similar to this one:
>
> [Mon Oct 14 15:58:52.918445 2024] [wsgi:error] [pid 12510:tid 12935] [remote 
> 192.168.121.202:57128] ipa: INFO: [jsonserver_kerb] [email protected]: 
> server_conncheck('master.ipa.test', 'replica0.ipa.test', version='2.162'): 
> SUCCESS
>
>
> Can you provide more information? IPA version, exact command used for replica 
> installation, command output etc...
> flo
>>
>>
>> чт, 28 мар. 2024 г. в 18:48, D S via FreeIPA-users
>> <[email protected]>:
>> >
>> > Hello,
>> > I am trying to install 3 replicas agains the same master. Two out of 3 
>> > installs succeed, while the other one fails with
>> >
>> > On replica:
>> > Connection from replica to master is OK.
>> > Start listening on required ports for remote master check
>> > Get credentials to log in to remote master
>> > Check RPC connection to remote master
>> > Execute check on remote master
>> > ERROR: Remote master check failed with following error message(s):
>> > an internal error has occurred
>> >
>> > 2024-03-28T09:09:28Z DEBUG Starting external process
>> > 2024-03-28T09:09:28Z DEBUG args=['/usr/sbin/ipa-client-install', 
>> > '--unattended', '--uninstall']
>> > 2024-03-28T09:09:31Z DEBUG Process finished, return code=0
>> > 2024-03-28T09:09:31Z DEBUG   File 
>> > "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 180, in 
>> > execute
>> >     return_value = self.run()
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/cli.py", line 
>> > 344, in run
>> >     return cfgr.run()
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 358, in run
>> >     self.validate()
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 368, in validate
>> >     for _nothing in self._validator():
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 431, in __runner
>> >     exc_handler(exc_info)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 455, in _handle_validate_exception
>> >     self._handle_exception(exc_info)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 450, in _handle_exception
>> >     six.reraise(*exc_info)
>> >   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> >     raise value
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 421, in __runner
>> >     step()
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 418, in <lambda>
>> >     step = lambda: next(self.__gen)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 
>> > 81, in run_generator_with_yield_from
>> >     six.reraise(*exc_info)
>> >   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> >     raise value
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 
>> > 59, in run_generator_with_yield_from
>> >     value = gen.send(prev_value)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 633, in _configure
>> >     next(validator)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 431, in __runner
>> >     exc_handler(exc_info)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 455, in _handle_validate_exception
>> >     self._handle_exception(exc_info)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 518, in _handle_exception
>> >     self.__parent._handle_exception(exc_info)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 450, in _handle_exception
>> >     six.reraise(*exc_info)
>> >   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> >     raise value
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 515, in _handle_exception
>> >     super(ComponentBase, self)._handle_exception(exc_info)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 450, in _handle_exception
>> >     six.reraise(*exc_info)
>> >   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> >     raise value
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 421, in __runner
>> >     step()
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 
>> > 418, in <lambda>
>> >     step = lambda: next(self.__gen)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 
>> > 81, in run_generator_with_yield_from
>> >     six.reraise(*exc_info)
>> >   File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> >     raise value
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 
>> > 59, in run_generator_with_yield_from
>> >     value = gen.send(prev_value)
>> >   File "/usr/lib/python3.6/site-packages/ipapython/install/common.py", 
>> > line 65, in _install
>> >     for unused in self._installer(self.parent):
>> >   File 
>> > "/usr/lib/python3.6/site-packages/ipaserver/install/server/__init__.py", 
>> > line 597, in main
>> >     replica_promote_check(self)
>> >   File 
>> > "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py",
>> >  line 401, in decorated
>> >     func(installer)
>> >   File 
>> > "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py",
>> >  line 423, in decorated
>> >     func(installer)
>> >   File 
>> > "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py",
>> >  line 1196, in promote_check
>> >     ca_cert_file=cafile)
>> >   File 
>> > "/usr/lib/python3.6/site-packages/ipaserver/install/replication.py", line 
>> > 129, in replica_conn_check
>> >     "Connection check failed!"
>> >
>> > 2024-03-28T09:09:31Z DEBUG The ipa-replica-install command failed, 
>> > exception: ScriptError: Connection check failed!
>> > See /var/log/ipareplica-conncheck.log for more information.
>> > If the check results are not valid it can be skipped with --skip-conncheck 
>> > parameter.
>> > 2024-03-28T09:09:31Z ERROR Connection check failed!
>> > See /var/log/ipareplica-conncheck.log for more information.
>> > If the check results are not valid it can be skipped with --skip-conncheck 
>> > parameter.
>> > 2024-03-28T09:09:31Z ERROR The ipa-replica-install command failed. See 
>> > /var/log/ipareplica-install.log for more information
>> >
>> > On master:
>> > [Thu Mar 28 09:09:27.891561 2024] [:error] [pid 22098] ipa: ERROR: 
>> > non-public: DBusException: org.freedesktop.DBus.Error.NoReply: Did not 
>> > receive a reply. Possible causes include: the remote application did not 
>> > send a reply, the message bus security policy blocked the reply, the reply 
>> > timeout expired, or the network connection was broken.
>> > [Thu Mar 28 09:09:27.891666 2024] [:error] [pid 22098] Traceback (most 
>> > recent call last):
>> > [Thu Mar 28 09:09:27.891683 2024] [:error] [pid 22098]   File 
>> > "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 369, in 
>> > wsgi_execute
>> > [Thu Mar 28 09:09:27.891694 2024] [:error] [pid 22098]     result = 
>> > command(*args, **options)
>> > [Thu Mar 28 09:09:27.891705 2024] [:error] [pid 22098]   File 
>> > "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 450, in 
>> > __call__
>> > [Thu Mar 28 09:09:27.891717 2024] [:error] [pid 22098]     return 
>> > self.__do_call(*args, **options)
>> > [Thu Mar 28 09:09:27.891727 2024] [:error] [pid 22098]   File 
>> > "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 478, in 
>> > __do_call
>> > [Thu Mar 28 09:09:27.891737 2024] [:error] [pid 22098]     ret = 
>> > self.run(*args, **options)
>> > [Thu Mar 28 09:09:27.891748 2024] [:error] [pid 22098]   File 
>> > "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 800, in run
>> > [Thu Mar 28 09:09:27.891928 2024] [:error] [pid 22098]     return 
>> > self.execute(*args, **options)
>> > [Thu Mar 28 09:09:27.891951 2024] [:error] [pid 22098]   File 
>> > "/usr/lib/python2.7/site-packages/ipaserver/plugins/server.py", line 933, 
>> > in execute
>> > [Thu Mar 28 09:09:27.891962 2024] [:error] [pid 22098]     ret, stdout, 
>> > _stderr = server.conncheck(keys[-1])
>> > [Thu Mar 28 09:09:27.891973 2024] [:error] [pid 22098]   File 
>> > "/usr/lib64/python2.7/site-packages/dbus/proxies.py", line 70, in __call__
>> > [Thu Mar 28 09:09:27.891983 2024] [:error] [pid 22098]     return 
>> > self._proxy_method(*args, **keywords)
>> > [Thu Mar 28 09:09:27.891994 2024] [:error] [pid 22098]   File 
>> > "/usr/lib64/python2.7/site-packages/dbus/proxies.py", line 145, in __call__
>> > [Thu Mar 28 09:09:27.892005 2024] [:error] [pid 22098]     **keywords)
>> > [Thu Mar 28 09:09:27.892016 2024] [:error] [pid 22098]   File 
>> > "/usr/lib64/python2.7/site-packages/dbus/connection.py", line 651, in 
>> > call_blocking
>> > [Thu Mar 28 09:09:27.892026 2024] [:error] [pid 22098]     message, 
>> > timeout)
>> > [Thu Mar 28 09:09:27.892037 2024] [:error] [pid 22098] DBusException: 
>> > org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible 
>> > causes include: the remote application did not send a reply, the message 
>> > bus security policy blocked the reply, the reply timeout expired, or the 
>> > network connection was broken.
>> > [Thu Mar 28 09:09:27.892955 2024] [:error] [pid 22098] ipa: INFO: 
>> > [jsonserver_kerb] [email protected]: 
>> > server_conncheck(u'ipamaster01.example.com', u'ipa-replica03.example.com', 
>> > version=u'2.162'): InternalError
>> > [Thu Mar 28 09:09:30.121019 2024] [:error] [pid 20997] ipa: INFO: 
>> > [jsonserver_kerb] host/[email protected]: 
>> > host_disable(u'ipa-replica03.example.com'): SUCCESS
>> > --
>> > _______________________________________________
>> > FreeIPA-users mailing list -- [email protected]
>> > To unsubscribe send an email to [email protected]
>> > Fedora Code of Conduct: 
>> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> > List Archives: 
>> > https://lists.fedorahosted.org/archives/list/[email protected]
>> > Do not reply to spam, report it: 
>> > https://pagure.io/fedora-infrastructure/new_issue
>> --
>> _______________________________________________
>> FreeIPA-users mailing list -- [email protected]
>> To unsubscribe send an email to [email protected]
>> Fedora Code of Conduct: 
>> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives: 
>> https://lists.fedorahosted.org/archives/list/[email protected]
>> Do not reply to spam, report it: 
>> https://pagure.io/fedora-infrastructure/new_issue
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to