Sorry, mistake from me. I remove all patch from RHEL and just keep 0053-Cookie-Expires-date-should-be-locale-insensitive.patch. Everything seems fine now. I'm going to test.
Thanks for you help Le 19 juil. 2013 à 17:53, Alexandre Ellert <[email protected]> a écrit : > It's based on 3.0.2 with 1011-xmlrpc_response.patch (found in > ipa-3.0.0-26.el6_4.4.src.rpm) and self._conn.close() is added by this patch. > I included it because it correct this problem : > unable to parse cookie header 'ipa_session=83701130bf434d20cf8c5a3fe2a0ac56; > Domain=inf-ipa.numeezy.fr; Path=/ipa; Expires=Fri, 19 Jul 2013 16:08:31 GMT; > Secure; HttpOnly': unable to parse expires datetime 'Fri, 19 Jul 2013 > 16:08:31' > > > Le 19 juil. 2013 à 17:08, Martin Kosek <[email protected]> a écrit : > >> Thanks, this should help. Maybe the IPA just tries to close the connection >> twice _after_ keys were uploaded to the server. >> >> Anyway, what version of IPA software is the Debian package based on? I cannot >> find line "self._conn.close()" in ipalib/rpc.py in any of our active >> branches. >> >> Martin >> >> On 07/19/2013 05:03 PM, Alexandre Ellert wrote: >>> Here is the traceback : >>> Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub >>> Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub >>> Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub >>> Forwarding 'host_mod' to server u'https://inf-ipa.numeezy.fr/ipa/xml' >>> host_mod: KerbTransport instance has no attribute '_conn' >>> Traceback (most recent call last): >>> File "/usr/sbin/ipa-client-install", line 1234, in update_ssh_keys >>> updatedns=False >>> File "/usr/lib/python2.7/dist-packages/ipalib/frontend.py", line 435, in >>> __call__ >>> ret = self.run(*args, **options) >>> File "/usr/lib/python2.7/dist-packages/ipalib/frontend.py", line 748, in run >>> return self.forward(*args, **options) >>> File "/usr/lib/python2.7/dist-packages/ipalib/frontend.py", line 769, in >>> forward >>> return self.Backend.xmlclient.forward(self.name, *args, **kw) >>> File "/usr/lib/python2.7/dist-packages/ipalib/rpc.py", line 748, in forward >>> response = command(*xml_wrap(params)) >>> File "/usr/lib/python2.7/xmlrpclib.py", line 1224, in __call__ >>> return self.__send(self.__name, args) >>> File "/usr/lib/python2.7/xmlrpclib.py", line 1578, in __request >>> verbose=self.__verbose >>> File "/usr/lib/python2.7/dist-packages/ipalib/rpc.py", line 490, in request >>> self.close() >>> File "/usr/lib/python2.7/dist-packages/ipalib/rpc.py", line 457, in close >>> self._conn.close() >>> AttributeError: KerbTransport instance has no attribute '_conn' >>> Failed to upload host SSH public keys. >>> >>> -> Key are correctly uploaded on the new VM. >>> >>> Le 19 juil. 2013 à 16:30, Alexandre Ellert <[email protected]> a écrit : >>> >>>> >>>> Le 19 juil. 2013 à 16:24, Martin Kosek <[email protected]> a écrit : >>>> >>>>> On 07/19/2013 03:28 PM, Alexandre Ellert wrote: >>>>>> >>>>>> Le 19 juil. 2013 à 10:20, Martin Kosek <[email protected]> a écrit : >>>>>> >>>>>>> On 07/19/2013 02:59 AM, Alexandre Ellert wrote: >>>>>>>> Hi, >>>>>>>> >>>>>>>> I have these 3 errors/warnings message when I join a Debian client to >>>>>>>> a RHEL 6.4 server (ipa-server-3.0.0-26.el6_4.4.x86_64): >>>>>>>> >>>>>>>> => certmonger failed to stop: [Errno 2] No such file or directory: >>>>>>>> '/var/run/ipa/services.list' >>>>>>>> There is no such file even on RHEL 6. What is this file ? >>>>>>> >>>>>>> This was added in IPA 3.0.1 to fix a systemd hang so it does not exist >>>>>>> in >>>>>>> RHEL-6.4 which contains IPA 3.0. The deb package should just make sure >>>>>>> the >>>>>>> /var/run/ipa/ directory is there (or update debian platform file to >>>>>>> override >>>>>>> PlatformService class in ipapython/platform/base/__init__.py). >>>>>> >>>>>> I managed to fix that and will update soon my repo with a new package >>>>>> version. Thanks for the information. >>>>>> >>>>>>> >>>>>>>> => host_mod: KerbTransport instance has no attribute '_conn' >>>>>>>> What does that mean ? >>>>>>> >>>>>>> This means that there was some issue with XMLRPC call to IPA server >>>>>>> (the error >>>>>>> message is indeed unfortunate) - does ipaclient-install.log contain >>>>>>> more details? >>>>>> >>>>>> Unfortunately there is no more details in ipaclient-install.log, here is >>>>>> the relevant part : >>>>>> 2013-07-19T13:06:26Z INFO host_mod: KerbTransport instance has no >>>>>> attribute '_conn' >>>>>> 2013-07-19T13:06:26Z WARNING Failed to upload host SSH public keys. >>>>>> Is there any way to get more debug log ? >>>>>> In my opinion, warning about ssh keys should not trigger here, because I >>>>>> can see them on my IPA server. >>>>>> >>>>> >>>>> Are you sure the SSH keys aren't there from previous installation attempt >>>>> or >>>>> similar? The _conn generally means there was some problem with the >>>>> connection >>>>> to server in the xmlrpclib python library. >>>> >>>> I can confirm you that SSH key upload is successful. I've done tests with >>>> a fresh install of Debian. >>>> To be sure, I will create a new VM and try an ipa-client-install with >>>> modifications you give me. >>>> >>>>> >>>>> We need to find out what and why triggers it, a change in >>>>> ipa-client-install >>>>> script like below may shed more light on what is the source of the error: >>>>> >>>>> >>>>> diff --git a/ipa-client/ipa-install/ipa-client-install >>>>> b/ipa-client/ipa-install/ipa-client-install >>>>> index 280edd7..f82b9f6 100755 >>>>> --- a/ipa-client/ipa-install/ipa-client-install >>>>> +++ b/ipa-client/ipa-install/ipa-client-install >>>>> @@ -1450,6 +1450,8 @@ def update_ssh_keys(server, hostname, ssh_dir, >>>>> create_sshfp): >>>>> pass >>>>> except StandardError, e: >>>>> root_logger.info("host_mod: %s", str(e)) >>>>> + import traceback >>>>> + traceback.print_exc() >>>>> root_logger.warning("Failed to upload host SSH public keys.") >>>>> return >>>>> >>>>> >>>>> Martin >>>> >>>> Thanks >>>> Alexandre >>>> >>>> >>>> _______________________________________________ >>>> Freeipa-users mailing list >>>> [email protected] >>>> https://www.redhat.com/mailman/listinfo/freeipa-users >>> >> > > > _______________________________________________ > Freeipa-users mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/freeipa-users _______________________________________________ Freeipa-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-users
