Attachment 1484576 Details for Bug 1630680 – ipaserver install log

ipaserver install log

ipaserver-install.log (text/plain), 170.16 KB, created by Sudhir Menon on 2018-09-19 06:13:03 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Sudhir Menon

Created: 2018-09-19 06:13:03 UTC

Size: 170.16 KB

patch

obsolete

>2018-09-19T05:33:10Z DEBUG Logging to /var/log/ipaserver-install.log
>2018-09-19T05:33:10Z DEBUG ipa-server-install was invoked with arguments [] and options: {'no_dns_sshfp': False, 'ignore_topology_disconnect': False, 'verbose': False, 'domain_level': None, 'ip_addresses': [CheckedIPAddress('')], 'secondary_rid_base': None, 'netbios_name': None, 'mkhomedir': False, 'http_cert_files': None, 'zonemgr': None, 'no_pkinit': False, 'reverse_zones': None, 'no_forwarders': False, 'external_ca_profile': None, 'external_ca_type': None, 'no_ntp': False, 'no_msdcs': False, 'setup_kra': False, 'domain_name': 'sdrhel76.test', 'idmax': None, 'setup_adtrust': False, 'http_cert_name': None, 'dirsrv_cert_files': None, 'no_dnssec_validation': False, 'ca_signing_algorithm': None, 'no_reverse': False, 'ssh_trust_dns': False, 'pkinit_cert_files': None, 'ca_cert_files': None, 'subject_base': None, 'auto_reverse': True, 'auto_forwarders': True, 'no_host_dns': False, 'no_sshd': False, 'no_ui_redirect': False, 'ignore_last_of_role': False, 'realm_name': 'SDRHEL76.TEST', 'forwarders': None, 'idstart': None, 'external_ca': False, 'pkinit_cert_name': None, 'no_ssh': False, 'external_cert_files': None, 'enable_compat': False, 'no_hbac_allow': False, 'forward_policy': None, 'dirsrv_cert_name': None, 'unattended': True, 'rid_base': None, 'quiet': False, 'setup_dns': True, 'ca_subject': None, 'host_name': 'master.sdrhel76.test', 'dirsrv_config_file': None, 'log_file': None, 'allow_zone_overlap': True, 'uninstall': False}
>2018-09-19T05:33:10Z DEBUG IPA version 4.6.4-10.el7
>2018-09-19T05:33:10Z DEBUG Searching for an interface of IP address: ::1
>2018-09-19T05:33:10Z DEBUG Testing local IP address: ::1/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff (interface: lo)
>2018-09-19T05:33:10Z DEBUG Starting external process
>2018-09-19T05:33:10Z DEBUG args=/usr/sbin/selinuxenabled
>2018-09-19T05:33:10Z DEBUG Process finished, return code=0
>2018-09-19T05:33:10Z DEBUG stdout=
>2018-09-19T05:33:10Z DEBUG stderr=
>2018-09-19T05:33:10Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:10Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:10Z DEBUG httpd is not configured
>2018-09-19T05:33:10Z DEBUG kadmin is not configured
>2018-09-19T05:33:10Z DEBUG dirsrv is not configured
>2018-09-19T05:33:10Z DEBUG pki-tomcatd is not configured
>2018-09-19T05:33:10Z DEBUG install is not configured
>2018-09-19T05:33:10Z DEBUG krb5kdc is not configured
>2018-09-19T05:33:10Z DEBUG ntpd is not configured
>2018-09-19T05:33:10Z DEBUG named is not configured
>2018-09-19T05:33:10Z DEBUG filestore is tracking no files
>2018-09-19T05:33:10Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2018-09-19T05:33:10Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:10Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:10Z DEBUG Starting external process
>2018-09-19T05:33:10Z DEBUG args=/bin/systemctl is-enabled chronyd.service
>2018-09-19T05:33:10Z DEBUG Process finished, return code=0
>2018-09-19T05:33:10Z DEBUG stdout=enabled
>
>2018-09-19T05:33:10Z DEBUG stderr=
>2018-09-19T05:33:10Z DEBUG Starting external process
>2018-09-19T05:33:10Z DEBUG args=/usr/sbin/httpd -t -D DUMP_VHOSTS
>2018-09-19T05:33:10Z DEBUG Process finished, return code=0
>2018-09-19T05:33:10Z DEBUG stdout=VirtualHost configuration:
>*:8443                 master.sdrhel76.test (/etc/httpd/conf.d/nss.conf:81)
>
>2018-09-19T05:33:10Z DEBUG stderr=
>2018-09-19T05:33:10Z DEBUG Check if master.sdrhel76.test is a primary hostname for localhost
>2018-09-19T05:33:10Z DEBUG Primary hostname for localhost: master.sdrhel76.test
>2018-09-19T05:33:10Z DEBUG will use host_name: master.sdrhel76.test
>
>2018-09-19T05:33:10Z DEBUG importing all plugin modules in ipaserver.plugins...
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.aci
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.automember
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.automount
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.baseldap
>2018-09-19T05:33:10Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.baseuser
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.batch
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.ca
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.caacl
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.cert
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.certmap
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.certprofile
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.config
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.delegation
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.dns
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.dnsserver
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.dogtag
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.domainlevel
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.group
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.hbac
>2018-09-19T05:33:10Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.hbacrule
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.hbactest
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.host
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.hostgroup
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.idrange
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.idviews
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.internal
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.join
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.ldap2
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.location
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.migration
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.misc
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.netgroup
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.otp
>2018-09-19T05:33:10Z DEBUG ipaserver.plugins.otp is not a valid plugin module
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.otpconfig
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.otptoken
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.passwd
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.permission
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.ping
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.pkinit
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.privilege
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.rabase
>2018-09-19T05:33:10Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.realmdomains
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.role
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.schema
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.selfservice
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.server
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.serverrole
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.serverroles
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.service
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.servicedelegation
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.session
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.stageuser
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.sudo
>2018-09-19T05:33:10Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.sudocmd
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.sudorule
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.topology
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.trust
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.user
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.vault
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.virtual
>2018-09-19T05:33:10Z DEBUG ipaserver.plugins.virtual is not a valid plugin module
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.whoami
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.plugins.xmlserver
>2018-09-19T05:33:10Z DEBUG importing all plugin modules in ipaserver.install.plugins...
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.adtrust
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.dns
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_nis
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_referint
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_services
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness
>2018-09-19T05:33:10Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt
>2018-09-19T05:33:12Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:12Z INFO Checking DNS domain sdrhel76.test., please wait ...
>2018-09-19T05:33:14Z WARNING Invalid IP address fe80::5054:ff:fe7e:edd6 for master.sdrhel76.test: cannot use link-local IP address fe80::5054:ff:fe7e:edd6
>2018-09-19T05:33:14Z DEBUG Testing local IP address: 127.0.0.1/255.0.0.0 (interface: lo)
>2018-09-19T05:33:14Z DEBUG Backing up system configuration file '/etc/hostname'
>2018-09-19T05:33:14Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:14Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:14Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:14Z DEBUG Starting external process
>2018-09-19T05:33:14Z DEBUG args=/bin/hostnamectl set-hostname master.sdrhel76.test
>2018-09-19T05:33:14Z DEBUG Process finished, return code=0
>2018-09-19T05:33:14Z DEBUG stdout=
>2018-09-19T05:33:14Z DEBUG stderr=
>2018-09-19T05:33:14Z DEBUG Backing up system configuration file '/etc/hosts'
>2018-09-19T05:33:14Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:14Z DEBUG Starting external process
>2018-09-19T05:33:14Z DEBUG args=/bin/systemctl is-enabled chronyd.service
>2018-09-19T05:33:14Z DEBUG Process finished, return code=0
>2018-09-19T05:33:14Z DEBUG stdout=enabled
>
>2018-09-19T05:33:14Z DEBUG stderr=
>2018-09-19T05:33:14Z DEBUG Starting external process
>2018-09-19T05:33:14Z DEBUG args=/bin/systemctl is-active chronyd.service
>2018-09-19T05:33:14Z DEBUG Process finished, return code=0
>2018-09-19T05:33:14Z DEBUG stdout=active
>
>2018-09-19T05:33:14Z DEBUG stderr=
>2018-09-19T05:33:14Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:14Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:14Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:14Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:14Z DEBUG Starting external process
>2018-09-19T05:33:14Z DEBUG args=/bin/systemctl stop chronyd.service
>2018-09-19T05:33:14Z DEBUG Process finished, return code=0
>2018-09-19T05:33:14Z DEBUG stdout=
>2018-09-19T05:33:14Z DEBUG stderr=
>2018-09-19T05:33:14Z DEBUG Stop of chronyd.service complete
>2018-09-19T05:33:14Z DEBUG Starting external process
>2018-09-19T05:33:14Z DEBUG args=/bin/systemctl disable chronyd.service
>2018-09-19T05:33:15Z DEBUG Process finished, return code=0
>2018-09-19T05:33:15Z DEBUG stdout=
>2018-09-19T05:33:15Z DEBUG stderr=Removed symlink /etc/systemd/system/multi-user.target.wants/chronyd.service.
>
>2018-09-19T05:33:15Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:15Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:15Z DEBUG Configuring NTP daemon (ntpd)
>2018-09-19T05:33:15Z DEBUG   [1/4]: stopping ntpd
>2018-09-19T05:33:15Z DEBUG Starting external process
>2018-09-19T05:33:15Z DEBUG args=/bin/systemctl is-active ntpd.service
>2018-09-19T05:33:15Z DEBUG Process finished, return code=3
>2018-09-19T05:33:15Z DEBUG stdout=inactive
>
>2018-09-19T05:33:15Z DEBUG stderr=
>2018-09-19T05:33:15Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:15Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:15Z DEBUG Starting external process
>2018-09-19T05:33:15Z DEBUG args=/bin/systemctl stop ntpd.service
>2018-09-19T05:33:15Z DEBUG Process finished, return code=0
>2018-09-19T05:33:15Z DEBUG stdout=
>2018-09-19T05:33:15Z DEBUG stderr=
>2018-09-19T05:33:15Z DEBUG Stop of ntpd.service complete
>2018-09-19T05:33:15Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:15Z DEBUG   [2/4]: writing configuration
>2018-09-19T05:33:15Z DEBUG Backing up system configuration file '/etc/ntp.conf'
>2018-09-19T05:33:15Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:15Z DEBUG Backing up system configuration file '/etc/sysconfig/ntpd'
>2018-09-19T05:33:15Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:15Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:15Z DEBUG   [3/4]: configuring ntpd to start on boot
>2018-09-19T05:33:15Z DEBUG Starting external process
>2018-09-19T05:33:15Z DEBUG args=/bin/systemctl is-enabled ntpd.service
>2018-09-19T05:33:15Z DEBUG Process finished, return code=1
>2018-09-19T05:33:15Z DEBUG stdout=disabled
>
>2018-09-19T05:33:15Z DEBUG stderr=
>2018-09-19T05:33:15Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:15Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:15Z DEBUG Starting external process
>2018-09-19T05:33:15Z DEBUG args=/bin/systemctl enable ntpd.service
>2018-09-19T05:33:15Z DEBUG Process finished, return code=0
>2018-09-19T05:33:15Z DEBUG stdout=
>2018-09-19T05:33:15Z DEBUG stderr=Created symlink from /etc/systemd/system/multi-user.target.wants/ntpd.service to /usr/lib/systemd/system/ntpd.service.
>
>2018-09-19T05:33:15Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:15Z DEBUG   [4/4]: starting ntpd
>2018-09-19T05:33:15Z DEBUG Starting external process
>2018-09-19T05:33:15Z DEBUG args=/bin/systemctl start ntpd.service
>2018-09-19T05:33:15Z DEBUG Process finished, return code=0
>2018-09-19T05:33:15Z DEBUG stdout=
>2018-09-19T05:33:15Z DEBUG stderr=
>2018-09-19T05:33:15Z DEBUG Starting external process
>2018-09-19T05:33:15Z DEBUG args=/bin/systemctl is-active ntpd.service
>2018-09-19T05:33:15Z DEBUG Process finished, return code=0
>2018-09-19T05:33:15Z DEBUG stdout=active
>
>2018-09-19T05:33:15Z DEBUG stderr=
>2018-09-19T05:33:15Z DEBUG Start of ntpd.service complete
>2018-09-19T05:33:15Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:15Z DEBUG Done configuring NTP daemon (ntpd).
>2018-09-19T05:33:15Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:15Z DEBUG Configuring directory server (dirsrv). Estimated time: 30 seconds
>2018-09-19T05:33:15Z DEBUG   [1/44]: creating directory server instance
>2018-09-19T05:33:15Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:15Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:15Z DEBUG Backing up system configuration file '/etc/sysconfig/dirsrv'
>2018-09-19T05:33:15Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:15Z DEBUG 
>dn: dc=sdrhel76,dc=test
>objectClass: top
>objectClass: domain
>objectClass: pilotObject
>dc: sdrhel76
>info: IPA V2.0
>
>2018-09-19T05:33:15Z DEBUG writing inf template
>2018-09-19T05:33:15Z DEBUG 
>[General]
>FullMachineName=   master.sdrhel76.test
>SuiteSpotUserID=   dirsrv
>SuiteSpotGroup=    dirsrv
>ServerRoot=    /usr/lib64/dirsrv
>[slapd]
>ServerPort=   389
>ServerIdentifier=   SDRHEL76-TEST
>Suffix=   dc=sdrhel76,dc=test
>RootDN=   cn=Directory Manager
>InstallLdifFile= /var/lib/dirsrv/boot.ldif
>inst_dir=   /var/lib/dirsrv/scripts-SDRHEL76-TEST
>
>2018-09-19T05:33:15Z DEBUG calling setup-ds.pl
>2018-09-19T05:33:15Z DEBUG Starting external process
>2018-09-19T05:33:15Z DEBUG args=/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpDs6vDG
>2018-09-19T05:33:22Z DEBUG Process finished, return code=0
>2018-09-19T05:33:22Z DEBUG stdout=[18/09/19:11:03:22] - [Setup] Info Your new DS instance 'SDRHEL76-TEST' was successfully created.
>Your new DS instance 'SDRHEL76-TEST' was successfully created.
>[18/09/19:11:03:22] - [Setup] Success Exiting . . .
>Log file is '-'
>
>Exiting . . .
>Log file is '-'
>
>
>2018-09-19T05:33:22Z DEBUG stderr=
>2018-09-19T05:33:22Z DEBUG completed creating DS instance
>2018-09-19T05:33:22Z DEBUG   duration: 6 seconds
>2018-09-19T05:33:22Z DEBUG   [2/44]: enabling ldapi
>2018-09-19T05:33:22Z DEBUG Starting external process
>2018-09-19T05:33:22Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpueCcHd -H ldap://localhost -x -D cn=Directory Manager -y /tmp/tmprj8Piw
>2018-09-19T05:33:22Z DEBUG Process finished, return code=0
>2018-09-19T05:33:22Z DEBUG stdout=replace nsslapd-ldapilisten:
>	on
>modifying entry "cn=config"
>modify complete
>
>
>2018-09-19T05:33:22Z DEBUG stderr=ldap_initialize( ldap://localhost:389/??base )
>
>2018-09-19T05:33:22Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:22Z DEBUG   [3/44]: configure autobind for root
>2018-09-19T05:33:22Z DEBUG Starting external process
>2018-09-19T05:33:22Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/root-autobind.ldif -H ldap://localhost -x -D cn=Directory Manager -y /tmp/tmpQc7jY_
>2018-09-19T05:33:22Z DEBUG Process finished, return code=0
>2018-09-19T05:33:22Z DEBUG stdout=add objectClass:
>	extensibleObject
>	top
>add cn:
>	root-autobind
>add uidNumber:
>	0
>add gidNumber:
>	0
>adding new entry "cn=root-autobind,cn=config"
>modify complete
>
>replace nsslapd-ldapiautobind:
>	on
>modifying entry "cn=config"
>modify complete
>
>replace nsslapd-ldapimaptoentries:
>	on
>modifying entry "cn=config"
>modify complete
>
>
>2018-09-19T05:33:22Z DEBUG stderr=ldap_initialize( ldap://localhost:389/??base )
>
>2018-09-19T05:33:22Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:22Z DEBUG   [4/44]: stopping directory server
>2018-09-19T05:33:22Z DEBUG Starting external process
>2018-09-19T05:33:22Z DEBUG args=/bin/systemctl stop dirsrv@SDRHEL76-TEST.service
>2018-09-19T05:33:24Z DEBUG Process finished, return code=0
>2018-09-19T05:33:24Z DEBUG stdout=
>2018-09-19T05:33:24Z DEBUG stderr=
>2018-09-19T05:33:24Z DEBUG Stop of dirsrv@SDRHEL76-TEST.service complete
>2018-09-19T05:33:24Z DEBUG   duration: 2 seconds
>2018-09-19T05:33:24Z DEBUG   [5/44]: updating configuration in dse.ldif
>2018-09-19T05:33:24Z DEBUG Starting external process
>2018-09-19T05:33:24Z DEBUG args=/usr/sbin/selinuxenabled
>2018-09-19T05:33:24Z DEBUG Process finished, return code=0
>2018-09-19T05:33:24Z DEBUG stdout=
>2018-09-19T05:33:24Z DEBUG stderr=
>2018-09-19T05:33:24Z DEBUG Starting external process
>2018-09-19T05:33:24Z DEBUG args=/sbin/restorecon /etc/dirsrv/slapd-SDRHEL76-TEST/dse.ldif
>2018-09-19T05:33:24Z DEBUG Process finished, return code=0
>2018-09-19T05:33:24Z DEBUG stdout=
>2018-09-19T05:33:24Z DEBUG stderr=
>2018-09-19T05:33:24Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:24Z DEBUG   [6/44]: starting directory server
>2018-09-19T05:33:24Z DEBUG Starting external process
>2018-09-19T05:33:24Z DEBUG args=/bin/systemctl start dirsrv@SDRHEL76-TEST.service
>2018-09-19T05:33:29Z DEBUG Process finished, return code=0
>2018-09-19T05:33:29Z DEBUG stdout=
>2018-09-19T05:33:29Z DEBUG stderr=
>2018-09-19T05:33:29Z DEBUG Starting external process
>2018-09-19T05:33:29Z DEBUG args=/bin/systemctl is-active dirsrv@SDRHEL76-TEST.service
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=active
>
>2018-09-19T05:33:30Z DEBUG stderr=
>2018-09-19T05:33:30Z DEBUG wait_for_open_ports: localhost [389] timeout 300
>2018-09-19T05:33:30Z DEBUG waiting for port: 389
>2018-09-19T05:33:30Z DEBUG SUCCESS: port: 389
>2018-09-19T05:33:30Z DEBUG Start of dirsrv@SDRHEL76-TEST.service complete
>2018-09-19T05:33:30Z DEBUG Created connection context.ldap2_139871438609424
>2018-09-19T05:33:30Z DEBUG   duration: 5 seconds
>2018-09-19T05:33:30Z DEBUG   [7/44]: adding default schema
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [8/44]: enabling memberof plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/memberof-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=replace nsslapd-pluginenabled:
>	on
>add memberofgroupattr:
>	memberUser
>add memberofgroupattr:
>	memberHost
>modifying entry "cn=MemberOf Plugin,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [9/44]: enabling winsync plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/ipa-winsync-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	ipa-winsync
>add nsslapd-pluginpath:
>	libipa_winsync
>add nsslapd-plugininitfunc:
>	ipa_winsync_plugin_init
>add nsslapd-pluginDescription:
>	Allows IPA to work with the DS windows sync feature
>add nsslapd-pluginid:
>	ipa-winsync
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	Red Hat
>add nsslapd-plugintype:
>	preoperation
>add nsslapd-pluginenabled:
>	on
>add nsslapd-plugin-depends-on-type:
>	database
>add ipaWinSyncRealmFilter:
>	(objectclass=krbRealmContainer)
>add ipaWinSyncRealmAttr:
>	cn
>add ipaWinSyncNewEntryFilter:
>	(cn=ipaConfig)
>add ipaWinSyncNewUserOCAttr:
>	ipauserobjectclasses
>add ipaWinSyncUserFlatten:
>	true
>add ipaWinsyncHomeDirAttr:
>	ipaHomesRootDir
>add ipaWinsyncLoginShellAttr:
>	ipaDefaultLoginShell
>add ipaWinSyncDefaultGroupAttr:
>	ipaDefaultPrimaryGroup
>add ipaWinSyncDefaultGroupFilter:
>	(gidNumber=*)(objectclass=posixGroup)(objectclass=groupOfNames)
>add ipaWinSyncAcctDisable:
>	both
>add ipaWinSyncForceSync:
>	true
>add ipaWinSyncUserAttr:
>	uidNumber -1
>	gidNumber -1
>adding new entry "cn=ipa-winsync,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [10/44]: configuring replication version plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/version-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	IPA Version Replication
>add nsslapd-pluginpath:
>	libipa_repl_version
>add nsslapd-plugininitfunc:
>	repl_version_plugin_init
>add nsslapd-plugintype:
>	preoperation
>add nsslapd-pluginenabled:
>	off
>add nsslapd-pluginid:
>	ipa_repl_version
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	Red Hat, Inc.
>add nsslapd-plugindescription:
>	IPA Replication version plugin
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-plugin-depends-on-named:
>	Multimaster Replication Plugin
>adding new entry "cn=IPA Version Replication,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [11/44]: enabling IPA enrollment plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp_3TGxc -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	ipa_enrollment_extop
>add nsslapd-pluginpath:
>	libipa_enrollment_extop
>add nsslapd-plugininitfunc:
>	ipaenrollment_init
>add nsslapd-plugintype:
>	extendedop
>add nsslapd-pluginenabled:
>	on
>add nsslapd-pluginid:
>	ipa_enrollment_extop
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	RedHat
>add nsslapd-plugindescription:
>	Enroll hosts into the IPA domain
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-realmTree:
>	dc=sdrhel76,dc=test
>adding new entry "cn=ipa_enrollment_extop,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [12/44]: configuring uniqueness plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpx7bCX1 -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectClass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	krbPrincipalName uniqueness
>add nsslapd-pluginPath:
>	libattr-unique-plugin
>add nsslapd-pluginInitfunc:
>	NSUniqueAttr_Init
>add nsslapd-pluginType:
>	preoperation
>add nsslapd-pluginEnabled:
>	on
>add uniqueness-attribute-name:
>	krbPrincipalName
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-pluginId:
>	NSUniqueAttr
>add nsslapd-pluginVersion:
>	1.1.0
>add nsslapd-pluginVendor:
>	Fedora Project
>add nsslapd-pluginDescription:
>	Enforce unique attribute values
>add uniqueness-subtrees:
>	dc=sdrhel76,dc=test
>add uniqueness-exclude-subtrees:
>	cn=staged users,cn=accounts,cn=provisioning,dc=sdrhel76,dc=test
>add uniqueness-across-all-subtrees:
>	on
>adding new entry "cn=krbPrincipalName uniqueness,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	krbCanonicalName uniqueness
>add nsslapd-pluginPath:
>	libattr-unique-plugin
>add nsslapd-pluginInitfunc:
>	NSUniqueAttr_Init
>add nsslapd-pluginType:
>	preoperation
>add nsslapd-pluginEnabled:
>	on
>add uniqueness-attribute-name:
>	krbCanonicalName
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-pluginId:
>	NSUniqueAttr
>add nsslapd-pluginVersion:
>	1.1.0
>add nsslapd-pluginVendor:
>	Fedora Project
>add nsslapd-pluginDescription:
>	Enforce unique attribute values
>add uniqueness-subtrees:
>	dc=sdrhel76,dc=test
>add uniqueness-exclude-subtrees:
>	cn=staged users,cn=accounts,cn=provisioning,dc=sdrhel76,dc=test
>add uniqueness-across-all-subtrees:
>	on
>adding new entry "cn=krbCanonicalName uniqueness,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	netgroup uniqueness
>add nsslapd-pluginPath:
>	libattr-unique-plugin
>add nsslapd-pluginInitfunc:
>	NSUniqueAttr_Init
>add nsslapd-pluginType:
>	preoperation
>add nsslapd-pluginEnabled:
>	on
>add uniqueness-attribute-name:
>	cn
>add uniqueness-subtrees:
>	cn=ng,cn=alt,dc=sdrhel76,dc=test
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-pluginId:
>	NSUniqueAttr
>add nsslapd-pluginVersion:
>	1.1.0
>add nsslapd-pluginVendor:
>	Fedora Project
>add nsslapd-pluginDescription:
>	Enforce unique attribute values
>adding new entry "cn=netgroup uniqueness,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	ipaUniqueID uniqueness
>add nsslapd-pluginPath:
>	libattr-unique-plugin
>add nsslapd-pluginInitfunc:
>	NSUniqueAttr_Init
>add nsslapd-pluginType:
>	preoperation
>add nsslapd-pluginEnabled:
>	on
>add uniqueness-attribute-name:
>	ipaUniqueID
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-pluginId:
>	NSUniqueAttr
>add nsslapd-pluginVersion:
>	1.1.0
>add nsslapd-pluginVendor:
>	Fedora Project
>add nsslapd-pluginDescription:
>	Enforce unique attribute values
>add uniqueness-subtrees:
>	dc=sdrhel76,dc=test
>add uniqueness-exclude-subtrees:
>	cn=staged users,cn=accounts,cn=provisioning,dc=sdrhel76,dc=test
>add uniqueness-across-all-subtrees:
>	on
>adding new entry "cn=ipaUniqueID uniqueness,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	sudorule name uniqueness
>add nsslapd-pluginDescription:
>	Enforce unique attribute values
>add nsslapd-pluginPath:
>	libattr-unique-plugin
>add nsslapd-pluginInitfunc:
>	NSUniqueAttr_Init
>add nsslapd-pluginType:
>	preoperation
>add nsslapd-pluginEnabled:
>	on
>add uniqueness-attribute-name:
>	cn
>add uniqueness-subtrees:
>	cn=sudorules,cn=sudo,dc=sdrhel76,dc=test
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-pluginId:
>	NSUniqueAttr
>add nsslapd-pluginVersion:
>	1.1.0
>add nsslapd-pluginVendor:
>	Fedora Project
>adding new entry "cn=sudorule name uniqueness,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [13/44]: configuring uuid plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/uuid-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	IPA UUID
>add nsslapd-pluginpath:
>	libipa_uuid
>add nsslapd-plugininitfunc:
>	ipauuid_init
>add nsslapd-plugintype:
>	preoperation
>add nsslapd-pluginenabled:
>	on
>add nsslapd-pluginid:
>	ipauuid_version
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	Red Hat, Inc.
>add nsslapd-plugindescription:
>	IPA UUID plugin
>add nsslapd-plugin-depends-on-type:
>	database
>adding new entry "cn=IPA UUID,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpKjbDP2 -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectclass:
>	top
>	extensibleObject
>add cn:
>	IPA Unique IDs
>add ipaUuidAttr:
>	ipaUniqueID
>add ipaUuidMagicRegen:
>	autogenerate
>add ipaUuidFilter:
>	(|(objectclass=ipaObject)(objectclass=ipaAssociation))
>add ipaUuidScope:
>	dc=sdrhel76,dc=test
>add ipaUuidEnforce:
>	TRUE
>adding new entry "cn=IPA Unique IDs,cn=IPA UUID,cn=plugins,cn=config"
>modify complete
>
>add objectclass:
>	top
>	extensibleObject
>add cn:
>	IPK11 Unique IDs
>add ipaUuidAttr:
>	ipk11UniqueID
>add ipaUuidMagicRegen:
>	autogenerate
>add ipaUuidFilter:
>	(objectclass=ipk11Object)
>add ipaUuidScope:
>	dc=sdrhel76,dc=test
>add ipaUuidEnforce:
>	FALSE
>adding new entry "cn=IPK11 Unique IDs,cn=IPA UUID,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [14/44]: configuring modrdn plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/modrdn-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	IPA MODRDN
>add nsslapd-pluginpath:
>	libipa_modrdn
>add nsslapd-plugininitfunc:
>	ipamodrdn_init
>add nsslapd-plugintype:
>	betxnpostoperation
>add nsslapd-pluginenabled:
>	on
>add nsslapd-pluginid:
>	ipamodrdn_version
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	Red Hat, Inc.
>add nsslapd-plugindescription:
>	IPA MODRDN plugin
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-pluginPrecedence:
>	60
>adding new entry "cn=IPA MODRDN,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpfHd1cE -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectclass:
>	top
>	extensibleObject
>add cn:
>	Kerberos Principal Name
>add ipaModRDNsourceAttr:
>	uid
>add ipaModRDNtargetAttr:
>	krbPrincipalName
>add ipaModRDNsuffix:
>	@SDRHEL76.TEST
>add ipaModRDNfilter:
>	(&(objectclass=posixaccount)(objectclass=krbPrincipalAux))
>add ipaModRDNscope:
>	dc=sdrhel76,dc=test
>adding new entry "cn=Kerberos Principal Name,cn=IPA MODRDN,cn=plugins,cn=config"
>modify complete
>
>add objectclass:
>	top
>	extensibleObject
>add cn:
>	Kerberos Canonical Name
>add ipaModRDNsourceAttr:
>	uid
>add ipaModRDNtargetAttr:
>	krbCanonicalName
>add ipaModRDNsuffix:
>	@SDRHEL76.TEST
>add ipaModRDNfilter:
>	(&(objectclass=posixaccount)(objectclass=krbPrincipalAux))
>add ipaModRDNscope:
>	dc=sdrhel76,dc=test
>adding new entry "cn=Kerberos Canonical Name,cn=IPA MODRDN,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [15/44]: configuring DNS plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/ipa-dns-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectclass:
>	top
>	nsslapdPlugin
>	extensibleObject
>add cn:
>	IPA DNS
>add nsslapd-plugindescription:
>	IPA DNS support plugin
>add nsslapd-pluginenabled:
>	on
>add nsslapd-pluginid:
>	ipa_dns
>add nsslapd-plugininitfunc:
>	ipadns_init
>add nsslapd-pluginpath:
>	libipa_dns.so
>add nsslapd-plugintype:
>	preoperation
>add nsslapd-pluginvendor:
>	Red Hat, Inc.
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-plugin-depends-on-type:
>	database
>adding new entry "cn=IPA DNS,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [16/44]: enabling entryUSN plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/entryusn.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=replace nsslapd-entryusn-global:
>	on
>modifying entry "cn=config"
>modify complete
>
>replace nsslapd-entryusn-import-initval:
>	next
>modifying entry "cn=config"
>modify complete
>
>replace nsslapd-pluginenabled:
>	on
>modifying entry "cn=USN,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [17/44]: configuring lockout plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/lockout-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	IPA Lockout
>add nsslapd-pluginpath:
>	libipa_lockout
>add nsslapd-plugininitfunc:
>	ipalockout_init
>add nsslapd-plugintype:
>	object
>add nsslapd-pluginenabled:
>	on
>add nsslapd-pluginid:
>	ipalockout_version
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	Red Hat, Inc.
>add nsslapd-plugindescription:
>	IPA Lockout plugin
>add nsslapd-plugin-depends-on-type:
>	database
>adding new entry "cn=IPA Lockout,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [18/44]: configuring topology plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpD2CsCL -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectClass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	IPA Topology Configuration
>add nsslapd-pluginPath:
>	libtopology
>add nsslapd-pluginInitfunc:
>	ipa_topo_init
>add nsslapd-pluginType:
>	object
>add nsslapd-pluginEnabled:
>	on
>add nsslapd-topo-plugin-shared-config-base:
>	cn=ipa,cn=etc,dc=sdrhel76,dc=test
>add nsslapd-topo-plugin-shared-replica-root:
>	dc=sdrhel76,dc=test
>	o=ipaca
>add nsslapd-topo-plugin-shared-binddngroup:
>	cn=replication managers,cn=sysaccounts,cn=etc,dc=sdrhel76,dc=test
>add nsslapd-topo-plugin-startup-delay:
>	20
>add nsslapd-pluginId:
>	none
>add nsslapd-plugin-depends-on-named:
>	ldbm database
>	Multimaster Replication Plugin
>add nsslapd-pluginVersion:
>	1.0
>add nsslapd-pluginVendor:
>	none
>add nsslapd-pluginDescription:
>	none
>adding new entry "cn=IPA Topology Configuration,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [19/44]: creating indices
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/indices.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:30Z DEBUG Process finished, return code=0
>2018-09-19T05:33:30Z DEBUG stdout=add objectClass:
>	top
>	nsIndex
>add cn:
>	krbPrincipalName
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	sub
>add nsMatchingRule:
>	caseIgnoreIA5Match
>	caseExactIA5Match
>adding new entry "cn=krbPrincipalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsIndex
>add cn:
>	ou
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	sub
>adding new entry "cn=ou,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsIndex
>add cn:
>	carLicense
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	sub
>adding new entry "cn=carLicense,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsIndex
>add cn:
>	title
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	sub
>adding new entry "cn=title,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsIndex
>add cn:
>	manager
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=manager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsIndex
>add cn:
>	secretary
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=secretary,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsIndex
>add cn:
>	displayname
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	sub
>adding new entry "cn=displayname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add nsIndexType:
>	sub
>modifying entry "cn=uid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsIndex
>add cn:
>	uidnumber
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>add nsMatchingRule:
>	integerOrderingMatch
>adding new entry "cn=uidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsIndex
>add cn:
>	gidnumber
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>add nsMatchingRule:
>	integerOrderingMatch
>adding new entry "cn=gidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>replace nsIndexType:
>	eq
>	pres
>modifying entry "cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>replace nsIndexType:
>	eq
>	pres
>modifying entry "cn=ntUserDomainId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add ObjectClass:
>	top
>	nsIndex
>add cn:
>	fqdn
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=fqdn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add ObjectClass:
>	top
>	nsIndex
>add cn:
>	macAddress
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>adding new entry "cn=macAddress,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	memberHost
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=memberHost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	memberUser
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=memberUser,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	sourcehost
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=sourcehost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	memberservice
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=memberservice,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	managedby
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=managedby,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	memberallowcmd
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=memberallowcmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	memberdenycmd
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=memberdenycmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	ipasudorunas
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=ipasudorunas,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	ipasudorunasgroup
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=ipasudorunasgroup,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	automountkey
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>adding new entry "cn=automountkey,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	ipakrbprincipalalias
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>adding new entry "cn=ipakrbprincipalalias,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	ipauniqueid
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>adding new entry "cn=ipauniqueid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	ipaMemberCa
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=ipaMemberCa,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	ipaMemberCertProfile
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>	sub
>adding new entry "cn=ipaMemberCertProfile,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	userCertificate
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>adding new entry "cn=userCertificate,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	ipalocation
>add ObjectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	pres
>adding new entry "cn=ipalocation,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	krbCanonicalName
>add objectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	sub
>adding new entry "cn=krbCanonicalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	serverhostname
>add objectClass:
>	top
>	nsIndex
>add nsSystemIndex:
>	false
>add nsIndexType:
>	eq
>	sub
>adding new entry "cn=serverhostname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	description
>add objectClass:
>	top
>	nsindex
>add nssystemindex:
>	false
>add nsindextype:
>	eq
>	sub
>adding new entry "cn=description,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	l
>add objectClass:
>	top
>	nsindex
>add nssystemindex:
>	false
>add nsindextype:
>	eq
>	sub
>adding new entry "cn=l,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	nsOsVersion
>add objectClass:
>	top
>	nsindex
>add nssystemindex:
>	false
>add nsindextype:
>	eq
>	sub
>adding new entry "cn=nsOsVersion,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	nsHardwarePlatform
>add objectClass:
>	top
>	nsindex
>add nssystemindex:
>	false
>add nsindextype:
>	eq
>	sub
>adding new entry "cn=nsHardwarePlatform,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add cn:
>	nsHostLocation
>add objectClass:
>	top
>	nsindex
>add nssystemindex:
>	false
>add nsindextype:
>	eq
>	sub
>adding new entry "cn=nsHostLocation,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:30Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:30Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:30Z DEBUG   [20/44]: enabling referential integrity plugin
>2018-09-19T05:33:30Z DEBUG Starting external process
>2018-09-19T05:33:30Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/referint-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:31Z DEBUG Process finished, return code=0
>2018-09-19T05:33:31Z DEBUG stdout=replace nsslapd-pluginenabled:
>	on
>modifying entry "cn=referential integrity postoperation,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:31Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:31Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:31Z DEBUG   [21/44]: configuring certmap.conf
>2018-09-19T05:33:31Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:31Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:31Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:31Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:31Z DEBUG   [22/44]: configure new location for managed entries
>2018-09-19T05:33:31Z DEBUG Starting external process
>2018-09-19T05:33:31Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpHGMc9z -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:31Z DEBUG Process finished, return code=0
>2018-09-19T05:33:31Z DEBUG stdout=add nsslapd-pluginConfigArea:
>	cn=Definitions,cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test
>modifying entry "cn=Managed Entries,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:31Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:31Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:31Z DEBUG   [23/44]: configure dirsrv ccache
>2018-09-19T05:33:31Z DEBUG Backing up system configuration file '/etc/sysconfig/dirsrv'
>2018-09-19T05:33:31Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:31Z DEBUG Starting external process
>2018-09-19T05:33:31Z DEBUG args=/usr/sbin/selinuxenabled
>2018-09-19T05:33:31Z DEBUG Process finished, return code=0
>2018-09-19T05:33:31Z DEBUG stdout=
>2018-09-19T05:33:31Z DEBUG stderr=
>2018-09-19T05:33:31Z DEBUG Starting external process
>2018-09-19T05:33:31Z DEBUG args=/sbin/restorecon /etc/sysconfig/dirsrv
>2018-09-19T05:33:31Z DEBUG Process finished, return code=0
>2018-09-19T05:33:31Z DEBUG stdout=
>2018-09-19T05:33:31Z DEBUG stderr=
>2018-09-19T05:33:31Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:31Z DEBUG   [24/44]: enabling SASL mapping fallback
>2018-09-19T05:33:31Z DEBUG Starting external process
>2018-09-19T05:33:31Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpp_FYWB -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:31Z DEBUG Process finished, return code=0
>2018-09-19T05:33:31Z DEBUG stdout=replace nsslapd-sasl-mapping-fallback:
>	on
>modifying entry "cn=config"
>modify complete
>
>
>2018-09-19T05:33:31Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:31Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:31Z DEBUG   [25/44]: restarting directory server
>2018-09-19T05:33:31Z DEBUG Destroyed connection context.ldap2_139871438609424
>2018-09-19T05:33:31Z DEBUG Starting external process
>2018-09-19T05:33:31Z DEBUG args=/bin/systemctl --system daemon-reload
>2018-09-19T05:33:31Z DEBUG Process finished, return code=0
>2018-09-19T05:33:31Z DEBUG stdout=
>2018-09-19T05:33:31Z DEBUG stderr=
>2018-09-19T05:33:31Z DEBUG Starting external process
>2018-09-19T05:33:31Z DEBUG args=/bin/systemctl restart dirsrv@SDRHEL76-TEST.service
>2018-09-19T05:33:37Z DEBUG Process finished, return code=0
>2018-09-19T05:33:37Z DEBUG stdout=
>2018-09-19T05:33:37Z DEBUG stderr=
>2018-09-19T05:33:37Z DEBUG Starting external process
>2018-09-19T05:33:37Z DEBUG args=/bin/systemctl is-active dirsrv@SDRHEL76-TEST.service
>2018-09-19T05:33:37Z DEBUG Process finished, return code=0
>2018-09-19T05:33:37Z DEBUG stdout=active
>
>2018-09-19T05:33:37Z DEBUG stderr=
>2018-09-19T05:33:37Z DEBUG wait_for_open_ports: localhost [389] timeout 300
>2018-09-19T05:33:37Z DEBUG waiting for port: 389
>2018-09-19T05:33:37Z DEBUG SUCCESS: port: 389
>2018-09-19T05:33:37Z DEBUG Restart of dirsrv@SDRHEL76-TEST.service complete
>2018-09-19T05:33:37Z DEBUG Starting external process
>2018-09-19T05:33:37Z DEBUG args=/bin/systemctl is-active dirsrv@SDRHEL76-TEST.service
>2018-09-19T05:33:37Z DEBUG Process finished, return code=0
>2018-09-19T05:33:37Z DEBUG stdout=active
>
>2018-09-19T05:33:37Z DEBUG stderr=
>2018-09-19T05:33:37Z DEBUG Created connection context.ldap2_139871438609424
>2018-09-19T05:33:37Z DEBUG   duration: 6 seconds
>2018-09-19T05:33:37Z DEBUG   [26/44]: adding sasl mappings to the directory
>2018-09-19T05:33:37Z DEBUG flushing ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket from SchemaCache
>2018-09-19T05:33:37Z DEBUG retrieving schema for SchemaCache url=ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7f365ad27f80>
>2018-09-19T05:33:37Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:37Z DEBUG   [27/44]: adding default layout
>2018-09-19T05:33:37Z DEBUG Starting external process
>2018-09-19T05:33:37Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpPHhZhg -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:38Z DEBUG Process finished, return code=0
>2018-09-19T05:33:38Z DEBUG stdout=add objectClass:
>	top
>	nsContainer
>add cn:
>	accounts
>adding new entry "cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	users
>adding new entry "cn=users,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	groups
>adding new entry "cn=groups,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	services
>adding new entry "cn=services,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	computers
>adding new entry "cn=computers,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	hostgroups
>adding new entry "cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>add cn:
>	alt
>adding new entry "cn=alt,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>add cn:
>	ng
>adding new entry "cn=ng,cn=alt,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>add cn:
>	automount
>adding new entry "cn=automount,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>add cn:
>	default
>adding new entry "cn=default,cn=automount,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	automountMap
>add automountMapName:
>	auto.master
>adding new entry "automountmapname=auto.master,cn=default,cn=automount,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	automountMap
>add automountMapName:
>	auto.direct
>adding new entry "automountmapname=auto.direct,cn=default,cn=automount,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	automount
>add automountKey:
>	/-
>add automountInformation:
>	auto.direct
>add description:
>	/- auto.direct
>adding new entry "description=/- auto.direct,automountmapname=auto.master,cn=default,cn=automount,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	hbac
>adding new entry "cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	hbacservices
>adding new entry "cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	hbacservicegroups
>adding new entry "cn=hbacservicegroups,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	sudo
>adding new entry "cn=sudo,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	sudocmds
>adding new entry "cn=sudocmds,cn=sudo,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	sudocmdgroups
>adding new entry "cn=sudocmdgroups,cn=sudo,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	sudorules
>adding new entry "cn=sudorules,cn=sudo,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	etc
>adding new entry "cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	locations
>adding new entry "cn=locations,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	sysaccounts
>adding new entry "cn=sysaccounts,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	ipa
>adding new entry "cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	masters
>adding new entry "cn=masters,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	replicas
>adding new entry "cn=replicas,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	dna
>adding new entry "cn=dna,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	posix-ids
>adding new entry "cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	ca_renewal
>adding new entry "cn=ca_renewal,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	certificates
>adding new entry "cn=certificates,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	custodia
>adding new entry "cn=custodia,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	dogtag
>adding new entry "cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	s4u2proxy
>adding new entry "cn=s4u2proxy,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	ipaKrb5DelegationACL
>	groupOfPrincipals
>	top
>add cn:
>	ipa-http-delegation
>add memberPrincipal:
>	HTTP/master.sdrhel76.test@SDRHEL76.TEST
>add ipaAllowedTarget:
>	cn=ipa-ldap-delegation-targets,cn=s4u2proxy,cn=etc,dc=sdrhel76,dc=test
>	cn=ipa-cifs-delegation-targets,cn=s4u2proxy,cn=etc,dc=sdrhel76,dc=test
>adding new entry "cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	groupOfPrincipals
>	top
>add cn:
>	ipa-ldap-delegation-targets
>add memberPrincipal:
>	ldap/master.sdrhel76.test@SDRHEL76.TEST
>adding new entry "cn=ipa-ldap-delegation-targets,cn=s4u2proxy,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	groupOfPrincipals
>	top
>add cn:
>	ipa-cifs-delegation-targets
>adding new entry "cn=ipa-cifs-delegation-targets,cn=s4u2proxy,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	person
>	posixaccount
>	krbprincipalaux
>	krbticketpolicyaux
>	inetuser
>	ipaobject
>	ipasshuser
>add uid:
>	admin
>add krbPrincipalName:
>	admin@SDRHEL76.TEST
>add cn:
>	Administrator
>add sn:
>	Administrator
>add uidNumber:
>	1786200000
>add gidNumber:
>	1786200000
>add homeDirectory:
>	/home/admin
>add loginShell:
>	/bin/bash
>add gecos:
>	Administrator
>add nsAccountLock:
>	FALSE
>add ipaUniqueID:
>	autogenerate
>adding new entry "uid=admin,cn=users,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	posixgroup
>	ipausergroup
>	ipaobject
>add cn:
>	admins
>add description:
>	Account administrators group
>add gidNumber:
>	1786200000
>add member:
>	uid=admin,cn=users,cn=accounts,dc=sdrhel76,dc=test
>add nsAccountLock:
>	FALSE
>add ipaUniqueID:
>	autogenerate
>adding new entry "cn=admins,cn=groups,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>	ipausergroup
>	ipaobject
>add description:
>	Default group for all users
>add cn:
>	ipausers
>add ipaUniqueID:
>	autogenerate
>adding new entry "cn=ipausers,cn=groups,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	posixgroup
>	ipausergroup
>	ipaobject
>add gidNumber:
>	1786200002
>add description:
>	Limited admins who can edit other users
>add cn:
>	editors
>add ipaUniqueID:
>	autogenerate
>adding new entry "cn=editors,cn=groups,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupOfNames
>	nestedGroup
>	ipaobject
>	ipahostgroup
>add description:
>	IPA server hosts
>add cn:
>	ipaservers
>add ipaUniqueID:
>	autogenerate
>adding new entry "cn=ipaservers,cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	sshd
>add description:
>	sshd
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=sshd,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	ftp
>add description:
>	ftp
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=ftp,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	su
>add description:
>	su
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=su,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	login
>add description:
>	login
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=login,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	su-l
>add description:
>	su with login shell
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=su-l,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	sudo
>add description:
>	sudo
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=sudo,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	sudo-i
>add description:
>	sudo-i
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=sudo-i,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	gdm
>add description:
>	gdm
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=gdm,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	gdm-password
>add description:
>	gdm-password
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=gdm-password,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	ipahbacservice
>	ipaobject
>add cn:
>	kdm
>add description:
>	kdm
>add ipauniqueid:
>	autogenerate
>adding new entry "cn=kdm,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	ipaobject
>	ipahbacservicegroup
>	nestedGroup
>	groupOfNames
>	top
>add cn:
>	Sudo
>add ipauniqueid:
>	autogenerate
>add description:
>	Default group of Sudo related services
>add member:
>	cn=sudo,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test
>	cn=sudo-i,cn=hbacservices,cn=hbac,dc=sdrhel76,dc=test
>adding new entry "cn=Sudo,cn=hbacservicegroups,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>	ipaGuiConfig
>	ipaConfigObject
>add ipaUserSearchFields:
>	uid,givenname,sn,telephonenumber,ou,title
>add ipaGroupSearchFields:
>	cn,description
>add ipaSearchTimeLimit:
>	2
>add ipaSearchRecordsLimit:
>	100
>add ipaHomesRootDir:
>	/home
>add ipaDefaultLoginShell:
>	/bin/sh
>add ipaDefaultPrimaryGroup:
>	ipausers
>add ipaMaxUsernameLength:
>	32
>add ipaPwdExpAdvNotify:
>	4
>add ipaGroupObjectClasses:
>	top
>	groupofnames
>	nestedgroup
>	ipausergroup
>	ipaobject
>add ipaUserObjectClasses:
>	top
>	person
>	organizationalperson
>	inetorgperson
>	inetuser
>	posixaccount
>	krbprincipalaux
>	krbticketpolicyaux
>	ipaobject
>	ipasshuser
>add ipaDefaultEmailDomain:
>	sdrhel76.test
>add ipaMigrationEnabled:
>	FALSE
>add ipaConfigString:
>	AllowNThash
>	KDC:Disable Last Success
>add ipaSELinuxUserMapOrder:
>	guest_u:s0$xguest_u:s0$user_u:s0$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023
>add ipaSELinuxUserMapDefault:
>	unconfined_u:s0-s0:c0.c1023
>adding new entry "cn=ipaConfig,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	top
>	nsContainer
>add cn:
>	cosTemplates
>adding new entry "cn=cosTemplates,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add description:
>	Password Policy based on group membership
>add objectClass:
>	top
>	ldapsubentry
>	cosSuperDefinition
>	cosClassicDefinition
>add cosTemplateDn:
>	cn=cosTemplates,cn=accounts,dc=sdrhel76,dc=test
>add cosAttribute:
>	krbPwdPolicyReference override
>add cosSpecifier:
>	memberOf
>adding new entry "cn=Password Policy,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	selinux
>adding new entry "cn=selinux,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	usermap
>adding new entry "cn=usermap,cn=selinux,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	ranges
>adding new entry "cn=ranges,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	ipaIDrange
>	ipaDomainIDRange
>add cn:
>	SDRHEL76.TEST_id_range
>add ipaBaseID:
>	1786200000
>add ipaIDRangeSize:
>	200000
>add ipaRangeType:
>	ipa-local
>adding new entry "cn=SDRHEL76.TEST_id_range,cn=ranges,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	ca
>adding new entry "cn=ca,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	certprofiles
>adding new entry "cn=certprofiles,cn=ca,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	caacls
>adding new entry "cn=caacls,cn=ca,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	cas
>adding new entry "cn=cas,cn=ca,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:38Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:38Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:38Z DEBUG   [28/44]: adding delegation layout
>2018-09-19T05:33:38Z DEBUG Starting external process
>2018-09-19T05:33:38Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpPenJv7 -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:38Z DEBUG Process finished, return code=0
>2018-09-19T05:33:38Z DEBUG stdout=add objectClass:
>	top
>	nsContainer
>add cn:
>	roles
>adding new entry "cn=roles,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	pbac
>adding new entry "cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	privileges
>adding new entry "cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	permissions
>adding new entry "cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	helpdesk
>add description:
>	Helpdesk
>adding new entry "cn=helpdesk,cn=roles,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	User Administrators
>add description:
>	User Administrators
>adding new entry "cn=User Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Group Administrators
>add description:
>	Group Administrators
>adding new entry "cn=Group Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Host Administrators
>add description:
>	Host Administrators
>adding new entry "cn=Host Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Host Group Administrators
>add description:
>	Host Group Administrators
>adding new entry "cn=Host Group Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Delegation Administrator
>add description:
>	Role administration
>adding new entry "cn=Delegation Administrator,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	DNS Administrators
>add description:
>	DNS Administrators
>adding new entry "cn=DNS Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	DNS Servers
>add description:
>	DNS Servers
>adding new entry "cn=DNS Servers,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Service Administrators
>add description:
>	Service Administrators
>adding new entry "cn=Service Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Automount Administrators
>add description:
>	Automount Administrators
>adding new entry "cn=Automount Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Netgroups Administrators
>add description:
>	Netgroups Administrators
>adding new entry "cn=Netgroups Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Certificate Administrators
>add description:
>	Certificate Administrators
>adding new entry "cn=Certificate Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Replication Administrators
>add description:
>	Replication Administrators
>add member:
>	cn=admins,cn=groups,cn=accounts,dc=sdrhel76,dc=test
>adding new entry "cn=Replication Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Host Enrollment
>add description:
>	Host Enrollment
>adding new entry "cn=Host Enrollment,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Stage User Administrators
>add description:
>	Stage User Administrators
>adding new entry "cn=Stage User Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	nestedgroup
>add cn:
>	Stage User Provisioning
>add description:
>	Stage User Provisioning
>adding new entry "cn=Stage User Provisioning,cn=privileges,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Add Replication Agreements
>add ipapermissiontype:
>	SYSTEM
>add member:
>	cn=Replication Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Add Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Modify Replication Agreements
>add ipapermissiontype:
>	SYSTEM
>add member:
>	cn=Replication Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Modify Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Read Replication Agreements
>add ipapermissiontype:
>	SYSTEM
>add member:
>	cn=Replication Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Read Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Remove Replication Agreements
>add ipapermissiontype:
>	SYSTEM
>add member:
>	cn=Replication Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Remove Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Modify DNA Range
>add ipapermissiontype:
>	SYSTEM
>add member:
>	cn=Replication Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Modify DNA Range,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	virtual operations
>adding new entry "cn=virtual operations,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Retrieve Certificates from the CA
>add member:
>	cn=Certificate Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Retrieve Certificates from the CA,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "objectclass")(target = "ldap:///cn=retrieve certificate,cn=virtual operations,cn=etc,dc=sdrhel76,dc=test" )(version 3.0 ; acl "permission:Retrieve Certificates from the CA" ; allow (write) groupdn = "ldap:///cn=Retrieve Certificates from the CA,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Request Certificate
>add member:
>	cn=Certificate Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Request Certificate,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "objectclass")(target = "ldap:///cn=request certificate,cn=virtual operations,cn=etc,dc=sdrhel76,dc=test" )(version 3.0 ; acl "permission:Request Certificate" ; allow (write) groupdn = "ldap:///cn=Request Certificate,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Request Certificates from a different host
>add member:
>	cn=Certificate Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Request Certificates from a different host,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "objectclass")(target = "ldap:///cn=request certificate different host,cn=virtual operations,cn=etc,dc=sdrhel76,dc=test" )(version 3.0 ; acl "permission:Request Certificates from a different host" ; allow (write) groupdn = "ldap:///cn=Request Certificates from a different host,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Get Certificates status from the CA
>add member:
>	cn=Certificate Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Get Certificates status from the CA,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "objectclass")(target = "ldap:///cn=certificate status,cn=virtual operations,cn=etc,dc=sdrhel76,dc=test" )(version 3.0 ; acl "permission:Get Certificates status from the CA" ; allow (write) groupdn = "ldap:///cn=Get Certificates status from the CA,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Revoke Certificate
>add member:
>	cn=Certificate Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Revoke Certificate,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "objectclass")(target = "ldap:///cn=revoke certificate,cn=virtual operations,cn=etc,dc=sdrhel76,dc=test" )(version 3.0 ; acl "permission:Revoke Certificate"; allow (write) groupdn = "ldap:///cn=Revoke Certificate,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	groupofnames
>	ipapermission
>add cn:
>	Certificate Remove Hold
>add member:
>	cn=Certificate Administrators,cn=privileges,cn=pbac,dc=sdrhel76,dc=test
>adding new entry "cn=Certificate Remove Hold,cn=permissions,cn=pbac,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "objectclass")(target = "ldap:///cn=certificate remove hold,cn=virtual operations,cn=etc,dc=sdrhel76,dc=test" )(version 3.0 ; acl "permission:Certificate Remove Hold"; allow (write) groupdn = "ldap:///cn=Certificate Remove Hold,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:38Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:38Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:38Z DEBUG   [29/44]: creating container for managed entries
>2018-09-19T05:33:38Z DEBUG Starting external process
>2018-09-19T05:33:38Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpHnnlmp -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:38Z DEBUG Process finished, return code=0
>2018-09-19T05:33:38Z DEBUG stdout=add objectClass:
>	nsContainer
>	top
>add cn:
>	Managed Entries
>adding new entry "cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	Templates
>adding new entry "cn=Templates,cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	nsContainer
>	top
>add cn:
>	Definitions
>adding new entry "cn=Definitions,cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:38Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:38Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:38Z DEBUG   [30/44]: configuring user private groups
>2018-09-19T05:33:38Z DEBUG Starting external process
>2018-09-19T05:33:38Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp4mujNy -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:38Z DEBUG Process finished, return code=0
>2018-09-19T05:33:38Z DEBUG stdout=add objectclass:
>	mepTemplateEntry
>add cn:
>	UPG Template
>add mepRDNAttr:
>	cn
>add mepStaticAttr:
>	objectclass: posixgroup
>	objectclass: ipaobject
>	ipaUniqueId: autogenerate
>add mepMappedAttr:
>	cn: $uid
>	gidNumber: $uidNumber
>	description: User private group for $uid
>adding new entry "cn=UPG Template,cn=Templates,cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	extensibleObject
>add cn:
>	UPG Definition
>add originScope:
>	cn=users,cn=accounts,dc=sdrhel76,dc=test
>add originFilter:
>	(&(objectclass=posixAccount)(!(description=__no_upg__)))
>add managedBase:
>	cn=groups,cn=accounts,dc=sdrhel76,dc=test
>add managedTemplate:
>	cn=UPG Template,cn=Templates,cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test
>adding new entry "cn=UPG Definition,cn=Definitions,cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:38Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:38Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:38Z DEBUG   [31/44]: configuring netgroups from hostgroups
>2018-09-19T05:33:38Z DEBUG Starting external process
>2018-09-19T05:33:38Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpcAp1Ol -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:38Z DEBUG Process finished, return code=0
>2018-09-19T05:33:38Z DEBUG stdout=add objectclass:
>	mepTemplateEntry
>add cn:
>	NGP HGP Template
>add mepRDNAttr:
>	cn
>add mepStaticAttr:
>	ipaUniqueId: autogenerate
>	objectclass: ipanisnetgroup
>	objectclass: ipaobject
>	nisDomainName: sdrhel76.test
>add mepMappedAttr:
>	cn: $cn
>	memberHost: $dn
>	description: ipaNetgroup $cn
>adding new entry "cn=NGP HGP Template,cn=Templates,cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	extensibleObject
>add cn:
>	NGP Definition
>add originScope:
>	cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test
>add originFilter:
>	objectclass=ipahostgroup
>add managedBase:
>	cn=ng,cn=alt,dc=sdrhel76,dc=test
>add managedTemplate:
>	cn=NGP HGP Template,cn=Templates,cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test
>adding new entry "cn=NGP Definition,cn=Definitions,cn=Managed Entries,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:38Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:38Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:38Z DEBUG   [32/44]: creating default Sudo bind user
>2018-09-19T05:33:38Z DEBUG Starting external process
>2018-09-19T05:33:38Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpT9kLNS -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:39Z DEBUG Process finished, return code=0
>2018-09-19T05:33:39Z DEBUG stdout=add objectclass:
>	account
>	simplesecurityobject
>add uid:
>	sudo
>add userPassword:
>	XXXXXXXX
>add passwordExpirationTime:
>	20380119031407Z
>add nsIdleTimeout:
>	0
>adding new entry "uid=sudo,cn=sysaccounts,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:39Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:39Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:39Z DEBUG   [33/44]: creating default Auto Member layout
>2018-09-19T05:33:39Z DEBUG Starting external process
>2018-09-19T05:33:39Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpbw_j3_ -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:39Z DEBUG Process finished, return code=0
>2018-09-19T05:33:39Z DEBUG stdout=add nsslapd-pluginConfigArea:
>	cn=automember,cn=etc,dc=sdrhel76,dc=test
>modifying entry "cn=Auto Membership Plugin,cn=plugins,cn=config"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>add cn:
>	automember
>adding new entry "cn=automember,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	autoMemberDefinition
>add cn:
>	Hostgroup
>add autoMemberScope:
>	cn=computers,cn=accounts,dc=sdrhel76,dc=test
>add autoMemberFilter:
>	objectclass=ipaHost
>add autoMemberGroupingAttr:
>	member:dn
>adding new entry "cn=Hostgroup,cn=automember,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	autoMemberDefinition
>add cn:
>	Group
>add autoMemberScope:
>	cn=users,cn=accounts,dc=sdrhel76,dc=test
>add autoMemberFilter:
>	objectclass=posixAccount
>add autoMemberGroupingAttr:
>	member:dn
>adding new entry "cn=Group,cn=automember,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:39Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:39Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:39Z DEBUG   [34/44]: adding range check plugin
>2018-09-19T05:33:39Z DEBUG Starting external process
>2018-09-19T05:33:39Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp4PYPOY -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:39Z DEBUG Process finished, return code=0
>2018-09-19T05:33:39Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	IPA Range-Check
>add nsslapd-pluginpath:
>	libipa_range_check
>add nsslapd-plugininitfunc:
>	ipa_range_check_init
>add nsslapd-plugintype:
>	preoperation
>add nsslapd-pluginenabled:
>	on
>add nsslapd-pluginid:
>	ipa_range_check_version
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	Red Hat, Inc.
>add nsslapd-plugindescription:
>	IPA Range-Check plugin
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-basedn:
>	dc=sdrhel76,dc=test
>adding new entry "cn=IPA Range-Check,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:39Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:39Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:39Z DEBUG   [35/44]: creating default HBAC rule allow_all
>2018-09-19T05:33:39Z DEBUG Starting external process
>2018-09-19T05:33:39Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpiSN9xo -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:39Z DEBUG Process finished, return code=0
>2018-09-19T05:33:39Z DEBUG stdout=add objectclass:
>	ipaassociation
>	ipahbacrule
>add cn:
>	allow_all
>add accessruletype:
>	allow
>add usercategory:
>	all
>add hostcategory:
>	all
>add servicecategory:
>	all
>add ipaenabledflag:
>	TRUE
>add description:
>	Allow all users to access any host from any host
>add ipauniqueid:
>	autogenerate
>adding new entry "ipauniqueid=autogenerate,cn=hbac,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:39Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:39Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:39Z DEBUG   [36/44]: adding entries for topology management
>2018-09-19T05:33:39Z DEBUG Starting external process
>2018-09-19T05:33:39Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp_J8G5n -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:39Z DEBUG Process finished, return code=0
>2018-09-19T05:33:39Z DEBUG stdout=add objectclass:
>	top
>	nsContainer
>add cn:
>	topology
>adding new entry "cn=topology,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add objectclass:
>	top
>	iparepltopoconf
>add ipaReplTopoConfRoot:
>	dc=sdrhel76,dc=test
>add nsDS5ReplicatedAttributeList:
>	(objectclass=*) $ EXCLUDE memberof idnssoaserial entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
>add nsDS5ReplicatedAttributeListTotal:
>	(objectclass=*) $ EXCLUDE entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
>add nsds5ReplicaStripAttrs:
>	modifiersName modifyTimestamp internalModifiersName internalModifyTimestamp
>add cn:
>	domain
>adding new entry "cn=domain,cn=topology,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:39Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:39Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:39Z DEBUG   [37/44]: initializing group membership
>2018-09-19T05:33:39Z DEBUG Starting external process
>2018-09-19T05:33:39Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp6XgBcR -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:39Z DEBUG Process finished, return code=0
>2018-09-19T05:33:39Z DEBUG stdout=add objectClass:
>	top
>	extensibleObject
>add cn:
>	IPA install
>add basedn:
>	dc=sdrhel76,dc=test
>add filter:
>	(objectclass=*)
>add ttl:
>	10
>adding new entry "cn=IPA install 1537335195, cn=memberof task, cn=tasks, cn=config"
>modify complete
>
>
>2018-09-19T05:33:39Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:39Z DEBUG Waiting for memberof task to complete.
>2018-09-19T05:33:39Z DEBUG retrieving schema for SchemaCache url=ldap://master.sdrhel76.test:389 conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7f3659e3f680>
>2018-09-19T05:33:40Z DEBUG   duration: 1 seconds
>2018-09-19T05:33:40Z DEBUG   [38/44]: adding master entry
>2018-09-19T05:33:40Z DEBUG Starting external process
>2018-09-19T05:33:40Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpWC5WQt -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:40Z DEBUG Process finished, return code=0
>2018-09-19T05:33:40Z DEBUG stdout=add objectclass:
>	top
>	nsContainer
>	ipaReplTopoManagedServer
>	ipaConfigObject
>	ipaSupportedDomainLevelConfig
>add cn:
>	master.sdrhel76.test
>add ipaReplTopoManagedSuffix:
>	dc=sdrhel76,dc=test
>add ipaMinDomainLevel:
>	0
>add ipaMaxDomainLevel:
>	1
>adding new entry "cn=master.sdrhel76.test,cn=masters,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:40Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:40Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:40Z DEBUG   [39/44]: initializing domain level
>2018-09-19T05:33:40Z DEBUG Starting external process
>2018-09-19T05:33:40Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp0Xk5cs -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:40Z DEBUG Process finished, return code=0
>2018-09-19T05:33:40Z DEBUG stdout=add objectClass:
>	top
>	nsContainer
>	ipaDomainLevelConfig
>add ipaDomainLevel:
>	1
>adding new entry "cn=Domain Level,cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:40Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:40Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:40Z DEBUG   [40/44]: configuring Posix uid/gid generation
>2018-09-19T05:33:40Z DEBUG Starting external process
>2018-09-19T05:33:40Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpD8RfBC -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=add objectclass:
>	top
>	extensibleObject
>add cn:
>	Posix IDs
>add dnaType:
>	uidNumber
>	gidNumber
>add dnaNextValue:
>	1786200000
>add dnaMaxValue:
>	1786399999
>add dnaMagicRegen:
>	-1
>add dnaFilter:
>	(|(objectClass=posixAccount)(objectClass=posixGroup)(objectClass=ipaIDobject))
>add dnaScope:
>	dc=sdrhel76,dc=test
>add dnaThreshold:
>	500
>add dnaSharedCfgDN:
>	cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=sdrhel76,dc=test
>add dnaExcludeScope:
>	cn=provisioning,dc=sdrhel76,dc=test
>adding new entry "cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config"
>modify complete
>
>replace nsslapd-pluginEnabled:
>	on
>modifying entry "cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:41Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:41Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:41Z DEBUG   [41/44]: adding replication acis
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpMR7lLY -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=add aci:
>	(targetattr = "cn || createtimestamp || description || entryusn || modifytimestamp || nsds50ruv || nsds5beginreplicarefresh || nsds5debugreplicatimeout || nsds5flags || nsds5replicaabortcleanruv || nsds5replicaautoreferral || nsds5replicabackoffmax || nsds5replicabackoffmin || nsds5replicabinddn || nsds5replicabindmethod || nsds5replicabusywaittime || nsds5replicachangecount || nsds5replicachangessentsincestartup || nsds5replicacleanruv || nsds5replicacleanruvnotified || nsds5replicacredentials || nsds5replicaenabled || nsds5replicahost || nsds5replicaid || nsds5replicalastinitend || nsds5replicalastinitstart || nsds5replicalastinitstatus || nsds5replicalastupdateend || nsds5replicalastupdatestart || nsds5replicalastupdatestatus || nsds5replicalegacyconsumer || nsds5replicaname || nsds5replicaport || nsds5replicaprotocoltimeout || nsds5replicapurgedelay || nsds5replicareferral || nsds5replicaroot || nsds5replicasessionpausetime || nsds5replicastripattrs || nsds5replicatedattributelist || nsds5replicatedattributelisttotal || nsds5replicatimeout || nsds5replicatombstonepurgeinterval || nsds5replicatransportinfo || nsds5replicatype || nsds5replicaupdateinprogress || nsds5replicaupdateschedule || nsds5task || nsds7directoryreplicasubtree || nsds7dirsynccookie || nsds7newwingroupsyncenabled || nsds7newwinusersyncenabled || nsds7windowsdomain || nsds7windowsreplicasubtree || nsruvreplicalastmodified || nsstate || objectclass || onewaysync || winsyncdirectoryfilter || winsyncinterval || winsyncmoveaction || winsyncsubtreepair || winsyncwindowsfilter")(targetfilter = "(|(objectclass=nsds5Replica)(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement)(objectClass=nsMappingTree))")(version 3.0;acl "permission:Read Replication Agreements";allow (compare,read,search) groupdn = "ldap:///cn=Read Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "cn=mapping tree,cn=config"
>modify complete
>
>add aci:
>	(targetattr=*)(version 3.0;acl "permission:Add Replication Agreements";allow (add) groupdn = "ldap:///cn=Add Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "cn=mapping tree,cn=config"
>modify complete
>
>add aci:
>	(targetattr=*)(targetfilter="(|(objectclass=nsds5Replica)(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement)(objectClass=nsMappingTree))")(version 3.0; acl "permission:Modify Replication Agreements"; allow (read, write, search) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "cn=mapping tree,cn=config"
>modify complete
>
>add aci:
>	(targetattr=*)(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0;acl "permission:Remove Replication Agreements";allow (delete) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "cn=mapping tree,cn=config"
>modify complete
>
>add aci:
>	(targetattr=dnaNextRange || dnaNextValue || dnaMaxValue)(version 3.0;acl "permission:Modify DNA Range";allow (write) groupdn = "ldap:///cn=Modify DNA Range,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config"
>modify complete
>
>add aci:
>	(targetattr=nsslapd-readonly)(version 3.0; acl "Allow marking the database readonly"; allow (write) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
>modify complete
>
>add aci:
>	(targetattr=*)(version 3.0; acl "Run tasks after replica re-initialization"; allow (add) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,dc=sdrhel76,dc=test";)
>modifying entry "cn=tasks,cn=config"
>modify complete
>
>
>2018-09-19T05:33:41Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:41Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:41Z DEBUG   [42/44]: activating sidgen plugin
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpjKWIRj -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	IPA SIDGEN
>add nsslapd-pluginpath:
>	libipa_sidgen
>add nsslapd-plugininitfunc:
>	ipa_sidgen_init
>add nsslapd-plugintype:
>	postoperation
>add nsslapd-pluginenabled:
>	on
>add nsslapd-pluginid:
>	ipa_sidgen_postop
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	Red Hat, Inc.
>add nsslapd-plugindescription:
>	IPA SIDGEN post operation
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-basedn:
>	dc=sdrhel76,dc=test
>adding new entry "cn=IPA SIDGEN,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:41Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:41Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:41Z DEBUG   [43/44]: activating extdom plugin
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpBKXWoE -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	ipa_extdom_extop
>add nsslapd-pluginpath:
>	libipa_extdom_extop
>add nsslapd-plugininitfunc:
>	ipa_extdom_init
>add nsslapd-plugintype:
>	extendedop
>add nsslapd-pluginenabled:
>	on
>add nsslapd-pluginid:
>	ipa_extdom_extop
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	RedHat
>add nsslapd-plugindescription:
>	Support resolving IDs in trusted domains to names and back
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-basedn:
>	dc=sdrhel76,dc=test
>adding new entry "cn=ipa_extdom_extop,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:41Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:41Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:41Z DEBUG   [44/44]: configuring directory to start on boot
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/bin/systemctl is-enabled dirsrv@SDRHEL76-TEST.service
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=enabled
>
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:41Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/bin/systemctl disable dirsrv@SDRHEL76-TEST.service
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=
>2018-09-19T05:33:41Z DEBUG stderr=Removed symlink /etc/systemd/system/multi-user.target.wants/dirsrv@SDRHEL76-TEST.service.
>Removed symlink /etc/systemd/system/dirsrv.target.wants/dirsrv@SDRHEL76-TEST.service.
>
>2018-09-19T05:33:41Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:41Z DEBUG Done configuring directory server (dirsrv).
>2018-09-19T05:33:41Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:41Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:41Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/bin/systemctl is-active ntpd.service
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=active
>
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/bin/systemctl disable ntpd.service
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=
>2018-09-19T05:33:41Z DEBUG stderr=Removed symlink /etc/systemd/system/multi-user.target.wants/ntpd.service.
>
>2018-09-19T05:33:41Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:41Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/bin/systemctl start ntpd.service
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/bin/systemctl is-active ntpd.service
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=active
>
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG Start of ntpd.service complete
>2018-09-19T05:33:41Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=keyctl get_persistent @s 0
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=656085567
>
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG Enabling persistent keyring CCACHE
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/bin/systemctl is-active krb5kdc.service
>2018-09-19T05:33:41Z DEBUG Process finished, return code=3
>2018-09-19T05:33:41Z DEBUG stdout=unknown
>
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:41Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/bin/systemctl stop krb5kdc.service
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG Stop of krb5kdc.service complete
>2018-09-19T05:33:41Z DEBUG Configuring Kerberos KDC (krb5kdc)
>2018-09-19T05:33:41Z DEBUG   [1/10]: adding kerberos container to the directory
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpAQdjgi -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=add objectClass:
>	krbContainer
>	top
>add cn:
>	kerberos
>adding new entry "cn=kerberos,dc=sdrhel76,dc=test"
>modify complete
>
>add cn:
>	SDRHEL76.TEST
>add objectClass:
>	top
>	krbrealmcontainer
>	krbticketpolicyaux
>add krbSubTrees:
>	dc=sdrhel76,dc=test
>add krbSearchScope:
>	2
>add krbSupportedEncSaltTypes:
>	aes256-cts:normal
>	aes256-cts:special
>	aes128-cts:normal
>	aes128-cts:special
>	des3-hmac-sha1:normal
>	des3-hmac-sha1:special
>	arcfour-hmac:normal
>	arcfour-hmac:special
>	camellia128-cts-cmac:normal
>	camellia128-cts-cmac:special
>	camellia256-cts-cmac:normal
>	camellia256-cts-cmac:special
>add krbMaxTicketLife:
>	86400
>add krbMaxRenewableAge:
>	604800
>add krbDefaultEncSaltTypes:
>	aes256-cts:special
>	aes128-cts:special
>adding new entry "cn=SDRHEL76.TEST,cn=kerberos,dc=sdrhel76,dc=test"
>modify complete
>
>add objectClass:
>	top
>	nsContainer
>	krbPwdPolicy
>add krbMinPwdLife:
>	3600
>add krbPwdMinDiffChars:
>	0
>add krbPwdMinLength:
>	8
>add krbPwdHistoryLength:
>	0
>add krbMaxPwdLife:
>	7776000
>add krbPwdMaxFailure:
>	6
>add krbPwdFailureCountInterval:
>	60
>add krbPwdLockoutDuration:
>	600
>adding new entry "cn=global_policy,cn=SDRHEL76.TEST,cn=kerberos,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:41Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:41Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:41Z DEBUG   [2/10]: configuring KDC
>2018-09-19T05:33:41Z DEBUG Backing up system configuration file '/var/kerberos/krb5kdc/kdc.conf'
>2018-09-19T05:33:41Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:41Z DEBUG Backing up system configuration file '/etc/krb5.conf'
>2018-09-19T05:33:41Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:41Z DEBUG Backing up system configuration file '/usr/share/ipa/html/krb5.ini'
>2018-09-19T05:33:41Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:41Z DEBUG Backing up system configuration file '/usr/share/ipa/html/krb.con'
>2018-09-19T05:33:41Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:41Z DEBUG Backing up system configuration file '/usr/share/ipa/html/krbrealm.con'
>2018-09-19T05:33:41Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=klist -V
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=Kerberos 5 version 1.15.1
>
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG Backing up system configuration file '/etc/sysconfig/krb5kdc'
>2018-09-19T05:33:41Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/usr/sbin/selinuxenabled
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=/sbin/restorecon /etc/sysconfig/krb5kdc
>2018-09-19T05:33:41Z DEBUG Process finished, return code=0
>2018-09-19T05:33:41Z DEBUG stdout=
>2018-09-19T05:33:41Z DEBUG stderr=
>2018-09-19T05:33:41Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:41Z DEBUG   [3/10]: initialize kerberos container
>2018-09-19T05:33:41Z DEBUG Starting external process
>2018-09-19T05:33:41Z DEBUG args=kdb5_util create -s -r SDRHEL76.TEST -x ipa-setup-override-restrictions
>2018-09-19T05:33:42Z DEBUG Process finished, return code=0
>2018-09-19T05:33:42Z DEBUG stdout=Loading random data
>Initializing database '/var/kerberos/krb5kdc/principal' for realm 'SDRHEL76.TEST',
>master key name 'K/M@SDRHEL76.TEST'
>You will be prompted for the database Master Password.
>It is important that you NOT FORGET this password.
>Enter KDC database master key: 
>Re-enter KDC database master key to verify: 
>
>2018-09-19T05:33:42Z DEBUG stderr=
>2018-09-19T05:33:42Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:42Z DEBUG   [4/10]: adding default ACIs
>2018-09-19T05:33:42Z DEBUG Starting external process
>2018-09-19T05:33:42Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp60ucYl -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:42Z DEBUG Process finished, return code=0
>2018-09-19T05:33:42Z DEBUG stdout=add aci:
>	(targetattr = "userpassword || krbprincipalkey || sambalmpassword || sambantpassword")(version 3.0; acl "selfservice:Self can write own password"; allow (write) userdn="ldap:///self";)
>modifying entry "dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "givenname || sn || cn || displayname || title || initials || loginshell || gecos || homephone || mobile || pager || facsimiletelephonenumber || telephonenumber || street || roomnumber || l || st || postalcode || manager || secretary || description || carlicense || labeleduri || inetuserhttpurl || seealso || employeetype  || businesscategory || ou")(version 3.0;acl "selfservice:User Self service";allow (write) userdn = "ldap:///self";)
>	(targetattr = "ipasshpubkey")(version 3.0;acl "selfservice:Users can manage their own SSH public keys";allow (write) userdn = "ldap:///self";)
>	(targetattr = "usercertificate")(version 3.0;acl "selfservice:Users can manage their own X.509 certificates";allow (write) userdn = "ldap:///self";)
>modifying entry "dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetfilter = "(objectClass=ipaGuiConfig)")(targetattr != "aci")(version 3.0;acl "Admins can change GUI config"; allow (read, search, compare, write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=sdrhel76,dc=test";)
>modifying entry "cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetfilter = "(|(objectClass=ipaConfigObject)(dnahostname=*))")(version 3.0;acl "Admins can change GUI config"; allow (delete) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=sdrhel76,dc=test";)
>modifying entry "cn=ipa,cn=etc,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "krbMaxPwdLife || krbMinPwdLife || krbPwdMinDiffChars || krbPwdMinLength || krbPwdHistoryLength")(version 3.0;acl "Admins can write password policy"; allow (write) groupdn="ldap:///cn=admins,cn=groups,cn=accounts,dc=sdrhel76,dc=test";)
>	(targetattr = "aci")(version 3.0;acl "Admins can manage delegations"; allow (write, delete) groupdn="ldap:///cn=admins,cn=groups,cn=accounts,dc=sdrhel76,dc=test";)
>	(targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Users allowed to retrieve keytab keys"; allow(read) userattr="ipaAllowedToPerform;read_keys#USERDN";)
>	(targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Groups allowed to retrieve keytab keys"; allow(read) userattr="ipaAllowedToPerform;read_keys#GROUPDN";)
>	(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Users allowed to create keytab keys"; allow(write) userattr="ipaAllowedToPerform;write_keys#USERDN";)
>	(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Groups allowed to create keytab keys"; allow(write) userattr="ipaAllowedToPerform;write_keys#GROUPDN";)
>	(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Entities are allowed to rekey themselves"; allow(write) userdn="ldap:///self";)
>	(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Admins are allowed to rekey any entity"; allow(write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=sdrhel76,dc=test";)
>	(targetfilter="(|(objectclass=ipaHost)(objectclass=ipaService))")(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Entities are allowed to rekey managed entries"; allow(write) userattr="managedby#USERDN";)
>modifying entry "cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "krbPrincipalKey || krbLastPwdChange")(target = "ldap:///krbprincipalname=*,cn=services,cn=accounts,dc=sdrhel76,dc=test")(version 3.0;acl "Admins can manage service keytab";allow (write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=sdrhel76,dc=test";)
>modifying entry "cn=services,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr="userCertificate || krbPrincipalKey")(version 3.0; acl "Hosts can manage service Certificates and kerberos keys"; allow(write) userattr = "parent[0,1].managedby#USERDN";)
>modifying entry "cn=services,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr="usercertificate || krblastpwdchange || description || l || nshostlocation || nshardwareplatform || nsosversion")(version 3.0; acl "Hosts can modify their own certs and keytabs"; allow(write) userdn = "ldap:///self";)
>	(targetattr="ipasshpubkey")(version 3.0; acl "Hosts can modify their own SSH public keys"; allow(write) userdn = "ldap:///self";)
>modifying entry "cn=computers,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr="userCertificate || krbPrincipalKey")(version 3.0; acl "Hosts can manage other host Certificates and kerberos keys"; allow(write) userattr = "parent[0,1].managedby#USERDN";)
>	(targetattr="ipasshpubkey")(version 3.0; acl "Hosts can manage other host SSH public keys"; allow(write) userattr = "parent[0,1].managedby#USERDN";)
>modifying entry "cn=computers,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr = "krbPrincipalKey || krbLastPwdChange")(target = "ldap:///fqdn=*,cn=computers,cn=accounts,dc=sdrhel76,dc=test")(version 3.0;acl "Admins can manage host keytab";allow (write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=sdrhel76,dc=test";)
>modifying entry "cn=computers,cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetattr="userPassword || krbPrincipalKey")(version 3.0; acl "Search existence of password and kerberos keys"; allow(search) userdn = "ldap:///all";)
>modifying entry "cn=accounts,dc=sdrhel76,dc=test"
>modify complete
>
>add aci:
>	(targetfilter = "(objectClass=ipaToken)")(targetattrs = "objectclass || description || managedBy || ipatokenUniqueID || ipatokenDisabled || ipatokenNotBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSerial || ipatokenOwner")(version 3.0; acl "Users/managers can read basic token info"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN" or userattr = "managedBy#USERDN";)
>	(targetfilter = "(objectClass=ipatokenTOTP)")(targetattrs = "ipatokenOTPalgorithm || ipatokenOTPdigits || ipatokenTOTPtimeStep")(version 3.0; acl "Users/managers can see TOTP details"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN" or userattr = "managedBy#USERDN";)
>	(targetfilter = "(objectClass=ipatokenHOTP)")(targetattrs = "ipatokenOTPalgorithm || ipatokenOTPdigits")(version 3.0; acl "Users/managers can see HOTP details"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN" or userattr = "managedBy#USERDN";)
>	(targetfilter = "(objectClass=ipaToken)")(targetattrs = "description || ipatokenDisabled || ipatokenNotBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSerial")(version 3.0; acl "Managers can write basic token info"; allow (write) userattr = "managedBy#USERDN";)
>	(targetfilter = "(objectClass=ipaToken)")(version 3.0; acl "Managers can delete tokens"; allow (delete) userattr = "managedBy#USERDN";)
>	(target = "ldap:///ipatokenuniqueid=*,cn=otp,dc=sdrhel76,dc=test")(targetfilter = "(objectClass=ipaToken)")(version 3.0; acl "Users can create self-managed tokens"; allow (add) userattr = "ipatokenOwner#SELFDN" and userattr = "managedBy#SELFDN";)
>modifying entry "dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:42Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:42Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:42Z DEBUG   [5/10]: creating a keytab for the directory
>2018-09-19T05:33:42Z DEBUG Starting external process
>2018-09-19T05:33:42Z DEBUG args=kadmin.local -q addprinc -randkey ldap/master.sdrhel76.test@SDRHEL76.TEST -x ipa-setup-override-restrictions
>2018-09-19T05:33:42Z DEBUG Process finished, return code=0
>2018-09-19T05:33:42Z DEBUG stdout=Authenticating as principal root/admin@SDRHEL76.TEST with password.
>Principal "ldap/master.sdrhel76.test@SDRHEL76.TEST" created.
>
>2018-09-19T05:33:42Z DEBUG stderr=WARNING: no policy specified for ldap/master.sdrhel76.test@SDRHEL76.TEST; defaulting to no policy
>
>2018-09-19T05:33:42Z DEBUG Backing up system configuration file '/etc/dirsrv/ds.keytab'
>2018-09-19T05:33:42Z DEBUG   -> Not backing up - '/etc/dirsrv/ds.keytab' doesn't exist
>2018-09-19T05:33:42Z DEBUG Starting external process
>2018-09-19T05:33:42Z DEBUG args=kadmin.local -q ktadd -k /etc/dirsrv/ds.keytab ldap/master.sdrhel76.test@SDRHEL76.TEST -x ipa-setup-override-restrictions
>2018-09-19T05:33:43Z DEBUG Process finished, return code=0
>2018-09-19T05:33:43Z DEBUG stdout=Authenticating as principal root/admin@SDRHEL76.TEST with password.
>Entry for principal ldap/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/dirsrv/ds.keytab.
>Entry for principal ldap/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/dirsrv/ds.keytab.
>Entry for principal ldap/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type des3-cbc-sha1 added to keytab WRFILE:/etc/dirsrv/ds.keytab.
>Entry for principal ldap/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type arcfour-hmac added to keytab WRFILE:/etc/dirsrv/ds.keytab.
>Entry for principal ldap/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/dirsrv/ds.keytab.
>Entry for principal ldap/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/dirsrv/ds.keytab.
>
>2018-09-19T05:33:43Z DEBUG stderr=
>2018-09-19T05:33:43Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:43Z DEBUG   [6/10]: creating a keytab for the machine
>2018-09-19T05:33:43Z DEBUG Starting external process
>2018-09-19T05:33:43Z DEBUG args=kadmin.local -q addprinc -randkey host/master.sdrhel76.test@SDRHEL76.TEST -x ipa-setup-override-restrictions
>2018-09-19T05:33:43Z DEBUG Process finished, return code=0
>2018-09-19T05:33:43Z DEBUG stdout=Authenticating as principal root/admin@SDRHEL76.TEST with password.
>Principal "host/master.sdrhel76.test@SDRHEL76.TEST" created.
>
>2018-09-19T05:33:43Z DEBUG stderr=WARNING: no policy specified for host/master.sdrhel76.test@SDRHEL76.TEST; defaulting to no policy
>
>2018-09-19T05:33:43Z DEBUG Backing up system configuration file '/etc/krb5.keytab'
>2018-09-19T05:33:43Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:43Z DEBUG Starting external process
>2018-09-19T05:33:43Z DEBUG args=kadmin.local -q ktadd -k /etc/krb5.keytab host/master.sdrhel76.test@SDRHEL76.TEST -x ipa-setup-override-restrictions
>2018-09-19T05:33:44Z DEBUG Process finished, return code=0
>2018-09-19T05:33:44Z DEBUG stdout=Authenticating as principal root/admin@SDRHEL76.TEST with password.
>Entry for principal host/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab.
>Entry for principal host/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab.
>Entry for principal host/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type des3-cbc-sha1 added to keytab WRFILE:/etc/krb5.keytab.
>Entry for principal host/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type arcfour-hmac added to keytab WRFILE:/etc/krb5.keytab.
>Entry for principal host/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/krb5.keytab.
>Entry for principal host/master.sdrhel76.test@SDRHEL76.TEST with kvno 2, encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/krb5.keytab.
>
>2018-09-19T05:33:44Z DEBUG stderr=
>2018-09-19T05:33:44Z DEBUG importing all plugin modules in ipaserver.plugins...
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.aci
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.automember
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.automount
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.baseldap
>2018-09-19T05:33:44Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.baseuser
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.batch
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.ca
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.caacl
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.cert
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.certmap
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.certprofile
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.config
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.delegation
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.dns
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.dnsserver
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.dogtag
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.domainlevel
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.group
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.hbac
>2018-09-19T05:33:44Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.hbacrule
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.hbactest
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.host
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.hostgroup
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.idrange
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.idviews
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.internal
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.join
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.ldap2
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.location
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.migration
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.misc
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.netgroup
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.otp
>2018-09-19T05:33:44Z DEBUG ipaserver.plugins.otp is not a valid plugin module
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.otpconfig
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.otptoken
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.passwd
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.permission
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.ping
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.pkinit
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.privilege
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.rabase
>2018-09-19T05:33:44Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.realmdomains
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.role
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.schema
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.selfservice
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.server
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.serverrole
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.serverroles
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.service
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.servicedelegation
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.session
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.stageuser
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.sudo
>2018-09-19T05:33:44Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.sudocmd
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.sudorule
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.topology
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.trust
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.user
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.vault
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.virtual
>2018-09-19T05:33:44Z DEBUG ipaserver.plugins.virtual is not a valid plugin module
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.whoami
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.plugins.xmlserver
>2018-09-19T05:33:44Z DEBUG importing all plugin modules in ipaserver.install.plugins...
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.adtrust
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.dns
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_nis
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_referint
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_services
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness
>2018-09-19T05:33:44Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt
>2018-09-19T05:33:46Z DEBUG Created connection context.ldap2_139871409595984
>2018-09-19T05:33:46Z DEBUG Destroyed connection context.ldap2_139871409595984
>2018-09-19T05:33:46Z DEBUG Created connection context.ldap2_139871409595984
>2018-09-19T05:33:46Z DEBUG Parsing update file '/usr/share/ipa/updates/20-ipaservers_hostgroup.update'
>2018-09-19T05:33:46Z DEBUG flushing ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket from SchemaCache
>2018-09-19T05:33:46Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7f365919d710>
>2018-09-19T05:33:46Z DEBUG Updating existing entry: cn=ipaservers,cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test
>2018-09-19T05:33:46Z DEBUG ---------------------------------------------
>2018-09-19T05:33:46Z DEBUG Initial value
>2018-09-19T05:33:46Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test
>2018-09-19T05:33:46Z DEBUG objectClass:
>2018-09-19T05:33:46Z DEBUG 	top
>2018-09-19T05:33:46Z DEBUG 	groupOfNames
>2018-09-19T05:33:46Z DEBUG 	nestedGroup
>2018-09-19T05:33:46Z DEBUG 	ipaobject
>2018-09-19T05:33:46Z DEBUG 	ipahostgroup
>2018-09-19T05:33:46Z DEBUG cn:
>2018-09-19T05:33:46Z DEBUG 	ipaservers
>2018-09-19T05:33:46Z DEBUG ipaUniqueID:
>2018-09-19T05:33:46Z DEBUG 	8f56a65a-bbcd-11e8-b969-5254007eedd6
>2018-09-19T05:33:46Z DEBUG description:
>2018-09-19T05:33:46Z DEBUG 	IPA server hosts
>2018-09-19T05:33:46Z DEBUG ---------------------------------------------
>2018-09-19T05:33:46Z DEBUG Final value after applying updates
>2018-09-19T05:33:46Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test
>2018-09-19T05:33:46Z DEBUG objectClass:
>2018-09-19T05:33:46Z DEBUG 	top
>2018-09-19T05:33:46Z DEBUG 	groupOfNames
>2018-09-19T05:33:46Z DEBUG 	nestedGroup
>2018-09-19T05:33:46Z DEBUG 	ipaobject
>2018-09-19T05:33:46Z DEBUG 	ipahostgroup
>2018-09-19T05:33:46Z DEBUG cn:
>2018-09-19T05:33:46Z DEBUG 	ipaservers
>2018-09-19T05:33:46Z DEBUG ipaUniqueID:
>2018-09-19T05:33:46Z DEBUG 	8f56a65a-bbcd-11e8-b969-5254007eedd6
>2018-09-19T05:33:46Z DEBUG description:
>2018-09-19T05:33:46Z DEBUG 	IPA server hosts
>2018-09-19T05:33:46Z DEBUG []
>2018-09-19T05:33:46Z DEBUG Updated 0
>2018-09-19T05:33:46Z DEBUG Done
>2018-09-19T05:33:46Z DEBUG Updating existing entry: cn=ipaservers,cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test
>2018-09-19T05:33:46Z DEBUG ---------------------------------------------
>2018-09-19T05:33:46Z DEBUG Initial value
>2018-09-19T05:33:46Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test
>2018-09-19T05:33:46Z DEBUG objectClass:
>2018-09-19T05:33:46Z DEBUG 	top
>2018-09-19T05:33:46Z DEBUG 	groupOfNames
>2018-09-19T05:33:46Z DEBUG 	nestedGroup
>2018-09-19T05:33:46Z DEBUG 	ipaobject
>2018-09-19T05:33:46Z DEBUG 	ipahostgroup
>2018-09-19T05:33:46Z DEBUG cn:
>2018-09-19T05:33:46Z DEBUG 	ipaservers
>2018-09-19T05:33:46Z DEBUG ipaUniqueID:
>2018-09-19T05:33:46Z DEBUG 	8f56a65a-bbcd-11e8-b969-5254007eedd6
>2018-09-19T05:33:46Z DEBUG description:
>2018-09-19T05:33:46Z DEBUG 	IPA server hosts
>2018-09-19T05:33:46Z DEBUG add: 'fqdn=master.sdrhel76.test,cn=computers,cn=accounts,dc=sdrhel76,dc=test' to member, current value []
>2018-09-19T05:33:46Z DEBUG add: updated value [u'fqdn=master.sdrhel76.test,cn=computers,cn=accounts,dc=sdrhel76,dc=test']
>2018-09-19T05:33:46Z DEBUG ---------------------------------------------
>2018-09-19T05:33:46Z DEBUG Final value after applying updates
>2018-09-19T05:33:46Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test
>2018-09-19T05:33:46Z DEBUG objectClass:
>2018-09-19T05:33:46Z DEBUG 	top
>2018-09-19T05:33:46Z DEBUG 	groupOfNames
>2018-09-19T05:33:46Z DEBUG 	nestedGroup
>2018-09-19T05:33:46Z DEBUG 	ipaobject
>2018-09-19T05:33:46Z DEBUG 	ipahostgroup
>2018-09-19T05:33:46Z DEBUG member:
>2018-09-19T05:33:46Z DEBUG 	fqdn=master.sdrhel76.test,cn=computers,cn=accounts,dc=sdrhel76,dc=test
>2018-09-19T05:33:46Z DEBUG cn:
>2018-09-19T05:33:46Z DEBUG 	ipaservers
>2018-09-19T05:33:46Z DEBUG ipaUniqueID:
>2018-09-19T05:33:46Z DEBUG 	8f56a65a-bbcd-11e8-b969-5254007eedd6
>2018-09-19T05:33:46Z DEBUG description:
>2018-09-19T05:33:46Z DEBUG 	IPA server hosts
>2018-09-19T05:33:46Z DEBUG [(2, u'member', [u'fqdn=master.sdrhel76.test,cn=computers,cn=accounts,dc=sdrhel76,dc=test'])]
>2018-09-19T05:33:46Z DEBUG Updated 1
>2018-09-19T05:33:46Z DEBUG Done
>2018-09-19T05:33:46Z DEBUG Destroyed connection context.ldap2_139871409595984
>2018-09-19T05:33:46Z DEBUG   duration: 3 seconds
>2018-09-19T05:33:46Z DEBUG   [7/10]: adding the password extension to the directory
>2018-09-19T05:33:46Z DEBUG Starting external process
>2018-09-19T05:33:46Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpToTo_7 -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:46Z DEBUG Process finished, return code=0
>2018-09-19T05:33:46Z DEBUG stdout=add objectclass:
>	top
>	nsSlapdPlugin
>	extensibleObject
>add cn:
>	ipa_pwd_extop
>add nsslapd-pluginpath:
>	libipa_pwd_extop
>add nsslapd-plugininitfunc:
>	ipapwd_init
>add nsslapd-plugintype:
>	extendedop
>add nsslapd-pluginbetxn:
>	on
>add nsslapd-pluginenabled:
>	on
>add nsslapd-pluginid:
>	ipa_pwd_extop
>add nsslapd-pluginversion:
>	1.0
>add nsslapd-pluginvendor:
>	RedHat
>add nsslapd-plugindescription:
>	Support saving passwords in multiple formats for different consumers (krb5, samba, freeradius, etc.)
>add nsslapd-plugin-depends-on-type:
>	database
>add nsslapd-realmTree:
>	dc=sdrhel76,dc=test
>adding new entry "cn=ipa_pwd_extop,cn=plugins,cn=config"
>modify complete
>
>
>2018-09-19T05:33:46Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:46Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:46Z DEBUG   [8/10]: creating anonymous principal
>2018-09-19T05:33:46Z DEBUG Starting external process
>2018-09-19T05:33:46Z DEBUG args=kadmin.local -q addprinc -randkey WELLKNOWN/ANONYMOUS@SDRHEL76.TEST -x ipa-setup-override-restrictions
>2018-09-19T05:33:46Z DEBUG Process finished, return code=0
>2018-09-19T05:33:46Z DEBUG stdout=Authenticating as principal root/admin@SDRHEL76.TEST with password.
>Principal "WELLKNOWN/ANONYMOUS@SDRHEL76.TEST" created.
>
>2018-09-19T05:33:46Z DEBUG stderr=WARNING: no policy specified for WELLKNOWN/ANONYMOUS@SDRHEL76.TEST; defaulting to no policy
>
>2018-09-19T05:33:46Z DEBUG Starting external process
>2018-09-19T05:33:46Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpNt4rBt -H ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket -Y EXTERNAL
>2018-09-19T05:33:46Z DEBUG Process finished, return code=0
>2018-09-19T05:33:46Z DEBUG stdout=add objectclass:
>	ipaAllowedOperations
>add aci:
>	(targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Allow to retrieve keytab keys of the anonymous user"; allow(read) userattr="ipaAllowedToPerform;read_keys#GROUPDN";)
>add ipaAllowedToPerform;read_keys:
>	cn=ipaservers,cn=hostgroups,cn=accounts,dc=sdrhel76,dc=test
>modifying entry "krbPrincipalName=WELLKNOWN/ANONYMOUS@SDRHEL76.TEST,cn=SDRHEL76.TEST,cn=kerberos,dc=sdrhel76,dc=test"
>modify complete
>
>
>2018-09-19T05:33:46Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket/??base )
>SASL/EXTERNAL authentication started
>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
>SASL SSF: 0
>
>2018-09-19T05:33:46Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:46Z DEBUG   [9/10]: starting the KDC
>2018-09-19T05:33:46Z DEBUG Starting external process
>2018-09-19T05:33:46Z DEBUG args=/bin/systemctl start krb5kdc.service
>2018-09-19T05:33:46Z DEBUG Process finished, return code=0
>2018-09-19T05:33:46Z DEBUG stdout=
>2018-09-19T05:33:46Z DEBUG stderr=
>2018-09-19T05:33:46Z DEBUG Starting external process
>2018-09-19T05:33:46Z DEBUG args=/bin/systemctl is-active krb5kdc.service
>2018-09-19T05:33:46Z DEBUG Process finished, return code=0
>2018-09-19T05:33:46Z DEBUG stdout=active
>
>2018-09-19T05:33:46Z DEBUG stderr=
>2018-09-19T05:33:46Z DEBUG Start of krb5kdc.service complete
>2018-09-19T05:33:46Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:46Z DEBUG   [10/10]: configuring KDC to start on boot
>2018-09-19T05:33:46Z DEBUG Starting external process
>2018-09-19T05:33:46Z DEBUG args=/bin/systemctl is-enabled krb5kdc.service
>2018-09-19T05:33:46Z DEBUG Process finished, return code=1
>2018-09-19T05:33:46Z DEBUG stdout=disabled
>
>2018-09-19T05:33:46Z DEBUG stderr=
>2018-09-19T05:33:46Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:46Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:46Z DEBUG Starting external process
>2018-09-19T05:33:46Z DEBUG args=/bin/systemctl disable krb5kdc.service
>2018-09-19T05:33:47Z DEBUG Process finished, return code=0
>2018-09-19T05:33:47Z DEBUG stdout=
>2018-09-19T05:33:47Z DEBUG stderr=
>2018-09-19T05:33:47Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:47Z DEBUG Done configuring Kerberos KDC (krb5kdc).
>2018-09-19T05:33:47Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:47Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:47Z DEBUG Configuring kadmin
>2018-09-19T05:33:47Z DEBUG   [1/2]: starting kadmin 
>2018-09-19T05:33:47Z DEBUG Starting external process
>2018-09-19T05:33:47Z DEBUG args=/bin/systemctl is-active kadmin.service
>2018-09-19T05:33:47Z DEBUG Process finished, return code=3
>2018-09-19T05:33:47Z DEBUG stdout=unknown
>
>2018-09-19T05:33:47Z DEBUG stderr=
>2018-09-19T05:33:47Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:47Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:47Z DEBUG Starting external process
>2018-09-19T05:33:47Z DEBUG args=/bin/systemctl restart kadmin.service
>2018-09-19T05:33:47Z DEBUG Process finished, return code=0
>2018-09-19T05:33:47Z DEBUG stdout=
>2018-09-19T05:33:47Z DEBUG stderr=
>2018-09-19T05:33:47Z DEBUG Starting external process
>2018-09-19T05:33:47Z DEBUG args=/bin/systemctl is-active kadmin.service
>2018-09-19T05:33:47Z DEBUG Process finished, return code=0
>2018-09-19T05:33:47Z DEBUG stdout=active
>
>2018-09-19T05:33:47Z DEBUG stderr=
>2018-09-19T05:33:47Z DEBUG Restart of kadmin.service complete
>2018-09-19T05:33:47Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:47Z DEBUG   [2/2]: configuring kadmin to start on boot
>2018-09-19T05:33:47Z DEBUG Starting external process
>2018-09-19T05:33:47Z DEBUG args=/bin/systemctl is-enabled kadmin.service
>2018-09-19T05:33:47Z DEBUG Process finished, return code=1
>2018-09-19T05:33:47Z DEBUG stdout=disabled
>
>2018-09-19T05:33:47Z DEBUG stderr=
>2018-09-19T05:33:47Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:47Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:47Z DEBUG Starting external process
>2018-09-19T05:33:47Z DEBUG args=/bin/systemctl disable kadmin.service
>2018-09-19T05:33:47Z DEBUG Process finished, return code=0
>2018-09-19T05:33:47Z DEBUG stdout=
>2018-09-19T05:33:47Z DEBUG stderr=
>2018-09-19T05:33:47Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:47Z DEBUG Done configuring kadmin.
>2018-09-19T05:33:47Z INFO Custodia client for '<CustodiaModes.MASTER_PEER: 'Custodia master peer'>' with promotion no.
>2018-09-19T05:33:47Z INFO Custodia uses LDAPI.
>2018-09-19T05:33:47Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:47Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:47Z DEBUG Configuring ipa-custodia
>2018-09-19T05:33:47Z DEBUG   [1/5]: Making sure custodia container exists
>2018-09-19T05:33:47Z DEBUG importing all plugin modules in ipaserver.plugins...
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.aci
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.automember
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.automount
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.baseldap
>2018-09-19T05:33:47Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.baseuser
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.batch
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.ca
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.caacl
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.cert
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.certmap
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.certprofile
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.config
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.delegation
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.dns
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.dnsserver
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.dogtag
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.domainlevel
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.group
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.hbac
>2018-09-19T05:33:47Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.hbacrule
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.hbactest
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.host
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.hostgroup
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.idrange
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.idviews
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.internal
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.join
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.ldap2
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.location
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.migration
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.misc
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.netgroup
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.otp
>2018-09-19T05:33:47Z DEBUG ipaserver.plugins.otp is not a valid plugin module
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.otpconfig
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.otptoken
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.passwd
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.permission
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.ping
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.pkinit
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.privilege
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.rabase
>2018-09-19T05:33:47Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.realmdomains
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.role
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.schema
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.selfservice
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.server
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.serverrole
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.serverroles
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.service
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.servicedelegation
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.session
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.stageuser
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.sudo
>2018-09-19T05:33:47Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.sudocmd
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.sudorule
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.topology
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.trust
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.user
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.vault
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.virtual
>2018-09-19T05:33:47Z DEBUG ipaserver.plugins.virtual is not a valid plugin module
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.whoami
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.plugins.xmlserver
>2018-09-19T05:33:47Z DEBUG importing all plugin modules in ipaserver.install.plugins...
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.adtrust
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.dns
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_nis
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_referint
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_services
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness
>2018-09-19T05:33:47Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt
>2018-09-19T05:33:49Z DEBUG Created connection context.ldap2_139871397199696
>2018-09-19T05:33:49Z DEBUG Destroyed connection context.ldap2_139871397199696
>2018-09-19T05:33:49Z DEBUG Created connection context.ldap2_139871397199696
>2018-09-19T05:33:49Z DEBUG Parsing update file '/usr/share/ipa/updates/73-custodia.update'
>2018-09-19T05:33:49Z DEBUG flushing ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket from SchemaCache
>2018-09-19T05:33:49Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Fvar%2Frun%2Fslapd-SDRHEL76-TEST.socket conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7f36591b9050>
>2018-09-19T05:33:49Z DEBUG Updating existing entry: cn=custodia,cn=ipa,cn=etc,dc=sdrhel76,dc=test
>2018-09-19T05:33:49Z DEBUG ---------------------------------------------
>2018-09-19T05:33:49Z DEBUG Initial value
>2018-09-19T05:33:49Z DEBUG dn: cn=custodia,cn=ipa,cn=etc,dc=sdrhel76,dc=test
>2018-09-19T05:33:49Z DEBUG objectClass:
>2018-09-19T05:33:49Z DEBUG 	nsContainer
>2018-09-19T05:33:49Z DEBUG 	top
>2018-09-19T05:33:49Z DEBUG cn:
>2018-09-19T05:33:49Z DEBUG 	custodia
>2018-09-19T05:33:49Z DEBUG ---------------------------------------------
>2018-09-19T05:33:49Z DEBUG Final value after applying updates
>2018-09-19T05:33:49Z DEBUG dn: cn=custodia,cn=ipa,cn=etc,dc=sdrhel76,dc=test
>2018-09-19T05:33:49Z DEBUG objectClass:
>2018-09-19T05:33:49Z DEBUG 	nsContainer
>2018-09-19T05:33:49Z DEBUG 	top
>2018-09-19T05:33:49Z DEBUG cn:
>2018-09-19T05:33:49Z DEBUG 	custodia
>2018-09-19T05:33:49Z DEBUG []
>2018-09-19T05:33:49Z DEBUG Updated 0
>2018-09-19T05:33:49Z DEBUG Done
>2018-09-19T05:33:49Z DEBUG Updating existing entry: cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=sdrhel76,dc=test
>2018-09-19T05:33:49Z DEBUG ---------------------------------------------
>2018-09-19T05:33:49Z DEBUG Initial value
>2018-09-19T05:33:49Z DEBUG dn: cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=sdrhel76,dc=test
>2018-09-19T05:33:49Z DEBUG objectClass:
>2018-09-19T05:33:49Z DEBUG 	nsContainer
>2018-09-19T05:33:49Z DEBUG 	top
>2018-09-19T05:33:49Z DEBUG cn:
>2018-09-19T05:33:49Z DEBUG 	dogtag
>2018-09-19T05:33:49Z DEBUG ---------------------------------------------
>2018-09-19T05:33:49Z DEBUG Final value after applying updates
>2018-09-19T05:33:49Z DEBUG dn: cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=sdrhel76,dc=test
>2018-09-19T05:33:49Z DEBUG objectClass:
>2018-09-19T05:33:49Z DEBUG 	nsContainer
>2018-09-19T05:33:49Z DEBUG 	top
>2018-09-19T05:33:49Z DEBUG cn:
>2018-09-19T05:33:49Z DEBUG 	dogtag
>2018-09-19T05:33:49Z DEBUG []
>2018-09-19T05:33:49Z DEBUG Updated 0
>2018-09-19T05:33:49Z DEBUG Done
>2018-09-19T05:33:49Z DEBUG Destroyed connection context.ldap2_139871397199696
>2018-09-19T05:33:49Z DEBUG   duration: 1 seconds
>2018-09-19T05:33:49Z DEBUG   [2/5]: Generating ipa-custodia config file
>2018-09-19T05:33:49Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:49Z DEBUG   [3/5]: Generating ipa-custodia keys
>2018-09-19T05:33:49Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:49Z DEBUG   [4/5]: starting ipa-custodia 
>2018-09-19T05:33:49Z DEBUG Starting external process
>2018-09-19T05:33:49Z DEBUG args=/bin/systemctl is-active ipa-custodia.service
>2018-09-19T05:33:49Z DEBUG Process finished, return code=3
>2018-09-19T05:33:49Z DEBUG stdout=unknown
>
>2018-09-19T05:33:49Z DEBUG stderr=
>2018-09-19T05:33:49Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:49Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:49Z DEBUG Starting external process
>2018-09-19T05:33:49Z DEBUG args=/bin/systemctl restart ipa-custodia.service
>2018-09-19T05:33:49Z DEBUG Process finished, return code=0
>2018-09-19T05:33:49Z DEBUG stdout=
>2018-09-19T05:33:49Z DEBUG stderr=
>2018-09-19T05:33:49Z DEBUG Starting external process
>2018-09-19T05:33:49Z DEBUG args=/bin/systemctl is-active ipa-custodia.service
>2018-09-19T05:33:49Z DEBUG Process finished, return code=0
>2018-09-19T05:33:49Z DEBUG stdout=active
>
>2018-09-19T05:33:49Z DEBUG stderr=
>2018-09-19T05:33:49Z DEBUG Restart of ipa-custodia.service complete
>2018-09-19T05:33:49Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:49Z DEBUG   [5/5]: configuring ipa-custodia to start on boot
>2018-09-19T05:33:49Z DEBUG Starting external process
>2018-09-19T05:33:49Z DEBUG args=/bin/systemctl is-enabled ipa-custodia.service
>2018-09-19T05:33:50Z DEBUG Process finished, return code=1
>2018-09-19T05:33:50Z DEBUG stdout=disabled
>
>2018-09-19T05:33:50Z DEBUG stderr=
>2018-09-19T05:33:50Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:50Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:50Z DEBUG Starting external process
>2018-09-19T05:33:50Z DEBUG args=/bin/systemctl disable ipa-custodia.service
>2018-09-19T05:33:50Z DEBUG Process finished, return code=0
>2018-09-19T05:33:50Z DEBUG stdout=
>2018-09-19T05:33:50Z DEBUG stderr=
>2018-09-19T05:33:50Z DEBUG   duration: 0 seconds
>2018-09-19T05:33:50Z DEBUG Done configuring ipa-custodia.
>2018-09-19T05:33:50Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:50Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:50Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:50Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2018-09-19T05:33:50Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:50Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:33:50Z DEBUG Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
>2018-09-19T05:33:50Z DEBUG   [1/28]: configuring certificate server instance
>2018-09-19T05:33:50Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:50Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2018-09-19T05:33:50Z DEBUG Contents of pkispawn configuration file (/tmp/tmpFf3jw_):
>[CA]
>pki_security_domain_name = IPA
>pki_enable_proxy = True
>pki_restart_configured_instance = False
>pki_backup_keys = True
>pki_backup_password = XXXXXXXX
>pki_profiles_in_ldap = True
>pki_default_ocsp_uri = http://ipa-ca.sdrhel76.test/ca/ocsp
>pki_status_request_timeout = 15
>pki_client_pkcs12_password = XXXXXXXX
>pki_admin_name = admin
>pki_admin_uid = admin
>pki_admin_email = root@localhost
>pki_admin_password = XXXXXXXX
>pki_admin_nickname = ipa-ca-agent
>pki_admin_subject_dn = cn=ipa-ca-agent,O=SDRHEL76.TEST
>pki_client_admin_cert_p12 = /root/ca-agent.p12
>pki_ds_ldap_port = 389
>pki_ds_password = XXXXXXXX
>pki_ds_base_dn = o=ipaca
>pki_ds_database = ipaca
>pki_subsystem_subject_dn = cn=CA Subsystem,O=SDRHEL76.TEST
>pki_ocsp_signing_subject_dn = cn=OCSP Subsystem,O=SDRHEL76.TEST
>pki_ssl_server_subject_dn = cn=master.sdrhel76.test,O=SDRHEL76.TEST
>pki_audit_signing_subject_dn = cn=CA Audit,O=SDRHEL76.TEST
>pki_ca_signing_subject_dn = CN=Certificate Authority,O=SDRHEL76.TEST
>pki_subsystem_nickname = subsystemCert cert-pki-ca
>pki_ocsp_signing_nickname = ocspSigningCert cert-pki-ca
>pki_ssl_server_nickname = Server-Cert cert-pki-ca
>pki_audit_signing_nickname = auditSigningCert cert-pki-ca
>pki_ca_signing_nickname = caSigningCert cert-pki-ca
>pki_ca_signing_key_algorithm = SHA256withRSA
>pki_pin = XXXXXXXX
>
>
>2018-09-19T05:33:50Z DEBUG Starting external process
>2018-09-19T05:33:50Z DEBUG args=/usr/sbin/pkispawn -s CA -f /tmp/tmpFf3jw_
>2018-09-19T05:35:14Z DEBUG Process finished, return code=0
>2018-09-19T05:35:14Z DEBUG stdout=Log file: /var/log/pki/pki-ca-spawn.20180919110350.log
>Loading deployment configuration from /tmp/tmpFf3jw_.
>WARNING: The 'pki_ssl_server_nickname' in [CA] has been deprecated. Use 'pki_sslserver_nickname' instead.
>WARNING: The 'pki_ssl_server_subject_dn' in [CA] has been deprecated. Use 'pki_sslserver_subject_dn' instead.
>Installing CA into /var/lib/pki/pki-tomcat.
>Storing deployment configuration into /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg.
>
>    ==========================================================================
>                                INSTALLATION SUMMARY
>    ==========================================================================
>
>      Administrator's username:             admin
>      Administrator's PKCS #12 file:
>            /root/ca-agent.p12
>
>      To check the status of the subsystem:
>            systemctl status pki-tomcatd@pki-tomcat.service
>
>      To restart the subsystem:
>            systemctl restart pki-tomcatd@pki-tomcat.service
>
>      The URL for the subsystem is:
>            https://master.sdrhel76.test:8443/ca
>
>      PKI instances will be enabled upon system boot
>
>    ==========================================================================
>
>
>2018-09-19T05:35:14Z DEBUG stderr=Notice: Trust flag u is set automatically if the private key is present.
>
>2018-09-19T05:35:14Z DEBUG completed creating ca instance
>2018-09-19T05:35:14Z DEBUG   duration: 84 seconds
>2018-09-19T05:35:14Z DEBUG   [2/28]: exporting Dogtag certificate store pin
>2018-09-19T05:35:14Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2018-09-19T05:35:14Z DEBUG   duration: 0 seconds
>2018-09-19T05:35:14Z DEBUG   [3/28]: stopping certificate server instance to update CS.cfg
>2018-09-19T05:35:14Z DEBUG Starting external process
>2018-09-19T05:35:14Z DEBUG args=/bin/systemctl stop pki-tomcatd@pki-tomcat.service
>2018-09-19T05:35:15Z DEBUG Process finished, return code=0
>2018-09-19T05:35:15Z DEBUG stdout=
>2018-09-19T05:35:15Z DEBUG stderr=
>2018-09-19T05:35:15Z DEBUG Stop of pki-tomcatd@pki-tomcat.service complete
>2018-09-19T05:35:15Z DEBUG   duration: 1 seconds
>2018-09-19T05:35:15Z DEBUG   [4/28]: backing up CS.cfg
>2018-09-19T05:35:15Z DEBUG Starting external process
>2018-09-19T05:35:15Z DEBUG args=/bin/systemctl is-active pki-tomcatd@pki-tomcat.service
>2018-09-19T05:35:15Z DEBUG Process finished, return code=3
>2018-09-19T05:35:15Z DEBUG stdout=unknown
>
>2018-09-19T05:35:15Z DEBUG stderr=
>2018-09-19T05:35:15Z DEBUG   duration: 0 seconds
>2018-09-19T05:35:15Z DEBUG   [5/28]: disabling nonces
>2018-09-19T05:35:15Z DEBUG   duration: 0 seconds
>2018-09-19T05:35:15Z DEBUG   [6/28]: set up CRL publishing
>2018-09-19T05:35:15Z DEBUG Starting external process
>2018-09-19T05:35:15Z DEBUG args=/usr/sbin/selinuxenabled
>2018-09-19T05:35:15Z DEBUG Process finished, return code=0
>2018-09-19T05:35:15Z DEBUG stdout=
>2018-09-19T05:35:15Z DEBUG stderr=
>2018-09-19T05:35:15Z DEBUG Starting external process
>2018-09-19T05:35:15Z DEBUG args=/sbin/restorecon /var/lib/ipa/pki-ca/publish
>2018-09-19T05:35:15Z DEBUG Process finished, return code=0
>2018-09-19T05:35:15Z DEBUG stdout=
>2018-09-19T05:35:15Z DEBUG stderr=
>2018-09-19T05:35:16Z DEBUG   duration: 0 seconds
>2018-09-19T05:35:16Z DEBUG   [7/28]: enable PKIX certificate path discovery and validation
>2018-09-19T05:35:16Z DEBUG   duration: 0 seconds
>2018-09-19T05:35:16Z DEBUG   [8/28]: starting certificate server instance
>2018-09-19T05:35:16Z DEBUG Starting external process
>2018-09-19T05:35:16Z DEBUG args=/bin/systemctl start pki-tomcatd@pki-tomcat.service
>2018-09-19T05:35:17Z DEBUG Process finished, return code=0
>2018-09-19T05:35:17Z DEBUG stdout=
>2018-09-19T05:35:17Z DEBUG stderr=
>2018-09-19T05:35:17Z DEBUG Starting external process
>2018-09-19T05:35:17Z DEBUG args=/bin/systemctl is-active pki-tomcatd@pki-tomcat.service
>2018-09-19T05:35:17Z DEBUG Process finished, return code=0
>2018-09-19T05:35:17Z DEBUG stdout=active
>
>2018-09-19T05:35:17Z DEBUG stderr=
>2018-09-19T05:35:17Z DEBUG wait_for_open_ports: localhost [8080, 8443] timeout 300
>2018-09-19T05:35:17Z DEBUG waiting for port: 8080
>2018-09-19T05:35:17Z DEBUG Failed to connect to port 8080 tcp on ::1
>2018-09-19T05:35:17Z DEBUG Failed to connect to port 8080 tcp on 127.0.0.1
>2018-09-19T05:35:19Z DEBUG SUCCESS: port: 8080
>2018-09-19T05:35:19Z DEBUG waiting for port: 8443
>2018-09-19T05:35:19Z DEBUG SUCCESS: port: 8443
>2018-09-19T05:35:19Z DEBUG Start of pki-tomcatd@pki-tomcat.service complete
>2018-09-19T05:35:19Z DEBUG Waiting until the CA is running
>2018-09-19T05:35:19Z DEBUG request POST http://master.sdrhel76.test:8080/ca/admin/ca/getStatus
>2018-09-19T05:35:19Z DEBUG request body ''
>2018-09-19T05:35:31Z DEBUG response status 200
>2018-09-19T05:35:31Z DEBUG response headers Server: Apache-Coyote/1.1
>Content-Type: application/xml
>Content-Length: 167
>Date: Wed, 19 Sep 2018 05:35:31 GMT
>
>2018-09-19T05:35:31Z DEBUG response body '<?xml version="1.0" encoding="UTF-8" standalone="no"?><XMLResponse><State>1</State><Type>CA</Type><Status>running</Status><Version>10.5.9-6.el7</Version></XMLResponse>'
>2018-09-19T05:35:32Z DEBUG The CA status is: running
>2018-09-19T05:35:32Z DEBUG   duration: 15 seconds
>2018-09-19T05:35:32Z DEBUG   [9/28]: configure certmonger for renewals
>2018-09-19T05:35:32Z DEBUG Starting external process
>2018-09-19T05:35:32Z DEBUG args=/bin/systemctl enable certmonger.service
>2018-09-19T05:35:32Z DEBUG Process finished, return code=0
>2018-09-19T05:35:32Z DEBUG stdout=
>2018-09-19T05:35:32Z DEBUG stderr=Created symlink from /etc/systemd/system/multi-user.target.wants/certmonger.service to /usr/lib/systemd/system/certmonger.service.
>
>2018-09-19T05:35:32Z DEBUG Starting external process
>2018-09-19T05:35:32Z DEBUG args=/bin/systemctl start messagebus.service
>2018-09-19T05:35:32Z DEBUG Process finished, return code=0
>2018-09-19T05:35:32Z DEBUG stdout=
>2018-09-19T05:35:32Z DEBUG stderr=
>2018-09-19T05:35:32Z DEBUG Starting external process
>2018-09-19T05:35:32Z DEBUG args=/bin/systemctl is-active messagebus.service
>2018-09-19T05:35:32Z DEBUG Process finished, return code=0
>2018-09-19T05:35:32Z DEBUG stdout=active
>
>2018-09-19T05:35:32Z DEBUG stderr=
>2018-09-19T05:35:32Z DEBUG Start of messagebus.service complete
>2018-09-19T05:35:32Z DEBUG Starting external process
>2018-09-19T05:35:32Z DEBUG args=/bin/systemctl start certmonger.service
>2018-09-19T05:35:32Z DEBUG Process finished, return code=0
>2018-09-19T05:35:32Z DEBUG stdout=
>2018-09-19T05:35:32Z DEBUG stderr=
>2018-09-19T05:35:32Z DEBUG Starting external process
>2018-09-19T05:35:32Z DEBUG args=/bin/systemctl is-active certmonger.service
>2018-09-19T05:35:32Z DEBUG Process finished, return code=0
>2018-09-19T05:35:32Z DEBUG stdout=active
>
>2018-09-19T05:35:32Z DEBUG stderr=
>2018-09-19T05:35:32Z DEBUG Start of certmonger.service complete
>2018-09-19T05:35:32Z DEBUG   duration: 0 seconds
>2018-09-19T05:35:32Z DEBUG   [10/28]: requesting RA certificate from CA
>2018-09-19T05:35:32Z DEBUG Starting external process
>2018-09-19T05:35:32Z DEBUG args=/usr/bin/openssl pkcs7 -inform DER -print_certs -out /var/lib/ipa/tmpMbynpD
>2018-09-19T05:35:33Z DEBUG Process finished, return code=0
>2018-09-19T05:35:33Z DEBUG stdout=
>2018-09-19T05:35:33Z DEBUG stderr=
>2018-09-19T05:35:33Z DEBUG Starting external process
>2018-09-19T05:35:33Z DEBUG args=/usr/bin/openssl pkcs12 -nokeys -clcerts -in /root/ca-agent.p12 -out /var/lib/ipa/tmpNNEy7N -passin file:/tmp/tmpY4vXlm
>2018-09-19T05:35:39Z DEBUG Process finished, return code=0
>2018-09-19T05:35:39Z DEBUG stdout=
>2018-09-19T05:35:39Z DEBUG stderr=MAC verified OK
>
>2018-09-19T05:35:39Z DEBUG Starting external process
>2018-09-19T05:35:39Z DEBUG args=/usr/bin/openssl pkcs12 -nodes -nocerts -in /root/ca-agent.p12 -out /var/lib/ipa/tmpTQ94Au -passin file:/tmp/tmpWXlCEt
>2018-09-19T05:35:50Z DEBUG Process finished, return code=0
>2018-09-19T05:35:50Z DEBUG stdout=
>2018-09-19T05:35:50Z DEBUG stderr=MAC verified OK
>
>2018-09-19T05:35:52Z DEBUG certmonger request is in state dbus.String(u'NEWLY_ADDED_READING_KEYINFO', variant_level=1)
>2018-09-19T05:35:57Z DEBUG certmonger request is in state dbus.String(u'SUBMITTING', variant_level=1)
>2018-09-19T05:36:02Z DEBUG certmonger request is in state dbus.String(u'PRE_SAVE_CERT', variant_level=1)
>2018-09-19T05:36:07Z DEBUG certmonger request is in state dbus.String(u'POST_SAVED_CERT', variant_level=1)
>2018-09-19T05:36:12Z DEBUG certmonger request is in state dbus.String(u'MONITORING', variant_level=1)
>2018-09-19T05:36:12Z DEBUG Cert request 20180919053552 was successful
>2018-09-19T05:36:12Z DEBUG Starting external process
>2018-09-19T05:36:12Z DEBUG args=/usr/sbin/selinuxenabled
>2018-09-19T05:36:12Z DEBUG Process finished, return code=0
>2018-09-19T05:36:12Z DEBUG stdout=
>2018-09-19T05:36:12Z DEBUG stderr=
>2018-09-19T05:36:12Z DEBUG Starting external process
>2018-09-19T05:36:12Z DEBUG args=/sbin/restorecon /var/lib/ipa/ra-agent.pem
>2018-09-19T05:36:12Z DEBUG Process finished, return code=0
>2018-09-19T05:36:12Z DEBUG stdout=
>2018-09-19T05:36:12Z DEBUG stderr=
>2018-09-19T05:36:12Z DEBUG Starting external process
>2018-09-19T05:36:12Z DEBUG args=/usr/sbin/selinuxenabled
>2018-09-19T05:36:12Z DEBUG Process finished, return code=0
>2018-09-19T05:36:12Z DEBUG stdout=
>2018-09-19T05:36:12Z DEBUG stderr=
>2018-09-19T05:36:12Z DEBUG Starting external process
>2018-09-19T05:36:12Z DEBUG args=/sbin/restorecon /var/lib/ipa/ra-agent.key
>2018-09-19T05:36:12Z DEBUG Process finished, return code=0
>2018-09-19T05:36:12Z DEBUG stdout=
>2018-09-19T05:36:12Z DEBUG stderr=
>2018-09-19T05:36:13Z DEBUG   duration: 40 seconds
>2018-09-19T05:36:13Z DEBUG   [11/28]: setting audit signing renewal to 2 years
>2018-09-19T05:36:13Z DEBUG caSignedLogCert.cfg profile validity range is 720
>2018-09-19T05:36:13Z DEBUG   duration: 0 seconds
>2018-09-19T05:36:13Z DEBUG   [12/28]: restarting certificate server
>2018-09-19T05:36:13Z DEBUG Starting external process
>2018-09-19T05:36:13Z DEBUG args=/bin/systemctl restart pki-tomcatd@pki-tomcat.service
>2018-09-19T05:36:35Z DEBUG Process finished, return code=0
>2018-09-19T05:36:35Z DEBUG stdout=
>2018-09-19T05:36:35Z DEBUG stderr=
>2018-09-19T05:36:35Z DEBUG Starting external process
>2018-09-19T05:36:35Z DEBUG args=/bin/systemctl is-active pki-tomcatd@pki-tomcat.service
>2018-09-19T05:36:35Z DEBUG Process finished, return code=0
>2018-09-19T05:36:35Z DEBUG stdout=active
>
>2018-09-19T05:36:35Z DEBUG stderr=
>2018-09-19T05:36:35Z DEBUG wait_for_open_ports: localhost [8080, 8443] timeout 300
>2018-09-19T05:36:35Z DEBUG waiting for port: 8080
>2018-09-19T05:36:35Z DEBUG Failed to connect to port 8080 tcp on ::1
>2018-09-19T05:36:35Z DEBUG Failed to connect to port 8080 tcp on 127.0.0.1
>2018-09-19T05:36:39Z DEBUG SUCCESS: port: 8080
>2018-09-19T05:36:39Z DEBUG waiting for port: 8443
>2018-09-19T05:36:39Z DEBUG SUCCESS: port: 8443
>2018-09-19T05:36:39Z DEBUG Restart of pki-tomcatd@pki-tomcat.service complete
>2018-09-19T05:36:39Z DEBUG Waiting until the CA is running
>2018-09-19T05:36:39Z DEBUG request POST http://master.sdrhel76.test:8080/ca/admin/ca/getStatus
>2018-09-19T05:36:39Z DEBUG request body ''
>2018-09-19T05:36:51Z DEBUG response status 200
>2018-09-19T05:36:51Z DEBUG response headers Server: Apache-Coyote/1.1
>Content-Type: application/xml
>Content-Length: 167
>Date: Wed, 19 Sep 2018 05:36:51 GMT
>
>2018-09-19T05:36:51Z DEBUG response body '<?xml version="1.0" encoding="UTF-8" standalone="no"?><XMLResponse><State>1</State><Type>CA</Type><Status>running</Status><Version>10.5.9-6.el7</Version></XMLResponse>'
>2018-09-19T05:36:51Z DEBUG The CA status is: running
>2018-09-19T05:36:51Z DEBUG   duration: 38 seconds
>2018-09-19T05:36:51Z DEBUG   [13/28]: publishing the CA certificate
>2018-09-19T05:36:51Z DEBUG   duration: 0 seconds
>2018-09-19T05:36:51Z DEBUG   [14/28]: adding RA agent as a trusted user
>2018-09-19T05:36:51Z DEBUG Created connection context.ldap2_139871387504400
>2018-09-19T05:36:51Z DEBUG flushing ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket from SchemaCache
>2018-09-19T05:36:51Z DEBUG retrieving schema for SchemaCache url=ldapi://%2fvar%2frun%2fslapd-SDRHEL76-TEST.socket conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7f365919d7e8>
>2018-09-19T05:36:52Z DEBUG add_entry_to_group: dn=uid=ipara,ou=People,o=ipaca group_dn=cn=Certificate Manager Agents,ou=groups,o=ipaca member_attr=uniqueMember
>2018-09-19T05:36:52Z DEBUG Unhandled LDAPError: PROTOCOL_ERROR: {'desc': 'Protocol error'}
>2018-09-19T05:36:52Z DEBUG Traceback (most recent call last):
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 570, in start_creation
>    run_step(full_msg, method)
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 560, in run_step
>    method()
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 812, in __create_ca_agent
>    conn.add_entry_to_group(user_dn, group_dn, 'uniqueMember')
>  File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 406, in add_entry_to_group
>    entry = self.get_entry(dn, [''])
>  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1554, in get_entry
>    size_limit=size_limit, get_effective_rights=get_effective_rights,
>  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1366, in get_entries
>    **kwargs)
>  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1504, in find_entries
>    break
>  File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
>    self.gen.throw(type, value, traceback)
>  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1078, in error_handler
>    raise errors.DatabaseError(desc=desc, info=info)
>DatabaseError: Protocol error: 
>
>2018-09-19T05:36:52Z DEBUG   [error] DatabaseError: Protocol error: 
>2018-09-19T05:36:52Z DEBUG   File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 178, in execute
>    return_value = self.run()
>  File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 319, in run
>    return cfgr.run()
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 364, in run
>    return self.execute()
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 389, in execute
>    for rval in self._executor():
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner
>    exc_handler(exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception
>    self._handle_exception(exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception
>    six.reraise(*exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner
>    step()
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda>
>    step = lambda: next(self.__gen)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
>    six.reraise(*exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
>    value = gen.send(prev_value)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 658, in _configure
>    next(executor)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner
>    exc_handler(exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception
>    self._handle_exception(exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521, in _handle_exception
>    self.__parent._handle_exception(exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception
>    six.reraise(*exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception
>    super(ComponentBase, self)._handle_exception(exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception
>    six.reraise(*exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner
>    step()
>  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda>
>    step = lambda: next(self.__gen)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
>    six.reraise(*exc_info)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
>    value = gen.send(prev_value)
>  File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 65, in _install
>    for unused in self._installer(self.parent):
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 583, in main
>    master_install(self)
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 250, in decorated
>    func(installer)
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 812, in install
>    ca.install_step_0(False, None, options, custodia=custodia)
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 303, in install_step_0
>    use_ldaps=standalone)
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 475, in configure_instance
>    self.start_creation(runtime=runtime)
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 570, in start_creation
>    run_step(full_msg, method)
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 560, in run_step
>    method()
>  File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 812, in __create_ca_agent
>    conn.add_entry_to_group(user_dn, group_dn, 'uniqueMember')
>  File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 406, in add_entry_to_group
>    entry = self.get_entry(dn, [''])
>  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1554, in get_entry
>    size_limit=size_limit, get_effective_rights=get_effective_rights,
>  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1366, in get_entries
>    **kwargs)
>  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1504, in find_entries
>    break
>  File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
>    self.gen.throw(type, value, traceback)
>  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1078, in error_handler
>    raise errors.DatabaseError(desc=desc, info=info)
>
>2018-09-19T05:36:52Z DEBUG The ipa-server-install command failed, exception: DatabaseError: Protocol error: 
>2018-09-19T05:36:52Z ERROR Protocol error: 
>2018-09-19T05:36:52Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information

Actions: View

Attachments on bug 1630680: 1484576