Attachment 605053 Details for Bug 848985 – output of cli when running ipa-server-install

output of cli when running ipa-server-install

installcli.txt (text/plain), 5.69 KB, created by Michael Gregg on 2012-08-17 01:37:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Michael Gregg

Created: 2012-08-17 01:37:56 UTC

Size: 5.69 KB

patch

obsolete

> ipa-server-install --setup-dns --forwarder=10.14.63.12 --hostname=zippyvm1.testrelm.com -r TESTRELM.COM -n testrelm.com -p Secret123 -P Secret123 -a Secret123 -U
>
>The log file for this installation can be found in /var/log/ipaserver-install.log
>==============================================================================
>This program will set up the FreeIPA Server.
>
>This includes:
>  * Configure a stand-alone CA (dogtag) for certificate management
>  * Configure the Network Time Daemon (ntpd)
>  * Create and configure an instance of Directory Server
>  * Create and configure a Kerberos Key Distribution Center (KDC)
>  * Configure Apache (httpd)
>  * Configure DNS (bind)
>
>To accept the default shown in brackets, press the Enter key.
>
>Warning: skipping DNS resolution of host zippyvm1.testrelm.com
>Using reverse zone 5.14.10.in-addr.arpa.
>
>The IPA Master Server will be configured with:
>Hostname:      zippyvm1.testrelm.com
>IP address:    10.14.5.133
>Domain name:   testrelm.com
>Realm name:    TESTRELM.COM
>
>BIND DNS server will be configured to serve IPA domain with:
>Forwarders:    10.14.63.12
>Reverse zone:  5.14.10.in-addr.arpa.
>
>Configuring ntpd
>  [1/4]: stopping ntpd
>  [2/4]: writing configuration
>  [3/4]: configuring ntpd to start on boot
>  [4/4]: starting ntpd
>done configuring ntpd.
>Configuring directory server for the CA: Estimated time 30 seconds
>  [1/3]: creating directory server user
>  [2/3]: creating directory server instance
>  [3/3]: restarting directory server
>done configuring pkids.
>Configuring certificate server: Estimated time 3 minutes 30 seconds
>  [1/20]: creating certificate server user
>  [2/20]: creating pki-ca instance
>  [3/20]: configuring certificate server instance
>  [4/20]: disabling nonces
>  [5/20]: creating CA agent PKCS#12 file in /root
>  [6/20]: creating RA agent certificate database
>  [7/20]: importing CA chain to RA certificate database
>  [8/20]: fixing RA database permissions
>  [9/20]: setting up signing cert profile
>  [10/20]: set up CRL publishing
>  [11/20]: set certificate subject base
>  [12/20]: enabling Subject Key Identifier
>  [13/20]: configuring certificate server to start on boot
>  [14/20]: restarting certificate server
>  [15/20]: requesting RA certificate from CA
>  [16/20]: issuing RA agent certificate
>  [17/20]: adding RA agent as a trusted user
>  [18/20]: configure certificate renewals
>  [19/20]: configure Server-Cert certificate renewal
>  [20/20]: Configure HTTP to proxy connections
>done configuring pki-cad.
>Configuring directory server: Estimated time 1 minute
>  [1/36]: creating directory server user
>  [2/36]: creating directory server instance
>  [3/36]: adding default schema
>  [4/36]: enabling memberof plugin
>  [5/36]: enabling referential integrity plugin
>  [6/36]: enabling winsync plugin
>  [7/36]: configuring replication version plugin
>  [8/36]: enabling IPA enrollment plugin
>  [9/36]: enabling ldapi
>  [10/36]: configuring uniqueness plugin
>  [11/36]: configuring uuid plugin
>  [12/36]: configuring modrdn plugin
>  [13/36]: enabling entryUSN plugin
>  [14/36]: configuring lockout plugin
>  [15/36]: creating indices
>  [16/36]: configuring ssl for ds instance
>  [17/36]: configuring certmap.conf
>  [18/36]: configure autobind for root
>  [19/36]: configure new location for managed entries
>  [20/36]: restarting directory server
>  [21/36]: adding default layout
>  [22/36]: adding delegation layout
>  [23/36]: adding replication acis
>  [24/36]: creating container for managed entries
>  [25/36]: configuring user private groups
>  [26/36]: configuring netgroups from hostgroups
>  [27/36]: creating default Sudo bind user
>  [28/36]: creating default Auto Member layout
>  [29/36]: adding range check plugin
>  [30/36]: creating default HBAC rule allow_all
>  [31/36]: initializing group membership
>  [32/36]: adding master entry
>  [33/36]: configuring Posix uid/gid generation
>  [34/36]: enabling compatibility plugin
>  [35/36]: tuning directory server
>  [36/36]: configuring directory to start on boot
>done configuring dirsrv.
>Configuring Kerberos KDC: Estimated time 30 seconds
>  [1/10]: adding sasl mappings to the directory
>  [2/10]: adding kerberos container to the directory
>  [3/10]: configuring KDC
>  [4/10]: initialize kerberos container
>  [5/10]: adding default ACIs
>  [6/10]: creating a keytab for the directory
>  [7/10]: creating a keytab for the machine
>  [8/10]: adding the password extension to the directory
>  [9/10]: starting the KDC
>  [10/10]: configuring KDC to start on boot
>done configuring krb5kdc.
>Configuring kadmin
>  [1/2]: starting kadmin 
>  [2/2]: configuring kadmin to start on boot
>done configuring kadmin.
>Configuring ipa_memcached
>  [1/2]: starting ipa_memcached 
>  [2/2]: configuring ipa_memcached to start on boot
>done configuring ipa_memcached.
>Configuring the web interface: Estimated time 1 minute
>  [1/14]: disabling mod_ssl in httpd
>  [2/14]: setting mod_nss port to 443
>  [3/14]: setting mod_nss password file
>  [4/14]: enabling mod_nss renegotiate
>  [5/14]: adding URL rewriting rules
>  [6/14]: configuring httpd
>  [7/14]: setting up ssl
>  [8/14]: setting up browser autoconfig
>  [9/14]: publish CA cert
>  [10/14]: creating a keytab for httpd
>  [11/14]: clean up any existing httpd ccache
>  [12/14]: configuring SELinux for httpd
>  [13/14]: restarting httpd
>  [14/14]: configuring httpd to start on boot
>done configuring httpd.
>Applying LDAP updates
>Restarting the directory server
>Restarting the KDC
>Configuring named:
>  [1/9]: adding DNS container
>ipa         : CRITICAL Failed to load dns.ldif: Command '/usr/bin/ldapmodify -v -f /tmp/tmpZHhak5 -H ldap://zippyvm1.testrelm.com:389 -x -D cn=Directory Manager -y /tmp/tmpdKNLBs' returned non-zero exit status 255
>  [2/9]: setting up our zone
>Unexpected error - see /var/log/ipaserver-install.log for details:
>DatabaseError: Can't contact LDAP server: 
>

Actions: View

Attachments on bug 848985: 605053 | 605054 | 605055 | 605056