Attachment 613794 Details for Bug 857688 – Install log with added debug

Install log with added debug

install.log (text/x-log), 8.44 KB, created by Erinn Looney-Triggs on 2012-09-17 21:58:59 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Erinn Looney-Triggs

Created: 2012-09-17 21:58:59 UTC

Size: 8.44 KB

patch

obsolete

>2012-09-17T21:53:59Z DEBUG /sbin/ipa-client-install was invoked with options: {'domain': None, 'force': False, 'krb5_offline_passwords': True, 'primary': False, 'mkhomedir': False, 'create_sshfp': True, 'conf_sshd': True, 'on_master': False, 'conf_ntp': True, 'ntp_server': None, 'principal': None, 'hostname': None, 'no_ac': False, 'unattended': None, 'sssd': True, 'trust_sshfp': False, 'dns_updates': False, 'realm_name': None, 'server': None, 'prompt_password': False, 'permit': False, 'debug': False, 'preserve_sssd': False, 'uninstall': False}
>2012-09-17T21:53:59Z DEBUG missing options might be asked for interactively later
>2012-09-17T21:53:59Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2012-09-17T21:53:59Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
>2012-09-17T21:53:59Z DEBUG [IPA Discovery]
>2012-09-17T21:53:59Z DEBUG Starting IPA discovery with domain=None, server=None, hostname=thin-mint.foo.com
>2012-09-17T21:53:59Z DEBUG Start searching for LDAP SRV record in "foo.com" (domain of the hostname) and its sub-domains
>2012-09-17T21:53:59Z DEBUG Search DNS for SRV record of _ldap._tcp.foo.com
>2012-09-17T21:53:59Z DEBUG DNS record found: 0 100 389 ipa.foo.com.
>2012-09-17T21:53:59Z DEBUG [Kerberos realm search]
>2012-09-17T21:53:59Z DEBUG Search DNS for TXT record of _kerberos.foo.com
>2012-09-17T21:53:59Z DEBUG DNS record found: "FOO.COM"
>2012-09-17T21:53:59Z DEBUG Search DNS for SRV record of _kerberos._udp.foo.com
>2012-09-17T21:53:59Z DEBUG DNS record found: 0 100 88 ipa.foo.com.
>2012-09-17T21:53:59Z DEBUG DNS record found: 0 100 88 ipa2.foo.com.
>2012-09-17T21:53:59Z DEBUG [LDAP server check]
>2012-09-17T21:53:59Z DEBUG Verifying that ipa.foo.com (realm FOO.COM) is an IPA server
>2012-09-17T21:54:00Z DEBUG args=/usr/bin/wget -O /tmp/tmp2VaIoj/ca.crt -T 15 -t 2 http://ipa.foo.com/ipa/config/ca.crt
>2012-09-17T21:54:00Z DEBUG stdout=
>2012-09-17T21:54:00Z DEBUG stderr=--2012-09-17 13:53:59--  http://ipa.foo.com/ipa/config/ca.crt
>Resolving ipa.foo.com... 66.162.103.233, 2001:4870:800e:301:f24d:a2ff:fe09:ae0
>Connecting to ipa.foo.com|66.162.103.233|:80... connected.
>HTTP request sent, awaiting response... 200 OK
>Length: 3108 (3.0K) [application/x-x509-ca-cert]
>Saving to: '/tmp/tmp2VaIoj/ca.crt'
>
>     0K ...                                                   100%  166K=0.02s
>
>2012-09-17 13:54:00 (166 KB/s) - '/tmp/tmp2VaIoj/ca.crt' saved [3108/3108]
>
>
>2012-09-17T21:54:00Z DEBUG Init LDAP connection with: ldap://ipa.foo.com:389
>2012-09-17T21:54:00Z DEBUG LDAP Error: Anonymous acces not allowed
>2012-09-17T21:54:00Z DEBUG Generated basedn from realm: dc=foo,dc=com
>2012-09-17T21:54:00Z DEBUG Discovery result: NO_ACCESS_TO_LDAP; server=ipa.foo.com, domain=foo.com, kdc=ipa.foo.com,ipa2.foo.com, basedn=dc=foo,dc=com
>2012-09-17T21:54:00Z DEBUG will use discovered domain: foo.com
>2012-09-17T21:54:00Z DEBUG Start searching for LDAP SRV record in "foo.com" (Validating DNS Discovery) and its sub-domains
>2012-09-17T21:54:00Z DEBUG Search DNS for SRV record of _ldap._tcp.foo.com
>2012-09-17T21:54:00Z DEBUG DNS record found: 0 100 389 ipa2.foo.com.
>2012-09-17T21:54:00Z DEBUG DNS validated, enabling discovery
>2012-09-17T21:54:00Z DEBUG will use discovered server: ipa.foo.com
>2012-09-17T21:54:00Z WARNING Anonymous access to the LDAP server is disabled.
>2012-09-17T21:54:00Z INFO Proceeding without strict verification.
>2012-09-17T21:54:00Z INFO Note: This is not an error if anonymous access has been explicitly restricted.
>2012-09-17T21:54:00Z INFO Discovery was successful!
>2012-09-17T21:54:00Z DEBUG will use discovered realm: FOO.COM
>2012-09-17T21:54:00Z DEBUG will use discovered basedn: dc=foo,dc=com
>2012-09-17T21:54:00Z INFO Hostname: thin-mint.foo.com
>2012-09-17T21:54:00Z DEBUG Hostname source: Machine's FQDN
>2012-09-17T21:54:00Z INFO Realm: FOO.COM
>2012-09-17T21:54:00Z DEBUG Realm source: Discovered Kerberos DNS records from foo.com
>2012-09-17T21:54:00Z INFO DNS Domain: foo.com
>2012-09-17T21:54:00Z DEBUG DNS Domain source: Discovered LDAP SRV records from foo.com (domain of the hostname)
>2012-09-17T21:54:00Z INFO IPA Server: ipa.foo.com
>2012-09-17T21:54:00Z DEBUG IPA Server source: Discovered LDAP SRV records from foo.com (domain of the hostname)
>2012-09-17T21:54:00Z INFO BaseDN: dc=foo,dc=com
>2012-09-17T21:54:00Z DEBUG BaseDN source: Generated from Kerberos realm
>2012-09-17T21:54:02Z DEBUG args=/usr/sbin/ipa-rmkeytab -k /etc/krb5.keytab -r FOO.COM
>2012-09-17T21:54:02Z DEBUG stdout=
>2012-09-17T21:54:02Z DEBUG stderr=realm not found
>
>2012-09-17T21:54:06Z DEBUG will use principal provided as option: erinn
>2012-09-17T21:54:06Z DEBUG args=/usr/bin/wget -O /etc/ipa/ca.crt http://ipa.foo.com/ipa/config/ca.crt
>2012-09-17T21:54:06Z DEBUG stdout=
>2012-09-17T21:54:06Z DEBUG stderr=--2012-09-17 13:54:06--  http://ipa.foo.com/ipa/config/ca.crt
>Resolving ipa.foo.com... 66.162.103.233, 2001:4870:800e:301:f24d:a2ff:fe09:ae0
>Connecting to ipa.foo.com|66.162.103.233|:80... connected.
>HTTP request sent, awaiting response... 200 OK
>Length: 3108 (3.0K) [application/x-x509-ca-cert]
>Saving to: '/etc/ipa/ca.crt'
>
>     0K ...                                                   100%  139K=0.02s
>
>2012-09-17 13:54:06 (139 KB/s) - '/etc/ipa/ca.crt' saved [3108/3108]
>
>
>2012-09-17T21:54:06Z INFO Synchronizing time with KDC...
>2012-09-17T21:54:06Z DEBUG Search DNS for SRV record of _ntp._udp.foo.com
>2012-09-17T21:54:06Z DEBUG DNS record found: 0 100 123 ipa2.foo.com.
>2012-09-17T21:54:06Z DEBUG DNS record found: 0 100 123 ipa.foo.com.
>2012-09-17T21:54:12Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -d ipa2.foo.com
>2012-09-17T21:54:12Z DEBUG stdout=17 Sep 13:54:06 ntpdate[15045]: ntpdate 4.2.6p5@1.2349-o Tue Aug  7 20:03:25 UTC 2012 (1)
>Looking for host ipa2.foo.com and service ntp
>17 Sep 13:54:06 ntpdate[15045]: running as uid(38)/gid(38) euid(38)/egid(38).
>transmit(66.162.103.229)
>receive(66.162.103.229)
>transmit(66.162.103.229)
>receive(66.162.103.229)
>transmit(66.162.103.229)
>receive(66.162.103.229)
>transmit(66.162.103.229)
>receive(66.162.103.229)
>server 66.162.103.229, port 123
>stratum 2, precision -23, leap 00, trust 000
>refid [66.162.103.229], delay 0.13776, dispersion 0.00024
>transmitted 4, in filter 4
>reference time:    d402167d.ce7d3496  Mon, Sep 17 2012 13:37:01.806
>originate timestamp: d4021a84.dd73af49  Mon, Sep 17 2012 13:54:12.865
>transmit timestamp:  d4021a84.cfc12a7d  Mon, Sep 17 2012 13:54:12.811
>filter delay:  0.13927  0.13916  0.13776  0.13811 
>         0.00000  0.00000  0.00000  0.00000 
>filter offset: -0.00218 -0.00349 -0.00280 -0.00278
>         0.000000 0.000000 0.000000 0.000000
>delay 0.13776, dispersion 0.00024
>offset -0.002802
>
>17 Sep 13:54:12 ntpdate[15045]: step time server 66.162.103.229 offset -0.002802 sec
>
>2012-09-17T21:54:12Z DEBUG stderr=host found : ipa2.foo.com
>
>2012-09-17T21:54:12Z DEBUG Writing Kerberos configuration to /tmp/tmpNYi_Qa:
>2012-09-17T21:54:12Z DEBUG #File modified by ipa-client-install
>
>[libdefaults]
>  default_realm = FOO.COM
>  dns_lookup_realm = true
>  dns_lookup_kdc = true
>  rdns = false
>  ticket_lifetime = 24h
>  forwardable = yes
>
>[realms]
>  FOO.COM = {
>    pkinit_anchors = FILE:/etc/ipa/ca.crt
>  }
>
>[domain_realm]
>  .foo.com = FOO.COM
>  foo.com = FOO.COM
>
>
>2012-09-17T21:54:43Z DEBUG args=kinit erinn@FOO.COM
>2012-09-17T21:54:43Z DEBUG stdout=Password for erinn@FOO.COM: 
>
>2012-09-17T21:54:43Z DEBUG stderr=
>2012-09-17T21:54:48Z DEBUG args=/usr/sbin/ipa-join -s ipa.foo.com -b dc=foo,dc=com
>2012-09-17T21:54:48Z DEBUG stdout=
>2012-09-17T21:54:48Z DEBUG stderr=Keytab successfully retrieved and stored in: /etc/krb5.keytab
>Certificate subject base is: O=FOO.COM
>
>2012-09-17T21:54:48Z INFO Enrolled in IPA realm FOO.COM
>2012-09-17T21:54:48Z DEBUG args=kdestroy
>2012-09-17T21:54:48Z DEBUG stdout=
>2012-09-17T21:54:48Z DEBUG stderr=
>2012-09-17T21:54:48Z DEBUG Backing up system configuration file '/etc/ipa/default.conf'
>2012-09-17T21:54:48Z DEBUG   -> Not backing up - '/etc/ipa/default.conf' doesn't exist
>2012-09-17T21:54:48Z DEBUG opts: [{'type': 'comment', 'name': 'comment', 'value': 'File modified by ipa-client-install'}, {'type': 'empty', 'name': 'empty'}, {'type': 'section', 'name': 'global', 'value': [{'type': 'option', 'name': 'basedn', 'value': ipapython.dn.DN('dc=foo,dc=com')}, {'type': 'option', 'name': 'realm', 'value': 'FOO.COM'}, {'type': 'option', 'name': 'domain', 'value': 'foo.com'}, {'type': 'option', 'name': 'server', 'value': 'ipa.foo.com'}, {'type': 'option', 'name': 'xmlrpc_uri', 'value': 'https://ipa.foo.com/ipa/xml'}, {'type': 'option', 'name': 'enable_ra', 'value': 'True'}]}, {'type': 'empty', 'name': 'empty'}]

Actions: View

Attachments on bug 857688: 613699 | 613794