Attachment 887258 Details for Bug 1088683 – ipaclient install log from ipa install that removes some sssd config

ipaclient install log from ipa install that removes some sssd config

ipaclient-install.log (text/x-log), 30.33 KB, created by Michael Gregg on 2014-04-17 19:33:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Michael Gregg

Created: 2014-04-17 19:33:21 UTC

Size: 30.33 KB

patch

obsolete

>2014-04-17T19:27:37Z DEBUG /usr/sbin/ipa-client-install was invoked with options: {'domain': 'testrelm.test', 'force': False, 'krb5_offline_passwords': True, 'primary': False, 'mkhomedir': False, 'create_sshfp': True, 'conf_sshd': True, 'on_master': False, 'conf_ntp': True, 'ca_cert_file': None, 'ntp_server': None, 'principal': 'admin', 'hostname': None, 'no_ac': False, 'unattended': True, 'sssd': True, 'trust_sshfp': False, 'dns_updates': False, 'realm_name': 'TESTRELM.TEST', 'conf_ssh': True, 'server': ['oracle.testrelm.test'], 'prompt_password': False, 'permit': False, 'debug': False, 'preserve_sssd': True, 'uninstall': False}
>2014-04-17T19:27:37Z DEBUG missing options might be asked for interactively later
>2014-04-17T19:27:37Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2014-04-17T19:27:37Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
>2014-04-17T19:27:37Z DEBUG [IPA Discovery]
>2014-04-17T19:27:37Z DEBUG Starting IPA discovery with domain=testrelm.test, server=['oracle.testrelm.test'], hostname=blade05.testrelm.test
>2014-04-17T19:27:37Z DEBUG Server and domain forced
>2014-04-17T19:27:37Z DEBUG [Kerberos realm search]
>2014-04-17T19:27:37Z DEBUG Search DNS for TXT record of _kerberos.testrelm.test.
>2014-04-17T19:27:37Z DEBUG DNS record found: DNSResult::name:_kerberos.testrelm.test.,type:16,class:1,rdata={data:TESTRELM.TEST}
>2014-04-17T19:27:37Z DEBUG Search DNS for SRV record of _kerberos._udp.testrelm.test.
>2014-04-17T19:27:37Z DEBUG DNS record found: DNSResult::name:_kerberos._udp.testrelm.test.,type:33,class:1,rdata={priority:0,port:88,weight:100,server:nocp7.testrelm.test.}
>2014-04-17T19:27:37Z DEBUG DNS record found: DNSResult::name:_kerberos._udp.testrelm.test.,type:33,class:1,rdata={priority:0,port:88,weight:100,server:oracle.testrelm.test.}
>2014-04-17T19:27:37Z DEBUG [LDAP server check]
>2014-04-17T19:27:37Z DEBUG Verifying that oracle.testrelm.test (realm TESTRELM.TEST) is an IPA server
>2014-04-17T19:27:37Z DEBUG Init LDAP connection with: ldap://oracle.testrelm.test:389
>2014-04-17T19:27:37Z DEBUG Search LDAP server for IPA base DN
>2014-04-17T19:27:37Z DEBUG Check if naming context 'dc=testrelm,dc=test' is for IPA
>2014-04-17T19:27:37Z DEBUG Naming context 'dc=testrelm,dc=test' is a valid IPA context
>2014-04-17T19:27:37Z DEBUG Search for (objectClass=krbRealmContainer) in dc=testrelm,dc=test (sub)
>2014-04-17T19:27:37Z DEBUG Found: cn=TESTRELM.TEST,cn=kerberos,dc=testrelm,dc=test
>2014-04-17T19:27:37Z DEBUG Discovery result: Success; server=oracle.testrelm.test, domain=testrelm.test, kdc=nocp7.testrelm.test,oracle.testrelm.test, basedn=dc=testrelm,dc=test
>2014-04-17T19:27:37Z DEBUG will use discovered domain: testrelm.test
>2014-04-17T19:27:37Z DEBUG Using servers from command line, disabling DNS discovery
>2014-04-17T19:27:37Z DEBUG will use provided server: oracle.testrelm.test
>2014-04-17T19:27:37Z DEBUG will use discovered realm: TESTRELM.TEST
>2014-04-17T19:27:37Z DEBUG will use discovered basedn: dc=testrelm,dc=test
>2014-04-17T19:27:37Z INFO Hostname: blade05.testrelm.test
>2014-04-17T19:27:37Z DEBUG Hostname source: Machine's FQDN
>2014-04-17T19:27:37Z INFO Realm: TESTRELM.TEST
>2014-04-17T19:27:37Z DEBUG Realm source: Discovered from LDAP DNS records in oracle.testrelm.test
>2014-04-17T19:27:37Z INFO DNS Domain: testrelm.test
>2014-04-17T19:27:37Z DEBUG DNS Domain source: Forced
>2014-04-17T19:27:37Z INFO IPA Server: oracle.testrelm.test
>2014-04-17T19:27:37Z DEBUG IPA Server source: Provided as option
>2014-04-17T19:27:37Z INFO BaseDN: dc=testrelm,dc=test
>2014-04-17T19:27:37Z DEBUG BaseDN source: From IPA server ldap://oracle.testrelm.test:389
>2014-04-17T19:27:37Z DEBUG args=/usr/sbin/ipa-rmkeytab -k /etc/krb5.keytab -r TESTRELM.TEST
>2014-04-17T19:27:37Z DEBUG stdout=
>2014-04-17T19:27:37Z DEBUG stderr=realm not found
>
>2014-04-17T19:27:37Z INFO Synchronizing time with KDC...
>2014-04-17T19:27:37Z DEBUG Search DNS for SRV record of _ntp._udp.testrelm.test.
>2014-04-17T19:27:37Z DEBUG DNS record found: DNSResult::name:_ntp._udp.testrelm.test.,type:33,class:1,rdata={priority:0,port:123,weight:100,server:nocp7.testrelm.test.}
>2014-04-17T19:27:37Z DEBUG DNS record found: DNSResult::name:_ntp._udp.testrelm.test.,type:33,class:1,rdata={priority:0,port:123,weight:100,server:oracle.testrelm.test.}
>2014-04-17T19:27:37Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -v nocp7.testrelm.test
>2014-04-17T19:27:37Z DEBUG stdout=
>2014-04-17T19:27:37Z DEBUG stderr=
>2014-04-17T19:27:37Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -v nocp7.testrelm.test
>2014-04-17T19:27:37Z DEBUG stdout=
>2014-04-17T19:27:37Z DEBUG stderr=
>2014-04-17T19:27:37Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -v nocp7.testrelm.test
>2014-04-17T19:27:37Z DEBUG stdout=
>2014-04-17T19:27:37Z DEBUG stderr=
>2014-04-17T19:27:38Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -v oracle.testrelm.test
>2014-04-17T19:27:38Z DEBUG stdout=
>2014-04-17T19:27:38Z DEBUG stderr=
>2014-04-17T19:27:38Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -v oracle.testrelm.test
>2014-04-17T19:27:38Z DEBUG stdout=
>2014-04-17T19:27:38Z DEBUG stderr=
>2014-04-17T19:27:38Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -v oracle.testrelm.test
>2014-04-17T19:27:38Z DEBUG stdout=
>2014-04-17T19:27:38Z DEBUG stderr=
>2014-04-17T19:27:38Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -v oracle.testrelm.test
>2014-04-17T19:27:38Z DEBUG stdout=
>2014-04-17T19:27:38Z DEBUG stderr=
>2014-04-17T19:27:38Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -v oracle.testrelm.test
>2014-04-17T19:27:38Z DEBUG stdout=
>2014-04-17T19:27:38Z DEBUG stderr=
>2014-04-17T19:27:38Z DEBUG args=/usr/sbin/ntpdate -U ntp -s -b -v oracle.testrelm.test
>2014-04-17T19:27:38Z DEBUG stdout=
>2014-04-17T19:27:38Z DEBUG stderr=
>2014-04-17T19:27:38Z WARNING Unable to sync time with IPA NTP server, assuming the time is in sync. Please check that 123 UDP port is opened.
>2014-04-17T19:27:38Z DEBUG Writing Kerberos configuration to /tmp/tmpD1CuhM:
>2014-04-17T19:27:38Z DEBUG #File modified by ipa-client-install
>
>includedir /var/lib/sss/pubconf/krb5.include.d/
>
>[libdefaults]
>  default_realm = TESTRELM.TEST
>  dns_lookup_realm = false
>  dns_lookup_kdc = false
>  rdns = false
>  ticket_lifetime = 24h
>  forwardable = yes
>
>[realms]
>  TESTRELM.TEST = {
>    kdc = oracle.testrelm.test:88
>    master_kdc = oracle.testrelm.test:88
>    admin_server = oracle.testrelm.test:749
>    default_domain = testrelm.test
>    pkinit_anchors = FILE:/etc/ipa/ca.crt
>  }
>
>[domain_realm]
>  .testrelm.test = TESTRELM.TEST
>  testrelm.test = TESTRELM.TEST
>
>2014-04-17T19:27:38Z DEBUG args=kinit admin@TESTRELM.TEST
>2014-04-17T19:27:38Z DEBUG stdout=Password for admin@TESTRELM.TEST: 
>
>2014-04-17T19:27:38Z DEBUG stderr=
>2014-04-17T19:27:38Z DEBUG trying to retrieve CA cert via LDAP from ldap://oracle.testrelm.test
>2014-04-17T19:27:38Z DEBUG Existing CA cert and Retrieved CA cert are identical
>2014-04-17T19:27:38Z DEBUG args=/usr/sbin/ipa-join -s oracle.testrelm.test -b dc=testrelm,dc=test
>2014-04-17T19:27:38Z DEBUG stdout=
>2014-04-17T19:27:38Z DEBUG stderr=Keytab successfully retrieved and stored in: /etc/krb5.keytab
>Certificate subject base is: O=TESTRELM.TEST
>
>2014-04-17T19:27:38Z INFO Enrolled in IPA realm TESTRELM.TEST
>2014-04-17T19:27:38Z DEBUG args=kdestroy
>2014-04-17T19:27:38Z DEBUG stdout=
>2014-04-17T19:27:38Z DEBUG stderr=
>2014-04-17T19:27:39Z DEBUG args=/usr/bin/kinit -k -t /etc/krb5.keytab host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:39Z DEBUG stdout=
>2014-04-17T19:27:39Z DEBUG stderr=
>2014-04-17T19:27:39Z DEBUG Backing up system configuration file '/etc/ipa/default.conf'
>2014-04-17T19:27:39Z DEBUG   -> Not backing up - '/etc/ipa/default.conf' doesn't exist
>2014-04-17T19:27:39Z INFO Created /etc/ipa/default.conf
>2014-04-17T19:27:39Z DEBUG importing all plugin modules in '/usr/lib/python2.6/site-packages/ipalib/plugins'...
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/automember.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/automount.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/batch.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/config.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/delegation.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/dns.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/group.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacrule.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvc.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvcgroup.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbactest.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/host.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hostgroup.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/idrange.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/internal.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/kerberos.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/krbtpolicy.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/migration.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/misc.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/netgroup.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/passwd.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/permission.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/ping.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/privilege.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py'
>2014-04-17T19:27:39Z DEBUG args=klist -V
>2014-04-17T19:27:39Z DEBUG stdout=Kerberos 5 version 1.10.3
>
>2014-04-17T19:27:39Z DEBUG stderr=
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/role.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/selinuxusermap.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/service.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/trust.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/user.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py'
>2014-04-17T19:27:39Z DEBUG importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py'
>2014-04-17T19:27:40Z DEBUG Backing up system configuration file '/etc/sssd/sssd.conf'
>2014-04-17T19:27:40Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2014-04-17T19:27:40Z INFO Domain testrelm.test is already configured in existing SSSD config, creating a new one.
>2014-04-17T19:27:40Z INFO The old /etc/sssd/sssd.conf is backed up and will be restored during uninstall.
>2014-04-17T19:27:40Z INFO Configured /etc/sssd/sssd.conf
>2014-04-17T19:27:40Z DEBUG args=/usr/bin/certutil -A -d /etc/pki/nssdb -n IPA CA -t CT,C,C -a -i /etc/ipa/ca.crt
>2014-04-17T19:27:40Z DEBUG stdout=
>2014-04-17T19:27:40Z DEBUG stderr=
>2014-04-17T19:27:40Z DEBUG Backing up system configuration file '/etc/krb5.conf'
>2014-04-17T19:27:40Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2014-04-17T19:27:40Z DEBUG Writing Kerberos configuration to /etc/krb5.conf:
>2014-04-17T19:27:40Z DEBUG #File modified by ipa-client-install
>
>includedir /var/lib/sss/pubconf/krb5.include.d/
>
>[libdefaults]
>  default_realm = TESTRELM.TEST
>  dns_lookup_realm = false
>  dns_lookup_kdc = false
>  rdns = false
>  ticket_lifetime = 24h
>  forwardable = yes
>
>[realms]
>  TESTRELM.TEST = {
>    kdc = oracle.testrelm.test:88
>    master_kdc = oracle.testrelm.test:88
>    admin_server = oracle.testrelm.test:749
>    default_domain = testrelm.test
>    pkinit_anchors = FILE:/etc/ipa/ca.crt
>  }
>
>[domain_realm]
>  .testrelm.test = TESTRELM.TEST
>  testrelm.test = TESTRELM.TEST
>
>2014-04-17T19:27:40Z INFO Configured /etc/krb5.conf for IPA realm TESTRELM.TEST
>2014-04-17T19:27:40Z DEBUG args=keyctl search @s user ipa_session_cookie:host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:40Z DEBUG stdout=
>2014-04-17T19:27:40Z DEBUG stderr=keyctl_search: Required key not available
>
>2014-04-17T19:27:40Z DEBUG args=keyctl search @s user ipa_session_cookie:host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:40Z DEBUG stdout=
>2014-04-17T19:27:40Z DEBUG stderr=keyctl_search: Required key not available
>
>2014-04-17T19:27:40Z DEBUG failed to find session_cookie in persistent storage for principal 'host/blade05.testrelm.test@TESTRELM.TEST'
>2014-04-17T19:27:40Z INFO trying https://oracle.testrelm.test/ipa/xml
>2014-04-17T19:27:40Z DEBUG NSSConnection init oracle.testrelm.test
>2014-04-17T19:27:40Z DEBUG Connecting: 10.8.60.31:0
>2014-04-17T19:27:40Z DEBUG auth_certificate_callback: check_sig=True is_server=False
>Data:
>        Version:       3 (0x2)
>        Serial Number: 10 (0xa)
>        Signature Algorithm:
>            Algorithm: PKCS #1 SHA-256 With RSA Encryption
>        Issuer: CN=Certificate Authority,O=TESTRELM.TEST
>        Validity:
>            Not Before: Thu Apr 17 18:37:42 2014 UTC
>            Not After:  Sun Apr 17 18:37:42 2016 UTC
>        Subject: CN=oracle.testrelm.test,O=TESTRELM.TEST
>        Subject Public Key Info:
>            Public Key Algorithm:
>                Algorithm: PKCS #1 RSA Encryption
>            RSA Public Key:
>                Modulus:
>                    bd:a3:9c:7b:92:86:2a:96:88:a1:df:05:21:30:ea:62:
>                    e9:d2:39:ff:77:8e:a1:5a:b8:80:8e:f0:f4:83:3e:78:
>                    01:a8:9d:a5:5a:db:3d:77:18:4f:26:08:bd:51:ed:5c:
>                    ed:a9:02:66:a4:7a:a7:01:29:49:98:6a:aa:24:c8:af:
>                    2c:7a:1d:3b:f0:bc:c2:64:5a:62:5c:2e:00:44:1b:da:
>                    83:70:7d:fe:f3:d4:da:63:aa:9c:43:b1:da:c7:50:ac:
>                    31:dc:a1:92:a9:2b:97:72:76:01:09:cd:db:87:dd:ab:
>                    eb:35:7d:54:83:39:06:23:03:f5:00:ca:25:23:cb:c6:
>                    7e:99:6f:64:9f:2c:7b:9d:60:39:71:40:53:d1:3c:ba:
>                    39:52:90:7e:ae:c5:9d:c3:f6:ae:f5:53:fc:fe:7f:c3:
>                    5e:35:40:5d:a9:b3:3d:45:bd:f9:4e:9d:2c:bf:f1:45:
>                    83:cd:c2:56:04:69:97:d7:73:bd:7b:d0:94:85:8f:d4:
>                    53:fe:6a:fa:55:7a:06:a6:e1:64:4a:b6:7d:1b:9d:cc:
>                    8b:1d:55:a0:bc:14:7c:26:8a:e5:21:57:a6:ae:ad:b6:
>                    42:00:dd:8a:a2:1e:20:6f:e9:4b:1a:f3:b1:31:1b:3e:
>                    99:92:2d:2c:ac:60:44:2b:a4:29:6b:5f:e6:46:07:63
>                Exponent:
>                    65537 (0x10001)
>    Signed Extensions: (5)
>        Name:     Certificate Authority Key Identifier
>        Critical: False
>        Key ID:
>            b8:ce:08:3b:c1:16:a7:7f:2b:8d:78:17:2b:5a:ba:cf:
>            66:93:d5:93
>        Serial Number: None
>        General Names: [0 total]
>
>        Name:     Authority Information Access
>        Critical: False
>
>        Name:     Certificate Key Usage
>        Critical: True
>        Usages:
>            Digital Signature
>            Non-Repudiation
>            Key Encipherment
>            Data Encipherment
>
>        Name:     Extended Key Usage
>        Critical: False
>        Usages:
>            TLS Web Server Authentication Certificate
>            TLS Web Client Authentication Certificate
>
>        Name:     Certificate Subject Key ID
>        Critical: False
>        Data:
>            11:62:f3:0b:42:73:60:7d:97:83:8b:be:d3:97:2a:ac:
>            ea:d1:7c:d0
>
>    Signature:
>        Signature Algorithm:
>            Algorithm: PKCS #1 SHA-256 With RSA Encryption
>        Signature:
>            63:4f:42:02:90:15:47:42:dd:e5:b5:ec:8c:f0:6c:d4:
>            78:76:62:96:31:55:29:0c:f8:52:f4:95:4f:2c:1e:88:
>            41:7e:86:2d:c5:28:81:7e:e7:1c:45:70:e9:57:ae:03:
>            65:8c:47:2b:0b:61:99:e9:de:06:1e:0f:f2:b6:9d:de:
>            e0:9f:29:7c:9b:08:ad:e0:f2:b7:6f:01:22:1e:b7:cd:
>            13:62:3f:3d:e5:03:20:9f:6b:67:82:17:03:25:46:8f:
>            73:16:17:91:5c:a6:36:ef:4f:6b:ed:a1:f4:c3:af:99:
>            27:c7:98:82:72:1c:85:8f:47:b2:fe:fb:ac:15:77:6d:
>            37:4a:b4:84:8a:96:89:9a:72:c8:3c:f5:c7:94:06:02:
>            2c:70:9e:72:4d:74:e0:27:7e:e0:26:04:b2:72:9d:c2:
>            c9:2b:f0:d1:aa:81:7d:49:84:db:47:c6:37:50:0d:95:
>            71:42:e0:a3:9e:cc:c2:b0:71:f2:a7:36:d7:e3:ce:a6:
>            1b:0b:35:8b:5e:83:b2:03:f5:e1:94:81:99:69:64:b4:
>            e5:80:8f:60:f7:30:f2:ad:c3:42:ca:31:62:8d:49:bc:
>            2a:35:dd:bf:30:7d:fd:26:58:4c:76:48:98:d5:08:b8:
>            d8:cb:f1:92:cd:a1:1a:3a:19:eb:25:87:25:4e:e0:79
>        Fingerprint (MD5):
>            95:fd:fa:07:fb:59:ca:50:23:18:4c:11:6f:10:de:c6
>        Fingerprint (SHA1):
>            6e:72:30:1a:79:74:94:e8:8f:5a:7d:ea:1d:69:dc:62:
>            51:b9:24:9d
>2014-04-17T19:27:40Z DEBUG approved_usage = SSLServer intended_usage = SSLServer
>2014-04-17T19:27:40Z DEBUG cert valid True for "CN=oracle.testrelm.test,O=TESTRELM.TEST"
>2014-04-17T19:27:40Z DEBUG handshake complete, peer = 10.8.60.31:443
>2014-04-17T19:27:40Z DEBUG received Set-Cookie 'ipa_session=be64d42acd2d5017972b8318eca9bf73; Domain=oracle.testrelm.test; Path=/ipa; Expires=Thu, 17 Apr 2014 19:47:40 GMT; Secure; HttpOnly'
>2014-04-17T19:27:40Z DEBUG storing cookie 'ipa_session=be64d42acd2d5017972b8318eca9bf73; Domain=oracle.testrelm.test; Path=/ipa; Expires=Thu, 17 Apr 2014 19:47:40 GMT; Secure; HttpOnly' for principal host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:40Z DEBUG args=keyctl search @s user ipa_session_cookie:host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:40Z DEBUG stdout=
>2014-04-17T19:27:40Z DEBUG stderr=keyctl_search: Required key not available
>
>2014-04-17T19:27:40Z DEBUG args=keyctl search @s user ipa_session_cookie:host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:40Z DEBUG stdout=
>2014-04-17T19:27:40Z DEBUG stderr=keyctl_search: Required key not available
>
>2014-04-17T19:27:40Z DEBUG args=keyctl padd user ipa_session_cookie:host/blade05.testrelm.test@TESTRELM.TEST @s
>2014-04-17T19:27:40Z DEBUG stdout=261021551
>
>2014-04-17T19:27:40Z DEBUG stderr=
>2014-04-17T19:27:40Z DEBUG Created connection context.xmlclient
>2014-04-17T19:27:40Z DEBUG args=/sbin/service messagebus start 
>2014-04-17T19:27:40Z DEBUG stdout=Starting system message bus: 
>
>2014-04-17T19:27:40Z DEBUG stderr=
>2014-04-17T19:27:40Z DEBUG args=/sbin/service messagebus status 
>2014-04-17T19:27:40Z DEBUG stdout=messagebus (pid  5629) is running...
>
>2014-04-17T19:27:40Z DEBUG stderr=
>2014-04-17T19:27:40Z DEBUG args=/sbin/service certmonger restart 
>2014-04-17T19:27:40Z DEBUG stdout=Stopping certmonger: [FAILED]
>Starting certmonger: [  OK  ]
>
>2014-04-17T19:27:40Z DEBUG stderr=
>2014-04-17T19:27:41Z DEBUG args=/sbin/service certmonger status 
>2014-04-17T19:27:41Z DEBUG stdout=certmonger (pid  4250) is running...
>
>2014-04-17T19:27:41Z DEBUG stderr=
>2014-04-17T19:27:41Z DEBUG args=/sbin/service certmonger restart 
>2014-04-17T19:27:41Z DEBUG stdout=Stopping certmonger: [  OK  ]
>Starting certmonger: [  OK  ]
>
>2014-04-17T19:27:41Z DEBUG stderr=
>2014-04-17T19:27:41Z DEBUG args=/sbin/service certmonger status 
>2014-04-17T19:27:41Z DEBUG stdout=certmonger (pid  4274) is running...
>
>2014-04-17T19:27:41Z DEBUG stderr=
>2014-04-17T19:27:41Z DEBUG args=/sbin/chkconfig certmonger on
>2014-04-17T19:27:41Z DEBUG stdout=
>2014-04-17T19:27:41Z DEBUG stderr=
>2014-04-17T19:27:41Z DEBUG args=ipa-getcert request -d /etc/pki/nssdb -n IPA Machine Certificate - blade05.testrelm.test -N CN=blade05.testrelm.test,O=TESTRELM.TEST -K host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:41Z DEBUG stdout=New signing request "20140417192741" added.
>
>2014-04-17T19:27:41Z DEBUG stderr=
>2014-04-17T19:27:41Z INFO Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
>2014-04-17T19:27:41Z INFO Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
>2014-04-17T19:27:41Z DEBUG raw: host_mod(u'blade05.testrelm.test', ipasshpubkey=[u'ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzdSCCaYBNh5kz6mce7EC0uWdgt8hqOoGgmZjpWYqCwPRZQABNmsmrI7BfpS8ZVcu9ehip9Ks8NyYPOlzsq/oKAlAvZhtqp2nBhmOa7wJMfnnrAxlLjEmRlQL9KOJsbYwOj22qQmOThuxGq7JRgSqsu89o7y2k5rWZejYZiWwKAognuNdeWyWjnd1ic4G5UrR41KE73bY3i6i1ToAo5abX0t+bk/lGcavf8bdEWnurF8ef4p5NnCQaYVyw006Mh7N9EdhFC5/W+QMlwpRSxMTo/hgEnUtUAOPbAzntH9tLy7BE4jOWPtMB5irtu6mC4uCbfL+kPIuSInBKie81CFUKQ==', u'ssh-dss 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'], updatedns=False)
>2014-04-17T19:27:41Z DEBUG host_mod(u'blade05.testrelm.test', random=False, ipasshpubkey=(u'ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzdSCCaYBNh5kz6mce7EC0uWdgt8hqOoGgmZjpWYqCwPRZQABNmsmrI7BfpS8ZVcu9ehip9Ks8NyYPOlzsq/oKAlAvZhtqp2nBhmOa7wJMfnnrAxlLjEmRlQL9KOJsbYwOj22qQmOThuxGq7JRgSqsu89o7y2k5rWZejYZiWwKAognuNdeWyWjnd1ic4G5UrR41KE73bY3i6i1ToAo5abX0t+bk/lGcavf8bdEWnurF8ef4p5NnCQaYVyw006Mh7N9EdhFC5/W+QMlwpRSxMTo/hgEnUtUAOPbAzntH9tLy7BE4jOWPtMB5irtu6mC4uCbfL+kPIuSInBKie81CFUKQ==', u'ssh-dss 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'), rights=False, updatedns=False, all=False, raw=False)
>2014-04-17T19:27:41Z INFO Forwarding 'host_mod' to server u'https://oracle.testrelm.test/ipa/xml'
>2014-04-17T19:27:41Z DEBUG NSSConnection init oracle.testrelm.test
>2014-04-17T19:27:41Z DEBUG Connecting: 10.8.60.31:0
>2014-04-17T19:27:41Z DEBUG handshake complete, peer = 10.8.60.31:443
>2014-04-17T19:27:41Z DEBUG received Set-Cookie 'ipa_session=c6cbea7cee8c94db1f07d76cbb17168e; Domain=oracle.testrelm.test; Path=/ipa; Expires=Thu, 17 Apr 2014 19:47:41 GMT; Secure; HttpOnly'
>2014-04-17T19:27:41Z DEBUG storing cookie 'ipa_session=c6cbea7cee8c94db1f07d76cbb17168e; Domain=oracle.testrelm.test; Path=/ipa; Expires=Thu, 17 Apr 2014 19:47:41 GMT; Secure; HttpOnly' for principal host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:41Z DEBUG args=keyctl search @s user ipa_session_cookie:host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:41Z DEBUG stdout=261021551
>
>2014-04-17T19:27:41Z DEBUG stderr=
>2014-04-17T19:27:41Z DEBUG args=keyctl search @s user ipa_session_cookie:host/blade05.testrelm.test@TESTRELM.TEST
>2014-04-17T19:27:41Z DEBUG stdout=261021551
>
>2014-04-17T19:27:41Z DEBUG stderr=
>2014-04-17T19:27:41Z DEBUG args=keyctl pupdate 261021551
>2014-04-17T19:27:41Z DEBUG stdout=
>2014-04-17T19:27:41Z DEBUG stderr=
>2014-04-17T19:27:41Z DEBUG Caught fault 4202 from server https://oracle.testrelm.test/ipa/xml: no modifications to be performed
>2014-04-17T19:27:41Z DEBUG Writing nsupdate commands to /etc/ipa/.dns_update.txt:
>2014-04-17T19:27:41Z DEBUG zone testrelm.test.
>update delete blade05.testrelm.test. IN SSHFP
>send
>update add blade05.testrelm.test. 1200 IN SSHFP 1 1 44C216F902E33200CC4FE41DD05E86BFE29EFA3D
>update add blade05.testrelm.test. 1200 IN SSHFP 2 1 F08A92AE28A4FBBBF080D2FCC93E9B57A967A61F
>send
>
>2014-04-17T19:27:42Z DEBUG args=/usr/bin/nsupdate -g /etc/ipa/.dns_update.txt
>2014-04-17T19:27:42Z DEBUG stdout=
>2014-04-17T19:27:42Z DEBUG stderr=
>2014-04-17T19:27:42Z DEBUG args=/sbin/service nscd status
>2014-04-17T19:27:42Z DEBUG stdout=nscd (pid 2884) is running...
>
>2014-04-17T19:27:42Z DEBUG stderr=
>2014-04-17T19:27:42Z DEBUG args=/sbin/service nscd stop 
>2014-04-17T19:27:42Z DEBUG stdout=Stopping nscd: [  OK  ]
>
>2014-04-17T19:27:42Z DEBUG stderr=
>2014-04-17T19:27:42Z DEBUG args=/sbin/chkconfig nscd off
>2014-04-17T19:27:42Z DEBUG stdout=
>2014-04-17T19:27:42Z DEBUG stderr=
>2014-04-17T19:27:42Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state'
>2014-04-17T19:27:42Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state'
>2014-04-17T19:27:42Z DEBUG args=/usr/sbin/authconfig --enablesssdauth --update --enablesssd
>2014-04-17T19:27:42Z DEBUG stdout=
>2014-04-17T19:27:42Z DEBUG stderr=
>2014-04-17T19:27:42Z INFO SSSD enabled
>2014-04-17T19:27:43Z DEBUG args=/sbin/service sssd restart 
>2014-04-17T19:27:43Z DEBUG stdout=Stopping sssd: [FAILED]
>Starting sssd: [  OK  ]
[  OK  ]
>
>2014-04-17T19:27:43Z DEBUG stderr=cat: /var/run/sssd.pid: No such file or directory
>
>2014-04-17T19:27:43Z DEBUG args=/sbin/service sssd status 
>2014-04-17T19:27:43Z DEBUG stdout=sssd (pid  4380) is running...
>
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:43Z DEBUG args=/sbin/chkconfig sssd on
>2014-04-17T19:27:43Z DEBUG stdout=
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:43Z DEBUG Backing up system configuration file '/etc/openldap/ldap.conf'
>2014-04-17T19:27:43Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2014-04-17T19:27:43Z INFO Configured /etc/openldap/ldap.conf
>2014-04-17T19:27:43Z DEBUG args=getent passwd admin
>2014-04-17T19:27:43Z DEBUG stdout=admin:*:1141400000:1141400000:Administrator:/home/admin:/bin/bash
>
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:43Z DEBUG Backing up system configuration file '/etc/ntp/step-tickers'
>2014-04-17T19:27:43Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2014-04-17T19:27:43Z DEBUG args=/usr/sbin/selinuxenabled
>2014-04-17T19:27:43Z DEBUG stdout=
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:43Z DEBUG args=/sbin/restorecon /etc/ntp/step-tickers
>2014-04-17T19:27:43Z DEBUG stdout=
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:43Z DEBUG args=/sbin/chkconfig ntpd
>2014-04-17T19:27:43Z DEBUG stdout=
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:43Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state'
>2014-04-17T19:27:43Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state'
>2014-04-17T19:27:43Z DEBUG Backing up system configuration file '/etc/ntp.conf'
>2014-04-17T19:27:43Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2014-04-17T19:27:43Z DEBUG args=/usr/sbin/selinuxenabled
>2014-04-17T19:27:43Z DEBUG stdout=
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:43Z DEBUG args=/sbin/restorecon /etc/ntp.conf
>2014-04-17T19:27:43Z DEBUG stdout=
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:43Z DEBUG Backing up system configuration file '/etc/sysconfig/ntpd'
>2014-04-17T19:27:43Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2014-04-17T19:27:43Z DEBUG args=/usr/sbin/selinuxenabled
>2014-04-17T19:27:43Z DEBUG stdout=
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:43Z DEBUG args=/sbin/restorecon /etc/sysconfig/ntpd
>2014-04-17T19:27:43Z DEBUG stdout=
>2014-04-17T19:27:43Z DEBUG stderr=
>2014-04-17T19:27:44Z DEBUG args=/sbin/chkconfig ntpd on
>2014-04-17T19:27:44Z DEBUG stdout=
>2014-04-17T19:27:44Z DEBUG stderr=
>2014-04-17T19:27:44Z DEBUG args=/sbin/service ntpd restart 
>2014-04-17T19:27:44Z DEBUG stdout=Shutting down ntpd: [  OK  ]
>Starting ntpd: [  OK  ]
>
>2014-04-17T19:27:44Z DEBUG stderr=
>2014-04-17T19:27:44Z DEBUG args=/sbin/service ntpd status 
>2014-04-17T19:27:44Z DEBUG stdout=ntpd (pid  4428) is running...
>
>2014-04-17T19:27:44Z DEBUG stderr=
>2014-04-17T19:27:44Z INFO NTP enabled
>2014-04-17T19:27:44Z DEBUG Backing up system configuration file '/etc/ssh/ssh_config'
>2014-04-17T19:27:44Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2014-04-17T19:27:44Z INFO Configured /etc/ssh/ssh_config
>2014-04-17T19:27:44Z DEBUG Backing up system configuration file '/etc/ssh/sshd_config'
>2014-04-17T19:27:44Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
>2014-04-17T19:27:44Z DEBUG args=sshd -t -f /dev/null -o AuthorizedKeysCommand=
>2014-04-17T19:27:44Z DEBUG stdout=
>2014-04-17T19:27:44Z DEBUG stderr=
>2014-04-17T19:27:44Z INFO Configured /etc/ssh/sshd_config
>2014-04-17T19:27:44Z DEBUG args=/sbin/service sshd status 
>2014-04-17T19:27:44Z DEBUG stdout=openssh-daemon (pid  2949) is running...
>
>2014-04-17T19:27:44Z DEBUG stderr=
>2014-04-17T19:27:44Z DEBUG args=/sbin/service sshd restart 
>2014-04-17T19:27:44Z DEBUG stdout=Stopping sshd: [  OK  ]
>Starting sshd: [  OK  ]
>
>2014-04-17T19:27:44Z DEBUG stderr=
>2014-04-17T19:27:44Z DEBUG args=/sbin/service sshd status 
>2014-04-17T19:27:44Z DEBUG stdout=openssh-daemon (pid  4467) is running...
>
>2014-04-17T19:27:44Z DEBUG stderr=
>2014-04-17T19:27:44Z INFO Client configuration complete.

Actions: View

Attachments on bug 1088683: 887258