Attachment 917317 Details for Bug 1019285 – verification steps with console output

verification steps with console output

verification-log.txt (text/plain), 7.48 KB, created by Kaleem on 2014-07-11 13:52:05 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Kaleem

Created: 2014-07-11 13:52:05 UTC

Size: 7.48 KB

patch

obsolete

>[root@rhel66-client1 ~]# cat /etc/sssd/sssd.conf
>[sssd]
>config_file_version = 2
>domains = LDAP-KRB5
>debug_level = 6
>reconnection_retries = 3
>services = nss, pam
>
>[nss]
>filter_groups = root
>filter_users = root
>
>[pam]
>
>[domain/LDAP-KRB5]
>id_provider = ldap
>auth_provider = krb5
>ldap_uri = ldap://rhel66-master.testrelm.test
>debug_level = 9
>krb5_server = rhel66-master.testrelm.test
>krb5_realm = TESTRELM.TEST
>[root@rhel66-client1 ~]# chmod 0600 /etc/sssd/sssd.conf 
>[root@rhel66-client1 ~]# ls -la /etc/sssd/sssd.conf 
>-rw-------. 1 root root 358 Jul 11 21:41 /etc/sssd/sssd.conf
>[root@rhel66-client1 ~]# authconfig --enablesssd --enablesssdauth --updateall
>[root@rhel66-client1 ~]# service sssd start
>Starting sssd:                                             [  OK  ]
>[root@rhel66-client1 ~]# perl -pi -e 's/EXAMPLE.COM/TESTRELM.TEST/g' /etc/krb5.conf
>[root@rhel66-client1 ~]# perl -pi -e 's/example.com/testrelm.test/g' /etc/krb5.conf
>[root@rhel66-client1 ~]# perl -pi -e 's/kerberos.example.com/rhel66-master.testrelm.test/g' /etc/krb5.conf
>[root@rhel66-client1 ~]# ls -lZ /etc/krb5.conf
>-rw-r--r--. root root unconfined_u:object_r:etc_t:s0   /etc/krb5.conf
>[root@rhel66-client1 ~]# ipa-client-install --domain=testrelm.test --realm=TESTRELM.TEST  -p admin -w xxxxxxxx  --server=rhel66-master.testrelm.test --preserve-sssd
>Autodiscovery of servers for failover cannot work with this configuration.
>If you proceed with the installation, services will be configured to always access the discovered server for all operations and will not fail over to other servers in case of failure.
>Proceed with fixed values and no DNS discovery? [no]: yes
>Hostname: rhel66-client1.testrelm.test
>Realm: TESTRELM.TEST
>DNS Domain: testrelm.test
>IPA Server: rhel66-master.testrelm.test
>BaseDN: dc=testrelm,dc=test
>
>Continue to configure the system with these values? [no]: yes
>Synchronizing time with KDC...
>Successfully retrieved CA cert
>    Subject:     CN=Certificate Authority,O=TESTRELM.TEST
>    Issuer:      CN=Certificate Authority,O=TESTRELM.TEST
>    Valid From:  Fri Jul 11 13:30:27 2014 UTC
>    Valid Until: Tue Jul 11 13:30:27 2034 UTC
>
>Enrolled in IPA realm TESTRELM.TEST
>Created /etc/ipa/default.conf
>Configured sudoers in /etc/nsswitch.conf
>Configured /etc/sssd/sssd.conf
>Configured /etc/krb5.conf for IPA realm TESTRELM.TEST
>trying https://rhel66-master.testrelm.test/ipa/xml
>Forwarding 'env' to server u'https://rhel66-master.testrelm.test/ipa/xml'
>Hostname (rhel66-client1.testrelm.test) not found in DNS
>Failed to update DNS records.
>Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
>Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
>Forwarding 'host_mod' to server u'https://rhel66-master.testrelm.test/ipa/xml'
>Could not update DNS SSHFP records.
>SSSD enabled
>Configuring testrelm.test as NIS domain
>Configured /etc/openldap/ldap.conf
>NTP enabled
>Configured /etc/ssh/ssh_config
>Configured /etc/ssh/sshd_config
>Client configuration complete.
>[root@rhel66-client1 ~]# service sssd status
>sssd (pid  2139) is running...
>[root@rhel66-client1 ~]# kinit admin
>Password for admin@TESTRELM.TEST: 
>[root@rhel66-client1 ~]# ipa-client-install --uninstall
>Unenrolling client from IPA server
>Removing Kerberos service principals from /etc/krb5.keytab
>Disabling client Kerberos and LDAP configurations
>Unconfiguring the NIS domain.
>The original configuration of SSSD included other domains than the IPA-based one.
>Original pre-IPA SSSD configuration file was restored to /etc/sssd/sssd.conf.bkp.
>IPA domain removed from current one, restarting SSSD service
>Restoring client configuration files
>nscd daemon is not installed, skip configuration
>nslcd daemon is not installed, skip configuration
>The original nsswitch.conf configuration has been restored.
>You may need to restart services or reboot the machine.
>Do you want to reboot the machine? [no]: no
>Client uninstall complete.
>[root@rhel66-client1 ~]# ipa-client-install --domain=testrelm.test --realm=TESTRELM.TEST -p admin -w xxxxxxxx --unattended --server=rhel66-master.testrelm.test
>Hostname: rhel66-client1.testrelm.test
>Realm: TESTRELM.TEST
>DNS Domain: testrelm.test
>IPA Server: rhel66-master.testrelm.test
>BaseDN: dc=testrelm,dc=test
>
>Synchronizing time with KDC...
>Enrolled in IPA realm TESTRELM.TEST
>Created /etc/ipa/default.conf
>Configured sudoers in /etc/nsswitch.conf
>Configured /etc/sssd/sssd.conf
>Configured /etc/krb5.conf for IPA realm TESTRELM.TEST
>trying https://rhel66-master.testrelm.test/ipa/xml
>Forwarding 'env' to server u'https://rhel66-master.testrelm.test/ipa/xml'
>Hostname (rhel66-client1.testrelm.test) not found in DNS
>Failed to update DNS records.
>Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
>Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
>Forwarding 'host_mod' to server u'https://rhel66-master.testrelm.test/ipa/xml'
>Could not update DNS SSHFP records.
>SSSD enabled
>Configuring testrelm.test as NIS domain
>Configured /etc/openldap/ldap.conf
>NTP enabled
>Configured /etc/ssh/ssh_config
>Configured /etc/ssh/sshd_config
>Client configuration complete.
>[root@rhel66-client1 ~]# service sssd status
>sssd (pid  2869) is running...
>[root@rhel66-client1 ~]# ipa-client-install --uninstall -U
>Unenrolling client from IPA server
>Removing Kerberos service principals from /etc/krb5.keytab
>Disabling client Kerberos and LDAP configurations
>Unconfiguring the NIS domain.
>The original configuration of SSSD included other domains than the IPA-based one.
>Original pre-IPA SSSD configuration file was restored to /etc/sssd/sssd.conf.bkp.
>IPA domain removed from current one, restarting SSSD service
>Restoring client configuration files
>nscd daemon is not installed, skip configuration
>nslcd daemon is not installed, skip configuration
>Client uninstall complete.
>[root@rhel66-client1 ~]# ipa-client-install --domain=testrelm.test --realm=TESTRELM.TEST  -p admin -w xxxxxxxx  --server=rhel66-master.testrelm.test --preserve-sssd -U
>Hostname: rhel66-client1.testrelm.test
>Realm: TESTRELM.TEST
>DNS Domain: testrelm.test
>IPA Server: rhel66-master.testrelm.test
>BaseDN: dc=testrelm,dc=test
>
>Synchronizing time with KDC...
>Enrolled in IPA realm TESTRELM.TEST
>Created /etc/ipa/default.conf
>Configured sudoers in /etc/nsswitch.conf
>Configured /etc/sssd/sssd.conf
>Configured /etc/krb5.conf for IPA realm TESTRELM.TEST
>trying https://rhel66-master.testrelm.test/ipa/xml
>Forwarding 'env' to server u'https://rhel66-master.testrelm.test/ipa/xml'
>Hostname (rhel66-client1.testrelm.test) not found in DNS
>Failed to update DNS records.
>Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
>Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
>Forwarding 'host_mod' to server u'https://rhel66-master.testrelm.test/ipa/xml'
>Could not update DNS SSHFP records.
>SSSD enabled
>Configuring testrelm.test as NIS domain
>Configured /etc/openldap/ldap.conf
>NTP enabled
>Configured /etc/ssh/ssh_config
>Configured /etc/ssh/sshd_config
>Client configuration complete.
>[root@rhel66-client1 ~]# ipa-client-install --uninstall -U
>Unenrolling client from IPA server
>Removing Kerberos service principals from /etc/krb5.keytab
>Disabling client Kerberos and LDAP configurations
>Unconfiguring the NIS domain.
>The original configuration of SSSD included other domains than the IPA-based one.
>Original pre-IPA SSSD configuration file was restored to /etc/sssd/sssd.conf.bkp.
>IPA domain removed from current one, restarting SSSD service
>Restoring client configuration files
>nscd daemon is not installed, skip configuration
>nslcd daemon is not installed, skip configuration
>Client uninstall complete.
>[root@rhel66-client1 ~]# service sssd status
>sssd (pid  3818) is running...
>[root@rhel66-client1 ~]#

Actions: View

Attachments on bug 1019285: 812471 | 917317