Bug 1128420

Summary: adding cifs Kerberos principal: Operation failed! PrincipalName not found.
Product: [Fedora] Fedora Reporter: William Brown <william>
Component: freeipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: abokovoy, mkosek, pviktori, pvoborni, rcritten, ssorce
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-08-10 11:34:38 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Log of adtrust installation attempt none

Description William Brown 2014-08-10 11:26:20 UTC
Created attachment 925498 [details]
Log of adtrust installation attempt

Description of problem:
From a fresh install of FreeIPA, ADTrust installation fails. The key part is:

  [5/20]: adding cifs Kerberos principal
ipa.ipalib.plugins.service.service_add: DEBUG    raw: service_add(u'cifs/lorna.dev.blackhats.net.au.NET.AU')
ipa.ipalib.plugins.service.service_add: DEBUG    service_add(u'cifs/lorna.dev.blackhats.net.au.NET.AU', force=False, all=False, raw=False, no_members=False)
ipa.ipalib.plugins.host.host_show: DEBUG    raw: host_show(u'lorna.dev.blackhats.net.au')
ipa.ipalib.plugins.host.host_show: DEBUG    host_show(u'lorna.dev.blackhats.net.au', rights=False, all=False, raw=False, no_members=False)
ipa.ipalib.plugins.service.service_add: DEBUG    IPA: DNS A record lookup failed for lorna.dev.blackhats.net.au
ipa         : DEBUG    Starting external process
ipa         : DEBUG    args=ipa-getkeytab --server lorna.dev.blackhats.net.au --principal cifs/lorna.dev.blackhats.net.au.NET.AU -k /etc/samba/samba.keytab
ipa         : DEBUG    Process finished, return code=9
ipa         : DEBUG    stdout=
ipa         : DEBUG    stderr=Operation failed! PrincipalName not found.


Version-Release number of selected component (if applicable):
freeipa-server-trust-ad-3.3.5-1.fc20.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Install Freeipa server and provision
2. Attempt to install adtrust

Additional:

Attached complete -d output from attempt to configure service.

Comment 1 William Brown 2014-08-10 11:34:38 UTC
Seemed to be a DNS problem. Sorry for the noise.