Bug 751694
| Summary: | ipa-client fails to join when i686 package is installed on x86_64 arch. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Gowrishankar Rajaiyan <grajaiya> | ||||||
| Component: | nss | Assignee: | Elio Maldonado Batiz <emaldona> | ||||||
| Status: | CLOSED CURRENTRELEASE | QA Contact: | BaseOS QE Security Team <qe-baseos-security> | ||||||
| Severity: | high | Docs Contact: | |||||||
| Priority: | medium | ||||||||
| Version: | 6.2 | CC: | abokovoy, amarecek, dgregor, eparis, rvokal, spoore | ||||||
| Target Milestone: | rc | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | Unspecified | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2014-06-18 20:32:23 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
|
Description
Gowrishankar Rajaiyan
2011-11-07 08:10:46 UTC
Created attachment 531986 [details]
strace log during ipa-join
Please note that IPA does not depend on nss-sysinit. The dependency comes through run-time discovery done by libsoftokn (on which we also do not depend and which also comes from internal nss dependencies) which reads /etc/pki/nssdb/pkcs11.txt and finds that libnsssysinit.so needs to be loaded. As on x86_64 system there is no 32-bit nss-sysinit package, only 64-bit one, the library is not found and process fails.
24804 stat64("/etc/pki/nssdb", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
24804 open("/usr/lib/libsoftokn3.so", O_RDONLY) = 4
...
24804 open("/usr/lib/libsqlite3.so.0", O_RDONLY) = 4
...
24804 open("/etc/pki/nssdb/pkcs11.txt", O_RDONLY) = 4
24804 fstat64(4, {st_mode=S_IFREG|0644, st_size=451, ...}) = 0
24804 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xfffffffff74a2000
24804 read(4, "library=libnsssysinit.so\nname=NSS Internal PKCS #11 Module\nparameters=configdir='sql:/etc/pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags= updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' \nNSS=Flags=internal,moduleDBOnly,critical trustOrder=75 cipherOrder=100 slotParams=(1={slotFlags=[RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Camellia,SEED,SHA256,SHA512] askpw=any timeout=30})\n\n", 4096) = 451
24804 read(4, "", 4096) = 0
...
24804 open("/etc/ld.so.cache", O_RDONLY) = 4
24804 fstat64(4, {st_mode=S_IFREG|0644, st_size=63919, ...}) = 0
24804 mmap2(NULL, 63919, PROT_READ, MAP_PRIVATE, 4, 0) = 0xfffffffff7493000
24804 close(4) = 0
24804 open("/lib/tls/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/tls/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/tls/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/tls/i686", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/tls/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/tls/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/tls/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/tls", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/i686", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
24804 open("/lib/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib", {st_mode=S_IFDIR|0555, st_size=4096, ...}) = 0
24804 open("/usr/lib/tls/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/tls/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/tls/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/tls/i686", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/tls/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/tls/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/tls/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/tls", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/i686", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
The nss-softokn.spec file for the devel subppackages has
Requires: nss-softokn-freebl%{?_isa} = %{version}-%{release}
Requires: nss-softokn%{?_isa} = %{version}-%{release}
Requires: nss-softokn-freebl-devel%{?_isa} = %{version}-%{release}
Which is not used in nss.spec. The log states
- Add %%{?_isa} to the requires in the devel packages (#596840)
This was introduced as fix for Bug 596840 where users where having problems doing preupgrade and they had both 32-bit and 64-bit versions of the devel packages in the system. I implemented this change, a workaround, per the analysis and suggestions in https://bugzilla.redhat.com/show_bug.cgi?id=596840#c16
This change I think has to bear in the current problem. To test this conjecture I have removed the %{?_isa} have a scratch build
https://brewweb.devel.redhat.com/taskinfo?taskID=3783039
It will take me a while to get a couple of systems to test it myself. Could someone please test this out? Thanks.
Actually, I think that:
Requires: nss-system-init
in the nss package should be changed to:
Requires: nss-system-init%{?_isa}
You can find a scratch build implementing Bill's suggestion at https://brewweb.devel.redhat.com/taskinfo?taskID=3787344 Since RHEL 6.2 External Beta has begun, and this bug remains unresolved, it has been rejected as it is not proposed as exception or blocker. Red Hat invites you to ask your support representative to propose this request, if appropriate and relevant, in the next release of Red Hat Enterprise Linux. (In reply to Elio Maldonado Batiz from comment #6) > You can find a scratch build implementing Bill's suggestion at > https://brewweb.devel.redhat.com/taskinfo?taskID=3787344 That was a long time ago. There was no feedback and that build is now long gone. The new one is at https://brewweb.devel.redhat.com/taskinfo?taskID=6177427 I'm not sufficiently familiar with IPA for setting things up for servers and clients and the steps provided look a bit involved. Could I get some help setting up the required environments from knowledgable folks? Thanks, Elio (In reply to Elio Maldonado Batiz from comment #11) > I'm not sufficiently familiar with IPA for setting things up for servers and > clients and the steps provided look a bit involved. Could I get some help > setting up the required environments from knowledgable folks? > Alexander or a member of the IPA team, Could I need help setting up a reproducer. I've asked Scott (in CC:) to provide you a test environment: IPA server and IPA client. I logged in to the test environment and was able to install the i686 ipa-admintools and ipa-client without any problems. I'll attach the log of what I did. Created attachment 864179 [details]
install log
I never changed Requires: nss-system-init to Requires: nss-system-init%{?_isa}
as Bill suggested in Comment 5.
Elio and I did test enrolling IPA client on the test machine where Elio installed the packages and everything worked fine. I think we can say this bug is fixed. This bug should be CLOSED CURRENTRELEASE once its' been independently verified. Being the bug asignee I can't do that myself. Looks right to me from what I can see: [root@rhel6-2 ~]# yum remove ipa-server ipa-admintools ipa-client ... Removed: ipa-admintools.x86_64 0:3.0.0-37.el6 ipa-client.x86_64 0:3.0.0-37.el6 ipa-server.x86_64 0:3.0.0-37.el6 Dependency Removed: ipa-server-selinux.x86_64 0:3.0.0-37.el6 [root@rhel6-2 ~]# yum remove ipa-python ... Removed: ipa-python.x86_64 0:3.0.0-37.el6 [root@rhel6-2 yum.local.d]# yum localinstall ipa-admintools-3.0.0-37.el6.i686.rpm ipa-client-3.0.0-37.el6.i686.rpm Loaded plugins: product-id, security, subscription-manager This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register. Setting up Local Package Process Examining ipa-admintools-3.0.0-37.el6.i686.rpm: ipa-admintools-3.0.0-37.el6.i686 Marking ipa-admintools-3.0.0-37.el6.i686.rpm to be installed Examining ipa-client-3.0.0-37.el6.i686.rpm: ipa-client-3.0.0-37.el6.i686 Marking ipa-client-3.0.0-37.el6.i686.rpm to be installed Resolving Dependencies --> Running transaction check ---> Package ipa-admintools.i686 0:3.0.0-37.el6 will be installed --> Processing Dependency: ipa-python = 3.0.0-37.el6 for package: ipa-admintools-3.0.0-37.el6.i686 ---> Package ipa-client.i686 0:3.0.0-37.el6 will be installed --> Processing Dependency: cyrus-sasl-gssapi(x86-32) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libcom_err.so.2 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.0) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.1) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.2) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.3) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.3.4) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.4) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.8) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libcurl.so.4 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libk5crypto.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libk5crypto.so.3(k5crypto_3_MIT) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libkrb5.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libkrb5.so.3(krb5_3_MIT) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: liblber-2.4.so.2 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libldap-2.4.so.2 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libpopt.so.0 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libpopt.so.0(LIBPOPT_0) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libsasl2.so.2 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libxmlrpc_client.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libxmlrpc.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libxmlrpc_util.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Running transaction check ---> Package cyrus-sasl-gssapi.i686 0:2.1.23-13.el6_3.1 will be installed ---> Package cyrus-sasl-lib.i686 0:2.1.23-13.el6_3.1 will be installed --> Processing Dependency: libdb-4.7.so for package: cyrus-sasl-lib-2.1.23-13.el6_3.1.i686 ---> Package glibc.i686 0:2.12-1.132.el6 will be installed --> Processing Dependency: libfreebl3.so(NSSRAWHASH_3.12.3) for package: glibc-2.12-1.132.el6.i686 --> Processing Dependency: libfreebl3.so for package: glibc-2.12-1.132.el6.i686 ---> Package ipa-python.x86_64 0:3.0.0-37.el6 will be installed ---> Package krb5-libs.i686 0:1.10.3-10.el6_4.6 will be installed --> Processing Dependency: libselinux.so.1 for package: krb5-libs-1.10.3-10.el6_4.6.i686 --> Processing Dependency: libkeyutils.so.1(KEYUTILS_0.3) for package: krb5-libs-1.10.3-10.el6_4.6.i686 --> Processing Dependency: libkeyutils.so.1 for package: krb5-libs-1.10.3-10.el6_4.6.i686 ---> Package libcom_err.i686 0:1.41.12-18.el6 will be installed ---> Package libcurl.i686 0:7.19.7-37.el6_4 will be installed --> Processing Dependency: libssh2(x86-32) >= 1.4.2 for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libz.so.1 for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssl3.so(NSS_3.4) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssl3.so(NSS_3.2) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssl3.so(NSS_3.11.4) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssl3.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssh2.so.1 for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libsmime3.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libplds4.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libplc4.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnssutil3.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.9.3) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.9.2) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.5) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.4) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.3) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.2) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.12.5) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.12.1) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.12) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.10) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnspr4.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libidn.so.11(LIBIDN_1.0) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libidn.so.11 for package: libcurl-7.19.7-37.el6_4.i686 ---> Package openldap.i686 0:2.4.23-32.el6_4.1 will be installed ---> Package popt.i686 0:1.13-7.el6 will be installed ---> Package xmlrpc-c.i686 0:1.16.24-1210.1840.el6 will be installed --> Processing Dependency: libxml2.so.2(LIBXML2_2.4.30) for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 --> Processing Dependency: libxml2.so.2 for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 --> Processing Dependency: libgcc_s.so.1(GCC_3.3.1) for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 --> Processing Dependency: libgcc_s.so.1(GCC_3.0) for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 --> Processing Dependency: libgcc_s.so.1 for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 ---> Package xmlrpc-c-client.i686 0:1.16.24-1210.1840.el6 will be installed --> Running transaction check ---> Package db4.i686 0:4.7.25-18.el6_4 will be installed ---> Package keyutils-libs.i686 0:1.4-4.el6 will be installed ---> Package libgcc.i686 0:4.4.7-4.el6 will be installed ---> Package libidn.i686 0:1.18-2.el6 will be installed ---> Package libselinux.i686 0:2.0.94-5.3.el6_4.1 will be installed ---> Package libssh2.i686 0:1.4.2-1.el6 will be installed --> Processing Dependency: libssl.so.10 for package: libssh2-1.4.2-1.el6.i686 --> Processing Dependency: libcrypto.so.10 for package: libssh2-1.4.2-1.el6.i686 ---> Package libxml2.i686 0:2.7.6-14.el6 will be installed ---> Package nspr.i686 0:4.10.0-1.el6 will be installed ---> Package nss.i686 0:3.15.1-15.el6 will be installed --> Processing Dependency: nss-softokn(x86-32) >= 3.14.3 for package: nss-3.15.1-15.el6.i686 --> Processing Dependency: libsoftokn3.so for package: nss-3.15.1-15.el6.i686 ---> Package nss-softokn-freebl.i686 0:3.14.3-9.el6 will be installed ---> Package nss-util.i686 0:3.15.1-3.el6 will be installed ---> Package zlib.i686 0:1.2.3-29.el6 will be installed --> Running transaction check ---> Package nss-softokn.i686 0:3.14.3-9.el6 will be installed --> Processing Dependency: libsqlite3.so.0 for package: nss-softokn-3.14.3-9.el6.i686 ---> Package openssl.i686 0:1.0.1e-15.el6 will be installed --> Running transaction check ---> Package sqlite.i686 0:3.6.20-1.el6 will be installed --> Processing Dependency: libreadline.so.6 for package: sqlite-3.6.20-1.el6.i686 --> Running transaction check ---> Package readline.i686 0:6.0-4.el6 will be installed --> Processing Dependency: libtinfo.so.5 for package: readline-6.0-4.el6.i686 --> Running transaction check ---> Package ncurses-libs.i686 0:5.7-3.20090208.el6 will be installed --> Finished Dependency Resolution Dependencies Resolved ======================================================================================================= Package Arch Version Repository Size ======================================================================================================= Installing: ipa-admintools i686 3.0.0-37.el6 /ipa-admintools-3.0.0-37.el6.i686 43 k ipa-client i686 3.0.0-37.el6 /ipa-client-3.0.0-37.el6.i686 294 k Installing for dependencies: cyrus-sasl-gssapi i686 2.1.23-13.el6_3.1 beaker-rhel65-server 32 k cyrus-sasl-lib i686 2.1.23-13.el6_3.1 beaker-rhel65-server 135 k db4 i686 4.7.25-18.el6_4 beaker-rhel65-server 579 k glibc i686 2.12-1.132.el6 beaker-rhel65-server 4.3 M ipa-python x86_64 3.0.0-37.el6 beaker-rhel65-server 924 k keyutils-libs i686 1.4-4.el6 beaker-rhel65-server 19 k krb5-libs i686 1.10.3-10.el6_4.6 beaker-rhel65-server 768 k libcom_err i686 1.41.12-18.el6 beaker-rhel65-server 36 k libcurl i686 7.19.7-37.el6_4 beaker-rhel65-server 170 k libgcc i686 4.4.7-4.el6 beaker-rhel65-server 111 k libidn i686 1.18-2.el6 beaker-rhel65-server 204 k libselinux i686 2.0.94-5.3.el6_4.1 beaker-rhel65-server 107 k libssh2 i686 1.4.2-1.el6 beaker-rhel65-server 123 k libxml2 i686 2.7.6-14.el6 beaker-rhel65-server 799 k ncurses-libs i686 5.7-3.20090208.el6 beaker-rhel65-server 250 k nspr i686 4.10.0-1.el6 beaker-rhel65-server 114 k nss i686 3.15.1-15.el6 beaker-rhel65-server 823 k nss-softokn i686 3.14.3-9.el6 beaker-rhel65-server 271 k nss-softokn-freebl i686 3.14.3-9.el6 beaker-rhel65-server 146 k nss-util i686 3.15.1-3.el6 beaker-rhel65-server 63 k openldap i686 2.4.23-32.el6_4.1 beaker-rhel65-server 266 k openssl i686 1.0.1e-15.el6 beaker-rhel65-server 1.5 M popt i686 1.13-7.el6 beaker-rhel65-server 38 k readline i686 6.0-4.el6 beaker-rhel65-server 175 k sqlite i686 3.6.20-1.el6 beaker-rhel65-server 306 k xmlrpc-c i686 1.16.24-1210.1840.el6 beaker-rhel65-server 103 k xmlrpc-c-client i686 1.16.24-1210.1840.el6 beaker-rhel65-server 23 k zlib i686 1.2.3-29.el6 beaker-rhel65-server 72 k Transaction Summary ======================================================================================================= Install 30 Package(s) Total size: 13 M Total download size: 12 M Installed size: 36 M Is this ok [y/N]: y Downloading Packages: (1/28): cyrus-sasl-gssapi-2.1.23-13.el6_3.1.i686.rpm | 32 kB 00:00 (2/28): cyrus-sasl-lib-2.1.23-13.el6_3.1.i686.rpm | 135 kB 00:00 (3/28): db4-4.7.25-18.el6_4.i686.rpm | 579 kB 00:01 (4/28): glibc-2.12-1.132.el6.i686.rpm | 4.3 MB 00:03 (5/28): ipa-python-3.0.0-37.el6.x86_64.rpm | 924 kB 00:01 (6/28): keyutils-libs-1.4-4.el6.i686.rpm | 19 kB 00:00 (7/28): krb5-libs-1.10.3-10.el6_4.6.i686.rpm | 768 kB 00:02 (8/28): libcom_err-1.41.12-18.el6.i686.rpm | 36 kB 00:00 (9/28): libcurl-7.19.7-37.el6_4.i686.rpm | 170 kB 00:00 (10/28): libgcc-4.4.7-4.el6.i686.rpm | 111 kB 00:00 (11/28): libidn-1.18-2.el6.i686.rpm | 204 kB 00:00 (12/28): libselinux-2.0.94-5.3.el6_4.1.i686.rpm | 107 kB 00:00 (13/28): libssh2-1.4.2-1.el6.i686.rpm | 123 kB 00:00 (14/28): libxml2-2.7.6-14.el6.i686.rpm | 799 kB 00:01 (15/28): ncurses-libs-5.7-3.20090208.el6.i686.rpm | 250 kB 00:00 (16/28): nspr-4.10.0-1.el6.i686.rpm | 114 kB 00:00 (17/28): nss-3.15.1-15.el6.i686.rpm | 823 kB 00:01 (18/28): nss-softokn-3.14.3-9.el6.i686.rpm | 271 kB 00:00 (19/28): nss-softokn-freebl-3.14.3-9.el6.i686.rpm | 146 kB 00:00 (20/28): nss-util-3.15.1-3.el6.i686.rpm | 63 kB 00:00 (21/28): openldap-2.4.23-32.el6_4.1.i686.rpm | 266 kB 00:00 (22/28): openssl-1.0.1e-15.el6.i686.rpm | 1.5 MB 00:02 (23/28): popt-1.13-7.el6.i686.rpm | 38 kB 00:00 (24/28): readline-6.0-4.el6.i686.rpm | 175 kB 00:00 (25/28): sqlite-3.6.20-1.el6.i686.rpm | 306 kB 00:00 (26/28): xmlrpc-c-1.16.24-1210.1840.el6.i686.rpm | 103 kB 00:00 (27/28): xmlrpc-c-client-1.16.24-1210.1840.el6.i686.rpm | 23 kB 00:00 (28/28): zlib-1.2.3-29.el6.i686.rpm | 72 kB 00:00 ------------------------------------------------------------------------------------------------------- Total 426 kB/s | 12 MB 00:29 Running rpm_check_debug Running Transaction Test Transaction Test Succeeded Running Transaction Installing : libgcc-4.4.7-4.el6.i686 1/30 Installing : nss-softokn-freebl-3.14.3-9.el6.i686 2/30 Installing : glibc-2.12-1.132.el6.i686 3/30 Installing : nspr-4.10.0-1.el6.i686 4/30 Installing : zlib-1.2.3-29.el6.i686 5/30 Installing : libcom_err-1.41.12-18.el6.i686 6/30 Installing : ipa-python-3.0.0-37.el6.x86_64 7/30 Installing : nss-util-3.15.1-3.el6.i686 8/30 Installing : libxml2-2.7.6-14.el6.i686 9/30 Installing : xmlrpc-c-1.16.24-1210.1840.el6.i686 10/30 Installing : db4-4.7.25-18.el6_4.i686 11/30 Installing : cyrus-sasl-lib-2.1.23-13.el6_3.1.i686 12/30 Installing : libselinux-2.0.94-5.3.el6_4.1.i686 13/30 Installing : libidn-1.18-2.el6.i686 14/30 Installing : ncurses-libs-5.7-3.20090208.el6.i686 15/30 Installing : readline-6.0-4.el6.i686 16/30 Installing : sqlite-3.6.20-1.el6.i686 17/30 Installing : nss-softokn-3.14.3-9.el6.i686 18/30 Installing : nss-3.15.1-15.el6.i686 19/30 Installing : openldap-2.4.23-32.el6_4.1.i686 20/30 Installing : keyutils-libs-1.4-4.el6.i686 21/30 Installing : krb5-libs-1.10.3-10.el6_4.6.i686 22/30 Installing : cyrus-sasl-gssapi-2.1.23-13.el6_3.1.i686 23/30 Installing : openssl-1.0.1e-15.el6.i686 24/30 Installing : libssh2-1.4.2-1.el6.i686 25/30 Installing : libcurl-7.19.7-37.el6_4.i686 26/30 Installing : xmlrpc-c-client-1.16.24-1210.1840.el6.i686 27/30 Installing : popt-1.13-7.el6.i686 28/30 Installing : ipa-client-3.0.0-37.el6.i686 29/30 Installing : ipa-admintools-3.0.0-37.el6.i686 30/30 Verifying : ipa-client-3.0.0-37.el6.i686 1/30 Verifying : ipa-python-3.0.0-37.el6.x86_64 2/30 Verifying : libssh2-1.4.2-1.el6.i686 3/30 Verifying : libcurl-7.19.7-37.el6_4.i686 4/30 Verifying : libgcc-4.4.7-4.el6.i686 5/30 Verifying : sqlite-3.6.20-1.el6.i686 6/30 Verifying : ipa-admintools-3.0.0-37.el6.i686 7/30 Verifying : nss-util-3.15.1-3.el6.i686 8/30 Verifying : nss-softokn-3.14.3-9.el6.i686 9/30 Verifying : nspr-4.10.0-1.el6.i686 10/30 Verifying : readline-6.0-4.el6.i686 11/30 Verifying : glibc-2.12-1.132.el6.i686 12/30 Verifying : nss-softokn-freebl-3.14.3-9.el6.i686 13/30 Verifying : db4-4.7.25-18.el6_4.i686 14/30 Verifying : nss-3.15.1-15.el6.i686 15/30 Verifying : cyrus-sasl-gssapi-2.1.23-13.el6_3.1.i686 16/30 Verifying : libselinux-2.0.94-5.3.el6_4.1.i686 17/30 Verifying : libidn-1.18-2.el6.i686 18/30 Verifying : ncurses-libs-5.7-3.20090208.el6.i686 19/30 Verifying : xmlrpc-c-client-1.16.24-1210.1840.el6.i686 20/30 Verifying : keyutils-libs-1.4-4.el6.i686 21/30 Verifying : openldap-2.4.23-32.el6_4.1.i686 22/30 Verifying : zlib-1.2.3-29.el6.i686 23/30 Verifying : libcom_err-1.41.12-18.el6.i686 24/30 Verifying : krb5-libs-1.10.3-10.el6_4.6.i686 25/30 Verifying : openssl-1.0.1e-15.el6.i686 26/30 Verifying : libxml2-2.7.6-14.el6.i686 27/30 Verifying : xmlrpc-c-1.16.24-1210.1840.el6.i686 28/30 Verifying : popt-1.13-7.el6.i686 29/30 Verifying : cyrus-sasl-lib-2.1.23-13.el6_3.1.i686 30/30 Installed: ipa-admintools.i686 0:3.0.0-37.el6 ipa-client.i686 0:3.0.0-37.el6 Dependency Installed: cyrus-sasl-gssapi.i686 0:2.1.23-13.el6_3.1 cyrus-sasl-lib.i686 0:2.1.23-13.el6_3.1 db4.i686 0:4.7.25-18.el6_4 glibc.i686 0:2.12-1.132.el6 ipa-python.x86_64 0:3.0.0-37.el6 keyutils-libs.i686 0:1.4-4.el6 krb5-libs.i686 0:1.10.3-10.el6_4.6 libcom_err.i686 0:1.41.12-18.el6 libcurl.i686 0:7.19.7-37.el6_4 libgcc.i686 0:4.4.7-4.el6 libidn.i686 0:1.18-2.el6 libselinux.i686 0:2.0.94-5.3.el6_4.1 libssh2.i686 0:1.4.2-1.el6 libxml2.i686 0:2.7.6-14.el6 ncurses-libs.i686 0:5.7-3.20090208.el6 nspr.i686 0:4.10.0-1.el6 nss.i686 0:3.15.1-15.el6 nss-softokn.i686 0:3.14.3-9.el6 nss-softokn-freebl.i686 0:3.14.3-9.el6 nss-util.i686 0:3.15.1-3.el6 openldap.i686 0:2.4.23-32.el6_4.1 openssl.i686 0:1.0.1e-15.el6 popt.i686 0:1.13-7.el6 readline.i686 0:6.0-4.el6 sqlite.i686 0:3.6.20-1.el6 xmlrpc-c.i686 0:1.16.24-1210.1840.el6 xmlrpc-c-client.i686 0:1.16.24-1210.1840.el6 zlib.i686 0:1.2.3-29.el6 Complete! [root@rhel6-2 yum.local.d]# ipa-client-install Discovery was successful! Hostname: client1.ipa1.example.test Realm: IPA1.EXAMPLE.TEST DNS Domain: ipa1.example.test IPA Server: master.ipa1.example.test BaseDN: dc=ipa1,dc=example,dc=test Continue to configure the system with these values? [no]: yes User authorized to enroll computers: admin Synchronizing time with KDC... Password for admin.TEST: Enrolled in IPA realm IPA1.EXAMPLE.TEST Created /etc/ipa/default.conf New SSSD config will be created Configured /etc/sssd/sssd.conf Configured /etc/krb5.conf for IPA realm IPA1.EXAMPLE.TEST trying https://master.ipa1.example.test/ipa/xml Forwarding 'env' to server u'https://master.ipa1.example.test/ipa/xml' Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub Forwarding 'host_mod' to server u'https://master.ipa1.example.test/ipa/xml' SSSD enabled Configured /etc/openldap/ldap.conf NTP enabled Configured /etc/ssh/ssh_config Configured /etc/ssh/sshd_config Client configuration complete. [root@rhel6-2 yum.local.d]# kinit admin Password for admin.TEST: [root@rhel6-2 yum.local.d]# ipa user-show admin User login: admin Last name: Administrator Home directory: /home/admin Login shell: /bin/bash UID: 261200000 GID: 261200000 Account disabled: False Password: True Member of groups: admins, trust admins Kerberos keys available: True [root@rhel6-2 yum.local.d]# ipa host-show $(hostname) Host name: client1.ipa1.example.test Certificate: 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 Principal name: host/client1.ipa1.example.test.TEST Password: False Keytab: True Managed by: client1.ipa1.example.test Subject: CN=client1.ipa1.example.test,O=IPA1.EXAMPLE.TEST Serial Number: 13 Serial Number (hex): 0xD Issuer: CN=Certificate Authority,O=IPA1.EXAMPLE.TEST Not Before: Tue Feb 18 01:20:00 2014 UTC Not After: Fri Feb 19 01:20:00 2016 UTC Fingerprint (MD5): 4b:c3:36:c5:cd:0b:76:cc:f2:26:ee:95:5f:8c:d0:8e Fingerprint (SHA1): da:4d:77:64:4f:48:23:b9:07:c4:2b:93:aa:c9:bf:27:8f:03:c2:7a SSH public key fingerprint: 02:C5:3A:C2:65:A3:B0:27:C1:6B:D1:28:1D:1F:1C:56 (ssh-dss), 3D:DE:DE:6C:C1:62:A2:96:8D:D3:DD:CD:85:04:65:C9 (ssh-rsa) Oh, yeah, here's confirmation of the arch: [root@rhel6-2 yum.local.d]# arch x86_64 Going ahead and marking this one as verified per results in comment #20 |