Bug 795407

Summary: ipa-client-install doesn't discovery ipa-server manualy
Product: Red Hat Enterprise Linux 5 Reporter: bebopt
Component: ipa-clientAssignee: Rob Crittenden <rcritten>
Status: CLOSED CURRENTRELEASE QA Contact: IDM QE LIST <seceng-idm-qe-list>
Severity: high Docs Contact:
Priority: unspecified    
Version: 5.7CC: jgalipea
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-21 15:16:39 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
log ipaclient install none

Description bebopt 2012-02-20 12:38:21 UTC
If try to lunch:

ipa-client-install --server rvvmipa01cl.collaudo.rve --domain collaudo.rve

with /etc/resolv.conf configurated correctly and dns server is Active Directory, the ipa-clent-install try to get CA from DNS server instead of ipa-server


Additional info:

rvvmipa01cl  :  IPA_server on RHEL 6.2
rvvmdcl02cw  :  ActiveDirectory

Comment 1 bebopt 2012-02-20 12:46:26 UTC
Created attachment 564425 [details]
log ipaclient install

Comment 3 Rob Crittenden 2012-02-20 14:25:11 UTC
I believe this will be fixed in RHEL 5.8 by the rebase to upstream FreeIPA 2.1.3.

Comment 4 bebopt 2012-02-20 14:30:14 UTC
Does not exist a workaround for 5.7?

Comment 5 Rob Crittenden 2012-02-20 21:00:57 UTC
Other than pointing to another DNS server that isn't serving the AD SRV records, no.

Comment 6 bebopt 2012-02-21 10:46:08 UTC
i haven't others DNS server.

My workaround is: 
 - Remove any entry of /etc/resolv.conf
 - lunch installation with paramenter --server --domain --hostname
 - Repopulate the /etc/resolv.conf

Comment 7 Rob Crittenden 2012-02-21 15:16:39 UTC
The other option is to manually enroll the client, it is just a bit of extra work.

RHEL 5.8 was released today, you might try that package.