rolctl deploy domaincontroller fails on Beta TC8, with updates-testing disabled. Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Hostname: server-btc8.test.lcl Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Realm: TEST.LCL Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: DNS Domain: test.lcl Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: IPA Server: server-btc8.test.lcl Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: BaseDN: dc=test,dc=lcl Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: New SSSD config will be created Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Configured sudoers in /etc/nsswitch.conf Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Configured /etc/sssd/sssd.conf Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: trying https://server-btc8.test.lcl/ipa/json Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Forwarding 'ping' to json server 'https://server-btc8.test.lcl/ipa/json' Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Cannot connect to the server due to generic error: cannot connect to 'https://server-btc8.test.lcl/ipa/json': Internal Server Error Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Installation failed. As this is IPA server, changes will not be rolled back. Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: ipa : DEBUG File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 642, in run_script Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: return_value = main_function() Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: File "/usr/sbin/ipa-server-install", line 1333, in main Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: sys.exit("Configuration of client side components failed!\nipa-client-install returned: " + str(e)) Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: ipa : DEBUG The ipa-server-install command failed, exception: SystemExit: Configuration of client side components failed! Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: ipa-client-install returned: Command ''/usr/sbin/ipa-client-install' '--on-master' '--unattended' '--domain' 'test.lcl' '--server' 'server-btc8.test.lcl' '--realm' 'TEST.LCL' '--hostname' 'server-btc8.test.lcl'' returned non-zero exit status 1 Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Configuration of client side components failed! Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: ipa-client-install returned: Command ''/usr/sbin/ipa-client-install' '--on-master' '--unattended' '--domain' 'test.lcl' '--server' 'server-btc8.test.lcl' '--realm' 'TEST.LCL' '--hostname' 'server-btc8.test.lcl'' returned non-zero exit status 1 Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: <class 'rolekit.errors.RolekitError'>: COMMAND_FAILED: 256
Proposed as a Blocker for 22-beta by Fedora user dmossor using the blocker tracking app because: Proposing as blocker as it violates the Server Release criteria "The core functional requirements for all Featured Server Roles must be met, without any workarounds being necessary. " Domain Controller is a Featured Server Role.
I tested installing the domain controller role on two different Server TC8 machines yesterday. Both completed successfully. Can you please include the settings-file you used?
I just tried again (making sure that the updates-testing repo is disabled) and it worked perfectly fine. Looking at "ERROR: Cannot connect to the server due to generic error: cannot connect to 'https://server-btc8.test.lcl/ipa/json': Internal Server Error", I suspect you may have hit the known issue: https://fedoraproject.org/w/index.php?title=Common_F22_bugs#Rolekit_fails_to_deploy_a_Domain_Controller_on_a_virtual_machine Please attach /var/log/ipaserver-install.log and /var/log/ipaclient-install.log.
This was a straight install of TC8, with the only things modified in anaconda being the IP address, hostname, and root password. Attaching the requested logs, as well as the VM XML file.
Created attachment 1011866 [details] ipaclient-install.log
Created attachment 1011867 [details] ipaserver-install.log
Created attachment 1011868 [details] the XML file for the VM
From the logs: "2015-04-06T23:05:08Z DEBUG WARNING: Your system is running out of entropy, you may experience long delays" This is almost certainly https://fedoraproject.org/w/index.php?title=Common_F22_bugs#Rolekit_fails_to_deploy_a_Domain_Controller_on_a_virtual_machine rearing its head again. -1 blocker, it's a known issue that pretty much has to be worked around. There's no secure technical way to solve it until someone invents a better entropy-gathering algorithm.
I need new glasses. I was testing with Alpha TC8. Beta TC8 installed without a hitch.