Bug 1320456 - Joining to AD fails using realm with atomic cli on non-atomic host
Summary: Joining to AD fails using realm with atomic cli on non-atomic host
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: sssd-container
Version: 7.2
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Jan Pazdziora
QA Contact: Namita Soman
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-23 09:31 UTC by Niranjan Mallapadi Raghavender
Modified: 2016-04-05 13:53 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-04-05 13:53:22 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Niranjan Mallapadi Raghavender 2016-03-23 09:31:53 UTC
Description of problem:
Unable to join to AD using realmd on "Non-Atomic" host, and journalctl doesn't any information to debug either


Version-Release number of selected component (if applicable):
atomic-1.9-4.gitff44c6a.el7.x86_64
docker-1.9.1-23.el7.x86_64
Red Hat Enterprise Linux Server release 7.2 (Maipo)
sssd-docker-7.2-7-x86_64.tar.gz
rhel7/sssd    imageid: c67906fd8d2d


How reproducible:


Steps to Reproduce:
1. On RHEL7.2 install atomic packages
2. get latest sssd-docker image
3. Load the image through docker load
4. setup AD ip in /etc/resolv.conf
5. atomic rhel7/sssd install realm join WINPKI1.TESTPKI.TEST


Actual results:
 1002  history
[root@dhcp201-185 ~]#  atomic install rhel7/sssd realm join WINPKI1.TESTPKI.TEST
docker run --rm=true --privileged --net=host -v /:/host -e NAME=sssd -e IMAGE=rhel7/sssd -e HOST=/host rhel7/sssd /bin/install.sh realm join WINPKI1.TESTPKI.TEST
Initializing configuration context from host ...
Password for Administrator: 
See: journalctl REALMD_OPERATION=r162468.39
realm: Couldn't join realm: Joining the domain winpki1.testpki.test failed

[root@dhcp201-185 ~]# journalctl REALMD_OPERATION=r162468.39
-- Logs begin at Mon 2016-03-21 17:45:37 IST, end at Wed 2016-03-23 14:56:17 IST. --


Expected results:
should be able to join to AD

Additional info:

Comment 1 Niranjan Mallapadi Raghavender 2016-03-23 09:33:29 UTC
Note: I am able to make this work on Atomic host, i suspect it to be something specific to myhost, but if journalctl could throw more messages, it would have been helpful.

Comment 3 Jan Pazdziora 2016-03-23 09:39:44 UTC
I don't see step setting /etc/sssd/realm-join-password in comment 0. Do you have it on the non-Atomic machine?

Comment 4 Niranjan Mallapadi Raghavender 2016-03-23 09:44:32 UTC
yes  i have the realm-join-password file

[root@dhcp201-185 sssd]# pwd
/etc/sssd
[root@dhcp201-185 sssd]# ls -l
total 4
-rw-r--r--. 1 root root 11 Mar 23 11:43 realm-join-password
[root@dhcp201-185 sssd]# cat realm-join-password 
redhat@123
[root@dhcp201-185 sssd]#

Comment 13 Niranjan Mallapadi Raghavender 2016-04-05 13:53:22 UTC
closing this bug,


Note You need to log in before you can comment on or make changes to this bug.