Description of problem: ipa-server-install fails to create symlink from /etc/ipa/kdcproxy/ipa-kdc-proxy.conf to /etc/httpd/conf.d/ipa-kdc-proxy.conf [root@ipamaster11 /]# ls /etc/systemd/system/httpd.service ls: cannot access /etc/systemd/system/httpd.service: No such file or directory [root@ipamaster11 /]# ls /etc/ipa/kdcproxy/ipa-kdc-proxy.conf /etc/ipa/kdcproxy/ipa-kdc-proxy.conf [root@ipamaster11 /]# ls /etc/httpd/conf.d/ autoindex.conf ipa.conf ipa-pki-proxy.conf ipa-rewrite.conf nss.conf README userdir.conf welcome.conf Version-Release number of selected component (if applicable): How reproducible: ipa-server-4.4.0-4.el7.x86_64 Steps to Reproduce: 1. Install ipa-server-install 2. ipa-ldap-updater /usr/share/ipa/kdcproxy-enable.uldif 3. systemctl restart httpd.service # This step should create symlink Actual results: No symlink found Expected results: Symlink should be created by installer or `systemctl restart httpd` which required for KKDCP feature. Additional info: If user runs /usr/libexec/ipa/ipa-httpd-kdcproxy then symlink is created [root@ipamaster11 /]# /usr/libexec/ipa/ipa-httpd-kdcproxy ipa : INFO KDC proxy enabled
Created attachment 1186816 [details] ipaserver-install.log
The location of the httpd.service file was changed in https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=586fee293f42388510fa5436af19460bbe1fdec5. The installer now creates the file '/etc/systemd/system/httpd.d/ipa.conf' instead of '/etc/systemd/system/httpd.service'. Please notice 'httpd.d'. This directory is not recognized by systemd. The directory should be named 'httpd.service.d'. I can confirm that kdcproxy is enabled after: # mv /etc/systemd/system/httpd.d /etc/systemd/system/httpd.service.d # systemctl daemon-reload # systemctl restart httpd I'll post a patch to freeipa-dev.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/6158
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/64db0592490493a060c7983acdfdf9100d9ea813
Verified using IPA package:: ipa-server-4.4.0-5.el7.x86_64 Console log attached. Marking BZ as verified.
Created attachment 1188645 [details] console.log
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-2404.html