Hide Forgot
Description of problem: ipa-client install fails when i686 package is installed on x86_64 arch. Missing 32-bit package of nss-sysinit which should be pulled in as a dependency. Version-Release number of selected component (if applicable): ipa-server-2.1.3-8.el6.x86_64 ipa-client-2.1.3-8.el6.i686 How reproducible: Always Steps to Reproduce: Server: 1. ipa-server-install CLIENT: 1. [root@sideswipe ~]# arch x86_64 [root@sideswipe ~]# 2. [root@sideswipe ~]# yum remove ipa-client 3. [root@sideswipe ~]# yum localinstall ipa-admintools-2.1.3-8.el6.i686.rpm ipa-client-2.1.3-8.el6.i686.rpm Dependencies Resolved ======================================================================================= Package Arch Version Repository Size ======================================================================================= Installing: ipa-admintools i686 2.1.3-8.el6 ipa-client i686 2.1.3-8.el6 Installing for dependencies: cyrus-sasl-gssapi i686 2.1.23-13.el6 cyrus-sasl-lib i686 2.1.23-13.el6 db4 i686 4.7.25-16.el6 glibc i686 2.12-1.47.el6 keyutils-libs i686 1.4-3.el6 krb5-libs i686 1.9-22.el6 libcom_err i686 1.41.12-11.el6 libcurl i686 7.19.7-26.el6_1.2 libgcc i686 4.4.6-3.el6 libidn i686 1.18-2.el6 libselinux i686 2.0.94-5.2.el6 libssh2 i686 1.2.2-7.el6_1.1 libxml2 i686 2.7.6-4.el6 ncurses-libs i686 5.7-3.20090208.el6 nspr i686 4.8.8-3.el6 nss i686 3.12.10-15.el6 nss-softokn i686 3.12.9-11.el6 nss-softokn-freebl i686 3.12.9-11.el6 nss-util i686 3.12.10-2.el6 openldap i686 2.4.23-20.el6 openssl i686 1.0.0-20.el6 popt i686 1.13-7.el6 readline i686 6.0-3.el6 sqlite i686 3.6.20-1.el6 xmlrpc-c i686 1.16.24- 103 k xmlrpc-c-client i686 1.16.24-1200.1840.el6_1.4 zlib i686 1.2.3-27.el6 Updating for dependencies: glibc x86_64 2.12-1.47.el6 glibc-common x86_64 2.12-1.47.el6 4. [root@sideswipe ~]# ipa-client-install DNS discovery failed to determine your DNS domain Provide the domain name of your IPA server (ex: example.com): rhts.eng.bos.redhat.com DNS discovery failed to find the IPA Server Provide your IPA server name (ex: ipa.example.com): hp-dl580g5-01.rhts.eng.bos.redhat.com The failure to use DNS to find your IPA server indicates that your resolv.conf file is not properly configured. Autodiscovery of servers for failover cannot work with this configuration. If you proceed with the installation, services will be configured to always access the discovered server for all operation and will not fail over to other servers in case of failure. Proceed with fixed values and no DNS discovery? [no]: yes Hostname: sideswipe.lab.eng.pnq.redhat.com Realm: RHTS.ENG.BOS.REDHAT.COM DNS Domain: rhts.eng.bos.redhat.com IPA Server: hp-dl580g5-01.rhts.eng.bos.redhat.com BaseDN: dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com Continue to configure the system with these values? [no]: yes User authorized to enroll computers: admin Synchronizing time with KDC... Password for admin.BOS.REDHAT.COM: Joining realm failed: libcurl failed to execute the HTTP POST transaction. Problem with the SSL CA cert (path? access rights?) Installation failed. Rolling back changes. IPA client is not configured on this system. [root@sideswipe ~]# Provide the domain name of your IPA server (ex: example.com): rhts.eng.bos.redhat.com root : DEBUG will use domain: rhts.eng.bos.redhat.com root : DEBUG [ipadnssearchldap] root : DEBUG IPA Server not found DNS discovery failed to find the IPA Server Provide your IPA server name (ex: ipa.example.com): hp-dl580g5-01.rhts.eng.bos.redhat.com root : DEBUG will use server: hp-dl580g5-01.rhts.eng.bos.redhat.com root : DEBUG [ipadnssearchkrb] root : DEBUG [ipacheckldap] root : DEBUG args=/usr/bin/wget -O /tmp/tmplh5o4Z/ca.crt -T 15 -t 2 http://hp-dl580g5-01.rhts.eng.bos.redhat.com/ipa/config/ca.crt root : DEBUG stdout= root : DEBUG stderr=--2011-11-07 12:16:15-- http://hp-dl580g5-01.rhts.eng.bos.redhat.com/ipa/config/ca.crt Resolving hp-dl580g5-01.rhts.eng.bos.redhat.com... 10.16.65.72 Connecting to hp-dl580g5-01.rhts.eng.bos.redhat.com|10.16.65.72|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 1369 (1.3K) [application/x-x509-ca-cert] Saving to: “/tmp/tmplh5o4Z/ca.crt” 0K . 100% 200M=0s 2011-11-07 12:16:15 (200 MB/s) - “/tmp/tmplh5o4Z/ca.crt” saved [1369/1369] root : DEBUG Init ldap with: ldap://hp-dl580g5-01.rhts.eng.bos.redhat.com:389 root : DEBUG Search LDAP server for IPA base DN root : DEBUG Check if naming context 'dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com' is for IPA root : DEBUG Naming context 'dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com' is a valid IPA context root : DEBUG Search for (objectClass=krbRealmContainer) in dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com(sub) root : DEBUG Found: [('cn=RHTS.ENG.BOS.REDHAT.COM,cn=kerberos,dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com', {'krbSubTrees': ['dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com'], 'cn': ['RHTS.ENG.BOS.REDHAT.COM'], 'krbDefaultEncSaltTypes': ['aes256-cts:special', 'aes128-cts:special', 'des3-hmac-sha1:special', 'arcfour-hmac:special'], 'objectClass': ['top', 'krbrealmcontainer', 'krbticketpolicyaux'], 'krbSearchScope': ['2'], 'krbSupportedEncSaltTypes': ['aes256-cts:normal', 'aes256-cts:special', 'aes128-cts:normal', 'aes128-cts:special', 'des3-hmac-sha1:normal', 'des3-hmac-sha1:special', 'arcfour-hmac:normal', 'arcfour-hmac:special', 'des-hmac-sha1:normal', 'des-cbc-md5:normal', 'des-cbc-crc:normal', 'des-cbc-crc:v4', 'des-cbc-crc:afs3'], 'krbMaxTicketLife': ['86400'], 'krbMaxRenewableAge': ['604800']})] The failure to use DNS to find your IPA server indicates that your resolv.conf file is not properly configured. Autodiscovery of servers for failover cannot work with this configuration. If you proceed with the installation, services will be configured to always access the discovered server for all operation and will not fail over to other servers in case of failure. Proceed with fixed values and no DNS discovery? [no]: yes root : DEBUG will use cli_realm: RHTS.ENG.BOS.REDHAT.COM root : DEBUG will use cli_basedn: dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com Hostname: sideswipe.lab.eng.pnq.redhat.com Realm: RHTS.ENG.BOS.REDHAT.COM DNS Domain: rhts.eng.bos.redhat.com IPA Server: hp-dl580g5-01.rhts.eng.bos.redhat.com BaseDN: dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com Continue to configure the system with these values? [no]: yes User authorized to enroll computers: admin root : DEBUG will use principal: admin root : DEBUG args=/usr/bin/wget -O /etc/ipa/ca.crt http://hp-dl580g5-01.rhts.eng.bos.redhat.com/ipa/config/ca.crt root : DEBUG stdout= root : DEBUG stderr=--2011-11-07 12:16:23-- http://hp-dl580g5-01.rhts.eng.bos.redhat.com/ipa/config/ca.crt Resolving hp-dl580g5-01.rhts.eng.bos.redhat.com... 10.16.65.72 Connecting to hp-dl580g5-01.rhts.eng.bos.redhat.com|10.16.65.72|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 1369 (1.3K) [application/x-x509-ca-cert] Saving to: “/etc/ipa/ca.crt” 0K . 100% 186M=0s 2011-11-07 12:16:23 (186 MB/s) - “/etc/ipa/ca.crt” saved [1369/1369] Synchronizing time with KDC... root : DEBUG args=/usr/sbin/ntpdate -U ntp -s -b hp-dl580g5-01.rhts.eng.bos.redhat.com root : DEBUG stdout= root : DEBUG stderr= root : DEBUG Writing Kerberos configuration to /tmp/tmpqrKANN: #File modified by ipa-client-install [libdefaults] default_realm = RHTS.ENG.BOS.REDHAT.COM dns_lookup_realm = false dns_lookup_kdc = false rdns = false ticket_lifetime = 24h forwardable = yes [realms] RHTS.ENG.BOS.REDHAT.COM = { kdc = hp-dl580g5-01.rhts.eng.bos.redhat.com:88 admin_server = hp-dl580g5-01.rhts.eng.bos.redhat.com:749 default_domain = rhts.eng.bos.redhat.com pkinit_anchors = FILE:/etc/ipa/ca.crt } [domain_realm] .rhts.eng.bos.redhat.com = RHTS.ENG.BOS.REDHAT.COM rhts.eng.bos.redhat.com = RHTS.ENG.BOS.REDHAT.COM .lab.eng.pnq.redhat.com = RHTS.ENG.BOS.REDHAT.COM lab.eng.pnq.redhat.com = RHTS.ENG.BOS.REDHAT.COM Password for admin.BOS.REDHAT.COM: root : DEBUG args=kinit admin.BOS.REDHAT.COM root : DEBUG stdout=Password for admin.BOS.REDHAT.COM: root : DEBUG stderr= root : DEBUG args=/usr/sbin/ipa-join -s hp-dl580g5-01.rhts.eng.bos.redhat.com -b dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com -d root : DEBUG stdout= root : DEBUG stderr=XML-RPC CALL: <?xml version="1.0" encoding="UTF-8"?>\r\n <methodCall>\r\n <methodName>join</methodName>\r\n <params>\r\n <param><value><array><data>\r\n <value><string>sideswipe.lab.eng.pnq.redhat.com</string></value>\r\n </data></array></value></param>\r\n <param><value><struct>\r\n <member><name>nsosversion</name>\r\n <value><string>2.6.32-209.el6.x86_64</string></value></member>\r\n <member><name>nshardwareplatform</name>\r\n <value><string>x86_64</string></value></member>\r\n </struct></value></param>\r\n </params>\r\n </methodCall>\r\n * About to connect() to hp-dl580g5-01.rhts.eng.bos.redhat.com port 443 (#0) * Trying 10.16.65.72... * Connected to hp-dl580g5-01.rhts.eng.bos.redhat.com (10.16.65.72) port 443 (#0) * Initializing NSS with certpath: /etc/pki/nssdb * Unable to initialize NSS database * NSS error -5977 * Expire cleared * Closing connection #0 libcurl failed to execute the HTTP POST transaction. Problem with the SSL CA cert (path? access rights?) Joining realm failed: XML-RPC CALL: <?xml version="1.0" encoding="UTF-8"?>\r\n <methodCall>\r\n <methodName>join</methodName>\r\n <params>\r\n <param><value><array><data>\r\n <value><string>sideswipe.lab.eng.pnq.redhat.com</string></value>\r\n </data></array></value></param>\r\n <param><value><struct>\r\n <member><name>nsosversion</name>\r\n <value><string>2.6.32-209.el6.x86_64</string></value></member>\r\n <member><name>nshardwareplatform</name>\r\n <value><string>x86_64</string></value></member>\r\n </struct></value></param>\r\n </params>\r\n </methodCall>\r\n * About to connect() to hp-dl580g5-01.rhts.eng.bos.redhat.com port 443 (#0) * Trying 10.16.65.72... * Connected to hp-dl580g5-01.rhts.eng.bos.redhat.com (10.16.65.72) port 443 (#0) * Initializing NSS with certpath: /etc/pki/nssdb * Unable to initialize NSS database * NSS error -5977 * Expire cleared * Closing connection #0 libcurl failed to execute the HTTP POST transaction. Problem with the SSL CA cert (path? access rights?) root : DEBUG args=kdestroy root : DEBUG stdout= root : DEBUG stderr= Installation failed. Rolling back changes. IPA client is not configured on this system. [root@sideswipe ~]# Actual results: ipa-client-install fails. In /root/mm/log shows that 32-bit app on x86-64 tries to resolve the referenced library as 32-bit but that's not installed. <snip> 24804 open("/lib/tls/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) </snip> Expected results: ipa-client-install successful. nss-sysinit should be pulled in as dependency. Additional info: [root@sideswipe ~]# yum localinstall nss-sysinit-3.12.10-15.el6.i686.rpm [root@sideswipe ~]# ipa-client-install DNS discovery failed to determine your DNS domain Provide the domain name of your IPA server (ex: example.com): rhts.eng.bos.redhat.com DNS discovery failed to find the IPA Server Provide your IPA server name (ex: ipa.example.com): hp-dl580g5-01.rhts.eng.bos.redhat.com The failure to use DNS to find your IPA server indicates that your resolv.conf file is not properly configured. Autodiscovery of servers for failover cannot work with this configuration. If you proceed with the installation, services will be configured to always access the discovered server for all operation and will not fail over to other servers in case of failure. Proceed with fixed values and no DNS discovery? [no]: yes Hostname: sideswipe.lab.eng.pnq.redhat.com Realm: RHTS.ENG.BOS.REDHAT.COM DNS Domain: rhts.eng.bos.redhat.com IPA Server: hp-dl580g5-01.rhts.eng.bos.redhat.com BaseDN: dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com Continue to configure the system with these values? [no]: yes User authorized to enroll computers: admin Synchronizing time with KDC... Password for admin.BOS.REDHAT.COM: Enrolled in IPA realm RHTS.ENG.BOS.REDHAT.COM Created /etc/ipa/default.conf Configured /etc/sssd/sssd.conf Configured /etc/krb5.conf for IPA realm RHTS.ENG.BOS.REDHAT.COM SSSD enabled NTP enabled Client configuration complete. [root@sideswipe ~]#
Created attachment 531986 [details] strace log during ipa-join
Please note that IPA does not depend on nss-sysinit. The dependency comes through run-time discovery done by libsoftokn (on which we also do not depend and which also comes from internal nss dependencies) which reads /etc/pki/nssdb/pkcs11.txt and finds that libnsssysinit.so needs to be loaded. As on x86_64 system there is no 32-bit nss-sysinit package, only 64-bit one, the library is not found and process fails. 24804 stat64("/etc/pki/nssdb", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 24804 open("/usr/lib/libsoftokn3.so", O_RDONLY) = 4 ... 24804 open("/usr/lib/libsqlite3.so.0", O_RDONLY) = 4 ... 24804 open("/etc/pki/nssdb/pkcs11.txt", O_RDONLY) = 4 24804 fstat64(4, {st_mode=S_IFREG|0644, st_size=451, ...}) = 0 24804 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xfffffffff74a2000 24804 read(4, "library=libnsssysinit.so\nname=NSS Internal PKCS #11 Module\nparameters=configdir='sql:/etc/pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags= updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' \nNSS=Flags=internal,moduleDBOnly,critical trustOrder=75 cipherOrder=100 slotParams=(1={slotFlags=[RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Camellia,SEED,SHA256,SHA512] askpw=any timeout=30})\n\n", 4096) = 451 24804 read(4, "", 4096) = 0 ... 24804 open("/etc/ld.so.cache", O_RDONLY) = 4 24804 fstat64(4, {st_mode=S_IFREG|0644, st_size=63919, ...}) = 0 24804 mmap2(NULL, 63919, PROT_READ, MAP_PRIVATE, 4, 0) = 0xfffffffff7493000 24804 close(4) = 0 24804 open("/lib/tls/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/lib/tls/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/lib/tls/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/lib/tls/i686", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/lib/tls/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/lib/tls/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/lib/tls/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/lib/tls", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/lib/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/lib/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/lib/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/lib/i686", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 24804 open("/lib/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/lib/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/lib/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/lib", {st_mode=S_IFDIR|0555, st_size=4096, ...}) = 0 24804 open("/usr/lib/tls/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/usr/lib/tls/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/usr/lib/tls/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/usr/lib/tls/i686", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/usr/lib/tls/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/usr/lib/tls/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/usr/lib/tls/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/usr/lib/tls", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/usr/lib/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/usr/lib/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/usr/lib/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/usr/lib/i686", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/usr/lib/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory) 24804 stat64("/usr/lib/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory) 24804 open("/usr/lib/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
The nss-softokn.spec file for the devel subppackages has Requires: nss-softokn-freebl%{?_isa} = %{version}-%{release} Requires: nss-softokn%{?_isa} = %{version}-%{release} Requires: nss-softokn-freebl-devel%{?_isa} = %{version}-%{release} Which is not used in nss.spec. The log states - Add %%{?_isa} to the requires in the devel packages (#596840) This was introduced as fix for Bug 596840 where users where having problems doing preupgrade and they had both 32-bit and 64-bit versions of the devel packages in the system. I implemented this change, a workaround, per the analysis and suggestions in https://bugzilla.redhat.com/show_bug.cgi?id=596840#c16 This change I think has to bear in the current problem. To test this conjecture I have removed the %{?_isa} have a scratch build https://brewweb.devel.redhat.com/taskinfo?taskID=3783039 It will take me a while to get a couple of systems to test it myself. Could someone please test this out? Thanks.
Actually, I think that: Requires: nss-system-init in the nss package should be changed to: Requires: nss-system-init%{?_isa}
You can find a scratch build implementing Bill's suggestion at https://brewweb.devel.redhat.com/taskinfo?taskID=3787344
Since RHEL 6.2 External Beta has begun, and this bug remains unresolved, it has been rejected as it is not proposed as exception or blocker. Red Hat invites you to ask your support representative to propose this request, if appropriate and relevant, in the next release of Red Hat Enterprise Linux.
(In reply to Elio Maldonado Batiz from comment #6) > You can find a scratch build implementing Bill's suggestion at > https://brewweb.devel.redhat.com/taskinfo?taskID=3787344 That was a long time ago. There was no feedback and that build is now long gone. The new one is at https://brewweb.devel.redhat.com/taskinfo?taskID=6177427 I'm not sufficiently familiar with IPA for setting things up for servers and clients and the steps provided look a bit involved. Could I get some help setting up the required environments from knowledgable folks? Thanks, Elio
(In reply to Elio Maldonado Batiz from comment #11) > I'm not sufficiently familiar with IPA for setting things up for servers and > clients and the steps provided look a bit involved. Could I get some help > setting up the required environments from knowledgable folks? > Alexander or a member of the IPA team, Could I need help setting up a reproducer.
I've asked Scott (in CC:) to provide you a test environment: IPA server and IPA client.
I logged in to the test environment and was able to install the i686 ipa-admintools and ipa-client without any problems. I'll attach the log of what I did.
Created attachment 864179 [details] install log
I never changed Requires: nss-system-init to Requires: nss-system-init%{?_isa} as Bill suggested in Comment 5.
Elio and I did test enrolling IPA client on the test machine where Elio installed the packages and everything worked fine. I think we can say this bug is fixed.
This bug should be CLOSED CURRENTRELEASE once its' been independently verified. Being the bug asignee I can't do that myself.
Looks right to me from what I can see: [root@rhel6-2 ~]# yum remove ipa-server ipa-admintools ipa-client ... Removed: ipa-admintools.x86_64 0:3.0.0-37.el6 ipa-client.x86_64 0:3.0.0-37.el6 ipa-server.x86_64 0:3.0.0-37.el6 Dependency Removed: ipa-server-selinux.x86_64 0:3.0.0-37.el6 [root@rhel6-2 ~]# yum remove ipa-python ... Removed: ipa-python.x86_64 0:3.0.0-37.el6 [root@rhel6-2 yum.local.d]# yum localinstall ipa-admintools-3.0.0-37.el6.i686.rpm ipa-client-3.0.0-37.el6.i686.rpm Loaded plugins: product-id, security, subscription-manager This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register. Setting up Local Package Process Examining ipa-admintools-3.0.0-37.el6.i686.rpm: ipa-admintools-3.0.0-37.el6.i686 Marking ipa-admintools-3.0.0-37.el6.i686.rpm to be installed Examining ipa-client-3.0.0-37.el6.i686.rpm: ipa-client-3.0.0-37.el6.i686 Marking ipa-client-3.0.0-37.el6.i686.rpm to be installed Resolving Dependencies --> Running transaction check ---> Package ipa-admintools.i686 0:3.0.0-37.el6 will be installed --> Processing Dependency: ipa-python = 3.0.0-37.el6 for package: ipa-admintools-3.0.0-37.el6.i686 ---> Package ipa-client.i686 0:3.0.0-37.el6 will be installed --> Processing Dependency: cyrus-sasl-gssapi(x86-32) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libcom_err.so.2 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.0) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.1) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.2) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.3) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.3.4) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.4) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libc.so.6(GLIBC_2.8) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libcurl.so.4 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libk5crypto.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libk5crypto.so.3(k5crypto_3_MIT) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libkrb5.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libkrb5.so.3(krb5_3_MIT) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: liblber-2.4.so.2 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libldap-2.4.so.2 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libpopt.so.0 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libpopt.so.0(LIBPOPT_0) for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libsasl2.so.2 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libxmlrpc_client.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libxmlrpc.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Processing Dependency: libxmlrpc_util.so.3 for package: ipa-client-3.0.0-37.el6.i686 --> Running transaction check ---> Package cyrus-sasl-gssapi.i686 0:2.1.23-13.el6_3.1 will be installed ---> Package cyrus-sasl-lib.i686 0:2.1.23-13.el6_3.1 will be installed --> Processing Dependency: libdb-4.7.so for package: cyrus-sasl-lib-2.1.23-13.el6_3.1.i686 ---> Package glibc.i686 0:2.12-1.132.el6 will be installed --> Processing Dependency: libfreebl3.so(NSSRAWHASH_3.12.3) for package: glibc-2.12-1.132.el6.i686 --> Processing Dependency: libfreebl3.so for package: glibc-2.12-1.132.el6.i686 ---> Package ipa-python.x86_64 0:3.0.0-37.el6 will be installed ---> Package krb5-libs.i686 0:1.10.3-10.el6_4.6 will be installed --> Processing Dependency: libselinux.so.1 for package: krb5-libs-1.10.3-10.el6_4.6.i686 --> Processing Dependency: libkeyutils.so.1(KEYUTILS_0.3) for package: krb5-libs-1.10.3-10.el6_4.6.i686 --> Processing Dependency: libkeyutils.so.1 for package: krb5-libs-1.10.3-10.el6_4.6.i686 ---> Package libcom_err.i686 0:1.41.12-18.el6 will be installed ---> Package libcurl.i686 0:7.19.7-37.el6_4 will be installed --> Processing Dependency: libssh2(x86-32) >= 1.4.2 for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libz.so.1 for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssl3.so(NSS_3.4) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssl3.so(NSS_3.2) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssl3.so(NSS_3.11.4) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssl3.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libssh2.so.1 for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libsmime3.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libplds4.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libplc4.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnssutil3.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.9.3) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.9.2) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.5) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.4) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.3) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.2) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.12.5) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.12.1) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.12) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so(NSS_3.10) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnss3.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libnspr4.so for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libidn.so.11(LIBIDN_1.0) for package: libcurl-7.19.7-37.el6_4.i686 --> Processing Dependency: libidn.so.11 for package: libcurl-7.19.7-37.el6_4.i686 ---> Package openldap.i686 0:2.4.23-32.el6_4.1 will be installed ---> Package popt.i686 0:1.13-7.el6 will be installed ---> Package xmlrpc-c.i686 0:1.16.24-1210.1840.el6 will be installed --> Processing Dependency: libxml2.so.2(LIBXML2_2.4.30) for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 --> Processing Dependency: libxml2.so.2 for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 --> Processing Dependency: libgcc_s.so.1(GCC_3.3.1) for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 --> Processing Dependency: libgcc_s.so.1(GCC_3.0) for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 --> Processing Dependency: libgcc_s.so.1 for package: xmlrpc-c-1.16.24-1210.1840.el6.i686 ---> Package xmlrpc-c-client.i686 0:1.16.24-1210.1840.el6 will be installed --> Running transaction check ---> Package db4.i686 0:4.7.25-18.el6_4 will be installed ---> Package keyutils-libs.i686 0:1.4-4.el6 will be installed ---> Package libgcc.i686 0:4.4.7-4.el6 will be installed ---> Package libidn.i686 0:1.18-2.el6 will be installed ---> Package libselinux.i686 0:2.0.94-5.3.el6_4.1 will be installed ---> Package libssh2.i686 0:1.4.2-1.el6 will be installed --> Processing Dependency: libssl.so.10 for package: libssh2-1.4.2-1.el6.i686 --> Processing Dependency: libcrypto.so.10 for package: libssh2-1.4.2-1.el6.i686 ---> Package libxml2.i686 0:2.7.6-14.el6 will be installed ---> Package nspr.i686 0:4.10.0-1.el6 will be installed ---> Package nss.i686 0:3.15.1-15.el6 will be installed --> Processing Dependency: nss-softokn(x86-32) >= 3.14.3 for package: nss-3.15.1-15.el6.i686 --> Processing Dependency: libsoftokn3.so for package: nss-3.15.1-15.el6.i686 ---> Package nss-softokn-freebl.i686 0:3.14.3-9.el6 will be installed ---> Package nss-util.i686 0:3.15.1-3.el6 will be installed ---> Package zlib.i686 0:1.2.3-29.el6 will be installed --> Running transaction check ---> Package nss-softokn.i686 0:3.14.3-9.el6 will be installed --> Processing Dependency: libsqlite3.so.0 for package: nss-softokn-3.14.3-9.el6.i686 ---> Package openssl.i686 0:1.0.1e-15.el6 will be installed --> Running transaction check ---> Package sqlite.i686 0:3.6.20-1.el6 will be installed --> Processing Dependency: libreadline.so.6 for package: sqlite-3.6.20-1.el6.i686 --> Running transaction check ---> Package readline.i686 0:6.0-4.el6 will be installed --> Processing Dependency: libtinfo.so.5 for package: readline-6.0-4.el6.i686 --> Running transaction check ---> Package ncurses-libs.i686 0:5.7-3.20090208.el6 will be installed --> Finished Dependency Resolution Dependencies Resolved ======================================================================================================= Package Arch Version Repository Size ======================================================================================================= Installing: ipa-admintools i686 3.0.0-37.el6 /ipa-admintools-3.0.0-37.el6.i686 43 k ipa-client i686 3.0.0-37.el6 /ipa-client-3.0.0-37.el6.i686 294 k Installing for dependencies: cyrus-sasl-gssapi i686 2.1.23-13.el6_3.1 beaker-rhel65-server 32 k cyrus-sasl-lib i686 2.1.23-13.el6_3.1 beaker-rhel65-server 135 k db4 i686 4.7.25-18.el6_4 beaker-rhel65-server 579 k glibc i686 2.12-1.132.el6 beaker-rhel65-server 4.3 M ipa-python x86_64 3.0.0-37.el6 beaker-rhel65-server 924 k keyutils-libs i686 1.4-4.el6 beaker-rhel65-server 19 k krb5-libs i686 1.10.3-10.el6_4.6 beaker-rhel65-server 768 k libcom_err i686 1.41.12-18.el6 beaker-rhel65-server 36 k libcurl i686 7.19.7-37.el6_4 beaker-rhel65-server 170 k libgcc i686 4.4.7-4.el6 beaker-rhel65-server 111 k libidn i686 1.18-2.el6 beaker-rhel65-server 204 k libselinux i686 2.0.94-5.3.el6_4.1 beaker-rhel65-server 107 k libssh2 i686 1.4.2-1.el6 beaker-rhel65-server 123 k libxml2 i686 2.7.6-14.el6 beaker-rhel65-server 799 k ncurses-libs i686 5.7-3.20090208.el6 beaker-rhel65-server 250 k nspr i686 4.10.0-1.el6 beaker-rhel65-server 114 k nss i686 3.15.1-15.el6 beaker-rhel65-server 823 k nss-softokn i686 3.14.3-9.el6 beaker-rhel65-server 271 k nss-softokn-freebl i686 3.14.3-9.el6 beaker-rhel65-server 146 k nss-util i686 3.15.1-3.el6 beaker-rhel65-server 63 k openldap i686 2.4.23-32.el6_4.1 beaker-rhel65-server 266 k openssl i686 1.0.1e-15.el6 beaker-rhel65-server 1.5 M popt i686 1.13-7.el6 beaker-rhel65-server 38 k readline i686 6.0-4.el6 beaker-rhel65-server 175 k sqlite i686 3.6.20-1.el6 beaker-rhel65-server 306 k xmlrpc-c i686 1.16.24-1210.1840.el6 beaker-rhel65-server 103 k xmlrpc-c-client i686 1.16.24-1210.1840.el6 beaker-rhel65-server 23 k zlib i686 1.2.3-29.el6 beaker-rhel65-server 72 k Transaction Summary ======================================================================================================= Install 30 Package(s) Total size: 13 M Total download size: 12 M Installed size: 36 M Is this ok [y/N]: y Downloading Packages: (1/28): cyrus-sasl-gssapi-2.1.23-13.el6_3.1.i686.rpm | 32 kB 00:00 (2/28): cyrus-sasl-lib-2.1.23-13.el6_3.1.i686.rpm | 135 kB 00:00 (3/28): db4-4.7.25-18.el6_4.i686.rpm | 579 kB 00:01 (4/28): glibc-2.12-1.132.el6.i686.rpm | 4.3 MB 00:03 (5/28): ipa-python-3.0.0-37.el6.x86_64.rpm | 924 kB 00:01 (6/28): keyutils-libs-1.4-4.el6.i686.rpm | 19 kB 00:00 (7/28): krb5-libs-1.10.3-10.el6_4.6.i686.rpm | 768 kB 00:02 (8/28): libcom_err-1.41.12-18.el6.i686.rpm | 36 kB 00:00 (9/28): libcurl-7.19.7-37.el6_4.i686.rpm | 170 kB 00:00 (10/28): libgcc-4.4.7-4.el6.i686.rpm | 111 kB 00:00 (11/28): libidn-1.18-2.el6.i686.rpm | 204 kB 00:00 (12/28): libselinux-2.0.94-5.3.el6_4.1.i686.rpm | 107 kB 00:00 (13/28): libssh2-1.4.2-1.el6.i686.rpm | 123 kB 00:00 (14/28): libxml2-2.7.6-14.el6.i686.rpm | 799 kB 00:01 (15/28): ncurses-libs-5.7-3.20090208.el6.i686.rpm | 250 kB 00:00 (16/28): nspr-4.10.0-1.el6.i686.rpm | 114 kB 00:00 (17/28): nss-3.15.1-15.el6.i686.rpm | 823 kB 00:01 (18/28): nss-softokn-3.14.3-9.el6.i686.rpm | 271 kB 00:00 (19/28): nss-softokn-freebl-3.14.3-9.el6.i686.rpm | 146 kB 00:00 (20/28): nss-util-3.15.1-3.el6.i686.rpm | 63 kB 00:00 (21/28): openldap-2.4.23-32.el6_4.1.i686.rpm | 266 kB 00:00 (22/28): openssl-1.0.1e-15.el6.i686.rpm | 1.5 MB 00:02 (23/28): popt-1.13-7.el6.i686.rpm | 38 kB 00:00 (24/28): readline-6.0-4.el6.i686.rpm | 175 kB 00:00 (25/28): sqlite-3.6.20-1.el6.i686.rpm | 306 kB 00:00 (26/28): xmlrpc-c-1.16.24-1210.1840.el6.i686.rpm | 103 kB 00:00 (27/28): xmlrpc-c-client-1.16.24-1210.1840.el6.i686.rpm | 23 kB 00:00 (28/28): zlib-1.2.3-29.el6.i686.rpm | 72 kB 00:00 ------------------------------------------------------------------------------------------------------- Total 426 kB/s | 12 MB 00:29 Running rpm_check_debug Running Transaction Test Transaction Test Succeeded Running Transaction Installing : libgcc-4.4.7-4.el6.i686 1/30 Installing : nss-softokn-freebl-3.14.3-9.el6.i686 2/30 Installing : glibc-2.12-1.132.el6.i686 3/30 Installing : nspr-4.10.0-1.el6.i686 4/30 Installing : zlib-1.2.3-29.el6.i686 5/30 Installing : libcom_err-1.41.12-18.el6.i686 6/30 Installing : ipa-python-3.0.0-37.el6.x86_64 7/30 Installing : nss-util-3.15.1-3.el6.i686 8/30 Installing : libxml2-2.7.6-14.el6.i686 9/30 Installing : xmlrpc-c-1.16.24-1210.1840.el6.i686 10/30 Installing : db4-4.7.25-18.el6_4.i686 11/30 Installing : cyrus-sasl-lib-2.1.23-13.el6_3.1.i686 12/30 Installing : libselinux-2.0.94-5.3.el6_4.1.i686 13/30 Installing : libidn-1.18-2.el6.i686 14/30 Installing : ncurses-libs-5.7-3.20090208.el6.i686 15/30 Installing : readline-6.0-4.el6.i686 16/30 Installing : sqlite-3.6.20-1.el6.i686 17/30 Installing : nss-softokn-3.14.3-9.el6.i686 18/30 Installing : nss-3.15.1-15.el6.i686 19/30 Installing : openldap-2.4.23-32.el6_4.1.i686 20/30 Installing : keyutils-libs-1.4-4.el6.i686 21/30 Installing : krb5-libs-1.10.3-10.el6_4.6.i686 22/30 Installing : cyrus-sasl-gssapi-2.1.23-13.el6_3.1.i686 23/30 Installing : openssl-1.0.1e-15.el6.i686 24/30 Installing : libssh2-1.4.2-1.el6.i686 25/30 Installing : libcurl-7.19.7-37.el6_4.i686 26/30 Installing : xmlrpc-c-client-1.16.24-1210.1840.el6.i686 27/30 Installing : popt-1.13-7.el6.i686 28/30 Installing : ipa-client-3.0.0-37.el6.i686 29/30 Installing : ipa-admintools-3.0.0-37.el6.i686 30/30 Verifying : ipa-client-3.0.0-37.el6.i686 1/30 Verifying : ipa-python-3.0.0-37.el6.x86_64 2/30 Verifying : libssh2-1.4.2-1.el6.i686 3/30 Verifying : libcurl-7.19.7-37.el6_4.i686 4/30 Verifying : libgcc-4.4.7-4.el6.i686 5/30 Verifying : sqlite-3.6.20-1.el6.i686 6/30 Verifying : ipa-admintools-3.0.0-37.el6.i686 7/30 Verifying : nss-util-3.15.1-3.el6.i686 8/30 Verifying : nss-softokn-3.14.3-9.el6.i686 9/30 Verifying : nspr-4.10.0-1.el6.i686 10/30 Verifying : readline-6.0-4.el6.i686 11/30 Verifying : glibc-2.12-1.132.el6.i686 12/30 Verifying : nss-softokn-freebl-3.14.3-9.el6.i686 13/30 Verifying : db4-4.7.25-18.el6_4.i686 14/30 Verifying : nss-3.15.1-15.el6.i686 15/30 Verifying : cyrus-sasl-gssapi-2.1.23-13.el6_3.1.i686 16/30 Verifying : libselinux-2.0.94-5.3.el6_4.1.i686 17/30 Verifying : libidn-1.18-2.el6.i686 18/30 Verifying : ncurses-libs-5.7-3.20090208.el6.i686 19/30 Verifying : xmlrpc-c-client-1.16.24-1210.1840.el6.i686 20/30 Verifying : keyutils-libs-1.4-4.el6.i686 21/30 Verifying : openldap-2.4.23-32.el6_4.1.i686 22/30 Verifying : zlib-1.2.3-29.el6.i686 23/30 Verifying : libcom_err-1.41.12-18.el6.i686 24/30 Verifying : krb5-libs-1.10.3-10.el6_4.6.i686 25/30 Verifying : openssl-1.0.1e-15.el6.i686 26/30 Verifying : libxml2-2.7.6-14.el6.i686 27/30 Verifying : xmlrpc-c-1.16.24-1210.1840.el6.i686 28/30 Verifying : popt-1.13-7.el6.i686 29/30 Verifying : cyrus-sasl-lib-2.1.23-13.el6_3.1.i686 30/30 Installed: ipa-admintools.i686 0:3.0.0-37.el6 ipa-client.i686 0:3.0.0-37.el6 Dependency Installed: cyrus-sasl-gssapi.i686 0:2.1.23-13.el6_3.1 cyrus-sasl-lib.i686 0:2.1.23-13.el6_3.1 db4.i686 0:4.7.25-18.el6_4 glibc.i686 0:2.12-1.132.el6 ipa-python.x86_64 0:3.0.0-37.el6 keyutils-libs.i686 0:1.4-4.el6 krb5-libs.i686 0:1.10.3-10.el6_4.6 libcom_err.i686 0:1.41.12-18.el6 libcurl.i686 0:7.19.7-37.el6_4 libgcc.i686 0:4.4.7-4.el6 libidn.i686 0:1.18-2.el6 libselinux.i686 0:2.0.94-5.3.el6_4.1 libssh2.i686 0:1.4.2-1.el6 libxml2.i686 0:2.7.6-14.el6 ncurses-libs.i686 0:5.7-3.20090208.el6 nspr.i686 0:4.10.0-1.el6 nss.i686 0:3.15.1-15.el6 nss-softokn.i686 0:3.14.3-9.el6 nss-softokn-freebl.i686 0:3.14.3-9.el6 nss-util.i686 0:3.15.1-3.el6 openldap.i686 0:2.4.23-32.el6_4.1 openssl.i686 0:1.0.1e-15.el6 popt.i686 0:1.13-7.el6 readline.i686 0:6.0-4.el6 sqlite.i686 0:3.6.20-1.el6 xmlrpc-c.i686 0:1.16.24-1210.1840.el6 xmlrpc-c-client.i686 0:1.16.24-1210.1840.el6 zlib.i686 0:1.2.3-29.el6 Complete! [root@rhel6-2 yum.local.d]# ipa-client-install Discovery was successful! Hostname: client1.ipa1.example.test Realm: IPA1.EXAMPLE.TEST DNS Domain: ipa1.example.test IPA Server: master.ipa1.example.test BaseDN: dc=ipa1,dc=example,dc=test Continue to configure the system with these values? [no]: yes User authorized to enroll computers: admin Synchronizing time with KDC... Password for admin.TEST: Enrolled in IPA realm IPA1.EXAMPLE.TEST Created /etc/ipa/default.conf New SSSD config will be created Configured /etc/sssd/sssd.conf Configured /etc/krb5.conf for IPA realm IPA1.EXAMPLE.TEST trying https://master.ipa1.example.test/ipa/xml Forwarding 'env' to server u'https://master.ipa1.example.test/ipa/xml' Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub Forwarding 'host_mod' to server u'https://master.ipa1.example.test/ipa/xml' SSSD enabled Configured /etc/openldap/ldap.conf NTP enabled Configured /etc/ssh/ssh_config Configured /etc/ssh/sshd_config Client configuration complete. [root@rhel6-2 yum.local.d]# kinit admin Password for admin.TEST: [root@rhel6-2 yum.local.d]# ipa user-show admin User login: admin Last name: Administrator Home directory: /home/admin Login shell: /bin/bash UID: 261200000 GID: 261200000 Account disabled: False Password: True Member of groups: admins, trust admins Kerberos keys available: True [root@rhel6-2 yum.local.d]# ipa host-show $(hostname) Host name: client1.ipa1.example.test Certificate: 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 Principal name: host/client1.ipa1.example.test.TEST Password: False Keytab: True Managed by: client1.ipa1.example.test Subject: CN=client1.ipa1.example.test,O=IPA1.EXAMPLE.TEST Serial Number: 13 Serial Number (hex): 0xD Issuer: CN=Certificate Authority,O=IPA1.EXAMPLE.TEST Not Before: Tue Feb 18 01:20:00 2014 UTC Not After: Fri Feb 19 01:20:00 2016 UTC Fingerprint (MD5): 4b:c3:36:c5:cd:0b:76:cc:f2:26:ee:95:5f:8c:d0:8e Fingerprint (SHA1): da:4d:77:64:4f:48:23:b9:07:c4:2b:93:aa:c9:bf:27:8f:03:c2:7a SSH public key fingerprint: 02:C5:3A:C2:65:A3:B0:27:C1:6B:D1:28:1D:1F:1C:56 (ssh-dss), 3D:DE:DE:6C:C1:62:A2:96:8D:D3:DD:CD:85:04:65:C9 (ssh-rsa)
Oh, yeah, here's confirmation of the arch: [root@rhel6-2 yum.local.d]# arch x86_64
Going ahead and marking this one as verified per results in comment #20