751694 – ipa-client fails to join when i686 package is installed on x86_64 arch.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 751694 - ipa-client fails to join when i686 package is installed on x86_64 arch.

Summary: ipa-client fails to join when i686 package is installed on x86_64 arch.

Keywords:
Status:	CLOSED CURRENTRELEASE
Alias:	None
Product:	Red Hat Enterprise Linux 6
Classification:	Red Hat
Component:	nss
Sub Component:
Version:	6.2
Hardware:	Unspecified
OS:	Unspecified
Priority:	medium
Severity:	high
Target Milestone:	rc
Target Release:	---
Assignee:	Elio Maldonado Batiz
QA Contact:	BaseOS QE Security Team
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2011-11-07 08:10 UTC by Gowrishankar Rajaiyan
Modified:	2014-06-18 20:32 UTC (History)
CC List:	6 users (show)
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:	2014-06-18 20:32:23 UTC
Target Upstream Version:
Embargoed:

Attachments	(Terms of Use)
strace log during ipa-join (90.68 KB, text/plain) 2011-11-07 08:13 UTC, Gowrishankar Rajaiyan	no flags	Details
install log (25.50 KB, text/plain) 2014-02-17 16:29 UTC, Elio Maldonado Batiz	no flags	Details
View All

Description Gowrishankar Rajaiyan 2011-11-07 08:10:46 UTC

Description of problem:
ipa-client install fails when i686 package is installed on x86_64 arch. Missing 32-bit package of nss-sysinit which should be pulled in as a dependency. 

Version-Release number of selected component (if applicable):
ipa-server-2.1.3-8.el6.x86_64
ipa-client-2.1.3-8.el6.i686

How reproducible:
Always

Steps to Reproduce:

Server:
1. ipa-server-install

CLIENT:
1. [root@sideswipe ~]# arch 
x86_64
[root@sideswipe ~]# 

2. [root@sideswipe ~]# yum remove ipa-client

3. [root@sideswipe ~]# yum localinstall ipa-admintools-2.1.3-8.el6.i686.rpm ipa-client-2.1.3-8.el6.i686.rpm 

Dependencies Resolved

=======================================================================================
 Package                              Arch                     Version                                      Repository                                          Size
=======================================================================================
Installing:
 ipa-admintools                       i686                     2.1.3-8.el6                                  
 ipa-client                           i686                     2.1.3-8.el6                                  
Installing for dependencies:
 cyrus-sasl-gssapi                    i686                     2.1.23-13.el6                                
 cyrus-sasl-lib                       i686                     2.1.23-13.el6                                
 db4                                  i686                     4.7.25-16.el6                                
 glibc                                i686                     2.12-1.47.el6                                
 keyutils-libs                        i686                     1.4-3.el6                                    
 krb5-libs                            i686                     1.9-22.el6                                   
 libcom_err                           i686                     1.41.12-11.el6                               
 libcurl                              i686                     7.19.7-26.el6_1.2                            
 libgcc                               i686                     4.4.6-3.el6                                  
 libidn                               i686                     1.18-2.el6                                   
 libselinux                           i686                     2.0.94-5.2.el6                               
 libssh2                              i686                     1.2.2-7.el6_1.1                              
 libxml2                              i686                     2.7.6-4.el6                                  
 ncurses-libs                         i686                     5.7-3.20090208.el6                           
 nspr                                 i686                     4.8.8-3.el6                                  
 nss                                  i686                     3.12.10-15.el6                               
 nss-softokn                          i686                     3.12.9-11.el6                                
 nss-softokn-freebl                   i686                     3.12.9-11.el6                                
 nss-util                             i686                     3.12.10-2.el6                                
 openldap                             i686                     2.4.23-20.el6                                
 openssl                              i686                     1.0.0-20.el6                                 
 popt                                 i686                     1.13-7.el6                                   
 readline                             i686                     6.0-3.el6                                    
 sqlite                               i686                     3.6.20-1.el6                                 
 xmlrpc-c                             i686                     1.16.24- 103 k
 xmlrpc-c-client                      i686                     1.16.24-1200.1840.el6_1.4              
 zlib                                 i686                     1.2.3-27.el6                                 
Updating for dependencies:
 glibc                                x86_64                   2.12-1.47.el6                                
 glibc-common                         x86_64                   2.12-1.47.el6                                


4. [root@sideswipe ~]# ipa-client-install 
DNS discovery failed to determine your DNS domain
Provide the domain name of your IPA server (ex: example.com): rhts.eng.bos.redhat.com
DNS discovery failed to find the IPA Server
Provide your IPA server name (ex: ipa.example.com): hp-dl580g5-01.rhts.eng.bos.redhat.com

The failure to use DNS to find your IPA server indicates that your
resolv.conf file is not properly configured.

Autodiscovery of servers for failover cannot work with this configuration.

If you proceed with the installation, services will be configured to always
access the discovered server for all operation and will not fail over to
other servers in case of failure.

Proceed with fixed values and no DNS discovery? [no]: yes
Hostname: sideswipe.lab.eng.pnq.redhat.com
Realm: RHTS.ENG.BOS.REDHAT.COM
DNS Domain: rhts.eng.bos.redhat.com
IPA Server: hp-dl580g5-01.rhts.eng.bos.redhat.com
BaseDN: dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com


Continue to configure the system with these values? [no]: yes
User authorized to enroll computers: admin
Synchronizing time with KDC...
Password for admin.BOS.REDHAT.COM: 

Joining realm failed: libcurl failed to execute the HTTP POST transaction.  Problem with the SSL CA cert (path? access rights?)
Installation failed. Rolling back changes.
IPA client is not configured on this system.
[root@sideswipe ~]#

Provide the domain name of your IPA server (ex: example.com): rhts.eng.bos.redhat.com
root        : DEBUG    will use domain: rhts.eng.bos.redhat.com

root        : DEBUG    [ipadnssearchldap]
root        : DEBUG    IPA Server not found
DNS discovery failed to find the IPA Server
Provide your IPA server name (ex: ipa.example.com): hp-dl580g5-01.rhts.eng.bos.redhat.com
root        : DEBUG    will use server: hp-dl580g5-01.rhts.eng.bos.redhat.com

root        : DEBUG    [ipadnssearchkrb]
root        : DEBUG    [ipacheckldap]
root        : DEBUG    args=/usr/bin/wget -O /tmp/tmplh5o4Z/ca.crt -T 15 -t 2 http://hp-dl580g5-01.rhts.eng.bos.redhat.com/ipa/config/ca.crt
root        : DEBUG    stdout=
root        : DEBUG    stderr=--2011-11-07 12:16:15--  http://hp-dl580g5-01.rhts.eng.bos.redhat.com/ipa/config/ca.crt
Resolving hp-dl580g5-01.rhts.eng.bos.redhat.com... 10.16.65.72
Connecting to hp-dl580g5-01.rhts.eng.bos.redhat.com|10.16.65.72|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1369 (1.3K) [application/x-x509-ca-cert]
Saving to: “/tmp/tmplh5o4Z/ca.crt”

     0K .                                                     100%  200M=0s

2011-11-07 12:16:15 (200 MB/s) - “/tmp/tmplh5o4Z/ca.crt” saved [1369/1369]


root        : DEBUG    Init ldap with: ldap://hp-dl580g5-01.rhts.eng.bos.redhat.com:389
root        : DEBUG    Search LDAP server for IPA base DN
root        : DEBUG    Check if naming context 'dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com' is for IPA
root        : DEBUG    Naming context 'dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com' is a valid IPA context
root        : DEBUG    Search for (objectClass=krbRealmContainer) in dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com(sub)
root        : DEBUG    Found: [('cn=RHTS.ENG.BOS.REDHAT.COM,cn=kerberos,dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com', {'krbSubTrees': ['dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com'], 'cn': ['RHTS.ENG.BOS.REDHAT.COM'], 'krbDefaultEncSaltTypes': ['aes256-cts:special', 'aes128-cts:special', 'des3-hmac-sha1:special', 'arcfour-hmac:special'], 'objectClass': ['top', 'krbrealmcontainer', 'krbticketpolicyaux'], 'krbSearchScope': ['2'], 'krbSupportedEncSaltTypes': ['aes256-cts:normal', 'aes256-cts:special', 'aes128-cts:normal', 'aes128-cts:special', 'des3-hmac-sha1:normal', 'des3-hmac-sha1:special', 'arcfour-hmac:normal', 'arcfour-hmac:special', 'des-hmac-sha1:normal', 'des-cbc-md5:normal', 'des-cbc-crc:normal', 'des-cbc-crc:v4', 'des-cbc-crc:afs3'], 'krbMaxTicketLife': ['86400'], 'krbMaxRenewableAge': ['604800']})]

The failure to use DNS to find your IPA server indicates that your
resolv.conf file is not properly configured.

Autodiscovery of servers for failover cannot work with this configuration.

If you proceed with the installation, services will be configured to always
access the discovered server for all operation and will not fail over to
other servers in case of failure.

Proceed with fixed values and no DNS discovery? [no]: yes
root        : DEBUG    will use cli_realm: RHTS.ENG.BOS.REDHAT.COM

root        : DEBUG    will use cli_basedn: dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com

Hostname: sideswipe.lab.eng.pnq.redhat.com
Realm: RHTS.ENG.BOS.REDHAT.COM
DNS Domain: rhts.eng.bos.redhat.com
IPA Server: hp-dl580g5-01.rhts.eng.bos.redhat.com
BaseDN: dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com


Continue to configure the system with these values? [no]: yes
User authorized to enroll computers: admin
root        : DEBUG    will use principal: admin

root        : DEBUG    args=/usr/bin/wget -O /etc/ipa/ca.crt http://hp-dl580g5-01.rhts.eng.bos.redhat.com/ipa/config/ca.crt
root        : DEBUG    stdout=
root        : DEBUG    stderr=--2011-11-07 12:16:23--  http://hp-dl580g5-01.rhts.eng.bos.redhat.com/ipa/config/ca.crt
Resolving hp-dl580g5-01.rhts.eng.bos.redhat.com... 10.16.65.72
Connecting to hp-dl580g5-01.rhts.eng.bos.redhat.com|10.16.65.72|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1369 (1.3K) [application/x-x509-ca-cert]
Saving to: “/etc/ipa/ca.crt”

     0K .                                                     100%  186M=0s

2011-11-07 12:16:23 (186 MB/s) - “/etc/ipa/ca.crt” saved [1369/1369]


Synchronizing time with KDC...
root        : DEBUG    args=/usr/sbin/ntpdate -U ntp -s -b hp-dl580g5-01.rhts.eng.bos.redhat.com
root        : DEBUG    stdout=
root        : DEBUG    stderr=
root        : DEBUG    Writing Kerberos configuration to /tmp/tmpqrKANN:
#File modified by ipa-client-install

[libdefaults]
  default_realm = RHTS.ENG.BOS.REDHAT.COM
  dns_lookup_realm = false
  dns_lookup_kdc = false
  rdns = false
  ticket_lifetime = 24h
  forwardable = yes

[realms]
  RHTS.ENG.BOS.REDHAT.COM = {
    kdc = hp-dl580g5-01.rhts.eng.bos.redhat.com:88
    admin_server = hp-dl580g5-01.rhts.eng.bos.redhat.com:749
    default_domain = rhts.eng.bos.redhat.com
    pkinit_anchors = FILE:/etc/ipa/ca.crt
  }

[domain_realm]
  .rhts.eng.bos.redhat.com = RHTS.ENG.BOS.REDHAT.COM
  rhts.eng.bos.redhat.com = RHTS.ENG.BOS.REDHAT.COM
  .lab.eng.pnq.redhat.com = RHTS.ENG.BOS.REDHAT.COM
  lab.eng.pnq.redhat.com = RHTS.ENG.BOS.REDHAT.COM


Password for admin.BOS.REDHAT.COM: 
root        : DEBUG    args=kinit admin.BOS.REDHAT.COM
root        : DEBUG    stdout=Password for admin.BOS.REDHAT.COM: 

root        : DEBUG    stderr=

root        : DEBUG    args=/usr/sbin/ipa-join -s hp-dl580g5-01.rhts.eng.bos.redhat.com -b dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com -d
root        : DEBUG    stdout=
root        : DEBUG    stderr=XML-RPC CALL:

<?xml version="1.0" encoding="UTF-8"?>\r\n
<methodCall>\r\n
<methodName>join</methodName>\r\n
<params>\r\n
<param><value><array><data>\r\n
<value><string>sideswipe.lab.eng.pnq.redhat.com</string></value>\r\n
</data></array></value></param>\r\n
<param><value><struct>\r\n
<member><name>nsosversion</name>\r\n
<value><string>2.6.32-209.el6.x86_64</string></value></member>\r\n
<member><name>nshardwareplatform</name>\r\n
<value><string>x86_64</string></value></member>\r\n
</struct></value></param>\r\n
</params>\r\n
</methodCall>\r\n

* About to connect() to hp-dl580g5-01.rhts.eng.bos.redhat.com port 443 (#0)
*   Trying 10.16.65.72... * Connected to hp-dl580g5-01.rhts.eng.bos.redhat.com (10.16.65.72) port 443 (#0)
* Initializing NSS with certpath: /etc/pki/nssdb
* Unable to initialize NSS database
* NSS error -5977
* Expire cleared
* Closing connection #0
libcurl failed to execute the HTTP POST transaction.  Problem with the SSL CA cert (path? access rights?)

Joining realm failed: XML-RPC CALL:

<?xml version="1.0" encoding="UTF-8"?>\r\n
<methodCall>\r\n
<methodName>join</methodName>\r\n
<params>\r\n
<param><value><array><data>\r\n
<value><string>sideswipe.lab.eng.pnq.redhat.com</string></value>\r\n
</data></array></value></param>\r\n
<param><value><struct>\r\n
<member><name>nsosversion</name>\r\n
<value><string>2.6.32-209.el6.x86_64</string></value></member>\r\n
<member><name>nshardwareplatform</name>\r\n
<value><string>x86_64</string></value></member>\r\n
</struct></value></param>\r\n
</params>\r\n
</methodCall>\r\n

* About to connect() to hp-dl580g5-01.rhts.eng.bos.redhat.com port 443 (#0)
*   Trying 10.16.65.72... * Connected to hp-dl580g5-01.rhts.eng.bos.redhat.com (10.16.65.72) port 443 (#0)
* Initializing NSS with certpath: /etc/pki/nssdb
* Unable to initialize NSS database
* NSS error -5977
* Expire cleared
* Closing connection #0
libcurl failed to execute the HTTP POST transaction.  Problem with the SSL CA cert (path? access rights?)
root        : DEBUG    args=kdestroy
root        : DEBUG    stdout=
root        : DEBUG    stderr=
Installation failed. Rolling back changes.
IPA client is not configured on this system.
[root@sideswipe ~]#


Actual results:
ipa-client-install fails. 
In /root/mm/log shows that 32-bit app on x86-64 tries to resolve the referenced library as 32-bit but that's not installed.

<snip>
24804 open("/lib/tls/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
</snip>

Expected results:
ipa-client-install successful. nss-sysinit should be pulled in as dependency.


Additional info:

[root@sideswipe ~]# yum localinstall nss-sysinit-3.12.10-15.el6.i686.rpm 


[root@sideswipe ~]# ipa-client-install 
DNS discovery failed to determine your DNS domain
Provide the domain name of your IPA server (ex: example.com): rhts.eng.bos.redhat.com
DNS discovery failed to find the IPA Server
Provide your IPA server name (ex: ipa.example.com): hp-dl580g5-01.rhts.eng.bos.redhat.com

The failure to use DNS to find your IPA server indicates that your
resolv.conf file is not properly configured.

Autodiscovery of servers for failover cannot work with this configuration.

If you proceed with the installation, services will be configured to always
access the discovered server for all operation and will not fail over to
other servers in case of failure.

Proceed with fixed values and no DNS discovery? [no]: yes
Hostname: sideswipe.lab.eng.pnq.redhat.com
Realm: RHTS.ENG.BOS.REDHAT.COM
DNS Domain: rhts.eng.bos.redhat.com
IPA Server: hp-dl580g5-01.rhts.eng.bos.redhat.com
BaseDN: dc=rhts,dc=eng,dc=bos,dc=redhat,dc=com


Continue to configure the system with these values? [no]: yes
User authorized to enroll computers: admin
Synchronizing time with KDC...
Password for admin.BOS.REDHAT.COM: 

Enrolled in IPA realm RHTS.ENG.BOS.REDHAT.COM
Created /etc/ipa/default.conf
Configured /etc/sssd/sssd.conf
Configured /etc/krb5.conf for IPA realm RHTS.ENG.BOS.REDHAT.COM
SSSD enabled
NTP enabled
Client configuration complete.
[root@sideswipe ~]#

Comment 1 Gowrishankar Rajaiyan 2011-11-07 08:13:58 UTC

Created attachment 531986 [details]
strace log during ipa-join

Comment 3 Alexander Bokovoy 2011-11-07 08:20:25 UTC

Please note that IPA does not depend on nss-sysinit. The dependency comes through run-time discovery done by libsoftokn (on which we also do not depend and which also comes from internal nss dependencies) which reads /etc/pki/nssdb/pkcs11.txt and finds that libnsssysinit.so needs to be loaded. As on x86_64 system there is no 32-bit nss-sysinit package, only 64-bit one, the library is not found and process fails.

24804 stat64("/etc/pki/nssdb", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
24804 open("/usr/lib/libsoftokn3.so", O_RDONLY) = 4
...
24804 open("/usr/lib/libsqlite3.so.0", O_RDONLY) = 4
...
24804 open("/etc/pki/nssdb/pkcs11.txt", O_RDONLY) = 4
24804 fstat64(4, {st_mode=S_IFREG|0644, st_size=451, ...}) = 0
24804 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xfffffffff74a2000
24804 read(4, "library=libnsssysinit.so\nname=NSS Internal PKCS #11 Module\nparameters=configdir='sql:/etc/pki/nssdb'  certPrefix='' keyPrefix='' secmod='secmod.db' flags= updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' \nNSS=Flags=internal,moduleDBOnly,critical trustOrder=75 cipherOrder=100 slotParams=(1={slotFlags=[RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Camellia,SEED,SHA256,SHA512] askpw=any timeout=30})\n\n", 4096) = 451
24804 read(4, "", 4096)                 = 0
...
24804 open("/etc/ld.so.cache", O_RDONLY) = 4
24804 fstat64(4, {st_mode=S_IFREG|0644, st_size=63919, ...}) = 0
24804 mmap2(NULL, 63919, PROT_READ, MAP_PRIVATE, 4, 0) = 0xfffffffff7493000
24804 close(4)                          = 0
24804 open("/lib/tls/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/tls/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/tls/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/tls/i686", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/tls/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/tls/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/tls/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/tls", 0xffd764f8)    = -1 ENOENT (No such file or directory)
24804 open("/lib/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/lib/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/i686", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
24804 open("/lib/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib/sse2", 0xffd764f8)   = -1 ENOENT (No such file or directory)
24804 open("/lib/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/lib", {st_mode=S_IFDIR|0555, st_size=4096, ...}) = 0
24804 open("/usr/lib/tls/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/tls/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/tls/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/tls/i686", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/tls/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/tls/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/tls/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/tls", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/i686/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/i686/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/i686/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/i686", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/sse2/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)
24804 stat64("/usr/lib/sse2", 0xffd764f8) = -1 ENOENT (No such file or directory)
24804 open("/usr/lib/libnsssysinit.so", O_RDONLY) = -1 ENOENT (No such file or directory)

Comment 4 Elio Maldonado Batiz 2011-11-09 15:50:30 UTC

The nss-softokn.spec file for the devel subppackages has
Requires:         nss-softokn-freebl%{?_isa} = %{version}-%{release}
Requires:         nss-softokn%{?_isa} = %{version}-%{release}
Requires:         nss-softokn-freebl-devel%{?_isa} = %{version}-%{release}
Which is not used in nss.spec. The log states
- Add %%{?_isa} to the requires in the devel packages (#596840)
This was introduced as fix for Bug 596840 where users where having problems doing preupgrade and they had both 32-bit and 64-bit versions of the devel packages in the system. I implemented this change, a workaround, per the analysis and suggestions in https://bugzilla.redhat.com/show_bug.cgi?id=596840#c16
This change I think has to bear in the current problem. To test this conjecture I have removed the %{?_isa} have a scratch build
https://brewweb.devel.redhat.com/taskinfo?taskID=3783039
It will take me a while to get a couple of systems to test it myself. Could someone please test this out?  Thanks.

Comment 5 Bill Nottingham 2011-11-09 18:08:54 UTC

Actually, I think that:

Requires: nss-system-init

in the nss package should be changed to:

Requires: nss-system-init%{?_isa}

Comment 6 Elio Maldonado Batiz 2011-11-09 19:19:58 UTC

You can find a scratch build implementing Bill's suggestion at https://brewweb.devel.redhat.com/taskinfo?taskID=3787344

Comment 7 RHEL Program Management 2011-11-13 06:47:35 UTC

Since RHEL 6.2 External Beta has begun, and this bug remains
unresolved, it has been rejected as it is not proposed as
exception or blocker.

Red Hat invites you to ask your support representative to
propose this request, if appropriate and relevant, in the
next release of Red Hat Enterprise Linux.

Comment 11 Elio Maldonado Batiz 2013-08-16 19:11:11 UTC

(In reply to Elio Maldonado Batiz from comment #6)
> You can find a scratch build implementing Bill's suggestion at
> https://brewweb.devel.redhat.com/taskinfo?taskID=3787344

That was a long time ago. There was no feedback and that build is now long gone. The new one is at https://brewweb.devel.redhat.com/taskinfo?taskID=6177427

I'm not sufficiently familiar with IPA for setting things up for servers and clients and the steps provided look a bit involved. Could I get some help setting up the required environments from knowledgable folks? 

Thanks,

Elio

Comment 13 Elio Maldonado Batiz 2014-02-14 15:38:15 UTC

(In reply to Elio Maldonado Batiz from comment #11)
> I'm not sufficiently familiar with IPA for setting things up for servers and
> clients and the steps provided look a bit involved. Could I get some help
> setting up the required environments from knowledgable folks? 
> 
Alexander or a member of the IPA team, Could I need help setting up a reproducer.

Comment 14 Alexander Bokovoy 2014-02-14 15:51:57 UTC

I've asked Scott (in CC:) to provide you a test environment: IPA server and IPA client.

Comment 15 Elio Maldonado Batiz 2014-02-17 16:27:24 UTC

I logged in to the test environment and was able to install the i686 ipa-admintools and ipa-client without any problems. I'll attach the log of what I did.

Comment 16 Elio Maldonado Batiz 2014-02-17 16:29:36 UTC

Created attachment 864179 [details]
install log

Comment 17 Elio Maldonado Batiz 2014-02-17 16:37:33 UTC

I never changed Requires: nss-system-init to Requires: nss-system-init%{?_isa}
as Bill suggested in Comment 5.

Comment 18 Alexander Bokovoy 2014-02-17 17:32:19 UTC

Elio and I did test enrolling IPA client on the test machine where Elio installed the packages and everything worked fine. I think we can say this bug is fixed.

Comment 19 Elio Maldonado Batiz 2014-02-17 17:42:50 UTC

This bug should be CLOSED CURRENTRELEASE once its' been independently verified. Being the bug asignee I can't do that myself.

Comment 20 Scott Poore 2014-02-18 01:21:20 UTC

Looks right to me from what I can see:

[root@rhel6-2 ~]# yum remove ipa-server ipa-admintools ipa-client
...
Removed:
  ipa-admintools.x86_64 0:3.0.0-37.el6
  ipa-client.x86_64 0:3.0.0-37.el6
  ipa-server.x86_64 0:3.0.0-37.el6

Dependency Removed:
  ipa-server-selinux.x86_64 0:3.0.0-37.el6

[root@rhel6-2 ~]# yum remove ipa-python
...
Removed:
  ipa-python.x86_64 0:3.0.0-37.el6


[root@rhel6-2 yum.local.d]# yum localinstall ipa-admintools-3.0.0-37.el6.i686.rpm ipa-client-3.0.0-37.el6.i686.rpm
Loaded plugins: product-id, security, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Setting up Local Package Process
Examining ipa-admintools-3.0.0-37.el6.i686.rpm: ipa-admintools-3.0.0-37.el6.i686
Marking ipa-admintools-3.0.0-37.el6.i686.rpm to be installed
Examining ipa-client-3.0.0-37.el6.i686.rpm: ipa-client-3.0.0-37.el6.i686
Marking ipa-client-3.0.0-37.el6.i686.rpm to be installed
Resolving Dependencies
--> Running transaction check
---> Package ipa-admintools.i686 0:3.0.0-37.el6 will be installed
--> Processing Dependency: ipa-python = 3.0.0-37.el6 for package: ipa-admintools-3.0.0-37.el6.i686
---> Package ipa-client.i686 0:3.0.0-37.el6 will be installed
--> Processing Dependency: cyrus-sasl-gssapi(x86-32) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libcom_err.so.2 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libc.so.6 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libc.so.6(GLIBC_2.0) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libc.so.6(GLIBC_2.1) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libc.so.6(GLIBC_2.2) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libc.so.6(GLIBC_2.3) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libc.so.6(GLIBC_2.3.4) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libc.so.6(GLIBC_2.4) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libc.so.6(GLIBC_2.8) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libcurl.so.4 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libk5crypto.so.3 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libk5crypto.so.3(k5crypto_3_MIT) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libkrb5.so.3 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libkrb5.so.3(krb5_3_MIT) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: liblber-2.4.so.2 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libldap-2.4.so.2 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libpopt.so.0 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libpopt.so.0(LIBPOPT_0) for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libsasl2.so.2 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libxmlrpc_client.so.3 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libxmlrpc.so.3 for package: ipa-client-3.0.0-37.el6.i686
--> Processing Dependency: libxmlrpc_util.so.3 for package: ipa-client-3.0.0-37.el6.i686
--> Running transaction check
---> Package cyrus-sasl-gssapi.i686 0:2.1.23-13.el6_3.1 will be installed
---> Package cyrus-sasl-lib.i686 0:2.1.23-13.el6_3.1 will be installed
--> Processing Dependency: libdb-4.7.so for package: cyrus-sasl-lib-2.1.23-13.el6_3.1.i686
---> Package glibc.i686 0:2.12-1.132.el6 will be installed
--> Processing Dependency: libfreebl3.so(NSSRAWHASH_3.12.3) for package: glibc-2.12-1.132.el6.i686
--> Processing Dependency: libfreebl3.so for package: glibc-2.12-1.132.el6.i686
---> Package ipa-python.x86_64 0:3.0.0-37.el6 will be installed
---> Package krb5-libs.i686 0:1.10.3-10.el6_4.6 will be installed
--> Processing Dependency: libselinux.so.1 for package: krb5-libs-1.10.3-10.el6_4.6.i686
--> Processing Dependency: libkeyutils.so.1(KEYUTILS_0.3) for package: krb5-libs-1.10.3-10.el6_4.6.i686
--> Processing Dependency: libkeyutils.so.1 for package: krb5-libs-1.10.3-10.el6_4.6.i686
---> Package libcom_err.i686 0:1.41.12-18.el6 will be installed
---> Package libcurl.i686 0:7.19.7-37.el6_4 will be installed
--> Processing Dependency: libssh2(x86-32) >= 1.4.2 for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libz.so.1 for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libssl3.so(NSS_3.4) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libssl3.so(NSS_3.2) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libssl3.so(NSS_3.11.4) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libssl3.so for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libssh2.so.1 for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libsmime3.so for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libplds4.so for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libplc4.so for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnssutil3.so for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.9.3) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.9.2) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.5) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.4) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.3) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.2) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.12.5) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.12.1) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.12) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so(NSS_3.10) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnss3.so for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libnspr4.so for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libidn.so.11(LIBIDN_1.0) for package: libcurl-7.19.7-37.el6_4.i686
--> Processing Dependency: libidn.so.11 for package: libcurl-7.19.7-37.el6_4.i686
---> Package openldap.i686 0:2.4.23-32.el6_4.1 will be installed
---> Package popt.i686 0:1.13-7.el6 will be installed
---> Package xmlrpc-c.i686 0:1.16.24-1210.1840.el6 will be installed
--> Processing Dependency: libxml2.so.2(LIBXML2_2.4.30) for package: xmlrpc-c-1.16.24-1210.1840.el6.i686
--> Processing Dependency: libxml2.so.2 for package: xmlrpc-c-1.16.24-1210.1840.el6.i686
--> Processing Dependency: libgcc_s.so.1(GCC_3.3.1) for package: xmlrpc-c-1.16.24-1210.1840.el6.i686
--> Processing Dependency: libgcc_s.so.1(GCC_3.0) for package: xmlrpc-c-1.16.24-1210.1840.el6.i686
--> Processing Dependency: libgcc_s.so.1 for package: xmlrpc-c-1.16.24-1210.1840.el6.i686
---> Package xmlrpc-c-client.i686 0:1.16.24-1210.1840.el6 will be installed
--> Running transaction check
---> Package db4.i686 0:4.7.25-18.el6_4 will be installed
---> Package keyutils-libs.i686 0:1.4-4.el6 will be installed
---> Package libgcc.i686 0:4.4.7-4.el6 will be installed
---> Package libidn.i686 0:1.18-2.el6 will be installed
---> Package libselinux.i686 0:2.0.94-5.3.el6_4.1 will be installed
---> Package libssh2.i686 0:1.4.2-1.el6 will be installed
--> Processing Dependency: libssl.so.10 for package: libssh2-1.4.2-1.el6.i686
--> Processing Dependency: libcrypto.so.10 for package: libssh2-1.4.2-1.el6.i686
---> Package libxml2.i686 0:2.7.6-14.el6 will be installed
---> Package nspr.i686 0:4.10.0-1.el6 will be installed
---> Package nss.i686 0:3.15.1-15.el6 will be installed
--> Processing Dependency: nss-softokn(x86-32) >= 3.14.3 for package: nss-3.15.1-15.el6.i686
--> Processing Dependency: libsoftokn3.so for package: nss-3.15.1-15.el6.i686
---> Package nss-softokn-freebl.i686 0:3.14.3-9.el6 will be installed
---> Package nss-util.i686 0:3.15.1-3.el6 will be installed
---> Package zlib.i686 0:1.2.3-29.el6 will be installed
--> Running transaction check
---> Package nss-softokn.i686 0:3.14.3-9.el6 will be installed
--> Processing Dependency: libsqlite3.so.0 for package: nss-softokn-3.14.3-9.el6.i686
---> Package openssl.i686 0:1.0.1e-15.el6 will be installed
--> Running transaction check
---> Package sqlite.i686 0:3.6.20-1.el6 will be installed
--> Processing Dependency: libreadline.so.6 for package: sqlite-3.6.20-1.el6.i686
--> Running transaction check
---> Package readline.i686 0:6.0-4.el6 will be installed
--> Processing Dependency: libtinfo.so.5 for package: readline-6.0-4.el6.i686
--> Running transaction check
---> Package ncurses-libs.i686 0:5.7-3.20090208.el6 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

=======================================================================================================
 Package               Arch      Version                    Repository                            Size
=======================================================================================================
Installing:
 ipa-admintools        i686      3.0.0-37.el6               /ipa-admintools-3.0.0-37.el6.i686     43 k
 ipa-client            i686      3.0.0-37.el6               /ipa-client-3.0.0-37.el6.i686        294 k
Installing for dependencies:
 cyrus-sasl-gssapi     i686      2.1.23-13.el6_3.1          beaker-rhel65-server                  32 k
 cyrus-sasl-lib        i686      2.1.23-13.el6_3.1          beaker-rhel65-server                 135 k
 db4                   i686      4.7.25-18.el6_4            beaker-rhel65-server                 579 k
 glibc                 i686      2.12-1.132.el6             beaker-rhel65-server                 4.3 M
 ipa-python            x86_64    3.0.0-37.el6               beaker-rhel65-server                 924 k
 keyutils-libs         i686      1.4-4.el6                  beaker-rhel65-server                  19 k
 krb5-libs             i686      1.10.3-10.el6_4.6          beaker-rhel65-server                 768 k
 libcom_err            i686      1.41.12-18.el6             beaker-rhel65-server                  36 k
 libcurl               i686      7.19.7-37.el6_4            beaker-rhel65-server                 170 k
 libgcc                i686      4.4.7-4.el6                beaker-rhel65-server                 111 k
 libidn                i686      1.18-2.el6                 beaker-rhel65-server                 204 k
 libselinux            i686      2.0.94-5.3.el6_4.1         beaker-rhel65-server                 107 k
 libssh2               i686      1.4.2-1.el6                beaker-rhel65-server                 123 k
 libxml2               i686      2.7.6-14.el6               beaker-rhel65-server                 799 k
 ncurses-libs          i686      5.7-3.20090208.el6         beaker-rhel65-server                 250 k
 nspr                  i686      4.10.0-1.el6               beaker-rhel65-server                 114 k
 nss                   i686      3.15.1-15.el6              beaker-rhel65-server                 823 k
 nss-softokn           i686      3.14.3-9.el6               beaker-rhel65-server                 271 k
 nss-softokn-freebl    i686      3.14.3-9.el6               beaker-rhel65-server                 146 k
 nss-util              i686      3.15.1-3.el6               beaker-rhel65-server                  63 k
 openldap              i686      2.4.23-32.el6_4.1          beaker-rhel65-server                 266 k
 openssl               i686      1.0.1e-15.el6              beaker-rhel65-server                 1.5 M
 popt                  i686      1.13-7.el6                 beaker-rhel65-server                  38 k
 readline              i686      6.0-4.el6                  beaker-rhel65-server                 175 k
 sqlite                i686      3.6.20-1.el6               beaker-rhel65-server                 306 k
 xmlrpc-c              i686      1.16.24-1210.1840.el6      beaker-rhel65-server                 103 k
 xmlrpc-c-client       i686      1.16.24-1210.1840.el6      beaker-rhel65-server                  23 k
 zlib                  i686      1.2.3-29.el6               beaker-rhel65-server                  72 k

Transaction Summary
=======================================================================================================
Install      30 Package(s)

Total size: 13 M
Total download size: 12 M
Installed size: 36 M
Is this ok [y/N]: y
Downloading Packages:
(1/28): cyrus-sasl-gssapi-2.1.23-13.el6_3.1.i686.rpm                            |  32 kB     00:00     
(2/28): cyrus-sasl-lib-2.1.23-13.el6_3.1.i686.rpm                               | 135 kB     00:00     
(3/28): db4-4.7.25-18.el6_4.i686.rpm                                            | 579 kB     00:01     
(4/28): glibc-2.12-1.132.el6.i686.rpm                                           | 4.3 MB     00:03     
(5/28): ipa-python-3.0.0-37.el6.x86_64.rpm                                      | 924 kB     00:01     
(6/28): keyutils-libs-1.4-4.el6.i686.rpm                                        |  19 kB     00:00     
(7/28): krb5-libs-1.10.3-10.el6_4.6.i686.rpm                                    | 768 kB     00:02     
(8/28): libcom_err-1.41.12-18.el6.i686.rpm                                      |  36 kB     00:00     
(9/28): libcurl-7.19.7-37.el6_4.i686.rpm                                        | 170 kB     00:00     
(10/28): libgcc-4.4.7-4.el6.i686.rpm                                            | 111 kB     00:00     
(11/28): libidn-1.18-2.el6.i686.rpm                                             | 204 kB     00:00     
(12/28): libselinux-2.0.94-5.3.el6_4.1.i686.rpm                                 | 107 kB     00:00     
(13/28): libssh2-1.4.2-1.el6.i686.rpm                                           | 123 kB     00:00     
(14/28): libxml2-2.7.6-14.el6.i686.rpm                                          | 799 kB     00:01     
(15/28): ncurses-libs-5.7-3.20090208.el6.i686.rpm                               | 250 kB     00:00     
(16/28): nspr-4.10.0-1.el6.i686.rpm                                             | 114 kB     00:00     
(17/28): nss-3.15.1-15.el6.i686.rpm                                             | 823 kB     00:01     
(18/28): nss-softokn-3.14.3-9.el6.i686.rpm                                      | 271 kB     00:00     
(19/28): nss-softokn-freebl-3.14.3-9.el6.i686.rpm                               | 146 kB     00:00     
(20/28): nss-util-3.15.1-3.el6.i686.rpm                                         |  63 kB     00:00     
(21/28): openldap-2.4.23-32.el6_4.1.i686.rpm                                    | 266 kB     00:00     
(22/28): openssl-1.0.1e-15.el6.i686.rpm                                         | 1.5 MB     00:02     
(23/28): popt-1.13-7.el6.i686.rpm                                               |  38 kB     00:00     
(24/28): readline-6.0-4.el6.i686.rpm                                            | 175 kB     00:00     
(25/28): sqlite-3.6.20-1.el6.i686.rpm                                           | 306 kB     00:00     
(26/28): xmlrpc-c-1.16.24-1210.1840.el6.i686.rpm                                | 103 kB     00:00     
(27/28): xmlrpc-c-client-1.16.24-1210.1840.el6.i686.rpm                         |  23 kB     00:00     
(28/28): zlib-1.2.3-29.el6.i686.rpm                                             |  72 kB     00:00     
-------------------------------------------------------------------------------------------------------
Total                                                                  426 kB/s |  12 MB     00:29     
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing : libgcc-4.4.7-4.el6.i686                                                            1/30 
  Installing : nss-softokn-freebl-3.14.3-9.el6.i686                                               2/30 
  Installing : glibc-2.12-1.132.el6.i686                                                          3/30 
  Installing : nspr-4.10.0-1.el6.i686                                                             4/30 
  Installing : zlib-1.2.3-29.el6.i686                                                             5/30 
  Installing : libcom_err-1.41.12-18.el6.i686                                                     6/30 
  Installing : ipa-python-3.0.0-37.el6.x86_64                                                     7/30 
  Installing : nss-util-3.15.1-3.el6.i686                                                         8/30 
  Installing : libxml2-2.7.6-14.el6.i686                                                          9/30 
  Installing : xmlrpc-c-1.16.24-1210.1840.el6.i686                                               10/30 
  Installing : db4-4.7.25-18.el6_4.i686                                                          11/30 
  Installing : cyrus-sasl-lib-2.1.23-13.el6_3.1.i686                                             12/30 
  Installing : libselinux-2.0.94-5.3.el6_4.1.i686                                                13/30 
  Installing : libidn-1.18-2.el6.i686                                                            14/30 
  Installing : ncurses-libs-5.7-3.20090208.el6.i686                                              15/30 
  Installing : readline-6.0-4.el6.i686                                                           16/30 
  Installing : sqlite-3.6.20-1.el6.i686                                                          17/30 
  Installing : nss-softokn-3.14.3-9.el6.i686                                                     18/30 
  Installing : nss-3.15.1-15.el6.i686                                                            19/30 
  Installing : openldap-2.4.23-32.el6_4.1.i686                                                   20/30 
  Installing : keyutils-libs-1.4-4.el6.i686                                                      21/30 
  Installing : krb5-libs-1.10.3-10.el6_4.6.i686                                                  22/30 
  Installing : cyrus-sasl-gssapi-2.1.23-13.el6_3.1.i686                                          23/30 
  Installing : openssl-1.0.1e-15.el6.i686                                                        24/30 
  Installing : libssh2-1.4.2-1.el6.i686                                                          25/30 
  Installing : libcurl-7.19.7-37.el6_4.i686                                                      26/30 
  Installing : xmlrpc-c-client-1.16.24-1210.1840.el6.i686                                        27/30 
  Installing : popt-1.13-7.el6.i686                                                              28/30 
  Installing : ipa-client-3.0.0-37.el6.i686                                                      29/30 
  Installing : ipa-admintools-3.0.0-37.el6.i686                                                  30/30 
  Verifying  : ipa-client-3.0.0-37.el6.i686                                                       1/30 
  Verifying  : ipa-python-3.0.0-37.el6.x86_64                                                     2/30 
  Verifying  : libssh2-1.4.2-1.el6.i686                                                           3/30 
  Verifying  : libcurl-7.19.7-37.el6_4.i686                                                       4/30 
  Verifying  : libgcc-4.4.7-4.el6.i686                                                            5/30 
  Verifying  : sqlite-3.6.20-1.el6.i686                                                           6/30 
  Verifying  : ipa-admintools-3.0.0-37.el6.i686                                                   7/30 
  Verifying  : nss-util-3.15.1-3.el6.i686                                                         8/30 
  Verifying  : nss-softokn-3.14.3-9.el6.i686                                                      9/30 
  Verifying  : nspr-4.10.0-1.el6.i686                                                            10/30 
  Verifying  : readline-6.0-4.el6.i686                                                           11/30 
  Verifying  : glibc-2.12-1.132.el6.i686                                                         12/30 
  Verifying  : nss-softokn-freebl-3.14.3-9.el6.i686                                              13/30 
  Verifying  : db4-4.7.25-18.el6_4.i686                                                          14/30 
  Verifying  : nss-3.15.1-15.el6.i686                                                            15/30 
  Verifying  : cyrus-sasl-gssapi-2.1.23-13.el6_3.1.i686                                          16/30 
  Verifying  : libselinux-2.0.94-5.3.el6_4.1.i686                                                17/30 
  Verifying  : libidn-1.18-2.el6.i686                                                            18/30 
  Verifying  : ncurses-libs-5.7-3.20090208.el6.i686                                              19/30 
  Verifying  : xmlrpc-c-client-1.16.24-1210.1840.el6.i686                                        20/30 
  Verifying  : keyutils-libs-1.4-4.el6.i686                                                      21/30 
  Verifying  : openldap-2.4.23-32.el6_4.1.i686                                                   22/30 
  Verifying  : zlib-1.2.3-29.el6.i686                                                            23/30 
  Verifying  : libcom_err-1.41.12-18.el6.i686                                                    24/30 
  Verifying  : krb5-libs-1.10.3-10.el6_4.6.i686                                                  25/30 
  Verifying  : openssl-1.0.1e-15.el6.i686                                                        26/30 
  Verifying  : libxml2-2.7.6-14.el6.i686                                                         27/30 
  Verifying  : xmlrpc-c-1.16.24-1210.1840.el6.i686                                               28/30 
  Verifying  : popt-1.13-7.el6.i686                                                              29/30 
  Verifying  : cyrus-sasl-lib-2.1.23-13.el6_3.1.i686                                             30/30 

Installed:
  ipa-admintools.i686 0:3.0.0-37.el6                   ipa-client.i686 0:3.0.0-37.el6                  

Dependency Installed:
  cyrus-sasl-gssapi.i686 0:2.1.23-13.el6_3.1           cyrus-sasl-lib.i686 0:2.1.23-13.el6_3.1        
  db4.i686 0:4.7.25-18.el6_4                           glibc.i686 0:2.12-1.132.el6                    
  ipa-python.x86_64 0:3.0.0-37.el6                     keyutils-libs.i686 0:1.4-4.el6                 
  krb5-libs.i686 0:1.10.3-10.el6_4.6                   libcom_err.i686 0:1.41.12-18.el6               
  libcurl.i686 0:7.19.7-37.el6_4                       libgcc.i686 0:4.4.7-4.el6                      
  libidn.i686 0:1.18-2.el6                             libselinux.i686 0:2.0.94-5.3.el6_4.1           
  libssh2.i686 0:1.4.2-1.el6                           libxml2.i686 0:2.7.6-14.el6                    
  ncurses-libs.i686 0:5.7-3.20090208.el6               nspr.i686 0:4.10.0-1.el6                       
  nss.i686 0:3.15.1-15.el6                             nss-softokn.i686 0:3.14.3-9.el6                
  nss-softokn-freebl.i686 0:3.14.3-9.el6               nss-util.i686 0:3.15.1-3.el6                   
  openldap.i686 0:2.4.23-32.el6_4.1                    openssl.i686 0:1.0.1e-15.el6                   
  popt.i686 0:1.13-7.el6                               readline.i686 0:6.0-4.el6                      
  sqlite.i686 0:3.6.20-1.el6                           xmlrpc-c.i686 0:1.16.24-1210.1840.el6          
  xmlrpc-c-client.i686 0:1.16.24-1210.1840.el6         zlib.i686 0:1.2.3-29.el6                       

Complete!

[root@rhel6-2 yum.local.d]# ipa-client-install
Discovery was successful!
Hostname: client1.ipa1.example.test
Realm: IPA1.EXAMPLE.TEST
DNS Domain: ipa1.example.test
IPA Server: master.ipa1.example.test
BaseDN: dc=ipa1,dc=example,dc=test

Continue to configure the system with these values? [no]: yes
User authorized to enroll computers: admin
Synchronizing time with KDC...
Password for admin.TEST: 
Enrolled in IPA realm IPA1.EXAMPLE.TEST
Created /etc/ipa/default.conf
New SSSD config will be created
Configured /etc/sssd/sssd.conf
Configured /etc/krb5.conf for IPA realm IPA1.EXAMPLE.TEST
trying https://master.ipa1.example.test/ipa/xml
Forwarding 'env' to server u'https://master.ipa1.example.test/ipa/xml'
Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
Forwarding 'host_mod' to server u'https://master.ipa1.example.test/ipa/xml'
SSSD enabled
Configured /etc/openldap/ldap.conf
NTP enabled
Configured /etc/ssh/ssh_config
Configured /etc/ssh/sshd_config
Client configuration complete.

[root@rhel6-2 yum.local.d]# kinit admin
Password for admin.TEST: 

[root@rhel6-2 yum.local.d]# ipa user-show admin
  User login: admin
  Last name: Administrator
  Home directory: /home/admin
  Login shell: /bin/bash
  UID: 261200000
  GID: 261200000
  Account disabled: False
  Password: True
  Member of groups: admins, trust admins
  Kerberos keys available: True

[root@rhel6-2 yum.local.d]# ipa host-show $(hostname)
  Host name: client1.ipa1.example.test
  Certificate: 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
  Principal name: host/client1.ipa1.example.test.TEST
  Password: False
  Keytab: True
  Managed by: client1.ipa1.example.test
  Subject: CN=client1.ipa1.example.test,O=IPA1.EXAMPLE.TEST
  Serial Number: 13
  Serial Number (hex): 0xD
  Issuer: CN=Certificate Authority,O=IPA1.EXAMPLE.TEST
  Not Before: Tue Feb 18 01:20:00 2014 UTC
  Not After: Fri Feb 19 01:20:00 2016 UTC
  Fingerprint (MD5): 4b:c3:36:c5:cd:0b:76:cc:f2:26:ee:95:5f:8c:d0:8e
  Fingerprint (SHA1): da:4d:77:64:4f:48:23:b9:07:c4:2b:93:aa:c9:bf:27:8f:03:c2:7a
  SSH public key fingerprint: 02:C5:3A:C2:65:A3:B0:27:C1:6B:D1:28:1D:1F:1C:56 (ssh-dss),
                              3D:DE:DE:6C:C1:62:A2:96:8D:D3:DD:CD:85:04:65:C9 (ssh-rsa)

Comment 21 Scott Poore 2014-02-18 01:22:34 UTC

Oh, yeah, here's confirmation of the arch:

[root@rhel6-2 yum.local.d]# arch
x86_64

Comment 22 Scott Poore 2014-02-19 14:44:39 UTC

Going ahead and marking this one as verified per results in comment #20

Note You need to log in before you can comment on or make changes to this bug.