Red Hat Bugzilla – Bug 815849
ipa-server-install unhandled exception with unclear error messages (inside DNS check)
Last modified: 2015-05-12 07:03:40 EDT
This bug is created as a clone of upstream ticket: https://fedorahosted.org/freeipa/ticket/2654 If DNS check for hostname<=>local IP address correspondence fail, unhandled exception is thrown from ipa-server-install. Detail are inside Amazon EC2 bug: #2648 https://bugzilla.redhat.com/show_bug.cgi?id=812692 Error message in exception is mysterious: "No network interface matches the provided IP address and netmask" It should say: {{{ DNS check failed. Please check if forward records for your server name {hostname} point to IP addresses on this server. Please check reverse records also. Checked hostname: {hostname} Detected IP addresses: {ipAddrList} Forward records point to: {dnsIpAddrList} Reverse record {localIpAddr} points to name {dnsName} }}} More verbose is definitely better. Code also should work if more IP addresses (and A/AAAA records) are detected.
Fixed upstream: master: https://fedorahosted.org/freeipa/changeset/eef056165f437e07c4a792d5545817a5517c59de To test: # echo "1.2.3.4 foo.example.com foo" >> /etc/hosts # ipa-server-install --hostname foo.example.com Installation will later fail with incomprehensible error message: Unexpected error - see ipaserver-install.log for details: No network interface matches the provided IP address and netmask The fixed server will report a better error message: Invalid IP Address 1.2.3.4 for foo.example.com: No network interface matches the provided IP address and netmask
Verified. Version :: ipa-server-3.0.0-21.el6.x86_64 Automated Test Results (manually run) :: :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ipaserverinstall_bz815849 - ipa-server-install unhandled exception with unclear error messages (inside DNS check) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Running 'echo '1.2.3.4 foo.testrelm.com' >> /etc/hosts' :: [ PASS ] :: Running 'ipa-server-install --setup-dns --forwarder=10.14.63.12 --hostname=foo.testrelm.com -r TESTRELM.COM -p Secret123 -P Secret123 -a Secret123 -U > /ipaserverinstall_bz815849.out 2>&1' Warning: hostname foo.testrelm.com does not match system hostname rhel6-4.testrelm.com. System hostname will be updated during the installation process to prevent service failures. Invalid IP Address 1.2.3.4 for foo.testrelm.com: No network interface matches the provided IP address and netmask The log file for this installation can be found in /var/log/ipaserver-install.log ============================================================================== This program will set up the IPA Server. This includes: * Configure a stand-alone CA (dogtag) for certificate management * Configure the Network Time Daemon (ntpd) * Create and configure an instance of Directory Server * Create and configure a Kerberos Key Distribution Center (KDC) * Configure Apache (httpd) * Configure DNS (bind) To accept the default shown in brackets, press the Enter key. Warning: skipping DNS resolution of host foo.testrelm.com The domain name has been determined based on the host name. :: [ PASS ] :: Running 'cat /ipaserverinstall_bz815849.out' :: [ PASS ] :: File '/ipaserverinstall_bz815849.out' should contain 'Invalid IP Address 1.2.3.4 for foo.testrelm.com:' :: [ PASS ] :: BZ 815849 not found
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-0528.html