[Freeipa-users] ipa-server-install: ERROR Failed to initialize IPA API

[Martin Kosek]

On 04/15/2013 03:16 PM, Arturo Borrero wrote:
> Hi there,
> 
> In a freshly installed server, I try:
> 
> # ipa-server-install
> [...]
>   [12/13]: restarting httpd
>   [13/13]: configuring httpd to start on boot
> Done configuring the web interface (httpd).
> Applying LDAP updates
> Restarting the directory server
> Restarting the KDC
> Sample zone file for bind has been created in /tmp/sample.zone.NGKJk1.db
> Restarting the web server
> Configuration of client side components failed!
> ipa-client-install returned: Command '/usr/sbin/ipa-client-install --on-master
> --unattended --domain cica.es --server sheldon.cica.es --realm CICA.ES
> --hostname sheldon.cica.es' returned non-zero exit status 1
> 
> If I see the ipa-client-install logs, I have:
> 
> [...]
> importing plugin module
> '/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py'
> args=klist -V
> stdout=Kerberos 5 version 1.10.3
> 
> stderr=
> importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/role.py'
> importing plugin module
> '/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py'
> importing plugin module
> '/usr/lib/python2.6/site-packages/ipalib/plugins/selinuxusermap.py'
> importing plugin module
> '/usr/lib/python2.6/site-packages/ipalib/plugins/service.py'
> importing plugin module
> '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py'
> importing plugin module
> '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py'
> importing plugin module
> '/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py'
> importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/trust.py'
> importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/user.py'
> importing plugin module
> '/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py'
> importing plugin module
> '/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py'
> Failed to initialize IPA API.
> Installation failed. Rolling back changes.
> IPA client is not configured on this system.
> 
> I fit all prerequisites listed in fedora and redhat documentation:
> http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/installing-ipa.html
> 
> 
> After this, if I try ipactl:
> 
> # ipactl start
> Starting Directory Service
> Starting dirsrv:
>     CICA-ES... already running                             [  OK  ]
>     PKI-IPA... already running                             [  OK  ]
> Failed to read data from Directory Service: Unknown error when retrieving list
> of services from LDAP: {'info': 'SASL(-4): no mechanism available: ', 'desc':
> 'Unknown authentication method'}
> Shutting down
> Shutting down dirsrv:
>     CICA-ES...                                             [  OK  ]
>     PKI-IPA...                                             [  OK  ]
> 
> 
> Any idea how to get rid of this error and continuing installing/using?
> 
> regards
> 

Hello Arturo,

This error could have been caused if /etc/ipa/default.conf was not created
before ipa-client-install was executed.

Could you please check ipaserver-install.log and see if there are not any
errors related to creating /etc/ipa/default.conf?

Does /etc/ipa/ exist?

Thanks,
Martin