[Freeipa-users] freeipa-client on Debian Wheezy

[Alexandre Ellert]

Le 19 juil. 2013 à 16:24, Martin Kosek <mkosek at redhat.com> a écrit :

> On 07/19/2013 03:28 PM, Alexandre Ellert wrote:
>> 
>> Le 19 juil. 2013 à 10:20, Martin Kosek <mkosek at redhat.com> a écrit :
>> 
>>> On 07/19/2013 02:59 AM, Alexandre Ellert wrote:
>>>> Hi,
>>>> 
>>>> I have these 3 errors/warnings message when I join a Debian client to a RHEL 6.4 server (ipa-server-3.0.0-26.el6_4.4.x86_64):
>>>> 
>>>> => certmonger failed to stop: [Errno 2] No such file or directory: '/var/run/ipa/services.list'
>>>> There is no such file even on RHEL 6. What is this file ?
>>> 
>>> This was added in IPA 3.0.1 to fix a systemd hang so it does not exist in
>>> RHEL-6.4 which contains IPA 3.0. The deb package should just make sure the
>>> /var/run/ipa/ directory is there (or update debian platform file to override
>>> PlatformService class in ipapython/platform/base/__init__.py).
>> 
>> I managed to fix that and will update soon my repo with a new package version. Thanks for the information.
>> 
>>> 
>>>> => host_mod: KerbTransport instance has no attribute '_conn'
>>>> What does that mean ?
>>> 
>>> This means that there was some issue with XMLRPC call to IPA server (the error
>>> message is indeed unfortunate) - does ipaclient-install.log contain more details?
>> 
>> Unfortunately there is no more details in ipaclient-install.log, here is the relevant part :
>> 2013-07-19T13:06:26Z INFO host_mod: KerbTransport instance has no attribute '_conn'
>> 2013-07-19T13:06:26Z WARNING Failed to upload host SSH public keys.
>> Is there any way to get more debug log ?
>> In my opinion, warning about ssh keys should not trigger here, because I can see them on my IPA server.
>> 
> 
> Are you sure the SSH keys aren't there from previous installation attempt or
> similar? The _conn generally means there was some problem with the connection
> to server in the xmlrpclib python library.

I can confirm you that SSH key upload is successful. I've done tests with a fresh install of Debian.
To be sure, I will create a new VM and try an ipa-client-install with modifications you give me.

> 
> We need to find out what and why triggers it, a change in ipa-client-install
> script like below may shed more light on what is the source of the error:
> 
> 
> diff --git a/ipa-client/ipa-install/ipa-client-install
> b/ipa-client/ipa-install/ipa-client-install
> index 280edd7..f82b9f6 100755
> --- a/ipa-client/ipa-install/ipa-client-install
> +++ b/ipa-client/ipa-install/ipa-client-install
> @@ -1450,6 +1450,8 @@ def update_ssh_keys(server, hostname, ssh_dir, create_sshfp):
>         pass
>     except StandardError, e:
>         root_logger.info("host_mod: %s", str(e))
> +        import traceback
> +        traceback.print_exc()
>         root_logger.warning("Failed to upload host SSH public keys.")
>         return
> 
> 
> Martin

Thanks
Alexandre