2017-01-18T15:56:04Z DEBUG /usr/sbin/ipa-ca-install was invoked with options: {'external_cert_files': None, 'skip_schema_check': False, 'external_ca_type': None, 'unattended': False, 'no_host_dns': False, 'ca_signing_algorithm': None, 'debug': False, 'external_ca': False, 'skip_conncheck': False},None
2017-01-18T15:56:04Z DEBUG IPA version 4.4.0-14.el7.centos.1.1
2017-01-18T15:56:04Z DEBUG importing all plugin modules in ipaserver.plugins...
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.aci
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.automember
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.automount
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.baseldap
2017-01-18T15:56:04Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.baseuser
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.batch
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.ca
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.caacl
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.cert
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.certprofile
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.config
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.delegation
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.dns
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.dnsserver
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.dogtag
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.domainlevel
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.group
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.hbac
2017-01-18T15:56:04Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.hbacrule
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.hbactest
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.host
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.hostgroup
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.idrange
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.idviews
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.internal
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.join
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.ldap2
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.location
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.migration
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.misc
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.netgroup
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.otp
2017-01-18T15:56:04Z DEBUG ipaserver.plugins.otp is not a valid plugin module
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.otpconfig
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.otptoken
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.passwd
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.permission
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.ping
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.pkinit
2017-01-18T15:56:04Z DEBUG ipaserver.plugins.pkinit is not a valid plugin module
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.privilege
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
2017-01-18T15:56:04Z DEBUG Starting external process
2017-01-18T15:56:04Z DEBUG args=klist -V
2017-01-18T15:56:04Z DEBUG Process finished, return code=0
2017-01-18T15:56:04Z DEBUG stdout=Kerberos 5 version 1.14.1

2017-01-18T15:56:04Z DEBUG stderr=
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.rabase
2017-01-18T15:56:04Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.realmdomains
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.role
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.schema
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.selfservice
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap
2017-01-18T15:56:04Z DEBUG importing plugin module ipaserver.plugins.server
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.serverrole
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.serverroles
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.service
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.servicedelegation
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.session
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.stageuser
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.sudo
2017-01-18T15:56:05Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.sudocmd
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.sudorule
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.topology
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.trust
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.user
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.vault
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.virtual
2017-01-18T15:56:05Z DEBUG ipaserver.plugins.virtual is not a valid plugin module
2017-01-18T15:56:05Z DEBUG importing plugin module ipaserver.plugins.xmlserver
2017-01-18T15:56:07Z DEBUG flushing ldapi://%2fvar%2frun%2fslapd-LEBLIBRARY-LIB.socket from SchemaCache
2017-01-18T15:56:07Z DEBUG retrieving schema for SchemaCache url=ldapi://%2fvar%2frun%2fslapd-LEBLIBRARY-LIB.socket conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x5295320>
2017-01-18T15:56:07Z DEBUG Initializing principal host/kplipaserver3.leblibrary.lib@LEBLIBRARY.LIB using keytab /etc/krb5.keytab
2017-01-18T15:56:07Z DEBUG using ccache /tmp/krbccGfpV52/ccache
2017-01-18T15:56:07Z DEBUG Attempt 1/1: success
2017-01-18T15:56:07Z DEBUG Created connection context.ldap2_56148112
2017-01-18T15:56:07Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Fvar%2Frun%2Fslapd-LEBLIBRARY-LIB.socket conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x5736680>
2017-01-18T15:56:07Z DEBUG Destroyed connection context.ldap2_56148112
2017-01-18T15:56:12Z DEBUG Created connection context.ldap2_56148112
2017-01-18T15:56:12Z DEBUG Starting external process
2017-01-18T15:56:12Z DEBUG args=/usr/sbin/ipa-replica-conncheck --master kplipaserver2.leblibrary.lib --auto-master-check --realm LEBLIBRARY.LIB --hostname kplipaserver3.leblibrary.lib --ca-cert-file /etc/ipa/ca.crt
2017-01-18T15:56:45Z DEBUG Process finished, return code=1
2017-01-18T15:56:45Z DEBUG stdout=Check connection from replica to remote master 'kplipaserver2.leblibrary.lib':
   Directory Service: Unsecure port (389): OK
   Directory Service: Secure port (636): OK
   Kerberos KDC: TCP (88): OK
   Kerberos Kpasswd: TCP (464): OK
   HTTP Server: Unsecure port (80): OK
   HTTP Server: Secure port (443): OK

The following list of ports use UDP protocol and would need to be
checked manually:
   Kerberos KDC: UDP (88): SKIPPED
   Kerberos Kpasswd: UDP (464): SKIPPED

Connection from replica to master is OK.
Start listening on required ports for remote master check
Get credentials to log in to remote master
Check RPC connection to remote master
Execute check on remote master

2017-01-18T15:56:45Z DEBUG stderr=Remote master check failed with following error message(s):
an internal error has occurred

2017-01-18T15:56:45Z DEBUG   File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 752, in run_script
    return_value = main_function()

  File "/usr/sbin/ipa-ca-install", line 300, in main
    promote(safe_options, options, filename)

  File "/usr/sbin/ipa-ca-install", line 272, in promote
    install_replica(safe_options, options, filename)

  File "/usr/sbin/ipa-ca-install", line 184, in install_replica
    ca.install_check(True, config, options)

  File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 45, in install_check
    principal=principal, ca_cert_file=options.ca_cert_file)

  File "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py", line 106, in replica_conn_check
    "\nIf the check results are not valid it can be skipped with --skip-conncheck parameter.")

2017-01-18T15:56:45Z DEBUG The ipa-ca-install command failed, exception: SystemExit: Connection check failed!
Please fix your network settings according to error messages above.
If the check results are not valid it can be skipped with --skip-conncheck parameter.