Guest User

freeipa

a guest
Jul 12th, 2023
118
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 20.34 KB | Help | 0 0
  1. 2023-07-12T03:50:08Z DEBUG Logging to /var/log/ipaclient-install.log
  2. 2023-07-12T03:50:08Z DEBUG ipa-client-install was invoked with arguments [] and options: {'unattended': True, 'principal': None, 'prompt_password': False, 'on_master': True, 'ca_cert_files': None, 'force': False, 'configure_firefox': False, 'firefox_dir': None, 'keytab': None, 'mkhomedir': False, 'force_join': False, 'ntp_servers': None, 'ntp_pool': None, 'no_ntp': True, 'force_ntpd': False, 'nisdomain': None, 'no_nisdomain': False, 'ssh_trust_dns': False, 'no_ssh': False, 'no_sshd': False, 'no_sudo': False, 'subid': False, 'no_dns_sshfp': False, 'kinit_attempts': None, 'request_cert': False, 'ip_addresses': None, 'all_ip_addresses': False, 'fixed_primary': False, 'permit': False, 'enable_dns_updates': False, 'no_krb5_offline_passwords': False, 'preserve_sssd': False, 'pkinit_identity': None, 'pkinit_anchors': None, 'automount_location': None, 'domain_name': 'ipa-test.novalocal', 'servers': ['ipamaster.ipa-test.novalocal'], 'realm_name': 'IPA-TEST-NOTLIKEDOMAIN.NOVALOCAL', 'host_name': 'ipamaster.ipa-test.novalocal', 'verbose': True, 'quiet': False, 'log_file': None, 'uninstall': False}
  3. 2023-07-12T03:50:08Z DEBUG IPA version 4.9.11-alt0.p10.1
  4. 2023-07-12T03:50:08Z DEBUG IPA platform altlinux
  5. 2023-07-12T03:50:08Z DEBUG IPA os-release starter kit p10 (Hypericum)
  6. 2023-07-12T03:50:08Z DEBUG Starting external process
  7. 2023-07-12T03:50:08Z DEBUG args=['/usr/sbin/selinuxenabled']
  8. 2023-07-12T03:50:08Z DEBUG Process execution failed
  9. 2023-07-12T03:50:08Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'
  10. 2023-07-12T03:50:08Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
  11. 2023-07-12T03:50:08Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
  12. 2023-07-12T03:50:08Z DEBUG Starting external process
  13. 2023-07-12T03:50:08Z DEBUG args=['sudo', '-V']
  14. 2023-07-12T03:50:08Z DEBUG Process finished, return code=0
  15. 2023-07-12T03:50:08Z DEBUG stdout=Sudo version 1.9.13p3
  16. Configure options: --build=x86_64-alt-linux --host=x86_64-alt-linux --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec/sudo --localstatedir=/var/lib --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info --disable-dependency-tracking --disable-silent-rules --without-included-gettext --with-logging=syslog --with-logfac=authpriv --enable-shell-sets-home --enable-log-host --disable-rpath --with-pam --with-ignore-dot --with-env-editor --with-tty-tickets --with-sudoers-mode=0400 --with-editor=/bin/vitmp --with-sendmail=/usr/sbin/sendmail --with-sssd --with-selinux --with-linux-audit --enable-python --docdir=/usr/share/doc/sudo-1.9.13p3 --with-plugindir=/usr/lib64/sudo --libexecdir=/usr/lib64 --with-secure-path=/sbin:/usr/sbin:/usr/local/sbin:/bin:/usr/bin:/usr/local/bin --with-passprompt=[sudo] password for %p:
  17. Sudoers policy plugin version 1.9.13p3
  18. Sudoers file grammar version 50
  19.  
  20. Sudoers path: /etc/sudoers
  21. Authentication methods: 'pam'
  22. Syslog facility if syslog is being used for logging: authpriv
  23. Syslog priority to use when user authenticates successfully: notice
  24. Syslog priority to use when user authenticates unsuccessfully: alert
  25. Ignore '.' in $PATH
  26. Send mail if the user is not in sudoers
  27. Lecture user the first time they run sudo
  28. Require users to authenticate by default
  29. Root may run sudo
  30. Log the hostname in the (non-syslog) log file
  31. Set $HOME to the target user when starting a shell with -s
  32. Allow some information gathering to give useful error messages
  33. Visudo will honor the EDITOR environment variable
  34. Set the LOGNAME and USER environment variables
  35. Length at which to wrap log file lines (0 for no wrap): 80
  36. Authentication timestamp timeout: 5.0 minutes
  37. Password prompt timeout: 5.0 minutes
  38. Number of tries to enter a password: 3
  39. Umask to use or 0777 to use user's: 022
  40. Path to mail program: /usr/sbin/sendmail
  41. Flags for mail program: -t
  42. Address to send mail to: root
  43. Subject line for mail messages: *** SECURITY information for %h ***
  44. Incorrect password message: Sorry, try again.
  45. Path to lecture status dir: /var/db/sudo/lectured
  46. Path to authentication timestamp dir: /run/sudo/ts
  47. Default password prompt: [sudo] password for %p:
  48. Default user to run commands as: root
  49. Value to override user's $PATH with: /sbin:/usr/sbin:/usr/local/sbin:/bin:/usr/bin:/usr/local/bin
  50. Path to the editor for use by visudo: /bin/vitmp
  51. When to require a password for 'list' pseudocommand: any
  52. When to require a password for 'verify' pseudocommand: all
  53. File descriptors >= 3 will be closed before executing a command
  54. Reset the environment to a default set of variables
  55. Environment variables to check for safety:
  56. TZ
  57. TERM
  58. LINGUAS
  59. LC_*
  60. LANGUAGE
  61. LANG
  62. COLORTERM
  63. Environment variables to remove:
  64. *=()*
  65. RUBYOPT
  66. RUBYLIB
  67. PYTHONUSERBASE
  68. PYTHONINSPECT
  69. PYTHONPATH
  70. PYTHONHOME
  71. TMPPREFIX
  72. ZDOTDIR
  73. READNULLCMD
  74. NULLCMD
  75. FPATH
  76. PERL5DB
  77. PERL5OPT
  78. PERL5LIB
  79. PERLLIB
  80. PERLIO_DEBUG
  81. JAVA_TOOL_OPTIONS
  82. SHELLOPTS
  83. BASHOPTS
  84. GLOBIGNORE
  85. PS4
  86. BASH_ENV
  87. ENV
  88. TERMCAP
  89. TERMPATH
  90. TERMINFO_DIRS
  91. TERMINFO
  92. _RLD*
  93. LD_*
  94. PATH_LOCALE
  95. NLSPATH
  96. HOSTALIASES
  97. RES_OPTIONS
  98. LOCALDOMAIN
  99. CDPATH
  100. IFS
  101. Environment variables to preserve:
  102. XDG_CURRENT_DESKTOP
  103. XAUTHORIZATION
  104. XAUTHORITY
  105. PS2
  106. PS1
  107. PATH
  108. LS_COLORS
  109. KRB5CCNAME
  110. HOSTNAME
  111. DISPLAY
  112. COLORS
  113. Locale to use while parsing sudoers: C
  114. Directory in which to store input/output logs: /var/log/sudo-io
  115. File in which to store the input/output log: %{seq}
  116. Add an entry to the utmp/utmpx file when allocating a pty
  117. PAM service name to use: sudo
  118. PAM service name to use for login shells: sudo
  119. Attempt to establish PAM credentials for the target user
  120. Create a new PAM session for the command to run in
  121. Perform PAM account validation management
  122. Enable sudoers netgroup support
  123. Check parent directories for writability when editing files with sudoedit
  124. Allow commands to be run even if sudo cannot write to the audit log
  125. Allow commands to be run even if sudo cannot write to the log file
  126. Log entries larger than this value will be split into multiple syslog messages: 960
  127. File mode to use for the I/O log files: 0600
  128. Execute commands by file descriptor instead of by path: digest_only
  129. Type of authentication timestamp record: tty
  130. Ignore case when matching user names
  131. Ignore case when matching group names
  132. Log when a command is allowed by sudoers
  133. Log when a command is denied by sudoers
  134. Sudo log server timeout in seconds: 30
  135. Enable SO_KEEPALIVE socket option on the socket connected to the logserver
  136. Verify that the log server's certificate is valid
  137. Set the pam remote user to the user running sudo
  138. The format of logs to produce: sudo
  139. Enable SELinux RBAC support
  140. Allow an intercepted command to run set setuid or setgid programs
  141. The largest size core dump file that may be created (in bytes): 0,0
  142. Store plaintext passwords in I/O log input
  143. List of regular expressions to use when matching a password prompt
  144. [Pp]assword[: ]*
  145. The mechanism used by the intercept and log_subcmds options: trace
  146. Attempt to verify the command and arguments after execution
  147.  
  148. Local IP address and netmask pairs:
  149. 172.28.19.181/255.255.255.0
  150. 172.17.0.1/255.255.0.0
  151. fe80::f816:3eff:fee9:64ac/ffff:ffff:ffff:ffff::
  152. fe80::42:53ff:fef8:ead/ffff:ffff:ffff:ffff::
  153. fe80::b032:aff:feb6:66bc/ffff:ffff:ffff:ffff::
  154.  
  155. Sudoers I/O plugin version 1.9.13p3
  156. Sudoers audit plugin version 1.9.13p3
  157.  
  158. 2023-07-12T03:50:08Z DEBUG stderr=
  159. 2023-07-12T03:50:08Z WARNING Using existing certificate '/etc/ipa/ca.crt'.
  160. 2023-07-12T03:50:08Z DEBUG [IPA Discovery]
  161. 2023-07-12T03:50:08Z DEBUG Starting IPA discovery with domain=ipa-test.novalocal, servers=['ipamaster.ipa-test.novalocal'], hostname=ipamaster.ipa-test.novalocal
  162. 2023-07-12T03:50:08Z DEBUG Server and domain forced
  163. 2023-07-12T03:50:08Z DEBUG [Kerberos realm search]
  164. 2023-07-12T03:50:08Z DEBUG Kerberos realm forced
  165. 2023-07-12T03:50:08Z DEBUG [LDAP server check]
  166. 2023-07-12T03:50:08Z DEBUG Verifying that ipamaster.ipa-test.novalocal (realm IPA-TEST-NOTLIKEDOMAIN.NOVALOCAL) is an IPA server
  167. 2023-07-12T03:50:08Z DEBUG Init LDAP connection to: ldap://ipamaster.ipa-test.novalocal:389
  168. 2023-07-12T03:50:08Z DEBUG Search LDAP server for IPA base DN
  169. 2023-07-12T03:50:08Z DEBUG Check if naming context 'dc=ipa-test-notlikedomain,dc=novalocal' is for IPA
  170. 2023-07-12T03:50:08Z DEBUG Naming context 'dc=ipa-test-notlikedomain,dc=novalocal' is a valid IPA context
  171. 2023-07-12T03:50:08Z DEBUG Search for (objectClass=krbRealmContainer) in dc=ipa-test-notlikedomain,dc=novalocal (sub)
  172. 2023-07-12T03:50:08Z DEBUG Found: cn=IPA-TEST-NOTLIKEDOMAIN.NOVALOCAL,cn=kerberos,dc=ipa-test-notlikedomain,dc=novalocal
  173. 2023-07-12T03:50:08Z DEBUG Discovery result: Success; server=ipamaster.ipa-test.novalocal, domain=ipa-test.novalocal, kdc=ipamaster.ipa-test.novalocal, basedn=dc=ipa-test-notlikedomain,dc=novalocal
  174. 2023-07-12T03:50:08Z DEBUG Validated servers: ipamaster.ipa-test.novalocal
  175. 2023-07-12T03:50:08Z DEBUG will use discovered domain: ipa-test.novalocal
  176. 2023-07-12T03:50:08Z DEBUG Using servers from command line, disabling DNS discovery
  177. 2023-07-12T03:50:08Z DEBUG will use provided server: ipamaster.ipa-test.novalocal
  178. 2023-07-12T03:50:08Z DEBUG will use discovered realm: IPA-TEST-NOTLIKEDOMAIN.NOVALOCAL
  179. 2023-07-12T03:50:08Z DEBUG will use discovered basedn: dc=ipa-test-notlikedomain,dc=novalocal
  180. 2023-07-12T03:50:08Z INFO Client hostname: ipamaster.ipa-test.novalocal
  181. 2023-07-12T03:50:08Z DEBUG Hostname source: Provided as option
  182. 2023-07-12T03:50:08Z INFO Realm: IPA-TEST-NOTLIKEDOMAIN.NOVALOCAL
  183. 2023-07-12T03:50:08Z DEBUG Realm source: Discovered from LDAP DNS records in ipamaster.ipa-test.novalocal
  184. 2023-07-12T03:50:08Z INFO DNS Domain: ipa-test.novalocal
  185. 2023-07-12T03:50:08Z DEBUG DNS Domain source: Forced
  186. 2023-07-12T03:50:08Z INFO IPA Server: ipamaster.ipa-test.novalocal
  187. 2023-07-12T03:50:08Z DEBUG IPA Server source: Provided as option
  188. 2023-07-12T03:50:08Z INFO BaseDN: dc=ipa-test-notlikedomain,dc=novalocal
  189. 2023-07-12T03:50:08Z DEBUG BaseDN source: From IPA server ldap://ipamaster.ipa-test.novalocal:389
  190. 2023-07-12T03:50:08Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'
  191. 2023-07-12T03:50:08Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
  192. 2023-07-12T03:50:08Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
  193. 2023-07-12T03:50:08Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state'
  194. 2023-07-12T03:50:08Z DEBUG Skipping attempt to configure and synchronize time with CHRONY server as it has been already done on master.
  195. 2023-07-12T03:50:08Z DEBUG Backing up system configuration file '/etc/sssd/sssd.conf'
  196. 2023-07-12T03:50:08Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
  197. 2023-07-12T03:50:08Z INFO Configured /etc/sssd/sssd.conf
  198. 2023-07-12T03:50:08Z DEBUG Initializing principal host/[email protected] using keytab /data/etc/krb5.keytab
  199. 2023-07-12T03:50:08Z DEBUG using ccache /etc/ipa/.dns_ccache
  200. 2023-07-12T03:50:08Z DEBUG Attempt 1/5: success
  201. 2023-07-12T03:50:08Z DEBUG Starting external process
  202. 2023-07-12T03:50:08Z DEBUG args=['/usr/bin/certutil', '-d', '/tmp/tmpgi6acve3', '-N', '-f', '/tmp/tmpgi6acve3/pwdfile.txt', '-@', '/tmp/tmpgi6acve3/pwdfile.txt']
  203. 2023-07-12T03:50:08Z DEBUG Process finished, return code=0
  204. 2023-07-12T03:50:08Z DEBUG stdout=
  205. 2023-07-12T03:50:08Z DEBUG stderr=
  206. 2023-07-12T03:50:08Z DEBUG Starting external process
  207. 2023-07-12T03:50:08Z DEBUG args=['/usr/sbin/selinuxenabled']
  208. 2023-07-12T03:50:08Z DEBUG Process execution failed
  209. 2023-07-12T03:50:08Z DEBUG Starting external process
  210. 2023-07-12T03:50:08Z DEBUG args=['/usr/sbin/selinuxenabled']
  211. 2023-07-12T03:50:08Z DEBUG Process execution failed
  212. 2023-07-12T03:50:08Z DEBUG Starting external process
  213. 2023-07-12T03:50:08Z DEBUG args=['/usr/sbin/selinuxenabled']
  214. 2023-07-12T03:50:08Z DEBUG Process execution failed
  215. 2023-07-12T03:50:08Z DEBUG Starting external process
  216. 2023-07-12T03:50:08Z DEBUG args=['/usr/sbin/selinuxenabled']
  217. 2023-07-12T03:50:08Z DEBUG Process execution failed
  218. 2023-07-12T03:50:08Z DEBUG Starting external process
  219. 2023-07-12T03:50:08Z DEBUG args=['/usr/sbin/selinuxenabled']
  220. 2023-07-12T03:50:08Z DEBUG Process execution failed
  221. 2023-07-12T03:50:08Z DEBUG Starting external process
  222. 2023-07-12T03:50:08Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/tmp/tmpgi6acve3', '-A', '-n', 'CA certificate 1', '-t', 'C,,', '-a', '-f', '/tmp/tmpgi6acve3/pwdfile.txt']
  223. 2023-07-12T03:50:08Z DEBUG Process finished, return code=0
  224. 2023-07-12T03:50:08Z DEBUG stdout=
  225. 2023-07-12T03:50:08Z DEBUG stderr=
  226. 2023-07-12T03:50:08Z DEBUG failed to find session_cookie in persistent storage for principal 'host/[email protected]'
  227. 2023-07-12T03:50:08Z DEBUG trying https://ipamaster.ipa-test.novalocal/ipa/json
  228. 2023-07-12T03:50:08Z DEBUG Created connection context.rpcclient_139827748309840
  229. 2023-07-12T03:50:08Z DEBUG [try 1]: Forwarding 'schema' to json server 'https://ipamaster.ipa-test.novalocal/ipa/json'
  230. 2023-07-12T03:50:08Z DEBUG ENTERING SINGLE_REQUEST
  231. 2023-07-12T03:50:08Z DEBUG HOST:i (ipamaster.ipa-test.novalocal)
  232. 2023-07-12T03:50:08Z DEBUG HANDLER: (/ipa/json)
  233. 2023-07-12T03:50:08Z DEBUG REQUEST_BODY: (b'{"method": "schema", "params": [[], {"version": "2.170"}], "id": 0}')
  234. 2023-07-12T03:50:08Z DEBUG New HTTP connection (ipamaster.ipa-test.novalocal)
  235. 2023-07-12T03:50:08Z DEBUG HTTP connection destroyed (ipamaster.ipa-test.novalocal)
  236. Traceback (most recent call last):
  237. File "/usr/lib64/python3/site-packages/ipaclient/remote_plugins/__init__.py", line 120, in get_package
  238. plugins = api._remote_plugins
  239. AttributeError: 'API' object has no attribute '_remote_plugins'
  240.  
  241. During handling of the above exception, another exception occurred:
  242.  
  243. Traceback (most recent call last):
  244. File "/usr/lib64/python3/site-packages/ipalib/rpc.py", line 727, in single_request
  245. if not self._auth_complete(response):
  246. File "/usr/lib64/python3/site-packages/ipalib/rpc.py", line 673, in _auth_complete
  247. raise errors.KerberosError(
  248. ipalib.errors.KerberosError: No valid Negotiate header in server response
  249. 2023-07-12T03:50:08Z DEBUG Destroyed connection context.rpcclient_139827748309840
  250. 2023-07-12T03:50:08Z DEBUG File "/usr/lib64/python3/site-packages/ipapython/admintool.py", line 180, in execute
  251. return_value = self.run()
  252. File "/usr/lib64/python3/site-packages/ipapython/install/cli.py", line 344, in run
  253. return cfgr.run()
  254. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 360, in run
  255. return self.execute()
  256. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 386, in execute
  257. for rval in self._executor():
  258. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 431, in __runner
  259. exc_handler(exc_info)
  260. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
  261. self._handle_exception(exc_info)
  262. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 450, in _handle_exception
  263. six.reraise(*exc_info)
  264. File "/usr/lib/python3/site-packages/six.py", line 703, in reraise
  265. raise value
  266. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 421, in __runner
  267. step()
  268. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 418, in <lambda>
  269. step = lambda: next(self.__gen)
  270. File "/usr/lib64/python3/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
  271. six.reraise(*exc_info)
  272. File "/usr/lib/python3/site-packages/six.py", line 703, in reraise
  273. raise value
  274. File "/usr/lib64/python3/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
  275. value = gen.send(prev_value)
  276. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 655, in _configure
  277. next(executor)
  278. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 431, in __runner
  279. exc_handler(exc_info)
  280. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
  281. self._handle_exception(exc_info)
  282. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 518, in _handle_exception
  283. self.__parent._handle_exception(exc_info)
  284. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 450, in _handle_exception
  285. six.reraise(*exc_info)
  286. File "/usr/lib/python3/site-packages/six.py", line 703, in reraise
  287. raise value
  288. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 515, in _handle_exception
  289. super(ComponentBase, self)._handle_exception(exc_info)
  290. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 450, in _handle_exception
  291. six.reraise(*exc_info)
  292. File "/usr/lib/python3/site-packages/six.py", line 703, in reraise
  293. raise value
  294. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 421, in __runner
  295. step()
  296. File "/usr/lib64/python3/site-packages/ipapython/install/core.py", line 418, in <lambda>
  297. step = lambda: next(self.__gen)
  298. File "/usr/lib64/python3/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
  299. six.reraise(*exc_info)
  300. File "/usr/lib/python3/site-packages/six.py", line 703, in reraise
  301. raise value
  302. File "/usr/lib64/python3/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
  303. value = gen.send(prev_value)
  304. File "/usr/lib64/python3/site-packages/ipapython/install/common.py", line 65, in _install
  305. for unused in self._installer(self.parent):
  306. File "/usr/lib64/python3/site-packages/ipaclient/install/client.py", line 4041, in main
  307. install(self)
  308. File "/usr/lib64/python3/site-packages/ipaclient/install/client.py", line 2643, in install
  309. _install(options, dict())
  310. File "/usr/lib64/python3/site-packages/ipaclient/install/client.py", line 123, in inner
  311. func(options, tdict)
  312. File "/usr/lib64/python3/site-packages/ipaclient/install/client.py", line 2965, in _install
  313. api.finalize()
  314. File "/usr/lib64/python3/site-packages/ipalib/plugable.py", line 753, in finalize
  315. self.__do_if_not_done('load_plugins')
  316. File "/usr/lib64/python3/site-packages/ipalib/plugable.py", line 432, in __do_if_not_done
  317. getattr(self, name)()
  318. File "/usr/lib64/python3/site-packages/ipalib/plugable.py", line 632, in load_plugins
  319. for package in self.packages:
  320. File "/usr/lib64/python3/site-packages/ipalib/__init__.py", line 952, in packages
  321. ipaclient.remote_plugins.get_package(self),
  322. File "/usr/lib64/python3/site-packages/ipaclient/remote_plugins/__init__.py", line 128, in get_package
  323. plugins = schema.get_package(server_info, client)
  324. File "/usr/lib64/python3/site-packages/ipaclient/remote_plugins/schema.py", line 546, in get_package
  325. schema = Schema(client)
  326. File "/usr/lib64/python3/site-packages/ipaclient/remote_plugins/schema.py", line 395, in __init__
  327. fingerprint, ttl = self._fetch(client, ignore_cache=read_failed)
  328. File "/usr/lib64/python3/site-packages/ipaclient/remote_plugins/schema.py", line 420, in _fetch
  329. schema = client.forward(u'schema', **kwargs)['result']
  330. File "/usr/lib64/python3/site-packages/ipalib/rpc.py", line 1149, in forward
  331. return self._call_command(command, params)
  332. File "/usr/lib64/python3/site-packages/ipalib/rpc.py", line 1125, in _call_command
  333. return command(*params)
  334. File "/usr/lib64/python3/site-packages/ipalib/rpc.py", line 1279, in _call
  335. return self.__request(name, args)
  336. File "/usr/lib64/python3/site-packages/ipalib/rpc.py", line 1242, in __request
  337. response = self.__transport.request(
  338. File "/usr/lib64/python3.9/xmlrpc/client.py", line 1166, in request
  339. return self.single_request(host, handler, request_body, verbose)
  340. File "/usr/lib64/python3/site-packages/ipalib/rpc.py", line 727, in single_request
  341. if not self._auth_complete(response):
  342. File "/usr/lib64/python3/site-packages/ipalib/rpc.py", line 673, in _auth_complete
  343. raise errors.KerberosError(
  344.  
  345. 2023-07-12T03:50:08Z DEBUG The ipa-client-install command failed, exception: KerberosError: No valid Negotiate header in server response
  346. 2023-07-12T03:50:08Z ERROR No valid Negotiate header in server response
  347. 2023-07-12T03:50:08Z ERROR The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information
  348.  
Advertisement
Add Comment
Please, Sign In to add comment