FreeIPA-users October 2017

freeipa-users@lists.fedorahosted.org

74 participants
90 discussions

Freeipa and Datadog
by Gabriel Stein 09 Oct '17

09 Oct '17

Hi all, I was discussing a issue with @ftweedal and I will continue doing some questions here. I have installed Freeipa with an additional Replica Server, but to me some concepts are not so clear. Let' talk about my setup: Goal: Replace Active Directory Auth on DMZ Network. Provide SSL Certs for Servers/Services If possible, Management for MIME/S Certificates(Mail Signing) Setup: Servers(Total: 3 VMs) ipa1/ipa2: Freeipa Server and Replica pki1: Datadog installation(external CA for ipa1/ipa2). I know, Freeipa includes Datadog(and that makes the certificates management possible), but I needed a Datadog Service to create the external CA for ipa1/ipa2. Now I have some questions: - Was Datadog Installation "too much"? Probably was better just create a CA manually with openSSL and import it on ipa1/ipa2? - Should I use Freeipa as the sub-CA for all Servers/Services and leave Datadog as a main CA? Do I have an advantage using this setup? Thanks in Advance! Best Regards, Gabriel Gabriel Stein

4 6

09 Oct '17

Hello, ipa-users! Can't login into my FreeIpa system with admin user. *On WebUi * Login failed due to an unknown reason. *In krb5kdc.log:* Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 192.168.110.26: NEEDED_PREAUTH: WELLKNOWN/ ANONYMOUS(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM, Additional pre-authentication required Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): closing down fd 11 Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 192.168.110.26: ISSUE: authtime 1507550904, etypes {rep=18 tkt=18 ses=18}, WELLKNOWN/ANONYMOUS(a)MYDOMAIN.COM for krbtgt/ MYDOMAIN.COM(a)MYDOMAIN.COM Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): closing down fd 11 Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 192.168.110.26: NEEDED_PREAUTH: admin(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM, Additional pre-authentication required Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): closing down fd 11 Oct 09 08:08:24 myhost.mydomain krb5kdc[24787](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 192.168.110.26: ISSUE: authtime 1507550904, etypes {rep=18 tkt=18 ses=18}, admin(a)MYDOMAIN.COM for krbtgt/ MYDOMAIN.COM(a)MYDOMAIN.COM Oct 09 08:08:24 myhost.mydomain krb5kdc[24787](info): closing down fd 11 Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): TGS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 192.168.110.26: ISSUE: authtime 1507550904, etypes {rep=18 tkt=18 ses=18}, admin(a)MYDOMAIN.COM for HTTP/ myhost.mydomain(a)MYDOMAIN.COM Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): closing down fd 11 Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 192.168.110.26: NEEDED_PREAUTH: HTTP/ myhost.mydomain(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM, Additional pre-authentication required Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): closing down fd 11 Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): preauth (encrypted_timestamp) verify failure: Preauthentication failed Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 192.168.110.26: PREAUTH_FAILED: HTTP/ myhost.mydomain(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM, Preauthentication failed Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): closing down fd 11 Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 192.168.110.26: NEEDED_PREAUTH: HTTP/ myhost.mydomain(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM, Additional pre-authentication required Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): closing down fd 11 Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): preauth (encrypted_timestamp) verify failure: Preauthentication failed Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 192.168.110.26: PREAUTH_FAILED: HTTP/ myhost.mydomain(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM, Preauthentication failed Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): closing down fd 11 *In httpd error log:* [Mon Oct 09 08:10:31.746129 2017] [auth_gssapi:error] [pid 24813] [client 192.168.110.26:45594] GSS ERROR gss_acquire_cred[_from]() failed to get server creds: [Unspecified GSS failure. Minor code may provide more information ( SPNEGO cannot find mechanisms to negotiate)] [Mon Oct 09 08:10:31.749411 2017] [:error] [pid 24806] ipa: INFO: 401 Unauthorized: No session cookie found *In messages:* Oct 9 08:11:40 myhost gssproxy: gssproxy[13658]: (OID: { 1 2 840 113554 1 2 2 }) Unspecified GSS failure. Minor code may provide more information, Preauthentication failed Oct 9 08:11:40 myhost gssproxy: gssproxy[13658]: (OID: { 1 2 840 113554 1 2 2 }) Unspecified GSS failure. Minor code may provide more information, Preauthentication failed *The password is correct 100%.* *I can do kinit for admin.* *Where to look next?* *Restart didn't help.* OS Red Hat Enterprise Linux Server release 7.4 [root@myhost ipa]# uname -a Linux myhost.mydomain 3.10.0-693.2.2.el7.x86_64 #1 SMP Tue Sep 12 10:49:01 PDT 2017 x86_64 x86_64 x86_64 GNU/Linux Regards, Andrey

2 2

IPA Server Upgrade Error
by Alka Murali 06 Oct '17

06 Oct '17

Hello, Currently my server is running on IPA Server Version 4.4. I have tried to upgrade the Version to 4.5 using the ipa-server-upgrade command and got ended with the following error: -------- 2017-09-26T02:27:32Z DEBUG stderr= 2017-09-26T02:27:50Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2017-09-26T02:27:53Z DEBUG Starting external process 2017-09-26T02:27:53Z DEBUG args=/usr/bin/certutil -d /etc/dirsrv/slapd-LGA-NET-SG -L -n Server-Cert -a -f /etc/dirsrv/slapd-LGA-NET-SG/pwdfile.txt 2017-09-26T02:27:56Z DEBUG Process finished, return code=255 2017-09-26T02:27:56Z DEBUG stdout= 2017-09-26T02:27:56Z DEBUG stderr=certutil: Could not find cert: Server-Cert : PR_FILE_NOT_FOUND_ERROR: File not found 2017-09-26T02:27:56Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. 2017-09-26T02:27:56Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute return_value = self.run() File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py", line 46, in run server.upgrade() File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1913, in upgrade upgrade_configuration() File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1788, in upgrade_configuration certificate_renewal_update(ca, ds, http), File "/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py", line 1018, in certificate_renewal_update ds.start_tracking_certificates(serverid) File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 1046, in start_tracking_certificates 'restart_dirsrv %s' % serverid) File "/usr/lib/python2.7/site-packages/ipaserver/install/certs.py", line 362, in track_server_cert cert_obj = x509.load_certificate(cert) File "/usr/lib/python2.7/site-packages/ipalib/x509.py", line 119, in load_certificate return cryptography.x509.load_der_x509_certificate(data, default_backend()) File "/usr/lib64/python2.7/site-packages/cryptography/x509/base.py", line 47, in load_der_x509_certificate return backend.load_der_x509_certificate(data) File "/usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/multibackend.py", line 350, in load_der_x509_certificate return b.load_der_x509_certificate(data) File "/usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/backend.py", line 1185, in load_der_x509_certificate raise ValueError("Unable to load certificate") 2017-09-26T02:27:56Z DEBUG The ipa-server-upgrade command failed, exception: ValueError: Unable to load certificate 2017-09-26T02:27:56Z ERROR Unexpected error - see /var/log/ipaupgrade.log for details: ValueError: Unable to load certificate 2017-09-26T02:27:56Z ERROR The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information ------- I am using a third party signed certificate along with my IPA-CA. Is it an issue with my current CA. I can see that while fetching for the certificate, the name given to be "Server-cert" instead of the exact CA name. -- Regards, Alka Murali

4 11

ansible-freeipa
by Thomas Woerner 05 Oct '17

05 Oct '17

Hello, we have made big progress with ansible-freeipa to be able to install ipa clients using ansible. These are the things that we are able to do now: - Simple installation on more than one machine - One configuration file (inventory file) per realm (One place for configuration options) - Authentication types - Simple use of OTP for installation and update - More secure (admin password not transferred to the clients) - Only setting of a variable is needed to enable the use of OTP - Admin principal and password - Existing host keytab - Advanced auto detection (server only, no need to provide domain) - Repair of broken configurations - Known limitation: /etc/krb5.keytab can not be repaired - Working with freeipa-4.4 and up - RHEL-7.3 and up - Fedora-25+ - Support for Python3 based freeipa in Fedora-27 The basic usage is explained in the README of the repository: https://github.com/freeipa/ansible-freeipa I'd like to start a discussion about naming conventions and also about customer and user requests for extensions and changes. Please give it a try and report issues you are running into. Regards, Thomas

5 8

Smartcard not working on Ubuntu 16.04
by Steve Weeks 05 Oct '17

05 Oct '17

We have smartcards (PIV) working just fine on Fedora 25 with FreeIPA client version 4.4.4 (SSSD 1.14.2). However on Ubuntu 16.04, FreeIPA client 4.3.1, SSSD 1.13.4 the smartcard seems to be ignored. The smartcard is readable using pkcs11-tools and pkcs15-tools on both systems. On both systems sssd.conf contains: [pam] pam_cert_auth = True I've turned the sssd logging up to 9 on both systems and it looks like p11_child is never called on the Ubuntu system. On the Ubuntu system p11_child.log is empty and there is no sign of it being started in the sssd_pam.log. Any suggestions on what I should look at next? Thanks, Steve

2 10

Web UI shows users as disabled when they aren't
by Kristian Petersen 05 Oct '17

05 Oct '17

I noticed just today when trying to reset a password for a user that when I pull up the page for a specific user, it shows them as being disabled even if they aren't. This causes teh reset password option to be grayed-out among other things. I verified the users weren't actually disabled by running ipa user-show <username> on a few of them. If you do a user search or show all of the users in the system the status shows correctly on that page of the Web UI. The problem appears to happen across the replicas as well. After playing around with the Web UI for a bit I found that a hard refresh (Ctrl+Shift+R) of the user's page fixes this problem *very temporarily*. If you go to another user the problem resurfaces. Something is getting cached by the browser that is causing it to display incorrectly. I have confirmed this happens in both chrome and firefox running in both Windows and Linux. The httpd logs show nothing there, /var/log/ipa logs aren't helpful either. IPA got some updates on Sept. 27th (which also appear to have broken pki-tomcatd), but I didn't notice this particular issue until today. IPA will run with out the pki-tomcatd working if you tell it to ignore the failure, however, I'm not sure if the two problems are related. -- Kristian Petersen System Administrator Dept. of Chemistry and Biochemistry

1 1

external user in sudo rule
by Behnam Loghmani 05 Oct '17

05 Oct '17

Hi I have an ipa server version 4.5 with one ipa replica and one ipa client, all on CentOS 7. I need to manage anythings about sudoers on ipa server so I decided to use externaluser in sudo rules, such as below: # ipa sudorule-show behnam Rule name: behnam Enabled: TRUE Host category: all Command category: all RunAs User category: all RunAs Group category: all External User: behnam Sudo Option: !authenticate but when I check sudo in client system, it returns that behnam may not run sudo. [behnam@***** ~]$ sudo -l [sudo] password for behnam: Sorry, user behnam may not run sudo on *****

2 2

Can't install ipa-server-4.5.0 on RHEL 7.4: Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768.
by Markovich 04 Oct '17

04 Oct '17

Hello freeipa-users! I'm trying to install ipa-server-4.5.0-21.0.1.el7_4.1.2.x86_64 on Red Hat Enterprise Linux Server release 7.4 (Maipo) but getting error: [Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ... [04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: ... cat /proc/meminfo MemTotal: 16170720 kB MemFree: 9051152 kB Buffers: 11280 kB Cached: 3490240 kB SwapCached: 0 kB Active: 5041772 kB Inactive: 1337116 kB Active(anon): 2878404 kB Inactive(anon): 8128 kB Active(file): 2163368 kB Inactive(file): 1328988 kB Unevictable: 0 kB Mlocked: 0 kB SwapTotal: 2097148 kB SwapFree: 2097148 kB Dirty: 400 kB Writeback: 0 kB AnonPages: 2877664 kB Mapped: 66880 kB Shmem: 8876 kB Slab: 562760 kB SReclaimable: 519908 kB SUnreclaim: 42852 kB KernelStack: 7408 kB PageTables: 12624 kB NFS_Unstable: 0 kB Bounce: 0 kB WritebackTmp: 0 kB CommitLimit: 10182508 kB Committed_AS: 5700160 kB VmallocTotal: 34359738367 kB VmallocUsed: 31364 kB VmallocChunk: 34359694544 kB HardwareCorrupted: 0 kB HugePages_Total: 0 HugePages_Free: 0 HugePages_Rsvd: 0 HugePages_Surp: 0 Hugepagesize: 2048 kB DirectMap4k: 8192 kB DirectMap2M: 2088960 kB DirectMap1G: 14680064 kB My command: ipa-server-install --hostname=myhostname --domain=mydomain.com --realm=MYDOMAIN.COM --ds-password=password--master-password=password--admin-password=password--unattended --debug And on the second step: Done configuring NTP daemon (ntpd). Configuring directory server (dirsrv). Estimated time: 30 seconds [1/45]: creating directory server instance [error] RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 More debug info is here: 2017-10-04T15:55:52Z DEBUG calling setup-ds.pl 2017-10-04T15:55:52Z DEBUG Starting external process 2017-10-04T15:55:52Z DEBUG args=/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_ 2017-10-04T15:55:56Z DEBUG Process finished, return code=1 2017-10-04T15:55:56Z DEBUG stdout=[17/10/04:11:55:56] - [Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ... [04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.900526100 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start - Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database [04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache - pagesize: 4096, available bytes 9223372030878334975, process usage 13570048 [04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache - Import allocates 144115185741308KB import cache. [04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache - Setting ncache to: 34359738 to keep each chunk below 4Gbytes tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260 0x7f36f74e9a40 0x7 f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc 0x7f36f74e9a40 0x7f36f335 bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc: 584852224468: Cannot allocate memory [04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to allocate memory for mutexes from the region [04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC: Cannot allocate memory tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023 0x7f36f74e961c 0x7 f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544 process-private: unable to find environment [04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start - Unable to open new DB_ENV for import/export! -30973 [04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start - Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973) Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ... [04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.900526100 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start - Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database [04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache - pagesize: 4096, available bytes 9223372030878334975, process usage 13570048 [04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache - Import allocates 144115185741308KB import cache. [04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache - Setting ncache to: 34359738 to keep each chunk below 4Gbytes tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260 0x7f36f74e9a40 0x7 f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc 0x7f36f74e9a40 0x7f36f335 bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc: 584852224468: Cannot allocate memory [04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to allocate memory for mutexes from the region [04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC: Cannot allocate memory tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023 0x7f36f74e961c 0x7 f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544 process-private: unable to find environment [04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start - Unable to open new DB_ENV for import/export! -30973 [04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start - Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973) [17/10/04:11:55:56] - [Setup] Fatal Error: Could not create directory server instance 'MYDOMAIN-COM'. Error: Could not create directory server instance 'MYDOMAIN-COM'. [17/10/04:11:55:56] - [Setup] Fatal Exiting . . . Log file is '-' Exiting . . . Log file is '-' 2017-10-04T15:55:56Z DEBUG stderr= 2017-10-04T15:55:56Z DEBUG Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step method() File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 559, in __create_instance raise RuntimeError("failed to create DS instance %s" % e) RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z DEBUG [error] RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute return_value = self.run() File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 333, in run cfgr.run() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 368, in run self.execute() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 392, in execute for _nothing in self._executor(): File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 658, in _configure next(executor) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521, in _handle_exception self.__parent._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception super(ComponentBase, self)._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install for _nothing in self._installer(self.parent): File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 578, in main master_install(self) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 248, in decorated func(installer) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 758, in install setup_pkinit=not options.no_pkinit) File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 344, in create_instance self.start_creation(runtime=30) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step method() File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 559, in __create_instance raise RuntimeError("failed to create DS instance %s" % e) 2017-10-04T15:55:56Z DEBUG The ipa-server-install command failed, exception: RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfil e - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z ERROR failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information Regards, Andrey

4 6

Can't install ipa-server-4.5.0 on RHEL 7.4
by Markovich 04 Oct '17

04 Oct '17

*Hello freeipa-users!* *I'm trying to install ipa-server-4.5.0-21.0.1.el7_4.1.2.x86_64 on Red Hat Enterprise Linux Server release 7.4 (Maipo) but getting error:* [Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ... [04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: ... *cat /proc/meminfo* MemTotal: 16170720 kB MemFree: 9051152 kB Buffers: 11280 kB Cached: 3490240 kB SwapCached: 0 kB Active: 5041772 kB Inactive: 1337116 kB Active(anon): 2878404 kB Inactive(anon): 8128 kB Active(file): 2163368 kB Inactive(file): 1328988 kB Unevictable: 0 kB Mlocked: 0 kB SwapTotal: 2097148 kB SwapFree: 2097148 kB Dirty: 400 kB Writeback: 0 kB AnonPages: 2877664 kB Mapped: 66880 kB Shmem: 8876 kB Slab: 562760 kB SReclaimable: 519908 kB SUnreclaim: 42852 kB KernelStack: 7408 kB PageTables: 12624 kB NFS_Unstable: 0 kB Bounce: 0 kB WritebackTmp: 0 kB CommitLimit: 10182508 kB Committed_AS: 5700160 kB VmallocTotal: 34359738367 kB VmallocUsed: 31364 kB VmallocChunk: 34359694544 kB HardwareCorrupted: 0 kB HugePages_Total: 0 HugePages_Free: 0 HugePages_Rsvd: 0 HugePages_Surp: 0 Hugepagesize: 2048 kB DirectMap4k: 8192 kB DirectMap2M: 2088960 kB DirectMap1G: 14680064 kB * My command:* ipa-server-install --hostname=myhostname --domain=mydomain.com --realm= MYDOMAIN.COM --ds-password=password--master-password=password--admin-password=password--unattended --debug *And on the second step:* Done configuring NTP daemon (ntpd). Configuring directory server (dirsrv). Estimated time: 30 seconds [1/45]: creating directory server instance [error] RuntimeError: failed to create DS instance Command '/usr/sbin/ setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 *More debug info is here:* 2017-10-04T15:55:52Z DEBUG calling setup-ds.pl 2017-10-04T15:55:52Z DEBUG Starting external process 2017-10-04T15:55:52Z DEBUG args=/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_ 2017-10-04T15:55:56Z DEBUG Process finished, return code=1 2017-10-04T15:55:56Z DEBUG stdout=[17/10/04:11:55:56] - [Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ... [04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.900526100 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start - Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database [04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache - pagesize: 4096, available bytes 9223372030878334975, process usage 13570048 [04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache - Import allocates 144115185741308KB import cache. [04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache - Setting ncache to: 34359738 to keep each chunk below 4Gbytes tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260 0x7f36f74e9a40 0x7 f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc 0x7f36f74e9a40 0x7f36f335 bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc: 584852224468: Cannot allocate memory [04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to allocate memory for mutexes from the region [04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC: Cannot allocate memory tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023 0x7f36f74e961c 0x7 f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544 process-private: unable to find environment [04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start - Unable to open new DB_ENV for import/export! -30973 [04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start - Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973) Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ... [04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.900526100 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start - Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database [04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache - pagesize: 4096, available bytes 9223372030878334975, process usage 13570048 [04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache - Import allocates 144115185741308KB import cache. [04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache - Setting ncache to: 34359738 to keep each chunk below 4Gbytes tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260 0x7f36f74e9a40 0x7 f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc 0x7f36f74e9a40 0x7f36f335 bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc: 584852224468: Cannot allocate memory [04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to allocate memory for mutexes from the region [04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC: Cannot allocate memory tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023 0x7f36f74e961c 0x7 f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544 process-private: unable to find environment [04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start - Unable to open new DB_ENV for import/export! -30973 [04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start - Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973) [17/10/04:11:55:56] - [Setup] Fatal Error: Could not create directory server instance 'MYDOMAIN-COM'. Error: Could not create directory server instance 'MYDOMAIN-COM'. [17/10/04:11:55:56] - [Setup] Fatal Exiting . . . Log file is '-' Exiting . . . Log file is '-' 2017-10-04T15:55:56Z DEBUG stderr= 2017-10-04T15:55:56Z DEBUG Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step method() File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 559, in __create_instance raise RuntimeError("failed to create DS instance %s" % e) RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z DEBUG [error] RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute return_value = self.run() File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 333, in run cfgr.run() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 368, in run self.execute() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 392, in execute for _nothing in self._executor(): File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 658, in _configure next(executor) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521, in _handle_exception self.__parent._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception super(ComponentBase, self)._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install for _nothing in self._installer(self.parent): File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 578, in main master_install(self) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 248, in decorated func(installer) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 758, in install setup_pkinit=not options.no_pkinit) File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 344, in create_instance self.start_creation(runtime=30) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step method() File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 559, in __create_instance raise RuntimeError("failed to create DS instance %s" % e) 2017-10-04T15:55:56Z DEBUG The ipa-server-install command failed, exception: RuntimeError: failed to create DS instance Command '/usr/sbin/ setup-ds.pl --silent --logfil e - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z ERROR failed to create DS instance Command '/usr/sbin/ setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information *Regards,* *Andrey*

1 1

Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768.
by Markovich 04 Oct '17

04 Oct '17

*Hello freeipa-users!* *I'm trying to install ipa-server-4.5.0-21.0.1.el7_4.1.2.x86_64 on Red Hat Enterprise Linux Server release 7.4 (Maipo) but getting error:* [Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ... [04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: ... *cat /proc/meminfo* MemTotal: 16170720 kB MemFree: 9051152 kB Buffers: 11280 kB Cached: 3490240 kB SwapCached: 0 kB Active: 5041772 kB Inactive: 1337116 kB Active(anon): 2878404 kB Inactive(anon): 8128 kB Active(file): 2163368 kB Inactive(file): 1328988 kB Unevictable: 0 kB Mlocked: 0 kB SwapTotal: 2097148 kB SwapFree: 2097148 kB Dirty: 400 kB Writeback: 0 kB AnonPages: 2877664 kB Mapped: 66880 kB Shmem: 8876 kB Slab: 562760 kB SReclaimable: 519908 kB SUnreclaim: 42852 kB KernelStack: 7408 kB PageTables: 12624 kB NFS_Unstable: 0 kB Bounce: 0 kB WritebackTmp: 0 kB CommitLimit: 10182508 kB Committed_AS: 5700160 kB VmallocTotal: 34359738367 kB VmallocUsed: 31364 kB VmallocChunk: 34359694544 kB HardwareCorrupted: 0 kB HugePages_Total: 0 HugePages_Free: 0 HugePages_Rsvd: 0 HugePages_Surp: 0 Hugepagesize: 2048 kB DirectMap4k: 8192 kB DirectMap2M: 2088960 kB DirectMap1G: 14680064 kB * My command:* ipa-server-install --hostname=myhostname --domain=mydomain.com --realm= MYDOMAIN.COM <http://mydomain.com/> --ds-password=password-- master-password=password--admin-password=password--unattended --debug *And on the second step:* Done configuring NTP daemon (ntpd). Configuring directory server (dirsrv). Estimated time: 30 seconds [1/45]: creating directory server instance [error] RuntimeError: failed to create DS instance Command '/usr/sbin/ setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 *More debug info is here:* 2017-10-04T15:55:52Z DEBUG calling setup-ds.pl 2017-10-04T15:55:52Z DEBUG Starting external process 2017-10-04T15:55:52Z DEBUG args=/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_ 2017-10-04T15:55:56Z DEBUG Process finished, return code=1 2017-10-04T15:55:56Z DEBUG stdout=[17/10/04:11:55:56] - [Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ... [04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.900526100 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start - Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database [04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache - pagesize: 4096, available bytes 9223372030878334975, process usage 13570048 [04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache - Import allocates 144115185741308KB import cache. [04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache - Setting ncache to: 34359738 to keep each chunk below 4Gbytes tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260 0x7f36f74e9a40 0x7 f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc 0x7f36f74e9a40 0x7f36f335 bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc: 584852224468: Cannot allocate memory [04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to allocate memory for mutexes from the region [04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC: Cannot allocate memory tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023 0x7f36f74e961c 0x7 f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544 process-private: unable to find environment [04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start - Unable to open new DB_ENV for import/export! -30973 [04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start - Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973) Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ... [04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.900526100 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start - Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database [04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache - pagesize: 4096, available bytes 9223372030878334975, process usage 13570048 [04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache - Import allocates 144115185741308KB import cache. [04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable: [04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache - Setting ncache to: 34359738 to keep each chunk below 4Gbytes tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260 0x7f36f74e9a40 0x7 f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc 0x7f36f74e9a40 0x7f36f335 bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc: 584852224468: Cannot allocate memory [04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to allocate memory for mutexes from the region [04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC: Cannot allocate memory tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023 0x7f36f74e961c 0x7 f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7 [04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544 process-private: unable to find environment [04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start - Unable to open new DB_ENV for import/export! -30973 [04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start - Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973) [17/10/04:11:55:56] - [Setup] Fatal Error: Could not create directory server instance 'MYDOMAIN-COM'. Error: Could not create directory server instance 'MYDOMAIN-COM'. [17/10/04:11:55:56] - [Setup] Fatal Exiting . . . Log file is '-' Exiting . . . Log file is '-' 2017-10-04T15:55:56Z DEBUG stderr= 2017-10-04T15:55:56Z DEBUG Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step method() File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 559, in __create_instance raise RuntimeError("failed to create DS instance %s" % e) RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z DEBUG [error] RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z DEBUG File "/usr/lib/python2.7/site- packages/ipapython/admintool.py", line 172, in execute return_value = self.run() File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 333, in run cfgr.run() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 368, in run self.execute() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 392, in execute for _nothing in self._executor(): File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 658, in _configure next(executor) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521, in _handle_exception self.__parent._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception super(ComponentBase, self)._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install for _nothing in self._installer(self.parent): File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 578, in main master_install(self) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 248, in decorated func(installer) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 758, in install setup_pkinit=not options.no_pkinit) File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 344, in create_instance self.start_creation(runtime=30) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step method() File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 559, in __create_instance raise RuntimeError("failed to create DS instance %s" % e) 2017-10-04T15:55:56Z DEBUG The ipa-server-install command failed, exception: RuntimeError: failed to create DS instance Command '/usr/sbin/ setup-ds.pl --silent --logfil e - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z ERROR failed to create DS instance Command '/usr/sbin/ setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1 2017-10-04T15:55:56Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information *Regards,* *Andrey*

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-users October 2017