Thanks now we decided to go with self signed certificate.
currently i'm migrating my old ipa-client to new ipa server but getting
below error while I allowed all ports on ipaserver.
My IPA client version is 3.0 and my latest version is 4.6 & IPA
NUM_VERSION for client is 300 while on new freeipa 40605.
ipa-client-install --password 'abc123' --domain
--unattended --force-join
LDAP Error: Connect error: TLS error -8054:You are attempting to import a
cert with the same issuer/serial as an existing cert, but that is not the
same cert.
LDAP Error: Connect error: TLS error -8054:You are attempting to import a
cert with the same issuer/serial as an existing cert, but that is not the
same cert.
Failed to verify that
is an IPA Server.
This may mean that the remote server is not up or is not reachable due to
network or firewall settings.
Please make sure the following ports are opened in the firewall settings:
TCP: 80, 88, 389
UDP: 88 (at least one of TCP/UDP ports 88 has to be open)
Also note that following ports are necessary for ipa-client working
properly after enrollment:
TCP: 464
UDP: 464, 123 (if NTP enabled)
Installation failed. Rolling back changes.
IPA client is not configured on this system.
On Mon, Mar 16, 2020 at 8:16 PM Rob Crittenden <rcritten(a)redhat.com> wrote:
Faraz Younus via FreeIPA-users wrote:
> The fix you suggested is started the LDAP service but it got down two
> services Krb5kdc & kadmin
You'll need to look at /var/log/krb5kdc.log to determine why it failed
to start.
OR maybe systemctl status krb5kdc will be enlightening.
rob
>
> [root@sg ansible]# ipactl restart --ignore-service-failure
>
> Starting Directory Service
>
> Starting krb5kdc Service
>
> Failed to start krb5kdc Service
>
> Forced start, ignoring krb5kdc Service, continuing normal operation
>
> Starting kadmin Service
>
> Failed to start kadmin Service
>
> Forced start, ignoring kadmin Service, continuing normal operation
>
> Starting httpd Service
>
> Starting ipa-custodia Service
>
> Starting ntpd Service
>
> Starting pki-tomcatd Service
>
> Starting ipa-otpd Service
>
> ipa: INFO: The ipactl command was successful
>
>
> On Mon, Mar 16, 2020 at 2:27 AM Faraz Younus <farazby(a)gmail.com
> <mailto:farazby@gmail.com>> wrote:
>
> I'll try to add this suggested config and restart ipactl
>
> But as per you it should not have been the case to install client on
> master why is that ?
>
> The procedure which I'm following I'm setting master server with
> setup ca self signed then after that I'm replacing self signed with
> external certificate, is this the right way?
>
>
>
> On Mon, Mar 16, 2020, 2:18 AM Rob Crittenden <rcritten(a)redhat.com
> <mailto:rcritten@redhat.com>> wrote:
>
> Faraz Younus via FreeIPA-users wrote:
> > no I did not modify the file , this is from ipa master server,
> i also
> > installed ipa client on master bcoz i was getting sssd no cache
> > credentials error, when i install client on master it fixed
> that error,
> > now I'm getting ldap error after that sssd error
>
> It should not have been possible to run ipa-client-install on a
> master.
> I don't know what you did to force it, or what the full
> consequences may
> be, but I'd try adding the things that Flo suggested to
> /etc/ipa/default.conf and restarting httpd to see if it helps.
>
> ldap_uri = ldapi://%2fvar%2frun%2fslapd-FIXEDANDMOBILE-COM.socket
> ra_plugin = dogtag
> dogtag_version = 10
> mode = production
>
> rob
>
> >
> > On Fri, Mar 13, 2020, 7:17 PM Florence Blanc-Renaud
> <flo(a)redhat.com <mailto:flo@redhat.com>
> > <mailto:flo@redhat.com <mailto:flo@redhat.com>>> wrote:
> >
> > On 3/13/20 8:43 AM, Faraz Younus via FreeIPA-users wrote:
> > > cat /etc/ipa/default.conf
> > >
> > > #File modified by ipa-client-install
> > >
> > >
> > > [global]
> > >
> > > basedn = dc=fixedandmobile,dc=com
> > >
> > > realm =
FIXEDANDMOBILE.COM <
http://FIXEDANDMOBILE.COM>
> <
http://FIXEDANDMOBILE.COM>
> > <
http://FIXEDANDMOBILE.COM>
> > >
> > > domain =
fixedandmobile.com <
http://fixedandmobile.com>
> <
http://fixedandmobile.com>
> > <
http://fixedandmobile.com>
> > >
> > > server =
sg.fixedandmobile.com
> <
http://sg.fixedandmobile.com> <
http://sg.fixedandmobile.com>
> > <
http://sg.fixedandmobile.com>
> > >
> > > host =
sg.fixedandmobile.com
> <
http://sg.fixedandmobile.com> <
http://sg.fixedandmobile.com>
> > <
http://sg.fixedandmobile.com>
> > >
> > > xmlrpc_uri =
https://sg.fixedandmobile.com/ipa/xml
> > >
> > > enable_ra = True
> >
> > Hi,
> >
> > looks like you are trying to run "ipactl status" on a
> FreeIPA client,
> > because on a server I would expect the file to also
contain:
> >
> > ldap_uri =
> ldapi://%2Fvar%2Frun%2Fslapd-FIXEDANDMOBILE-COM.socket
> > mode = production
> > ra_plugin = dogtag
> > dogtag_version = 10
> >
> > But on a client, the host and server values would be
> different.
> > Did you manually modify the file?
> >
> > flo
> > >
> > >
> > > On Fri, Mar 13, 2020 at 12:02 PM Florence Blanc-Renaud
> > <flo(a)redhat.com <mailto:flo@redhat.com>
> <mailto:flo@redhat.com <mailto:flo@redhat.com>>
> > > <mailto:flo@redhat.com <mailto:flo@redhat.com>
> <mailto:flo@redhat.com <mailto:flo@redhat.com>>>> wrote:
> > >
> > > On 3/13/20 6:42 AM, Faraz Younus via FreeIPA-users
> wrote:
> > > > I can have the update on below LDAP error ?
> > >
> > > What is the content of the /etc/ipa/default.conf
file?
> > Especially, is
> > > there a value for "ldap_uri" and does it start
with
> "ldap_uri =
> > > ldapi://..." ?
> > >
> > > flo
> > > >
> > > > On Wed, Mar 11, 2020 at 6:34 PM Faraz Younus
> > <farazby(a)gmail.com <mailto:farazby@gmail.com>
> <mailto:farazby@gmail.com <mailto:farazby@gmail.com>>
> > > <mailto:farazby@gmail.com
<mailto:farazby@gmail.com>
> <mailto:farazby@gmail.com <mailto:farazby@gmail.com>>>
> > > > <mailto:farazby@gmail.com
> <mailto:farazby@gmail.com> <mailto:farazby@gmail.com
> <mailto:farazby@gmail.com>>
> > <mailto:farazby@gmail.com <mailto:farazby@gmail.com>
> <mailto:farazby@gmail.com
<mailto:farazby@gmail.com>>>>> wrote:
> > > >
> > > > I have added freeipa users list as well to
> this thread
> > > >
> > > > On Wed, Mar 11, 2020 at 6:31 PM Rob Crittenden
> > > <rcritten(a)redhat.com
<mailto:rcritten@redhat.com>
> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>
> > <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>
> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>>
> > > > <mailto:rcritten@redhat.com
> <mailto:rcritten@redhat.com>
> > <mailto:rcritten@redhat.com
<mailto:rcritten@redhat.com>>
> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>
> > <mailto:rcritten@redhat.com
> <mailto:rcritten@redhat.com>>>>> wrote:
> > > >
> > > > Faraz Younus wrote:
> > > > > Thanks pasted the text instead of
> screenshots.
> > > >
> > > > This will work. Can you post this to the
> > freeipa-users list?
> > > >
> > > > rob
> > > >
> > > > >
> > > > > First failed then successful but
after
> that LDAP
> > broken.
> > > > >
> > > > > palib.install.certmonger: DEBUG:
> certmonger
> > request is
> > > in state
> > > > >
dbus.String(u'CA_UNREACHABLE',
> variant_level=1)
> > > > >
> > > > > ipapython.admintool: DEBUG: File
> > > > >
> >
"/usr/lib/python2.7/site-packages/ipapython/admintool.py",
> > > > line 178, in
> > > > > execute
> > > > >
> > > > > return_value = self.run()
> > > > >
> > > > > File
> > > > >
> > > >
> > >
> >
>
"/usr/lib/python2.7/site-packages/ipaclient/install/ipa_certupdate.py",
> > > > > line 62, in run
> > > > >
> > > > > run_with_args(api)
> > > > >
> > > > > File
> > > > >
> > > >
> > >
> >
>
"/usr/lib/python2.7/site-packages/ipaclient/install/ipa_certupdate.py",
> > > > > line 112, in run_with_args
> > > > >
> > > > > update_server(certs)
> > > > >
> > > > > File
> > > > >
> > > >
> > >
> >
>
"/usr/lib/python2.7/site-packages/ipaclient/install/ipa_certupdate.py",
> > > > > line 192, in update_server
> > > > >
> > > > > "please check the request
manually" %
> > request_id)
> > > > >
> > > > >
> > > > > ipapython.admintool: DEBUG: The
> ipa-certupdate
> > command
> > > failed,
> > > > > exception: ScriptError: Error
resubmitting
> > certmonger
> > > request
> > > > > '20200311065837', please check
the
> request manually
> > > > >
> > > > > ipapython.admintool: ERROR: Error
> resubmitting
> > > certmonger request
> > > > > '20200311065837', please check
the
> request manually
> > > > >
> > > > > ipapython.admintool: ERROR: The
> ipa-certupdate
> > command
> > > failed.
> > > > >
> > > > > [root@sg ansible]# kinit admin
> > > > >
> > > > > Password for admin(a)FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>>:
> > > > >
> > > > >
> > > > > [root@sg ansible]# klist -kt
> /etc/krb5.keytab
> > > > >
> > > > > Keytab name: FILE:/etc/krb5.keytab
> > > > >
> > > > > KVNO Timestamp Principal
> > > > >
> > > > > ---- -----------------
> > > > >
> > --------------------------------------------------------
> > > > >
> > > > > 3 03/11/20 07:15:51
> > > >
> host/sg.fixedandmobile.com(a)FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > > >
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>
> > > > >
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > > >
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>>
> > > > >
> > > > > 3 03/11/20 07:15:51
> > > >
> host/sg.fixedandmobile.com(a)FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > > >
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>
> > > > >
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > > >
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>>
> > > > >
> > > > > [root@sg ansible]# ipa-certupdate -v
> > > > >
> > > > > ipapython.admintool: DEBUG: Not
> logging to a file
> > > > >
> > > > > ipalib.plugable: DEBUG: importing all
> plugin
> > modules in
> > > > >
> ipaclient.remote_plugins.schema$79e69edd...
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > >
> ipaclient.remote_plugins.schema$79e69edd.plugins
> > > > >
> > > > > ipalib.plugable: DEBUG: importing all
> plugin
> > modules in
> > > > ipaclient.plugins...
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.automember
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.automount
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.ca
> <
http://ipaclient.plugins.ca> <
http://ipaclient.plugins.ca>
> > <
http://ipaclient.plugins.ca>
> > > <
http://ipaclient.plugins.ca>
> > > > > <
http://ipaclient.plugins.ca>
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.cert
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.certmap
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > > ipaclient.plugins.certprofile
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.csrgen
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.dns
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.hbacrule
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.hbactest
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.host
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.idrange
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.internal
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.location
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.migration
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.misc
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.otptoken
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > > ipaclient.plugins.otptoken_yubikey
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.passwd
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.permission
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.rpcclient
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.server
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.service
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.sudorule
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.topology
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.trust
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.user
> > > > >
> > > > > ipalib.plugable: DEBUG: importing
> plugin module
> > > > ipaclient.plugins.vault
> > > > >
> > > > > ipalib.rpc: DEBUG: failed to find
> session_cookie in
> > > > persistent storage
> > > > > for principal
> 'admin(a)FIXEDANDMOBILE.COM <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> <mailto:admin@FIXEDANDMOBILE.COM <mailto:
admin(a)FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>>'
> > > > >
> > > > > ipalib.rpc: INFO: trying
> > >
https://sg.fixedandmobile.com/ipa/json
> > > > >
> > > > > ipalib.rpc: DEBUG: New HTTP
connection
> > > (
sg.fixedandmobile.com
> <
http://sg.fixedandmobile.com> <
http://sg.fixedandmobile.com>
> > <
http://sg.fixedandmobile.com>
> > > > <
http://sg.fixedandmobile.com>
> > > > > <
http://sg.fixedandmobile.com>)
> > > > >
> > > > > ipalib.rpc: DEBUG: received
Set-Cookie
> (<type
> > > > >
> > > >
> > >
> >
>
'list'>)'['ipa_session=MagBearerToken=a5woxNPqwGkbOIbov2siCoVxMmHwiE4IDTv1Q14Cyvb4h2a3Xy9PoQnQfe%2fWUvLCppJSxeVB9Q4kiQMeaWwhrwyjUfdmf%2bzjVmujGelpW%2b1FFY1ErOXKfR%2bSHWBaZUC2DSFxBDZ8xYS237VtX%2f0OkZrBMlUJc2mvioG5vkeKKvmoeBoIjFztlxlTHRh80vvfnRejxZUkvJkzmYuKJT39rw%3d%3d;path=/ipa;httponly;secure;']'
> > > > >
> > > > > ipalib.rpc: DEBUG: storing cookie
> > > > >
> > > >
> > >
> >
>
'ipa_session=MagBearerToken=a5woxNPqwGkbOIbov2siCoVxMmHwiE4IDTv1Q14Cyvb4h2a3Xy9PoQnQfe%2fWUvLCppJSxeVB9Q4kiQMeaWwhrwyjUfdmf%2bzjVmujGelpW%2b1FFY1ErOXKfR%2bSHWBaZUC2DSFxBDZ8xYS237VtX%2f0OkZrBMlUJc2mvioG5vkeKKvmoeBoIjFztlxlTHRh80vvfnRejxZUkvJkzmYuKJT39rw%3d%3d;'
> > > > > for principal
admin(a)FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> <mailto:admin@FIXEDANDMOBILE.COM <mailto:
admin(a)FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>>
> > > > >
> > > > > ipalib.backend: DEBUG: Created
connection
> > > > context.rpcclient_139702145432656
> > > > >
> > > > > ipalib.install.kinit: DEBUG:
> Initializing principal
> > > > >
> host/sg.fixedandmobile.com(a)FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > > >
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>
> > > > >
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > > >
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>>
using
keytab
> > > > > /etc/krb5.keytab
> > > > >
> > > > > ipalib.install.kinit: DEBUG: using
ccache
> > > /tmp/tmp-v__2gr/ccache
> > > > >
> > > > > ipalib.install.kinit: DEBUG: Attempt
> 1/1: success
> > > > >
> > > > > ipalib.frontend: DEBUG: raw:
> > > ca_is_enabled(version=u'2.107')
> > > > >
> > > > > ipalib.frontend: DEBUG:
> > ca_is_enabled(version=u'2.107')
> > > > >
> > > > > ipalib.rpc: INFO: [try 1]: Forwarding
> > 'ca_is_enabled/1' to
> > > > json server
> > > > > '
https://sg.fixedandmobile.com/ipa/json'
> > > > >
> > > > > ipalib.rpc: DEBUG: HTTP connection
> keep-alive
> > > > (
sg.fixedandmobile.com
> <
http://sg.fixedandmobile.com>
> > <
http://sg.fixedandmobile.com> <
http://sg.fixedandmobile.com>
> > > <
http://sg.fixedandmobile.com>
> > > > > <
http://sg.fixedandmobile.com>)
> > > > >
> > > > > ipalib.rpc: DEBUG: received
Set-Cookie
> (<type
> > > > >
> > > >
> > >
> >
>
'list'>)'['ipa_session=MagBearerToken=k3UeW0CBhnYQxsMjGQXZlMLMoykL9MpMuAlwz%2bIEzsTnqSJd%2frxLN4adiTkmXRmg%2b%2b2fm75Y0YkLgQUVEG6MgbO03zo%2fulI27VKCdl8y4zhSzZXN5pfXCEf6bTU3OCdGWkLiH11iw41BWSAt2Oz5dSAFrvhHKLyzf%2bZe84BgIaLNkXPPLzs4yVlP7ysBxb1BmOjA9Zy6B6FlJf0rUAKx68RVbLPM5nCWvj7xcl0sYxFamesj%2fvA64frAlJyKuhwSUMfxwTRJQMCpuwjXjBqdZ2GO74447LXf3KUE4Pra4Do%3d;path=/ipa;httponly;secure;']'
> > > > >
> > > > > ipalib.rpc: DEBUG: storing cookie
> > > > >
> > > >
> > >
> >
>
'ipa_session=MagBearerToken=k3UeW0CBhnYQxsMjGQXZlMLMoykL9MpMuAlwz%2bIEzsTnqSJd%2frxLN4adiTkmXRmg%2b%2b2fm75Y0YkLgQUVEG6MgbO03zo%2fulI27VKCdl8y4zhSzZXN5pfXCEf6bTU3OCdGWkLiH11iw41BWSAt2Oz5dSAFrvhHKLyzf%2bZe84BgIaLNkXPPLzs4yVlP7ysBxb1BmOjA9Zy6B6FlJf0rUAKx68RVbLPM5nCWvj7xcl0sYxFamesj%2fvA64frAlJyKuhwSUMfxwTRJQMCpuwjXjBqdZ2GO74447LXf3KUE4Pra4Do%3d;'
> > > > > for principal
admin(a)FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> <mailto:admin@FIXEDANDMOBILE.COM <mailto:
admin(a)FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>>
> > > > >
> > > > > ipapython.ipaldap: DEBUG: retrieving
> schema for
> > > SchemaCache
> > > > > url=ldap://sg.fixedandmobile.com:389
> <
http://sg.fixedandmobile.com:389>
> > <
http://sg.fixedandmobile.com:389>
> > > <
http://sg.fixedandmobile.com:389>
> > > > <
http://sg.fixedandmobile.com:389>
> > > > <
http://sg.fixedandmobile.com:389>
> > > > >
conn=<ldap.ldapobject.SimpleLDAPObject
> instance at
> > > > 0x7f0ef07b8c68>
> > > > >
> > > > > ipalib.frontend: DEBUG: raw:
ca_find(None,
> > > version=u'2.231')
> > > > >
> > > > > ipalib.frontend: DEBUG: ca_find(None,
> > version=u'2.231')
> > > > >
> > > > > ipalib.rpc: INFO: [try 1]: Forwarding
> 'ca_find/1' to
> > > json server
> > > > > '
https://sg.fixedandmobile.com/ipa/json'
> > > > >
> > > > > ipalib.rpc: DEBUG: HTTP connection
> keep-alive
> > > > (
sg.fixedandmobile.com
> <
http://sg.fixedandmobile.com>
> > <
http://sg.fixedandmobile.com> <
http://sg.fixedandmobile.com>
> > > <
http://sg.fixedandmobile.com>
> > > > > <
http://sg.fixedandmobile.com>)
> > > > >
> > > > > ipalib.rpc: DEBUG: received
Set-Cookie
> (<type
> > > > >
> > > >
> > >
> >
>
'list'>)'['ipa_session=MagBearerToken=Nz2iaoFY1%2f9u4dZOG4va33r391H7RiJXQG4r6eIu825JBLHn8tuA78JX4dNwXeOcZ9lr0LhBRmHrYnSanDlBjjfB%2bGljqkyTdpif3AkFzbIO7YDPUXCO0aYc5tMlO4BJdr3yCoPvcZi1Qxshf7aEQoYhsswwAx%2batp3%2f8noK8yps4hn%2fZzbfrdzkQRRSNZzbz4bzOFhVbNFIgJMm%2f8KtEpnhyi6Guluq7RRXe0N3RO%2bXuQa1%2fyfBLnSsUzGGpEGxfu28PM6i9os2Ly2tZJpzxjsM%2bmrDY1BfwyxLiTXlCgQ%3d;path=/ipa;httponly;secure;']'
> > > > >
> > > > > ipalib.rpc: DEBUG: storing cookie
> > > > >
> > > >
> > >
> >
>
'ipa_session=MagBearerToken=Nz2iaoFY1%2f9u4dZOG4va33r391H7RiJXQG4r6eIu825JBLHn8tuA78JX4dNwXeOcZ9lr0LhBRmHrYnSanDlBjjfB%2bGljqkyTdpif3AkFzbIO7YDPUXCO0aYc5tMlO4BJdr3yCoPvcZi1Qxshf7aEQoYhsswwAx%2batp3%2f8noK8yps4hn%2fZzbfrdzkQRRSNZzbz4bzOFhVbNFIgJMm%2f8KtEpnhyi6Guluq7RRXe0N3RO%2bXuQa1%2fyfBLnSsUzGGpEGxfu28PM6i9os2Ly2tZJpzxjsM%2bmrDY1BfwyxLiTXlCgQ%3d;'
> > > > > for principal
admin(a)FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>
> <mailto:admin@FIXEDANDMOBILE.COM <mailto:
admin(a)FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>
> > <mailto:admin@FIXEDANDMOBILE.COM
> <mailto:admin@FIXEDANDMOBILE.COM>>>>>
> > > > >
> > > > > ipalib.install.sysrestore: DEBUG:
> Loading Index
> > file from
> > > > >
'/var/lib/ipa/sysrestore/sysrestore.index'
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/usr/bin/certutil -d
> > > > >
> dbm:/etc/dirsrv/slapd-FIXEDANDMOBILE-COM -A -n
> > > >
FIXEDANDMOBILE.COM
<
http://FIXEDANDMOBILE.COM>
> <
http://FIXEDANDMOBILE.COM>
> > <
http://FIXEDANDMOBILE.COM>
> > > <
http://FIXEDANDMOBILE.COM>
> > > > > <
http://FIXEDANDMOBILE.COM> IPA
CA -t
> CT,C,C -a -f
> > > > >
> /etc/dirsrv/slapd-FIXEDANDMOBILE-COM/pwdfile.txt
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/usr/bin/certutil -d
> > > > >
> dbm:/etc/dirsrv/slapd-FIXEDANDMOBILE-COM -A -n
> > > > > E=support(a)fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>>>
> > > > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>>
> > > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
>
<mailto:support@fixedandmobile.com>>>>>,CN=sg.fixedandmobile.com
> <
http://sg.fixedandmobile.com>
> > <
http://sg.fixedandmobile.com>
> > > <
http://sg.fixedandmobile.com>
> > > > <
http://sg.fixedandmobile.com>
> > > > >
> > > >
> > >
> >
> <
http://sg.fixedandmobile.com
>,OU=IT,O=Fixed&Mobile,L=Singapore,ST=Singapore,C=SG
> > > > > -t C,, -a -f
> > > /etc/dirsrv/slapd-FIXEDANDMOBILE-COM/pwdfile.txt
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/bin/systemctl
> > is-active
> > > > > dirsrv(a)FIXEDANDMOBILE-COM.service
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG:
stdout=active
> > > > >
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/bin/systemctl
> > --system
> > > > daemon-reload
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > >�� > >
> > > > > ipapython.ipautil: DEBUG:
> args=/bin/systemctl
> > restart
> > > > > dirsrv(a)FIXEDANDMOBILE-COM.service
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/bin/systemctl
> > is-active
> > > > > dirsrv(a)FIXEDANDMOBILE-COM.service
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG:
stdout=active
> > > > >
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> wait_for_open_ports:
> > localhost
> > > > [389] timeout 300
> > > > >
> > > > > ipapython.ipautil: DEBUG: waiting for
> port: 389
> > > > >
> > > > > ipapython.ipautil: DEBUG: SUCCESS:
> port: 389
> > > > >
> > > > > ipaplatform.base.services: DEBUG:
> Restart of
> > > > > dirsrv(a)FIXEDANDMOBILE-COM.service
complete
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/usr/bin/certutil -d
> > > > dbm:/etc/httpd/alias
> > > > > -A -n
FIXEDANDMOBILE.COM
> <
http://FIXEDANDMOBILE.COM>
> > <
http://FIXEDANDMOBILE.COM>
<
http://FIXEDANDMOBILE.COM>
> > > <
http://FIXEDANDMOBILE.COM>
> > > > <
http://FIXEDANDMOBILE.COM> IPA CA -t
> CT,C,C -a
> > > > > -f /etc/httpd/alias/pwdfile.txt
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/usr/bin/certutil -d
> > > > dbm:/etc/httpd/alias
> > > > > -A -n E=support(a)fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>>
> > > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>>>
> > > > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>>
> > > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
>
<mailto:support@fixedandmobile.com>>>>>,CN=sg.fixedandmobile.com
> <
http://sg.fixedandmobile.com>
> > <
http://sg.fixedandmobile.com>
> > > <
http://sg.fixedandmobile.com>
> > > > <
http://sg.fixedandmobile.com>
> > > > >
> > > >
> > >
> >
> <
http://sg.fixedandmobile.com
>,OU=IT,O=Fixed&Mobile,L=Singapore,ST=Singapore,C=SG
> > > > > -t C,, -a -f
/etc/httpd/alias/pwdfile.txt
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/bin/systemctl
> > is-active
> > > > httpd.service
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG:
stdout=active
> > > > >
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/bin/systemctl
> > restart
> > > > httpd.service
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/bin/systemctl
> > is-active
> > > > httpd.service
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG:
stdout=active
> > > > >
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipaplatform.base.services: DEBUG:
> Restart of
> > httpd.service
> > > > complete
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/usr/bin/certutil -d
> > > > dbm:/etc/ipa/nssdb
> > > > > -L -n IPA CA -a -f
> /etc/ipa/nssdb/pwdfile.txt
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished, return
> > > code=255
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> stderr=certutil: Could
> > not find
> > > > cert: IPA CA
> > > > >
> > > > > : PR_FILE_NOT_FOUND_ERROR: File not
found
> > > > >
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/usr/bin/certutil -d
> > > > dbm:/etc/ipa/nssdb
> > > > > -L -n External CA cert -a -f
> > /etc/ipa/nssdb/pwdfile.txt
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished, return
> > > code=255
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> stderr=certutil: Could
> > not find
> > > > cert: External
> > > > > CA cert
> > > > >
> > > > > : PR_FILE_NOT_FOUND_ERROR: File not
found
> > > > >
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/usr/bin/certutil -d
> > > > dbm:/etc/ipa/nssdb
> > > > > -A -n
FIXEDANDMOBILE.COM
> <
http://FIXEDANDMOBILE.COM>
> > <
http://FIXEDANDMOBILE.COM>
<
http://FIXEDANDMOBILE.COM>
> > > <
http://FIXEDANDMOBILE.COM>
> > > > <
http://FIXEDANDMOBILE.COM> IPA CA -t
> CT,C,C -a
> > > > > -f /etc/ipa/nssdb/pwdfile.txt
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> args=/usr/bin/certutil -d
> > > > dbm:/etc/ipa/nssdb
> > > > > -A -n E=support(a)fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>>
> > > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>>>
> > > > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>>
> > > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>>
> > > <mailto:support@fixedandmobile.com
> <mailto:support@fixedandmobile.com>
> > <mailto:support@fixedandmobile.com
>
<mailto:support@fixedandmobile.com>>>>>,CN=sg.fixedandmobile.com
> <
http://sg.fixedandmobile.com>
> > <
http://sg.fixedandmobile.com>
> > > <
http://sg.fixedandmobile.com>
> > > > <
http://sg.fixedandmobile.com>
> > > > >
> > > >
> > >
> >
> <
http://sg.fixedandmobile.com
>,OU=IT,O=Fixed&Mobile,L=Singapore,ST=Singapore,C=SG
> > > > > -t C,, -a -f
/etc/ipa/nssdb/pwdfile.txt
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
> finished,
> > return code=0
> > > > >
> > > > > ipapython.ipautil: DEBUG: stdout=
> > > > >
> > > > > ipapython.ipautil: DEBUG: stderr=
> > > > >
> > > > > ipapython.ipautil: DEBUG: Starting
> external process
> > > > >
> > > > > ipapython.ipautil: DEBUG:
> > args=/usr/bin/update-ca-trust
> > > > >
> > > > > ipapython.ipautil: DEBUG: Process
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>