Can't install client on scientific linux 7.3

[Niels Walet]

I seem to have some serios issues with ipa on sl 7.3; on installing on a client, the
install works through fine until it bombs on the following issue:
<long trace of ipa-client-install --password=' --domain  --realm --server
--hostname=xxxx --debug>
,,,,,
Configured /etc/krb5.conf for IPA realm YYY
Starting external process
args=keyctl search @s user ipa_session_cookie:host/xxx@YYY
Process finished, return code=1
stdout=
stderr=keyctl_search: Required key not available

Starting external process
args=/usr/bin/certutil -d /tmp/tmpl7C_lX -N -f /tmp/tmpL9Jnj9
Process finished, return code=0
stdout=
stderr=
Starting external process
args=/usr/bin/certutil -d /tmp/tmpl7C_lX -A -n CA certificate 1 -t C,,
Process finished, return code=0
stdout=
stderr=
Starting external process
args=keyctl search @s user ipa_session_cookie:host/xxx@YYY
Process finished, return code=1
stdout=
stderr=keyctl_search: Required key not available

failed to find session_cookie in persistent storage for principal 'host/xxx@YYY'
trying https://theoipa.ph.man.ac.uk/ipa/json
Created connection context.rpcclient_47349328
Forwarding 'schema' to json server 'https://ipa.xxxx/ipa/json'
Destroyed connection context.rpcclient_47349328
Traceback (most recent call last):
<long traceback>

---
Prof. Niels R. Walet                             Phone:  [phone]
School of Physics and Astronomy         Mobile: [phone]
The University of Manchester                Room 7.7, Schuster Building
Manchester, M13 9PL,  UK
email: Niels.Walet(a)manchester.ac.uk   twitter: @nwalet

[Florence Blanc-Renaud]

On 06/27/2017 12:40 PM, Niels Walet via FreeIPA-users wrote:
>  I seem to have some serios issues with ipa on sl 7.3; on installing
> on a
>  client, the install works through fine until it bombs on the following
>  issue:
>  <long trace of ipa-client-install --password=' --domain  --realm
>  --server --hostname=xxxx --debug>
>  ,,,,,
>  Configured /etc/krb5.conf for IPA realm YYY
>  Starting external process
>  args=keyctl search @s user ipa_session_cookie:host/xxx@YYY
>  Process finished, return code=1
>  stdout=
>  stderr=keyctl_search: Required key not available
>
>  Starting external process
>  args=/usr/bin/certutil -d /tmp/tmpl7C_lX -N -f /tmp/tmpL9Jnj9
>  Process finished, return code=0
>  stdout=
>  stderr=
>  Starting external process
>  args=/usr/bin/certutil -d /tmp/tmpl7C_lX -A -n CA certificate 1 -t C,,
>  Process finished, return code=0
>  stdout=
>  stderr=
>  Starting external process
>  args=keyctl search @s user ipa_session_cookie:host/xxx@YYY
>  Process finished, return code=1
>  stdout=
>  stderr=keyctl_search: Required key not available
>
>  failed to find session_cookie in persistent storage for principal
>  'host/xxx@YYY'
>  trying https://theoipa.ph.man.ac.uk/ipa/json
>  Created connection context.rpcclient_47349328
>  Forwarding 'schema' to json server 'https://ipa.xxxx/ipa/json'
>  Destroyed connection context.rpcclient_47349328
>  Traceback (most recent call last):
>  <long traceback>
>  
Hi,

the traces until "Forwarding 'schema' to json server" look normal to me.

Could you attach the traceback for us to find where the issue happens?

Thanks,
Flo.
>  ---
>  Prof. Niels R. Walet                             Phone:  [phone]
>  /School of Physics and Astronomy/         Mobile: [phone]
>  /The University of Manchester /               Room 7.7, Schuster Building
>  /Manchester, M13 9PL,  UK/
>  email: Niels.Walet(a)manchester.ac.uk   twitter: @nwalet
>
>
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>