Freeipa and Datadog
by Gabriel Stein
Hi all,
I was discussing a issue with @ftweedal and I will continue doing some
questions here.
I have installed Freeipa with an additional Replica Server, but to me some
concepts are not so clear.
Let' talk about my setup:
Goal: Replace Active Directory Auth on DMZ Network.
Provide SSL Certs for Servers/Services
If possible, Management for MIME/S Certificates(Mail Signing)
Setup:
Servers(Total: 3 VMs)
ipa1/ipa2: Freeipa Server and Replica
pki1: Datadog installation(external CA for ipa1/ipa2).
I know, Freeipa includes Datadog(and that makes the certificates management
possible), but I needed a Datadog Service to create the external CA for
ipa1/ipa2.
Now I have some questions:
- Was Datadog Installation "too much"? Probably was better just create a CA
manually with openSSL and import it on ipa1/ipa2?
- Should I use Freeipa as the sub-CA for all Servers/Services and leave
Datadog as a main CA? Do I have an advantage using this setup?
Thanks in Advance!
Best Regards,
Gabriel
Gabriel Stein
6 years, 5 months
Login failed due to an unknown reason.
by Markovich
Hello, ipa-users!
Can't login into my FreeIpa system with admin user.
*On WebUi *
Login failed due to an unknown reason.
*In krb5kdc.log:*
Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): AS_REQ (8 etypes {18
17 20 19 16 23 25 26}) 192.168.110.26: NEEDED_PREAUTH: WELLKNOWN/
ANONYMOUS(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM, Additional
pre-authentication required
Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): closing down fd 11
Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): AS_REQ (8 etypes {18
17 20 19 16 23 25 26}) 192.168.110.26: ISSUE: authtime 1507550904, etypes
{rep=18 tkt=18 ses=18}, WELLKNOWN/ANONYMOUS(a)MYDOMAIN.COM for krbtgt/
MYDOMAIN.COM(a)MYDOMAIN.COM
Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): closing down fd 11
Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): AS_REQ (8 etypes {18
17 20 19 16 23 25 26}) 192.168.110.26: NEEDED_PREAUTH: admin(a)MYDOMAIN.COM
for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM, Additional pre-authentication required
Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): closing down fd 11
Oct 09 08:08:24 myhost.mydomain krb5kdc[24787](info): AS_REQ (8 etypes {18
17 20 19 16 23 25 26}) 192.168.110.26: ISSUE: authtime 1507550904, etypes
{rep=18 tkt=18 ses=18}, admin(a)MYDOMAIN.COM for krbtgt/
MYDOMAIN.COM(a)MYDOMAIN.COM
Oct 09 08:08:24 myhost.mydomain krb5kdc[24787](info): closing down fd 11
Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): TGS_REQ (8 etypes {18
17 20 19 16 23 25 26}) 192.168.110.26: ISSUE: authtime 1507550904, etypes
{rep=18 tkt=18 ses=18}, admin(a)MYDOMAIN.COM for HTTP/
myhost.mydomain(a)MYDOMAIN.COM
Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): closing down fd 11
Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): AS_REQ (8 etypes {18
17 20 19 16 23 25 26}) 192.168.110.26: NEEDED_PREAUTH: HTTP/
myhost.mydomain(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM,
Additional pre-authentication required
Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): closing down fd 11
Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): preauth
(encrypted_timestamp) verify failure: Preauthentication failed
Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): AS_REQ (8 etypes {18
17 20 19 16 23 25 26}) 192.168.110.26: PREAUTH_FAILED: HTTP/
myhost.mydomain(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM,
Preauthentication failed
Oct 09 08:08:24 myhost.mydomain krb5kdc[24788](info): closing down fd 11
Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): AS_REQ (8 etypes {18
17 20 19 16 23 25 26}) 192.168.110.26: NEEDED_PREAUTH: HTTP/
myhost.mydomain(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM,
Additional pre-authentication required
Oct 09 08:08:24 myhost.mydomain krb5kdc[24786](info): closing down fd 11
Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): preauth
(encrypted_timestamp) verify failure: Preauthentication failed
Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): AS_REQ (8 etypes {18
17 20 19 16 23 25 26}) 192.168.110.26: PREAUTH_FAILED: HTTP/
myhost.mydomain(a)MYDOMAIN.COM for krbtgt/MYDOMAIN.COM(a)MYDOMAIN.COM,
Preauthentication failed
Oct 09 08:08:24 myhost.mydomain krb5kdc[24785](info): closing down fd 11
*In httpd error log:*
[Mon Oct 09 08:10:31.746129 2017] [auth_gssapi:error] [pid 24813] [client
192.168.110.26:45594] GSS ERROR gss_acquire_cred[_from]() failed to get
server creds: [Unspecified GSS failure. Minor code may provide more
information ( SPNEGO cannot find mechanisms to negotiate)]
[Mon Oct 09 08:10:31.749411 2017] [:error] [pid 24806] ipa: INFO: 401
Unauthorized: No session cookie found
*In messages:*
Oct 9 08:11:40 myhost gssproxy: gssproxy[13658]: (OID: { 1 2 840 113554 1
2 2 }) Unspecified GSS failure. Minor code may provide more information,
Preauthentication failed
Oct 9 08:11:40 myhost gssproxy: gssproxy[13658]: (OID: { 1 2 840 113554 1
2 2 }) Unspecified GSS failure. Minor code may provide more information,
Preauthentication failed
*The password is correct 100%.*
*I can do kinit for admin.*
*Where to look next?*
*Restart didn't help.*
OS Red Hat Enterprise Linux Server release 7.4
[root@myhost ipa]# uname -a
Linux myhost.mydomain 3.10.0-693.2.2.el7.x86_64 #1 SMP Tue Sep 12 10:49:01
PDT 2017 x86_64 x86_64 x86_64 GNU/Linux
Regards,
Andrey
6 years, 5 months
IPA Server Upgrade Error
by Alka Murali
Hello,
Currently my server is running on IPA Server Version 4.4. I have tried to
upgrade the Version to 4.5 using the ipa-server-upgrade command and got
ended with the following error:
--------
2017-09-26T02:27:32Z DEBUG stderr=
2017-09-26T02:27:50Z DEBUG Loading Index file from
'/var/lib/ipa/sysrestore/sysrestore.index'
2017-09-26T02:27:53Z DEBUG Starting external process
2017-09-26T02:27:53Z DEBUG args=/usr/bin/certutil -d
/etc/dirsrv/slapd-LGA-NET-SG -L -n Server-Cert -a -f
/etc/dirsrv/slapd-LGA-NET-SG/pwdfile.txt
2017-09-26T02:27:56Z DEBUG Process finished, return code=255
2017-09-26T02:27:56Z DEBUG stdout=
2017-09-26T02:27:56Z DEBUG stderr=certutil: Could not find cert: Server-Cert
: PR_FILE_NOT_FOUND_ERROR: File not found
2017-09-26T02:27:56Z ERROR IPA server upgrade failed: Inspect
/var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
2017-09-26T02:27:56Z DEBUG File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in
execute
return_value = self.run()
File
"/usr/lib/python2.7/site-packages/ipaserver/install/ipa_server_upgrade.py",
line 46, in run
server.upgrade()
File
"/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py",
line 1913, in upgrade
upgrade_configuration()
File
"/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py",
line 1788, in upgrade_configuration
certificate_renewal_update(ca, ds, http),
File
"/usr/lib/python2.7/site-packages/ipaserver/install/server/upgrade.py",
line 1018, in certificate_renewal_update
ds.start_tracking_certificates(serverid)
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
line 1046, in start_tracking_certificates
'restart_dirsrv %s' % serverid)
File "/usr/lib/python2.7/site-packages/ipaserver/install/certs.py", line
362, in track_server_cert
cert_obj = x509.load_certificate(cert)
File "/usr/lib/python2.7/site-packages/ipalib/x509.py", line 119, in
load_certificate
return cryptography.x509.load_der_x509_certificate(data,
default_backend())
File "/usr/lib64/python2.7/site-packages/cryptography/x509/base.py", line
47, in load_der_x509_certificate
return backend.load_der_x509_certificate(data)
File
"/usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/multibackend.py",
line 350, in load_der_x509_certificate
return b.load_der_x509_certificate(data)
File
"/usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/backend.py",
line 1185, in load_der_x509_certificate
raise ValueError("Unable to load certificate")
2017-09-26T02:27:56Z DEBUG The ipa-server-upgrade command failed,
exception: ValueError: Unable to load certificate
2017-09-26T02:27:56Z ERROR Unexpected error - see /var/log/ipaupgrade.log
for details:
ValueError: Unable to load certificate
2017-09-26T02:27:56Z ERROR The ipa-server-upgrade command failed. See
/var/log/ipaupgrade.log for more information
-------
I am using a third party signed certificate along with my IPA-CA. Is it an
issue with my current CA. I can see that while fetching for the
certificate, the name given to be "Server-cert" instead of the exact CA
name.
--
Regards,
Alka Murali
6 years, 5 months
ansible-freeipa
by Thomas Woerner
Hello,
we have made big progress with ansible-freeipa to be able to install ipa
clients using ansible.
These are the things that we are able to do now:
- Simple installation on more than one machine
- One configuration file (inventory file) per realm (One place for
configuration options)
- Authentication types
- Simple use of OTP for installation and update
- More secure (admin password not transferred to the clients)
- Only setting of a variable is needed to enable the use of OTP
- Admin principal and password
- Existing host keytab
- Advanced auto detection (server only, no need to provide domain)
- Repair of broken configurations
- Known limitation: /etc/krb5.keytab can not be repaired
- Working with freeipa-4.4 and up
- RHEL-7.3 and up
- Fedora-25+
- Support for Python3 based freeipa in Fedora-27
The basic usage is explained in the README of the repository:
https://github.com/freeipa/ansible-freeipa
I'd like to start a discussion about naming conventions and also about customer
and user requests for extensions and changes.
Please give it a try and report issues you are running into.
Regards,
Thomas
6 years, 5 months
Smartcard not working on Ubuntu 16.04
by Steve Weeks
We have smartcards (PIV) working just fine on Fedora 25 with FreeIPA client
version 4.4.4 (SSSD 1.14.2). However on Ubuntu 16.04, FreeIPA client
4.3.1, SSSD 1.13.4 the smartcard seems to be ignored.
The smartcard is readable using pkcs11-tools and pkcs15-tools on both
systems.
On both systems sssd.conf contains:
[pam]
pam_cert_auth = True
I've turned the sssd logging up to 9 on both systems and it looks like
p11_child is never called on the Ubuntu system. On the Ubuntu system
p11_child.log is empty and there is no sign of it being started in the
sssd_pam.log.
Any suggestions on what I should look at next?
Thanks,
Steve
6 years, 5 months
Web UI shows users as disabled when they aren't
by Kristian Petersen
I noticed just today when trying to reset a password for a user that when I
pull up the page for a specific user, it shows them as being disabled even
if they aren't. This causes teh reset password option to be grayed-out
among other things. I verified the users weren't actually disabled by
running ipa user-show <username> on a few of them. If you do a user search
or show all of the users in the system the status shows correctly on that
page of the Web UI. The problem appears to happen across the replicas as
well.
After playing around with the Web UI for a bit I found that a hard refresh
(Ctrl+Shift+R) of the user's page fixes this problem *very temporarily*.
If you go to another user the problem resurfaces. Something is getting
cached by the browser that is causing it to display incorrectly. I have
confirmed this happens in both chrome and firefox running in both Windows
and Linux. The httpd logs show nothing there, /var/log/ipa logs aren't
helpful either.
IPA got some updates on Sept. 27th (which also appear to have broken
pki-tomcatd), but I didn't notice this particular issue until today. IPA
will run with out the pki-tomcatd working if you tell it to ignore the
failure, however, I'm not sure if the two problems are related.
--
Kristian Petersen
System Administrator
Dept. of Chemistry and Biochemistry
6 years, 5 months
external user in sudo rule
by Behnam Loghmani
Hi
I have an ipa server version 4.5 with one ipa replica and one ipa client,
all on CentOS 7.
I need to manage anythings about sudoers on ipa server so I decided to use
externaluser in sudo rules, such as below:
# ipa sudorule-show behnam
Rule name: behnam
Enabled: TRUE
Host category: all
Command category: all
RunAs User category: all
RunAs Group category: all
External User: behnam
Sudo Option: !authenticate
but when I check sudo in client system, it returns that behnam may not run
sudo.
[behnam@***** ~]$ sudo -l
[sudo] password for behnam:
Sorry, user behnam may not run sudo on *****
6 years, 5 months
Can't install ipa-server-4.5.0 on RHEL 7.4: Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768.
by Markovich
Hello freeipa-users!
I'm trying to install ipa-server-4.5.0-21.0.1.el7_4.1.2.x86_64 on Red Hat Enterprise Linux Server release 7.4 (Maipo) but getting error:
[Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ...
[04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
...
cat /proc/meminfo
MemTotal: 16170720 kB
MemFree: 9051152 kB
Buffers: 11280 kB
Cached: 3490240 kB
SwapCached: 0 kB
Active: 5041772 kB
Inactive: 1337116 kB
Active(anon): 2878404 kB
Inactive(anon): 8128 kB
Active(file): 2163368 kB
Inactive(file): 1328988 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 2097148 kB
SwapFree: 2097148 kB
Dirty: 400 kB
Writeback: 0 kB
AnonPages: 2877664 kB
Mapped: 66880 kB
Shmem: 8876 kB
Slab: 562760 kB
SReclaimable: 519908 kB
SUnreclaim: 42852 kB
KernelStack: 7408 kB
PageTables: 12624 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 10182508 kB
Committed_AS: 5700160 kB
VmallocTotal: 34359738367 kB
VmallocUsed: 31364 kB
VmallocChunk: 34359694544 kB
HardwareCorrupted: 0 kB
HugePages_Total: 0
HugePages_Free: 0
HugePages_Rsvd: 0
HugePages_Surp: 0
Hugepagesize: 2048 kB
DirectMap4k: 8192 kB
DirectMap2M: 2088960 kB
DirectMap1G: 14680064 kB
My command:
ipa-server-install --hostname=myhostname --domain=mydomain.com --realm=MYDOMAIN.COM --ds-password=password--master-password=password--admin-password=password--unattended --debug
And on the second step:
Done configuring NTP daemon (ntpd).
Configuring directory server (dirsrv). Estimated time: 30 seconds
[1/45]: creating directory server instance
[error] RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1
More debug info is here:
2017-10-04T15:55:52Z DEBUG calling setup-ds.pl
2017-10-04T15:55:52Z DEBUG Starting external process
2017-10-04T15:55:52Z DEBUG args=/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_
2017-10-04T15:55:56Z DEBUG Process finished, return code=1
2017-10-04T15:55:56Z DEBUG stdout=[17/10/04:11:55:56] - [Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ...
[04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.900526100 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000
[04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start - Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache - pagesize: 4096, available bytes 9223372030878334975, process usage 13570048
[04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache - Import allocates 144115185741308KB import cache.
[04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache - Setting ncache to: 34359738 to keep each chunk below 4Gbytes
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260 0x7f36f74e9a40 0x7 f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7
tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc 0x7f36f74e9a40 0x7f36f335 bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7
[04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc: 584852224468: Cannot allocate memory
[04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to allocate memory for mutexes from the region
[04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC: Cannot allocate memory
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023 0x7f36f74e961c 0x7 f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7
[04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544 process-private: unable to find environment
[04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start - Unable to open new DB_ENV for import/export! -30973
[04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start - Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973)
Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output: importing data ...
[04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.900526100 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000
[04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start - Import is running with nsslapd-db-private-import-mem on; No other process is allowed to access the database
[04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache - pagesize: 4096, available bytes 9223372030878334975, process usage 13570048
[04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache - Import allocates 144115185741308KB import cache.
[04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache - Setting ncache to: 34359738 to keep each chunk below 4Gbytes
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260 0x7f36f74e9a40 0x7 f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7
tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc 0x7f36f74e9a40 0x7f36f335 bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7
[04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc: 584852224468: Cannot allocate memory
[04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to allocate memory for mutexes from the region
[04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC: Cannot allocate memory
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3 0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023 0x7f36f74e961c 0x7 f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05 0x7f3700972ad7
[04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544 process-private: unable to find environment
[04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start - Unable to open new DB_ENV for import/export! -30973
[04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start - Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973)
[17/10/04:11:55:56] - [Setup] Fatal Error: Could not create directory server instance 'MYDOMAIN-COM'.
Error: Could not create directory server instance 'MYDOMAIN-COM'.
[17/10/04:11:55:56] - [Setup] Fatal Exiting . . .
Log file is '-'
Exiting . . .
Log file is '-'
2017-10-04T15:55:56Z DEBUG stderr=
2017-10-04T15:55:56Z DEBUG Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 559, in __create_instance
raise RuntimeError("failed to create DS instance %s" % e)
RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1
2017-10-04T15:55:56Z DEBUG [error] RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1
2017-10-04T15:55:56Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
return_value = self.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 333, in run
cfgr.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 368, in run
self.execute()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 392, in execute
for _nothing in self._executor():
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 658, in _configure
next(executor)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521, in _handle_exception
self.__parent._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install
for _nothing in self._installer(self.parent):
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 578, in main
master_install(self)
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 248, in decorated
func(installer)
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 758, in install
setup_pkinit=not options.no_pkinit)
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 344, in create_instance
self.start_creation(runtime=30)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 559, in __create_instance
raise RuntimeError("failed to create DS instance %s" % e)
2017-10-04T15:55:56Z DEBUG The ipa-server-install command failed, exception: RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfil e - -f /tmp/tmpPQPUX_' returned non-zero exit status 1
2017-10-04T15:55:56Z ERROR failed to create DS instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1
2017-10-04T15:55:56Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
Regards,
Andrey
6 years, 5 months
Can't install ipa-server-4.5.0 on RHEL 7.4
by Markovich
*Hello freeipa-users!*
*I'm trying to install ipa-server-4.5.0-21.0.1.el7_4.1.2.x86_64 on Red Hat
Enterprise Linux Server release 7.4 (Maipo) but getting error:*
[Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'.
Error: 768. Output: importing data ...
[04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
...
*cat /proc/meminfo*
MemTotal: 16170720 kB
MemFree: 9051152 kB
Buffers: 11280 kB
Cached: 3490240 kB
SwapCached: 0 kB
Active: 5041772 kB
Inactive: 1337116 kB
Active(anon): 2878404 kB
Inactive(anon): 8128 kB
Active(file): 2163368 kB
Inactive(file): 1328988 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 2097148 kB
SwapFree: 2097148 kB
Dirty: 400 kB
Writeback: 0 kB
AnonPages: 2877664 kB
Mapped: 66880 kB
Shmem: 8876 kB
Slab: 562760 kB
SReclaimable: 519908 kB
SUnreclaim: 42852 kB
KernelStack: 7408 kB
PageTables: 12624 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 10182508 kB
Committed_AS: 5700160 kB
VmallocTotal: 34359738367 kB
VmallocUsed: 31364 kB
VmallocChunk: 34359694544 kB
HardwareCorrupted: 0 kB
HugePages_Total: 0
HugePages_Free: 0
HugePages_Rsvd: 0
HugePages_Surp: 0
Hugepagesize: 2048 kB
DirectMap4k: 8192 kB
DirectMap2M: 2088960 kB
DirectMap1G: 14680064 kB
* My command:*
ipa-server-install --hostname=myhostname --domain=mydomain.com --realm=
MYDOMAIN.COM
--ds-password=password--master-password=password--admin-password=password--unattended
--debug
*And on the second step:*
Done configuring NTP daemon (ntpd).
Configuring directory server (dirsrv). Estimated time: 30 seconds
[1/45]: creating directory server instance
[error] RuntimeError: failed to create DS instance Command '/usr/sbin/
setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit
status 1
*More debug info is here:*
2017-10-04T15:55:52Z DEBUG calling setup-ds.pl
2017-10-04T15:55:52Z DEBUG Starting external process
2017-10-04T15:55:52Z DEBUG args=/usr/sbin/setup-ds.pl --silent --logfile -
-f /tmp/tmpPQPUX_
2017-10-04T15:55:56Z DEBUG Process finished, return code=1
2017-10-04T15:55:56Z DEBUG stdout=[17/10/04:11:55:56] - [Setup] Info Could
not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output:
importing data ...
[04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.900526100 -0400] - INFO -
ldbm_instance_config_cachememsize_set - force a minimal value 512000
[04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start -
Import is running with nsslapd-db-private-import-mem on; No other process
is allowed to access
the database
[04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache
- pagesize: 4096, available bytes 9223372030878334975, process usage
13570048
[04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache
- Import allocates 144115185741308KB import cache.
[04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache -
Setting ncache to: 34359738 to keep each chunk below 4Gbytes
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260
0x7f36f74e9a40 0x7
f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05
0x7f3700972ad7
tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc
0x7f36f74e9a40 0x7f36f335
bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05
0x7f3700972ad7
[04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc:
584852224468: Cannot allocate memory
[04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to
allocate memory for mutexes from the region
[04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC:
Cannot allocate memory
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023
0x7f36f74e961c 0x7
f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2
0x7f36fd5a1c05 0x7f3700972ad7
[04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544
process-private: unable to find environment
[04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start -
Unable to open new DB_ENV for import/export! -30973
[04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start -
Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973)
Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768.
Output: importing data ...
[04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.900526100 -0400] - INFO -
ldbm_instance_config_cachememsize_set - force a minimal value 512000
[04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start -
Import is running with nsslapd-db-private-import-mem on; No other process
is allowed to access
the database
[04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache
- pagesize: 4096, available bytes 9223372030878334975, process usage
13570048
[04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache
- Import allocates 144115185741308KB import cache.
[04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache -
Setting ncache to: 34359738 to keep each chunk below 4Gbytes
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260
0x7f36f74e9a40 0x7
f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05
0x7f3700972ad7
tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc
0x7f36f74e9a40 0x7f36f335
bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05
0x7f3700972ad7
[04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc:
584852224468: Cannot allocate memory
[04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to
allocate memory for mutexes from the region
[04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC:
Cannot allocate memory
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023
0x7f36f74e961c 0x7
f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2
0x7f36fd5a1c05 0x7f3700972ad7
[04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544
process-private: unable to find environment
[04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start -
Unable to open new DB_ENV for import/export! -30973
[04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start -
Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973)
[17/10/04:11:55:56] - [Setup] Fatal Error: Could not create directory
server instance 'MYDOMAIN-COM'.
Error: Could not create directory server instance 'MYDOMAIN-COM'.
[17/10/04:11:55:56] - [Setup] Fatal Exiting . . .
Log file is '-'
Exiting . . .
Log file is '-'
2017-10-04T15:55:56Z DEBUG stderr=
2017-10-04T15:55:56Z DEBUG Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 504, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 494, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
line 559, in __create_instance
raise RuntimeError("failed to create DS instance %s" % e)
RuntimeError: failed to create DS instance Command '/usr/sbin/setup-ds.pl
--silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1
2017-10-04T15:55:56Z DEBUG [error] RuntimeError: failed to create DS
instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f
/tmp/tmpPQPUX_' returned non-zero
exit status 1
2017-10-04T15:55:56Z DEBUG File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in
execute
return_value = self.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line
333, in run
cfgr.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
368, in run
self.execute()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
392, in execute
for _nothing in self._executor():
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
434, in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
463, in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
453, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
424, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
421, in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line
81, in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line
59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
658, in _configure
next(executor)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
434, in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
463, in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
521, in _handle_exception
self.__parent._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
453, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
518, in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
453, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
424, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
421, in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line
81, in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line
59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line
63, in _install
for _nothing in self._installer(self.parent):
File
"/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py",
line 578, in main
master_install(self)
File
"/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py",
line 248, in decorated
func(installer)
File
"/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py",
line 758, in install
setup_pkinit=not options.no_pkinit)
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
line 344, in create_instance
self.start_creation(runtime=30)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 504, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 494, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
line 559, in __create_instance
raise RuntimeError("failed to create DS instance %s" % e)
2017-10-04T15:55:56Z DEBUG The ipa-server-install command failed,
exception: RuntimeError: failed to create DS instance Command '/usr/sbin/
setup-ds.pl --silent --logfil
e - -f /tmp/tmpPQPUX_' returned non-zero exit status
1
2017-10-04T15:55:56Z ERROR failed to create DS instance Command '/usr/sbin/
setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit
status 1
2017-10-04T15:55:56Z ERROR The ipa-server-install command failed. See
/var/log/ipaserver-install.log for more information
*Regards,*
*Andrey*
6 years, 5 months
Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768.
by Markovich
*Hello freeipa-users!*
*I'm trying to install ipa-server-4.5.0-21.0.1.el7_4.1.2.x86_64 on Red Hat
Enterprise Linux Server release 7.4 (Maipo) but getting error:*
[Setup] Info Could not import LDIF file '/var/lib/dirsrv/boot.ldif'.
Error: 768. Output: importing data ...
[04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
...
*cat /proc/meminfo*
MemTotal: 16170720 kB
MemFree: 9051152 kB
Buffers: 11280 kB
Cached: 3490240 kB
SwapCached: 0 kB
Active: 5041772 kB
Inactive: 1337116 kB
Active(anon): 2878404 kB
Inactive(anon): 8128 kB
Active(file): 2163368 kB
Inactive(file): 1328988 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 2097148 kB
SwapFree: 2097148 kB
Dirty: 400 kB
Writeback: 0 kB
AnonPages: 2877664 kB
Mapped: 66880 kB
Shmem: 8876 kB
Slab: 562760 kB
SReclaimable: 519908 kB
SUnreclaim: 42852 kB
KernelStack: 7408 kB
PageTables: 12624 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 10182508 kB
Committed_AS: 5700160 kB
VmallocTotal: 34359738367 kB
VmallocUsed: 31364 kB
VmallocChunk: 34359694544 kB
HardwareCorrupted: 0 kB
HugePages_Total: 0
HugePages_Free: 0
HugePages_Rsvd: 0
HugePages_Surp: 0
Hugepagesize: 2048 kB
DirectMap4k: 8192 kB
DirectMap2M: 2088960 kB
DirectMap1G: 14680064 kB
* My command:*
ipa-server-install --hostname=myhostname --domain=mydomain.com --realm=
MYDOMAIN.COM <http://mydomain.com/> --ds-password=password--
master-password=password--admin-password=password--unattended --debug
*And on the second step:*
Done configuring NTP daemon (ntpd).
Configuring directory server (dirsrv). Estimated time: 30 seconds
[1/45]: creating directory server instance
[error] RuntimeError: failed to create DS instance Command '/usr/sbin/
setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit
status 1
*More debug info is here:*
2017-10-04T15:55:52Z DEBUG calling setup-ds.pl
2017-10-04T15:55:52Z DEBUG Starting external process
2017-10-04T15:55:52Z DEBUG args=/usr/sbin/setup-ds.pl --silent --logfile -
-f /tmp/tmpPQPUX_
2017-10-04T15:55:56Z DEBUG Process finished, return code=1
2017-10-04T15:55:56Z DEBUG stdout=[17/10/04:11:55:56] - [Setup] Info Could
not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768. Output:
importing data ...
[04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.900526100 -0400] - INFO -
ldbm_instance_config_cachememsize_set
- force a minimal value 512000
[04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start -
Import is running with nsslapd-db-private-import-mem on; No other process
is allowed to access
the database
[04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache
- pagesize: 4096, available bytes 9223372030878334975, process usage
13570048
[04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache
- Import allocates 144115185741308KB import cache.
[04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache -
Setting ncache to: 34359738 to keep each chunk below 4Gbytes
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260
0x7f36f74e9a40 0x7
f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05
0x7f3700972ad7
tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc
0x7f36f74e9a40 0x7f36f335
bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05
0x7f3700972ad7
[04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc:
584852224468: Cannot allocate memory
[04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to
allocate memory for mutexes from the region
[04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC:
Cannot allocate memory
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023
0x7f36f74e961c 0x7
f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2
0x7f36fd5a1c05 0x7f3700972ad7
[04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544
process-private: unable to find environment
[04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start -
Unable to open new DB_ENV for import/export! -30973
[04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start -
Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973)
Could not import LDIF file '/var/lib/dirsrv/boot.ldif'. Error: 768.
Output: importing data ...
[04/Oct/2017:11:55:53.798978140 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.900526100 -0400] - INFO -
ldbm_instance_config_cachememsize_set
- force a minimal value 512000
[04/Oct/2017:11:55:53.902864577 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.923965959 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.945262395 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.953918605 -0400] - INFO - dblayer_instance_start -
Import is running with nsslapd-db-private-import-mem on; No other process
is allowed to access
the database
[04/Oct/2017:11:55:53.961341875 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.963334442 -0400] - INFO - check_and_set_import_cache
- pagesize: 4096, available bytes 9223372030878334975, process usage
13570048
[04/Oct/2017:11:55:53.964858651 -0400] - INFO - check_and_set_import_cache
- Import allocates 144115185741308KB import cache.
[04/Oct/2017:11:55:53.966412876 -0400] - ERR - spal_meminfo_get - Unable to
retrieve /proc/meminfo : MemAvailable:
[04/Oct/2017:11:55:53.968456383 -0400] - NOTICE - dblayer_select_ncache -
Setting ncache to: 34359738 to keep each chunk below 4Gbytes
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74e9260
0x7f36f74e9a40 0x7
f36f335bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05
0x7f3700972ad7
tcmalloc: large alloc 584852226048 bytes == (nil) @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74a7d4a 0x7f36f74e92fc
0x7f36f74e9a40 0x7f36f335
bf61 0x7f36f33a32ff 0x7f37009720e2 0x7f36fd5a1c05
0x7f3700972ad7
[04/Oct/2017:11:55:55.213645769 -0400] - ERR - libdb - BDB0147 malloc:
584852224468: Cannot allocate memory
[04/Oct/2017:11:55:55.233320159 -0400] - ERR - libdb - BDB2014 Unable to
allocate memory for mutexes from the region
[04/Oct/2017:11:55:55.244128535 -0400] - ERR - libdb - BDB0061 PANIC:
Cannot allocate memory
tcmalloc: large alloc 1649270784 bytes == 0x7f370367e000 @ 0x7f36ffd8cbf3
0x7f36ffdaccf2 0x7f36f751bb25 0x7f36f74e5c17 0x7f36f74ef019 0x7f36f74f0023
0x7f36f74e961c 0x7
f36f74e9a40 0x7f36f335bf61 0x7f36f33a32ff 0x7f37009720e2
0x7f36fd5a1c05 0x7f3700972ad7
[04/Oct/2017:11:55:56.472105344 -0400] - ERR - libdb - BDB1544
process-private: unable to find environment
[04/Oct/2017:11:55:56.481460130 -0400] - ERR - dblayer_instance_start -
Unable to open new DB_ENV for import/export! -30973
[04/Oct/2017:11:55:56.483212941 -0400] - ERR - dblayer_instance_start -
Failure BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery (-30973)
[17/10/04:11:55:56] - [Setup] Fatal Error: Could not create directory
server instance 'MYDOMAIN-COM'.
Error: Could not create directory server instance 'MYDOMAIN-COM'.
[17/10/04:11:55:56] - [Setup] Fatal Exiting . . .
Log file is '-'
Exiting . . .
Log file is '-'
2017-10-04T15:55:56Z DEBUG stderr=
2017-10-04T15:55:56Z DEBUG Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 504, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 494, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
line 559, in __create_instance
raise RuntimeError("failed to create DS instance %s" % e)
RuntimeError: failed to create DS instance Command
'/usr/sbin/setup-ds.pl --silent
--logfile - -f /tmp/tmpPQPUX_' returned non-zero exit status 1
2017-10-04T15:55:56Z DEBUG [error] RuntimeError: failed to create DS
instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f
/tmp/tmpPQPUX_' returned non-zero
exit status 1
2017-10-04T15:55:56Z DEBUG File "/usr/lib/python2.7/site-
packages/ipapython/admintool.py", line 172, in execute
return_value = self.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line
333, in run
cfgr.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
368, in run
self.execute()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
392, in execute
for _nothing in self._executor():
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
434, in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
463, in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
453, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
424, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
421, in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line
81, in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line
59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
658, in _configure
next(executor)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
434, in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
463, in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
521, in _handle_exception
self.__parent._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
453, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
518, in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
453, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
424, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line
421, in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line
81, in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line
59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line
63, in _install
for _nothing in self._installer(self.parent):
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py",
line 578, in main
master_install(self)
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py",
line 248, in decorated
func(installer)
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py",
line 758, in install
setup_pkinit=not options.no_pkinit)
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
line 344, in create_instance
self.start_creation(runtime=30)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 504, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 494, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py",
line 559, in __create_instance
raise RuntimeError("failed to create DS instance %s" % e)
2017-10-04T15:55:56Z DEBUG The ipa-server-install command failed,
exception: RuntimeError: failed to create DS instance Command '/usr/sbin/
setup-ds.pl --silent --logfil
e - -f /tmp/tmpPQPUX_' returned non-zero exit status
1
2017-10-04T15:55:56Z ERROR failed to create DS instance Command '/usr/sbin/
setup-ds.pl --silent --logfile - -f /tmp/tmpPQPUX_' returned non-zero exit
status 1
2017-10-04T15:55:56Z ERROR The ipa-server-install command failed. See
/var/log/ipaserver-install.log for more information
*Regards,*
*Andrey*
6 years, 5 months