All,
I am here again bothering with my seemingly borked installation. The
upgrade from 7.0 to 7.2 on fedora 28-29 finished (finaly), when I
spotted in my journal a stacktrace.
Digging into it, this appears to be the cause. all I find in the
internet are ancient (solved) bugs...
It appears that it has something to do with DNSSEC. Perhaps this is a
clue, I do not remember setting this up.
Kind Regards,
Arjen
[root@starkey ~]# /usr/libexec/ipa/ipa-dnskeysync-replica
ipalib.plugable: DEBUG importing all plugin modules in
ipaserver.plugins...
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.aci
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.automember
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.automount
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.baseldap
ipalib.plugable: DEBUG ipaserver.plugins.baseldap is not a valid
plugin module
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.baseuser
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.batch
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.ca
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.caacl
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.cert
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.certmap
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.certprofile
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.config
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.delegation
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.dns
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.dnsserver
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.dogtag
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.domainlevel
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.group
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.hbac
ipalib.plugable: DEBUG ipaserver.plugins.hbac is not a valid plugin
module
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.hbacrule
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.hbacsvc
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.hbacsvcgroup
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.hbactest
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.host
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.hostgroup
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.idrange
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.idviews
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.internal
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.join
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.krbtpolicy
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.ldap2
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.location
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.migration
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.misc
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.netgroup
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.otp
ipalib.plugable: DEBUG ipaserver.plugins.otp is not a valid plugin module
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.otpconfig
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.otptoken
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.passwd
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.permission
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.ping
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.pkinit
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.privilege
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.pwpolicy
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.rabase
ipalib.plugable: DEBUG ipaserver.plugins.rabase is not a valid plugin
module
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.radiusproxy
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.realmdomains
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.role
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.schema
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.selfservice
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.selinuxusermap
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.server
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.serverrole
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.serverroles
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.service
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.servicedelegation
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.session
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.stageuser
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.sudo
ipalib.plugable: DEBUG ipaserver.plugins.sudo is not a valid plugin
module
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.sudocmd
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.sudocmdgroup
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.sudorule
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.topology
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.trust
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.user
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.vault
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.virtual
ipalib.plugable: DEBUG ipaserver.plugins.virtual is not a valid
plugin module
ipalib.plugable: DEBUG importing plugin module ipaserver.plugins.whoami
ipalib.plugable: DEBUG importing plugin module
ipaserver.plugins.xmlserver
ipa-dnskeysync-replica: DEBUG Kerberos principal:
ipa-dnskeysyncd/starkey.platypusnet.org
ipalib.install.kinit: DEBUG Initializing principal
ipa-dnskeysyncd/starkey.platypusnet.org using keytab
/etc/ipa/dnssec/ipa-dnskeysyncd.keytab
ipalib.install.kinit: DEBUG using ccache
/tmp/ipa-dnskeysync-replica.ccache
ipalib.install.kinit: DEBUG Attempt 1/5: success
ipa-dnskeysync-replica: DEBUG Got TGT
ipa-dnskeysync-replica: DEBUG Connecting to LDAP
ipa-dnskeysync-replica: DEBUG Connected
Traceback (most recent call last):
File "/usr/libexec/ipa/ipa-dnskeysync-replica", line 179, in <module>
open(paths.DNSSEC_SOFTHSM_PIN).read())
File "/usr/lib/python3.7/site-packages/ipaserver/dnssec/localhsm.py",
line 104, in __init__
self.p11 = _ipap11helper.P11_Helper(label, pin, library)
File "/usr/lib/python3.7/site-packages/ipaserver/p11helper.py", line
866, in __init__
raise Error("No slot for label {} found".format(self.token_label))
ipaserver.p11helper.Error: No slot for label ipaDNSSEC found
Exception ignored in: <function LocalHSM.__del__ at 0x7fd0d6b77158>
Traceback (most recent call last):
File "/usr/lib/python3.7/site-packages/ipaserver/dnssec/localhsm.py",
line 107, in __del__
self.p11.finalize()
AttributeError: 'LocalHSM' object has no attribute 'p11'