Melnychuk, Konstantin (KRLDS) via FreeIPA-users wrote:
Hi everyone Can anybody help, me, please? Overview. My error message:
The host 'ipa-eastus.xxxxx.com' does not exist to add a service to
I have a task to install two Freeipa servers with replication, in Kubernetes and restore there some data from backup. So I did set up first Freeipa 4.3.3 server in Kubernetes with this official docker file https://github.com/freeipa/freeipa-container/blob/master/Dockerfile.fedora-2... . After that I uploaded backup into pod. I entered inside pod and restored my backup according to official manual with restore utility:
ipa-restore --data /my_backup_folder
First server works perfectly, I can access web UI, make ldap queries, manage users, groups, etc. Then I did set up another Freeipa in another region. I also installed it in Kubernetes with the same docker file as above. Finally I tried to install replica and got issue. My steps on second server:
- Remove initial set up
ipa-server-install -U --uninstall
- Install ipa client:
ipa-client-install --debug -U --domain xxxxx.com --realm XXXXXXX.COM --server first-ipa.xxxxxx.com -p admin -w <password> --hostname ipa-eastus.xxxxxx.com --request-cert --no-ntp After this step I can successfully run such command as ipa host-find, ipa service-find, etc. So IPA client works fine.
- Install ipa replica:
ipa-replica-install --debug -U -w <password> --hostname ipa-eastus.xxxxxxx.com During this step it verifies network connection between servers, network is fine, then it fetches some info from first server and in the middle of progress fails with
ipa.ipalib.plugins.rpcclient.rpcclient: DEBUG Destroyed connection context.rpcclient_140224155653136 ipa : DEBUG Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 448, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 438, in run_step method() File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 1222, in __get_ds_keytab force_service_add=True) File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 1141, in install_service_keytab version=u'2.112' # All the way back to 3.0 servers File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 986, in forward return self._call_command(command, params) File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 963, in _call_command return command(*params) File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 1115, in _call return self.__request(name, args) File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 1109, in __request raise error_class(message=error['message']) NotFound: The host 'ipa-eastus.xxxxxxx.com' does not exist to add a service to.
ipa : DEBUG [error] NotFound: The host 'ipa-eastus.xxxxxxx.com' does not exist to add a service to. [error] NotFound: The host 'ipa-eastus.xxxxxxx.com' does not exist to add a service to. Your system may be partly configured. Run /usr/sbin/ipa-server-install --uninstall to clean up. Can anyone help me with this? I am confused, because after step 2 - the host "ipa-eastus.xxxxxxx.com" is added to first server, I don't understand why it tells that host doesn't exist. All DNS names are configured properly.
Sure seems like the replica installation is connecting with a different remote master. I'd dig into the replica installation log in more detail to see who it is talking to.
rob