On 9/4/19 12:02 AM, danielle lampert via FreeIPA-users wrote:
>
> Hello,
>
> I'm running freeipa 4.5.0-20 on CentOS Linux release 7.4.1708 (Core)
>
> I've noticed that when rebooting my replica, things are not working
> anymore on this replica, as I can't get a kinit work for example.
> It seems that services are disabled by default and I wonder if this is
> normal ? Should we enable these services manually ?
> After restarting everything with an ipactl command, it then is working.
>
Hi,
it's normal that kadmin.service is disabled because it will be started
as part of the ipa.service unit.
You will probably find the reason why kadmin failed to start after the
reboot in the journal, or in /var/log/kadmind.log. There was a known
issue if rpcbind service is already taking the 749 port
(https://bugzilla.redhat.com/show_bug.cgi?id=1592883)
flo
> Thanks in advance for your answers, below are my commands and their results.
>
> D.L.
>
>
> # kinit admin
> kinit: Cannot contact any KDC for realm 'IPB.RHCE.LOCAL' while getting
> initial credentials
>
> # systemctl status kadmin.service
> ● kadmin.service - Kerberos 5 Password-changing and Administration
> Loaded: loaded (/usr/lib/systemd/system/kadmin.service; disabled;
> vendor preset: disabled)
> Active: inactive (dead)
>
> # ipactl status
> Directory Service: RUNNING
> krb5kdc Service: STOPPED
> kadmin Service: STOPPED
> httpd Service: STOPPED
> ipa-custodia Service: STOPPED
> ntpd Service: STOPPED
> pki-tomcatd Service: STOPPED
> ipa-otpd Service: STOPPED
> ipa: INFO: The ipactl command was successful
>
> # ipactl restart
> Failed to get service list from file: Unknown error when retrieving list
> of services from file: [Errno 2] No such file or directory:
> '/var/run/ipa/services.list'
> Restarting Directory Service
> Restarting krb5kdc Service
> Restarting kadmin Service
> Restarting httpd Service
> Restarting ipa-custodia Service
> Restarting ntpd Service
> Restarting pki-tomcatd Service
> Restarting ipa-otpd Service
> ipa: INFO: The ipactl command was successful
>
> # kinit admin
> Password for admin@IPB.RHCE.LOCAL:
>
> # klist
> Ticket cache: KEYRING:persistent:0:0
> Default principal: admin@IPB.RHCE.LOCAL
>
> Valid starting Expires Service principal
> 03/09/19 23:55:09 04/09/19 23:55:08 krbtgt/IPB.RHCE.LOCAL@IPB.RHCE.LOCAL
>
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
>