I am testing my restore procedure by restore the production data onto an isolated VM with
the same IP and hostname.
Ipa-restore was successful. Ipactl status shows all services are running. Kinit , dns and
ldapsearch are working.
Web UI would let me log in but encountered unknown errors.
[Tue Sep 06 15:38:25.383729 2022] [:error] [pid 25141] SSL Library Error: -12195 Peer does
not recognize and trust the CA that issued your certificate
[Tue Sep 06 15:38:25.490606 2022] [:error] [pid 28173] SSL Library Error: -12195 Peer does
not recognize and trust the CA that issued your certificate
[Tue Sep 06 15:38:41.202257 2022] [:error] [pid 25139] ipa: DEBUG: WSGI
wsgi_dispatch.__call__:
[Tue Sep 06 15:38:41.202793 2022] [:error] [pid 25139] ipa: DEBUG: WSGI
login_password.__call__:
[Tue Sep 06 15:38:41.205805 2022] [:error] [pid 25139] ipa: DEBUG: Obtaining armor in
ccache /var/run/ipa/ccaches/armor_25139
[Tue Sep 06 15:38:41.206144 2022] [:error] [pid 25139] ipa: DEBUG: Initializing anonymous
ccache
[Tue Sep 06 15:38:41.206850 2022] [:error] [pid 25139] ipa: DEBUG: Starting external
process
[Tue Sep 06 15:38:41.206979 2022] [:error] [pid 25139] ipa: DEBUG: args=/usr/bin/kinit -n
-c /var/run/ipa/ccaches/armor_25139 -X X509_anchors=FILE:/var/kerberos/krb5kdc/kdc.crt -X
X509_anchors=FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem
[Tue Sep 06 15:38:41.364653 2022] [:error] [pid 25139] ipa: DEBUG: Process finished,
return code=0
[Tue Sep 06 15:38:41.364952 2022] [:error] [pid 25139] ipa: DEBUG: stdout=
[Tue Sep 06 15:38:41.365047 2022] [:error] [pid 25139] ipa: DEBUG: stderr=
[Tue Sep 06 15:38:41.365828 2022] [:error] [pid 25139] ipa: DEBUG: Initializing principal
user1 using password
[Tue Sep 06 15:38:41.365934 2022] [:error] [pid 25139] ipa: DEBUG: Using armor ccache
/var/run/ipa/ccaches/armor_25139 for FAST webauth
[Tue Sep 06 15:38:41.366004 2022] [:error] [pid 25139] ipa: DEBUG: Using enterprise
principal
[Tue Sep 06 15:38:41.366194 2022] [:error] [pid 25139] ipa: DEBUG: Starting external
process
[Tue Sep 06 15:38:41.366262 2022] [:error] [pid 25139] ipa: DEBUG: args=/usr/bin/kinit
user1 -c /var/run/ipa/ccaches/kinit_25139 -T /var/run/ipa/ccaches/armor_25139 -E
[Tue Sep 06 15:38:41.466465 2022] [:error] [pid 25139] ipa: DEBUG: Process finished,
return code=0
[Tue Sep 06 15:38:41.466659 2022] [:error] [pid 25139] ipa: DEBUG: stdout=Password for
user1(a)DOMAIN.NET:
[Tue Sep 06 15:38:41.466672 2022] [:error] [pid 25139]
[Tue Sep 06 15:38:41.466750 2022] [:error] [pid 25139] ipa: DEBUG: stderr=
[Tue Sep 06 15:38:41.467047 2022] [:error] [pid 25139] ipa: DEBUG: Cleanup the armor
ccache
[Tue Sep 06 15:38:41.467372 2022] [:error] [pid 25139] ipa: DEBUG: Starting external
process
[Tue Sep 06 15:38:41.467506 2022] [:error] [pid 25139] ipa: DEBUG: args=/usr/bin/kdestroy
-A -c /var/run/ipa/ccaches/armor_25139
[Tue Sep 06 15:38:41.496559 2022] [:error] [pid 25139] ipa: DEBUG: Process finished,
return code=0
[Tue Sep 06 15:38:41.496713 2022] [:error] [pid 25139] ipa: DEBUG: stdout=
[Tue Sep 06 15:38:41.496818 2022] [:error] [pid 25139] ipa: DEBUG: stderr=
[Tue Sep 06 15:38:41.547374 2022] [:error] [pid 25139] ipa: INFO: Starting new HTTP
connection (1):
itw-idm-1.domain.net
[Tue Sep 06 15:38:41.551593 2022] [:error] [pid 25139] ipa: DEBUG: "GET
/ipa/session/cookie HTTP/1.1" 301 258
[Tue Sep 06 15:38:41.556402 2022] [:error] [pid 25139] ipa: INFO: Starting new HTTPS
connection (1):
itw-idm-1.domain.net
[Tue Sep 06 15:38:41.593584 2022] [:error] [pid 25139] ipa: DEBUG: "GET
/ipa/session/cookie HTTP/1.1" 200 0
[Tue Sep 06 15:38:41.621035 2022] [:error] [pid 25138] ipa: DEBUG: WSGI
wsgi_dispatch.__call__:
[Tue Sep 06 15:38:41.621308 2022] [:error] [pid 25138] ipa: DEBUG: WSGI
jsonserver_session.__call__:
[Tue Sep 06 15:38:41.672362 2022] [:error] [pid 25138] ipa: DEBUG: Created connection
context.ldap2_140687411018832
[Tue Sep 06 15:38:41.672486 2022] [:error] [pid 25138] ipa: DEBUG: WSGI
jsonserver.__call__:
[Tue Sep 06 15:38:41.672579 2022] [:error] [pid 25138] ipa: DEBUG: WSGI
WSGIExecutioner.__call__:
[Tue Sep 06 15:38:41.675901 2022] [:error] [pid 25138] ipa: DEBUG: raw:
batch(i18n_messages(), config_show(), whoami(), env(None), dns_is_enabled(),
trustconfig_show(), domainlevel_get(), ca_is_enabled(), vaultconfig_show())
[Tue Sep 06 15:38:41.676739 2022] [:error] [pid 25138] ipa: DEBUG: batch(i18n_messages(),
config_show(), whoami(), env(None), dns_is_enabled(), trustconfig_show(),
domainlevel_get(), ca_is_enabled(), vaultconfig_show())
[Tue Sep 06 15:38:41.677117 2022] [:error] [pid 25138] ipa: DEBUG: raw:
i18n_messages(version=u'2.237')
[Tue Sep 06 15:38:41.677293 2022] [:error] [pid 25138] ipa: DEBUG:
i18n_messages(version=u'2.237')
[Tue Sep 06 15:38:41.688523 2022] [:error] [pid 25138] ipa: INFO: user1(a)DOMAIN.NET: batch:
i18n_messages(): SUCCESS
[Tue Sep 06 15:38:41.688782 2022] [:error] [pid 25138] ipa: DEBUG: raw:
config_show(version=u'2.237')
[Tue Sep 06 15:38:41.689075 2022] [:error] [pid 25138] ipa: DEBUG:
config_show(rights=False, all=False, raw=False, version=u'2.237')
[Tue Sep 06 15:38:41.695013 2022] [:error] [pid 25138] ipa: DEBUG: retrieving schema for
SchemaCache url=ldapi://%2fvar%2frun%2fslapd-ITW-DOMAIN-NET.socket
conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7ff456914248>
[Tue Sep 06 15:38:42.054113 2022] [:error] [pid 25138] ipa: INFO: user1(a)DOMAIN.NET: batch:
config_show(): ValueError
[Tue Sep 06 15:38:42.054821 2022] [:error] [pid 25138] ipa: DEBUG: raw:
whoami(version=u'2.237')
[Tue Sep 06 15:38:42.055022 2022] [:error] [pid 25138] ipa: DEBUG:
whoami(version=u'2.237')
[Tue Sep 06 15:38:42.056385 2022] [:error] [pid 25138] ipa: INFO: user1(a)DOMAIN.NET: batch:
whoami(): ValueError
[Tue Sep 06 15:38:42.056674 2022] [:error] [pid 25138] ipa: DEBUG: raw: env(None,
version=u'2.237')
[Tue Sep 06 15:38:42.056923 2022] [:error] [pid 25138] ipa: DEBUG: env(None, server=False,
all=True, version=u'2.237')
[Tue Sep 06 15:38:42.057678 2022] [:error] [pid 25138] ipa: INFO: user1(a)DOMAIN.NET: batch:
env(None): SUCCESS
[Tue Sep 06 15:38:42.057941 2022] [:error] [pid 25138] ipa: DEBUG: raw:
dns_is_enabled(version=u'2.237')
[Tue Sep 06 15:38:42.058105 2022] [:error] [pid 25138] ipa: DEBUG:
dns_is_enabled(version=u'2.237')
[Tue Sep 06 15:38:42.059050 2022] [:error] [pid 25138] ipa: INFO: user1(a)DOMAIN.NET: batch:
dns_is_enabled(): ValueError
[Tue Sep 06 15:38:42.059329 2022] [:error] [pid 25138] ipa: DEBUG: raw:
trustconfig_show(version=u'2.237')
[Tue Sep 06 15:38:42.059608 2022] [:error] [pid 25138] ipa: DEBUG:
trustconfig_show(rights=False, trust_type=u'ad', all=False, raw=False,
version=u'2.237')
[Tue Sep 06 15:38:42.060185 2022] [:error] [pid 25138] ipa: INFO: user1(a)DOMAIN.NET: batch:
trustconfig_show(): ValueError
[Tue Sep 06 15:38:42.060504 2022] [:error] [pid 25138] ipa: DEBUG: raw:
domainlevel_get(version=u'2.237')
[Tue Sep 06 15:38:42.060679 2022] [:error] [pid 25138] ipa: DEBUG:
domainlevel_get(version=u'2.237')
[Tue Sep 06 15:38:42.061078 2022] [:error] [pid 25138] ipa: INFO: user1(a)DOMAIN.NET: batch:
domainlevel_get(): ValueError
[Tue Sep 06 15:38:42.061301 2022] [:error] [pid 25138] ipa: DEBUG: raw:
ca_is_enabled(version=u'2.237')
[Tue Sep 06 15:38:42.061464 2022] [:error] [pid 25138] ipa: DEBUG:
ca_is_enabled(version=u'2.237')
[Tue Sep 06 15:38:42.061893 2022] [:error] [pid 25138] ipa: INFO: user1(a)DOMAIN.NET: batch:
ca_is_enabled(): ValueError
[Tue Sep 06 15:38:42.062105 2022] [:error] [pid 25138] ipa: DEBUG: raw:
vaultconfig_show(version=u'2.237')
[Tue Sep 06 15:38:42.062273 2022] [:error] [pid 25138] ipa: DEBUG:
vaultconfig_show(all=False, raw=False, version=u'2.237')
[Tue Sep 06 15:38:42.062813 2022] [:error] [pid 25138] ipa: DEBUG: raw:
kra_is_enabled(version=u'2.237')
[Tue Sep 06 15:38:42.062991 2022] [:error] [pid 25138] ipa: DEBUG:
kra_is_enabled(version=u'2.237')
[Tue Sep 06 15:38:42.063332 2022] [:error] [pid 25138] ipa: INFO: user1(a)DOMAIN.NET: batch:
vaultconfig_show(): ValueError
[Tue Sep 06 15:38:42.064095 2022] [:error] [pid 25138] ipa: INFO: [jsonserver_session]
user1(a)DOMAIN.NET: batch(i18n_messages(), config_show(), whoami(), env(None),
dns_is_enabled(), trustconfig_show(), domainlevel_get(), ca_is_enabled(),
vaultconfig_show()): SUCCESS
[Tue Sep 06 15:38:42.072409 2022] [:error] [pid 25138] ipa: DEBUG: Destroyed connection
context.ldap2_140687411018832
[Tue Sep 06 15:38:45.051789 2022] [:warn] [pid 25140] [client 10.64.112.25:60408] failed
to set perms (3140) on file (/var/run/ipa/ccaches/user1(a)DOMAIN.NET)!, referer:
https://itw-idm-1.domain.net/ipa/ui/
[Tue Sep 06 15:38:45.053009 2022] [:warn] [pid 28173] [client 10.64.112.25:60410] failed
to set perms (3140) on file (/var/run/ipa/ccaches/user1(a)DOMAIN.NET)!, referer:
https://itw-idm-1.domain.net/ipa/ui/
[Tue Sep 06 15:38:45.054271 2022] [:error] [pid 25139] ipa: DEBUG: WSGI
wsgi_dispatch.__call__:
[Tue Sep 06 15:38:45.054442 2022] [:error] [pid 25139] ipa: DEBUG: WSGI
jsonserver_session.__call__:
[Tue Sep 06 15:38:45.055890 2022] [:error] [pid 25138] ipa: DEBUG: WSGI
wsgi_dispatch.__call__:
[Tue Sep 06 15:38:45.055985 2022] [:error] [pid 25138] ipa: DEBUG: WSGI
jsonserver_session.__call__:
[Tue Sep 06 15:38:45.083430 2022] [:error] [pid 25138] ipa: DEBUG: Created connection
context.ldap2_140687411018832
[Tue Sep 06 15:38:45.083524 2022] [:error] [pid 25138] ipa: DEBUG: WSGI
jsonserver.__call__:
[Tue Sep 06 15:38:45.083592 2022] [:error] [pid 25138] ipa: DEBUG: WSGI
WSGIExecutioner.__call__:
[Tue Sep 06 15:38:45.084235 2022] [:error] [pid 25138] ipa: DEBUG: raw:
json_metadata(None, None, command=u'all', version=u'2.237')
[Tue Sep 06 15:38:45.084482 2022] [:error] [pid 25138] ipa: DEBUG: json_metadata(None,
None, command=u'all', version=u'2.237')
[Tue Sep 06 15:38:45.122224 2022] [:error] [pid 25139] ipa: DEBUG: Created connection
context.ldap2_140687411018832
[Tue Sep 06 15:38:45.122394 2022] [:error] [pid 25139] ipa: DEBUG: WSGI
jsonserver.__call__:
[Tue Sep 06 15:38:45.122500 2022] [:error] [pid 25139] ipa: DEBUG: WSGI
WSGIExecutioner.__call__:
[Tue Sep 06 15:38:45.123725 2022] [:error] [pid 25139] ipa: DEBUG: raw:
json_metadata(None, None, object=u'all', version=u'2.237')
[Tue Sep 06 15:38:45.124105 2022] [:error] [pid 25139] ipa: DEBUG: json_metadata(None,
None, object=u'all', version=u'2.237')
[Tue Sep 06 15:38:45.998711 2022] [:error] [pid 25139] ipa: INFO: [jsonserver_session]
user1(a)DOMAIN.NET: json_metadata(None, None, object=u'all',
version=u'2.237'): SUCCESS
[Tue Sep 06 15:38:46.273104 2022] [:error] [pid 25139] ipa: DEBUG: Destroyed connection
context.ldap2_140687411018832
[Tue Sep 06 15:38:47.391521 2022] [:error] [pid 25138] ipa: INFO: [jsonserver_session]
user1(a)DOMAIN.NET: json_metadata(None, None, command=u'all',
version=u'2.237'): SUCCESS
[Tue Sep 06 15:38:48.092665 2022] [:error] [pid 25138] ipa: DEBUG: Destroyed connection
context.ldap2_140687411018832
Many thanks.