hello
I want to copy a CA node. I tried many times but failed. Can you help me find out the
reason?thank you
1:#apt install -y freeipa-server
2:root@fs-hiido-ca2-65-155:/var/log# ipa-client-install --domain=hiido.host.yydevops.com
--realm=YYDEVOPS.COM --server=fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com
--force-join
Autodiscovery of servers for failover cannot work with this configuration.
If you proceed with the installation, services will be configured to always access the
discovered server for all operations and will not fail over to other servers in case of
failure.
Proceed with fixed values and no DNS discovery? [no]: yes
Client hostname:
fs-hiido-ca2-65-155.hiido.host.yydevops.com
Realm:
YYDEVOPS.COM
DNS Domain:
hiido.host.yydevops.com
IPA Server:
fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com
BaseDN: dc=yydevops,dc=com
Continue to configure the system with these values? [no]: yes
Synchronizing time with KDC...
Attempting to sync time using ntpd. Will timeout after 15 seconds
Unable to sync time with NTP server, assuming the time is in sync. Please check that 123
UDP port is opened.
User authorized to enroll computers: admin
Password for admin(a)YYDEVOPS.COM:
Successfully retrieved CA cert
Subject: CN=Certificate
Authority,O=YYDEVOPS.COM
Issuer: CN=Certificate
Authority,O=YYDEVOPS.COM
Valid From: Tue Sep 10 11:23:06 2019 UTC
Valid Until: Sat Sep 10 11:23:06 2039 UTC
Enrolled in IPA realm
YYDEVOPS.COM
Created /etc/ipa/default.conf
New SSSD config will be created
Configured sudoers in /etc/nsswitch.conf
Configured /etc/sssd/sssd.conf
Configured /etc/krb5.conf for IPA realm
YYDEVOPS.COM
trying
https://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com/ipa/json
Forwarding 'ping' to json server
'https://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com/ipa/json'
Forwarding 'ca_is_enabled' to json server
'https://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com/ipa/json'
Systemwide CA database updated.
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub
Forwarding 'host_mod' to json server
'https://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com/ipa/json'
Could not update DNS SSHFP records.
SSSD enabled
Configured /etc/openldap/ldap.conf
No SRV records of NTP servers found. IPA server address will be used
NTP enabled
Configured /etc/ssh/ssh_config
Configured /etc/ssh/sshd_config
Configuring
hiido.host.yydevops.com as NIS domain.
Client configuration complete
3:#strace ipa-replica-install --skip-conncheck
.......
read(10, "):\n self.gensvc_name = ge"..., 4096) = 1289
read(10, "", 4096) = 0
close(10) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/service.py",
{st_mode=S_IFREG|0644, st_size=21769, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py",
{st_mode=S_IFREG|0644, st_size=53222, ...}) = 0
open("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py",
O_RDONLY) = 10
fstat(10, {st_mode=S_IFREG|0644, st_size=53222, ...}) = 0
fstat(10, {st_mode=S_IFREG|0644, st_size=53222, ...}) = 0
read(10, "# Authors: Karl MacMillan <kmacm"..., 8192) = 8192
read(10, "d_winsync_module)\n self.s"..., 4096) = 4096
read(10, ".__add_automember_config)\n "..., 4096) = 4096
read(10, "ey may conflict.\n\n if not"..., 4096) = 4096
read(10, " # Must be readable for dirs"..., 4096) = 4096
read(10, "_mod(\"entryusn.ldif\")\n\n def _"..., 4096) = 4096
read(10, "dirname(self.serverid)\n d"..., 4096) = 4096
read(10, "tstrap-template.ldif\", self.sub_"..., 4096) = 4096
read(10, "pd-port')\n self.restore_s"..., 4096) = 4096
read(10, "od(\"ds-nfiles.ldif\", nf_sub_dict"..., 4096) = 4096
read(10, "_is_running:\n try:\n "..., 4096) = 4096
read(10, "ck for open secure port 636 from"..., 4096) = 4070
read(10, "", 4096) = 0
close(10) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py",
{st_mode=S_IFREG|0644, st_size=53222, ...}) = 0
write(3, "2022-06-02T11:34:08Z DEBUG Trace"..., 562) = 562
write(3, "2022-06-02T11:34:08Z DEBUG [er"..., 51) = 51
write(1, " [error] SystemExit: 1\n", 24 [error] SystemExit: 1
) = 24
stat("/etc/ipa/default.conf.ipabkp", {st_mode=S_IFREG|0644, st_size=343, ...}) =
0
stat("/etc/ipa/default.conf", {st_mode=S_IFREG|0644, st_size=343, ...}) = 0
stat("/etc/ipa/default.conf.ipabkp", {st_mode=S_IFREG|0644, st_size=343, ...}) =
0
stat("/etc/ipa/default.conf", {st_mode=S_IFREG|0644, st_size=343, ...}) = 0
stat("/etc/ipa/default.conf.ipabkp", {st_mode=S_IFREG|0644, st_size=343, ...}) =
0
open("/etc/ipa/default.conf", O_RDONLY) = 10
fstat(10, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0
open("/etc/ipa/default.conf.ipabkp", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 11
fstat(11, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
fstat(10, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0
read(10, "#File modified by ipa-client-ins"..., 16384) = 343
read(10, "", 12288) = 0
fstat(11, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
read(10, "", 16384) = 0
write(11, "#File modified by ipa-client-ins"..., 343) = 343
close(11) = 0
close(10) = 0
stat("/etc/ipa/default.conf", {st_mode=S_IFREG|0644, st_size=343, ...}) = 0
utimes("/etc/ipa/default.conf.ipabkp", [{1654169619, 110154}, {1654169545,
586153}]) = 0
chmod("/etc/ipa/default.conf.ipabkp", 0644) = 0
open("/etc/ipa/default.conf", O_RDWR|O_CREAT, 0644) = 10
fcntl(10, F_SETLKW, {l_type=F_WRLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
fstat(10, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0
fcntl(10, F_GETFL) = 0x8002 (flags O_RDWR|O_LARGEFILE)
fstat(10, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0
read(10, "#File modified by ipa-client-ins"..., 8192) = 343
read(10, "", 4096) = 0
read(10, "", 8192) = 0
lseek(10, 0, SEEK_SET) = 0
ftruncate(10, 0) = 0
lseek(10, 0, SEEK_SET) = 0
write(10, "#File modified by ipa-client-ins"..., 453) = 453
close(10) = 0
chmod("/etc/ipa/default.conf", 0644) = 0
lstat("/tmp/tmpeNi6VXipa", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
open("/tmp/tmpeNi6VXipa", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 10
fstat(10, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents(10, /* 2 entries */, 32768) = 48
getdents(10, /* 0 entries */, 32768) = 0
close(10) = 0
rmdir("/tmp/tmpeNi6VXipa") = 0
stat("/tmp/krbcc7XNEZ3/ccache", {st_mode=S_IFREG|0600, st_size=2651, ...}) = 0
unlink("/tmp/krbcc7XNEZ3/ccache") = 0
rmdir("/tmp/krbcc7XNEZ3") = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/admintool.py",
{st_mode=S_IFREG|0644, st_size=11123, ...}) = 0
open("/usr/lib/python2.7/dist-packages/ipapython/admintool.py", O_RDONLY) = 10
fstat(10, {st_mode=S_IFREG|0644, st_size=11123, ...}) = 0
fstat(10, {st_mode=S_IFREG|0644, st_size=11123, ...}) = 0
read(10, "# Authors:\n# Petr Viktorin <pv"..., 8192) = 8192
read(10, "nfo()`, `self.log.warning()`, et"..., 4096) = 2931
read(10, "", 4096) = 0
close(10) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/cli.py",
{st_mode=S_IFREG|0644, st_size=12457, ...}) = 0
open("/usr/lib/python2.7/dist-packages/ipapython/install/cli.py", O_RDONLY) =
10
fstat(10, {st_mode=S_IFREG|0644, st_size=12457, ...}) = 0
fstat(10, {st_mode=S_IFREG|0644, st_size=12457, ...}) = 0
read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 8192
read(10, "self.option_parser.error(\"Too ma"..., 4096) = 4096
read(10, "lse:\n return super(In"..., 4096) = 169
read(10, "", 4096) = 0
close(10) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
open("/usr/lib/python2.7/dist-packages/ipapython/install/core.py", O_RDONLY) =
10
fstat(10, {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
fstat(10, {st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 8192
read(10, " runs the validation part of the"..., 4096) = 4096
read(10, " comp_cls.knobs():\n "..., 4096) = 3912
read(10, "", 4096) = 0
close(10) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/util.py",
{st_mode=S_IFREG|0644, st_size=4230, ...}) = 0
open("/usr/lib/python2.7/dist-packages/ipapython/install/util.py", O_RDONLY) =
10
fstat(10, {st_mode=S_IFREG|0644, st_size=4230, ...}) = 0
fstat(10, {st_mode=S_IFREG|0644, st_size=4230, ...}) = 0
read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 4230
read(10, "", 4096) = 0
close(10) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/util.py",
{st_mode=S_IFREG|0644, st_size=4230, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/core.py",
{st_mode=S_IFREG|0644, st_size=16200, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/util.py",
{st_mode=S_IFREG|0644, st_size=4230, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/util.py",
{st_mode=S_IFREG|0644, st_size=4230, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipapython/install/common.py",
{st_mode=S_IFREG|0644, st_size=2843, ...}) = 0
open("/usr/lib/python2.7/dist-packages/ipapython/install/common.py", O_RDONLY) =
10
fstat(10, {st_mode=S_IFREG|0644, st_size=2843, ...}) = 0
fstat(10, {st_mode=S_IFREG|0644, st_size=2843, ...}) = 0
read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 2843
read(10, "", 4096) = 0
close(10) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py",
{st_mode=S_IFREG|0644, st_size=59950, ...}) = 0
open("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py",
O_RDONLY) = 10
fstat(10, {st_mode=S_IFREG|0644, st_size=59950, ...}) = 0
fstat(10, {st_mode=S_IFREG|0644, st_size=59950, ...}) = 0
read(10, "#\n# Copyright (C) 2015 FreeIPA "..., 8192) = 8192
read(10, " pass\n else:\n "..., 4096) = 4096
read(10, "\n pass\n\n\ndef common_clean"..., 4096) = 4096
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f6ebd177000
read(10, "tall it first before configuring"..., 4096) = 4096
read(10, "ver cert is not valid. Please ru"..., 4096) = 4096
read(10, "xit(0)\n else:\n "..., 4096) = 4096
read(10, " CA.configure_certmonger_ren"..., 4096) = 4096
read(10, "\n options = installer\n\n in"..., 4096) = 4096
read(10, " pkinit_pin, pkinit_ca_cert = lo"..., 4096) = 4096
read(10, "plica-manage del %s --force\" %\n "..., 4096) = 4096
read(10, "ptions.host_name = config.host_n"..., 4096) = 4096
read(10, "ance.NTPInstance()\n ntp.c"..., 4096) = 4096
read(10, "a[0], ca_data[1])\n\n kra ="..., 4096) = 4096
read(10, "f.admin_password:\n "..., 4096) = 2606
read(10, "", 4096) = 0
close(10) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py",
{st_mode=S_IFREG|0644, st_size=59950, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py",
{st_mode=S_IFREG|0644, st_size=59950, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/server/replicainstall.py",
{st_mode=S_IFREG|0644, st_size=59950, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py",
{st_mode=S_IFREG|0644, st_size=53222, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/service.py",
{st_mode=S_IFREG|0644, st_size=21769, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/service.py",
{st_mode=S_IFREG|0644, st_size=21769, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py",
{st_mode=S_IFREG|0644, st_size=53222, ...}) = 0
stat("/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py",
{st_mode=S_IFREG|0644, st_size=53222, ...}) = 0
write(3, "2022-06-02T11:34:08Z DEBUG Fil"..., 3867) = 3867
write(3, "2022-06-02T11:34:08Z DEBUG The i"..., 92) = 92
write(3, "2022-06-02T11:34:08Z ERROR The i"..., 124) = 124
write(2, "ipa.ipapython.install.cli.instal"...,
155ipa.ipapython.install.cli.install_tool(Replica): ERROR The ipa-replica-install
command failed. See /var/log/ipareplica-install.log for more information
) = 155
close(3) = 0
rt_sigaction(SIGINT, {SIG_DFL, [], SA_RESTORER, 0x7f6ed4ddd390}, {0x53d9d0, [],
SA_RESTORER, 0x7f6ed4ddd390}, 8) = 0
rt_sigaction(SIGTERM, {SIG_DFL, [], SA_RESTORER, 0x7f6ed4ddd390}, {0x53d9d0, [],
SA_RESTORER, 0x7f6ed4ddd390}, 8) = 0
munmap(0x7f6ebd3f7000, 262144) = 0
munmap(0x7f6ebd377000, 262144) = 0
munmap(0x7f6ebd1f7000, 262144) = 0
munmap(0x7f6ebd337000, 262144) = 0
munmap(0x7f6ebd237000, 262144) = 0
munmap(0x7f6ebd4e2000, 262144) = 0
close(8) = 0
exit_group(1) = ?
+++ exited with 1 +++
What do I need to do?