Hi,
On Mon, Oct 14, 2024 at 5:02 PM alexey safonov via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote:
Did you resolve that issue? I'm seeing the same. I'm like 100% sure no FW between hosts or network problem. so what to look here?
If the replica installation is failing during the connection check step, have a look at /var/log/ipareplica-conncheck.log. You will be able to find which server is contacted and what's the issue. You can also check /var/log/httpd/error_log on the server and find if the call actually reached the server. Look for a line with server_conncheck, similar to this one:
[Mon Oct 14 15:58:52.918445 2024] [wsgi:error] [pid 12510:tid 12935] [remote 192.168.121.202:57128] ipa: INFO: [jsonserver_kerb] admin@IPA.TEST: server_conncheck('master.ipa.test', 'replica0.ipa.test', version='2.162'): SUCCESS
Can you provide more information? IPA version, exact command used for replica installation, command output etc... flo
чт, 28 мар. 2024 г. в 18:48, D S via FreeIPA-users freeipa-users@lists.fedorahosted.org:
Hello, I am trying to install 3 replicas agains the same master. Two out of 3
installs succeed, while the other one fails with
On replica: Connection from replica to master is OK. Start listening on required ports for remote master check Get credentials to log in to remote master Check RPC connection to remote master Execute check on remote master ERROR: Remote master check failed with following error message(s): an internal error has occurred
2024-03-28T09:09:28Z DEBUG Starting external process 2024-03-28T09:09:28Z DEBUG args=['/usr/sbin/ipa-client-install',
'--unattended', '--uninstall']
2024-03-28T09:09:31Z DEBUG Process finished, return code=0 2024-03-28T09:09:31Z DEBUG File
"/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 180, in execute
return_value = self.run()File "/usr/lib/python3.6/site-packages/ipapython/install/cli.py", line
344, in run
return cfgr.run()File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 358, in run
self.validate()File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 368, in validate
for _nothing in self._validator():File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 431, in __runner
exc_handler(exc_info)File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 455, in _handle_validate_exception
self._handle_exception(exc_info)File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 450, in _handle_exception
six.reraise(*exc_info)File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 421, in __runner
step()File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 418, in <lambda>
step = lambda: next(self.__gen)File "/usr/lib/python3.6/site-packages/ipapython/install/util.py",
line 81, in run_generator_with_yield_from
six.reraise(*exc_info)File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/util.py",
line 59, in run_generator_with_yield_from
value = gen.send(prev_value)File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 633, in _configure
next(validator)File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 431, in __runner
exc_handler(exc_info)File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 455, in _handle_validate_exception
self._handle_exception(exc_info)File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 518, in _handle_exception
self.__parent._handle_exception(exc_info)File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 450, in _handle_exception
six.reraise(*exc_info)File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 515, in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 450, in _handle_exception
six.reraise(*exc_info)File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 421, in __runner
step()File "/usr/lib/python3.6/site-packages/ipapython/install/core.py",
line 418, in <lambda>
step = lambda: next(self.__gen)File "/usr/lib/python3.6/site-packages/ipapython/install/util.py",
line 81, in run_generator_with_yield_from
six.reraise(*exc_info)File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/util.py",
line 59, in run_generator_with_yield_from
value = gen.send(prev_value)File "/usr/lib/python3.6/site-packages/ipapython/install/common.py",
line 65, in _install
for unused in self._installer(self.parent):File
"/usr/lib/python3.6/site-packages/ipaserver/install/server/__init__.py", line 597, in main
replica_promote_check(self)File
"/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py", line 401, in decorated
func(installer)File
"/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py", line 423, in decorated
func(installer)File
"/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py", line 1196, in promote_check
ca_cert_file=cafile)File
"/usr/lib/python3.6/site-packages/ipaserver/install/replication.py", line 129, in replica_conn_check
"Connection check failed!"2024-03-28T09:09:31Z DEBUG The ipa-replica-install command failed,
exception: ScriptError: Connection check failed!
See /var/log/ipareplica-conncheck.log for more information. If the check results are not valid it can be skipped with
--skip-conncheck parameter.
2024-03-28T09:09:31Z ERROR Connection check failed! See /var/log/ipareplica-conncheck.log for more information. If the check results are not valid it can be skipped with
--skip-conncheck parameter.
2024-03-28T09:09:31Z ERROR The ipa-replica-install command failed. See
/var/log/ipareplica-install.log for more information
On master: [Thu Mar 28 09:09:27.891561 2024] [:error] [pid 22098] ipa: ERROR:
non-public: DBusException: org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
[Thu Mar 28 09:09:27.891666 2024] [:error] [pid 22098] Traceback (most
recent call last):
[Thu Mar 28 09:09:27.891683 2024] [:error] [pid 22098] File
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 369, in wsgi_execute
[Thu Mar 28 09:09:27.891694 2024] [:error] [pid 22098] result =
command(*args, **options)
[Thu Mar 28 09:09:27.891705 2024] [:error] [pid 22098] File
"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 450, in __call__
[Thu Mar 28 09:09:27.891717 2024] [:error] [pid 22098] return
self.__do_call(*args, **options)
[Thu Mar 28 09:09:27.891727 2024] [:error] [pid 22098] File
"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 478, in __do_call
[Thu Mar 28 09:09:27.891737 2024] [:error] [pid 22098] ret =
self.run(*args, **options)
[Thu Mar 28 09:09:27.891748 2024] [:error] [pid 22098] File
"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 800, in run
[Thu Mar 28 09:09:27.891928 2024] [:error] [pid 22098] return
self.execute(*args, **options)
[Thu Mar 28 09:09:27.891951 2024] [:error] [pid 22098] File
"/usr/lib/python2.7/site-packages/ipaserver/plugins/server.py", line 933, in execute
[Thu Mar 28 09:09:27.891962 2024] [:error] [pid 22098] ret, stdout,
_stderr = server.conncheck(keys[-1])
[Thu Mar 28 09:09:27.891973 2024] [:error] [pid 22098] File
"/usr/lib64/python2.7/site-packages/dbus/proxies.py", line 70, in __call__
[Thu Mar 28 09:09:27.891983 2024] [:error] [pid 22098] return
self._proxy_method(*args, **keywords)
[Thu Mar 28 09:09:27.891994 2024] [:error] [pid 22098] File
"/usr/lib64/python2.7/site-packages/dbus/proxies.py", line 145, in __call__
[Thu Mar 28 09:09:27.892005 2024] [:error] [pid 22098] **keywords) [Thu Mar 28 09:09:27.892016 2024] [:error] [pid 22098] File
"/usr/lib64/python2.7/site-packages/dbus/connection.py", line 651, in call_blocking
[Thu Mar 28 09:09:27.892026 2024] [:error] [pid 22098] message,
timeout)
[Thu Mar 28 09:09:27.892037 2024] [:error] [pid 22098] DBusException:
org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
[Thu Mar 28 09:09:27.892955 2024] [:error] [pid 22098] ipa: INFO:
[jsonserver_kerb] local_admin@EXAMPLE.COM: server_conncheck(u' ipamaster01.example.com', u'ipa-replica03.example.com', version=u'2.162'): InternalError
[Thu Mar 28 09:09:30.121019 2024] [:error] [pid 20997] ipa: INFO:
[jsonserver_kerb] host/ipa-replica03.example.com@EXAMPLE.COM: host_disable(u'ipa-replica03.example.com'): SUCCESS
-- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to
freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste... Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue