Named service is generating core dumps under /var/named and ipa-dnskeysyncd.service is failing.
Jan 27 14:31:39 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: ipa-dnskeysyncd.service failed. Jan 27 14:32:09 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: Stopped IPA key daemon. Jan 27 14:32:09 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: Started IPA key daemon. Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: ipa-dnskeysyncd: INFO LDAP bind... Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com python2[16632]: GSSAPI client step 1 Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com python2[16632]: GSSAPI client step 1 Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com python2[16632]: GSSAPI client step 1 Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com python2[16632]: GSSAPI client step 2 Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: ipa-dnskeysyncd: INFO Commencing sync process Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: ipaserver.dnssec.keysyncer: INFO Initial LDAP dump is done, sychronizing with ODS and BIND Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com python2[16650]: GSSAPI client step 1 Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com python2[16650]: GSSAPI client step 1 Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com python2[16650]: GSSAPI client step 1 Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: Traceback (most recent call last): Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File "/usr/libexec/ipa/ipa-dnskeysyncd", line 116, in <module> Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: while ldap_connection.syncrepl_poll(all=1, msgid=ldap_search): Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File "/usr/lib64/python2.7/site-packages/ldap/syncrepl.py", line 405, in syncrepl_poll Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: self.syncrepl_refreshdone() Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File "/usr/lib/python2.7/site-packages/ipaserver/dnssec/keysyncer.py", line 126, in syncrepl_refreshdone Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: self.hsm_replica_sync() Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File "/usr/lib/python2.7/site-packages/ipaserver/dnssec/keysyncer.py", line 192, in hsm_replica_sync Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: ipautil.run([paths.IPA_DNSKEYSYNCD_REPLICA]) Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 562, in run Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: raise CalledProcessError(p.returncode, arg_string, str(output)) Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: subprocess.CalledProcessError: Command '/usr/libexec/ipa/ipa-dnskeysync-replica' returned non-zero exit status 1 Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: ipa-dnskeysyncd.service: main process exited, code=exited, status=1/FAILURE Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: Unit ipa-dnskeysyncd.service entered failed state. Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: ipa-dnskeysyncd.service failed.
I am not able find the cause, any pointers to troubleshoot and fix?
Quick Copy and paste, Why I am not able to delete or edit my own post?
Navi Aujla via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:
Admin, Please delete this post to remove the sensitive information
1. This is email; you can't delete messages that have already been said.
2. There's no sensitive information in your post, unless you consider hostnames sensitive. If so, I encourage you to reconsider; there's no security benefit to hiding them.
Thanks, --Robbie
Navi Aujla via FreeIPA-users wrote:
Named service is generating core dumps under /var/named and ipa-dnskeysyncd.service is failing.
Since you are getting core dumps I'd install the debuginfo packages for bind and ipa-slapi-nis and see if you can get a decent backtrace from one of the core files.
Knowing the versions of packages would be helpful too.
rob
Here are the package information on CentOS 7
rpm -q ipa-server slapi-nis 389-ds-base openldap db4 nss nspr glibc ipa-server-4.6.4-10.el7.centos.2.x86_64 slapi-nis-0.56.0-8.el7.x86_64 389-ds-base-1.3.8.4-22.el7_6.x86_64 openldap-2.4.44-21.el7_6.x86_64 package db4 is not installed nss-3.36.0-7.1.el7_6.x86_64 nspr-4.19.0-1.el7_5.x86_64 glibc-2.17-260.el7_6.3.x86_64
Which debuginfo package needs to be installed
yum install --enablerepo=epel-debuginfo 389-ds-base-debuginfo
http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-crashes
I dont have information on the right packages to install for the version installed on the server. Any documentation or pointer?
Best Regards
On Mon, Jan 27, 2020 at 2:47 PM Rob Crittenden rcritten@redhat.com wrote:
Navi Aujla via FreeIPA-users wrote:
Named service is generating core dumps under /var/named and
ipa-dnskeysyncd.service is failing.
Since you are getting core dumps I'd install the debuginfo packages for bind and ipa-slapi-nis and see if you can get a decent backtrace from one of the core files.
Knowing the versions of packages would be helpful too.
rob
Navi Aujla wrote:
Here are the package information on CentOS 7
rpm -q ipa-server slapi-nis 389-ds-base openldap db4 nss nspr glibc ipa-server-4.6.4-10.el7.centos.2.x86_64 slapi-nis-0.56.0-8.el7.x86_64 389-ds-base-1.3.8.4-22.el7_6.x86_64 openldap-2.4.44-21.el7_6.x86_64 package db4 is not installed nss-3.36.0-7.1.el7_6.x86_64 nspr-4.19.0-1.el7_5.x86_64 glibc-2.17-260.el7_6.3.x86_64
Which debuginfo package needs to be installed
|yum install --enablerepo=epel-debuginfo 389-ds-base-debuginfo|
http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-crashes
I'd start with bind and bind-dyndb-ldap.
rob
I dont have information on the right packages to install for the version installed on the server. Any documentation or pointer?
Best Regards
On Mon, Jan 27, 2020 at 2:47 PM Rob Crittenden <rcritten@redhat.com mailto:rcritten@redhat.com> wrote:
Navi Aujla via FreeIPA-users wrote: > Named service is generating core dumps under /var/named and ipa-dnskeysyncd.service is failing. Since you are getting core dumps I'd install the debuginfo packages for bind and ipa-slapi-nis and see if you can get a decent backtrace from one of the core files. Knowing the versions of packages would be helpful too. rob
freeipa-users@lists.fedorahosted.org
-
Navi Aujla -
Rob Crittenden -
Robbie Harwood