9:25 a.m.
Named service is generating core dumps under /var/named and ipa-dnskeysyncd.service is
failing.
Jan 27 14:31:39 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: ipa-dnskeysyncd.service
failed.
Jan 27 14:32:09 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: Stopped IPA key
daemon.
Jan 27 14:32:09 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: Started IPA key
daemon.
Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]:
ipa-dnskeysyncd: INFO LDAP bind...
Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com python2[16632]: GSSAPI client step
1
Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com python2[16632]: GSSAPI client step
1
Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com python2[16632]: GSSAPI client step
1
Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com python2[16632]: GSSAPI client step
2
Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]:
ipa-dnskeysyncd: INFO Commencing sync process
Jan 27 14:32:12 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]:
ipaserver.dnssec.keysyncer: INFO Initial LDAP dump is done, sychronizing with ODS and
BIND
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com python2[16650]: GSSAPI client step
1
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com python2[16650]: GSSAPI client step
1
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com python2[16650]: GSSAPI client step
1
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: Traceback
(most recent call last):
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File
"/usr/libexec/ipa/ipa-dnskeysyncd", line 116, in <module>
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: while
ldap_connection.syncrepl_poll(all=1, msgid=ldap_search):
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File
"/usr/lib64/python2.7/site-packages/ldap/syncrepl.py", line 405, in
syncrepl_poll
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]:
self.syncrepl_refreshdone()
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File
"/usr/lib/python2.7/site-packages/ipaserver/dnssec/keysyncer.py", line 126, in
syncrepl_refreshdone
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]:
self.hsm_replica_sync()
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File
"/usr/lib/python2.7/site-packages/ipaserver/dnssec/keysyncer.py", line 192, in
hsm_replica_sync
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]:
ipautil.run([paths.IPA_DNSKEYSYNCD_REPLICA])
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: File
"/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 562, in run
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]: raise
CalledProcessError(p.returncode, arg_string, str(output))
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com ipa-dnskeysyncd[16632]:
subprocess.CalledProcessError: Command '/usr/libexec/ipa/ipa-dnskeysync-replica'
returned non-zero exit status 1
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]:
ipa-dnskeysyncd.service: main process exited, code=exited, status=1/FAILURE
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: Unit
ipa-dnskeysyncd.service entered failed state.
Jan 27 14:32:15 freeipa-03.prod.mcs.som.mob.nuance.com systemd[1]: ipa-dnskeysyncd.service
failed.
I am not able find the cause, any pointers to troubleshoot and fix?
12:15 p.m.
Navi Aujla via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
writes:
Admin, Please delete this post to remove the sensitive information
1. This is email; you can't delete messages that have already been said.
2. There's no sensitive information in your post, unless you consider
hostnames sensitive. If so, I encourage you to reconsider; there's no
security benefit to hiding them.
Thanks,
--Robbie
1:47 p.m.
Navi Aujla via FreeIPA-users wrote:
Named service is generating core dumps under /var/named and
ipa-dnskeysyncd.service is failing.
Since you are getting core dumps I'd install the debuginfo packages for
bind and ipa-slapi-nis and see if you can get a decent backtrace from
one of the core files.
Knowing the versions of packages would be helpful too.
rob
2 p.m.
Here are the package information on CentOS 7
rpm -q ipa-server slapi-nis 389-ds-base openldap db4 nss nspr glibc
ipa-server-4.6.4-10.el7.centos.2.x86_64
slapi-nis-0.56.0-8.el7.x86_64
389-ds-base-1.3.8.4-22.el7_6.x86_64
openldap-2.4.44-21.el7_6.x86_64
package db4 is not installed
nss-3.36.0-7.1.el7_6.x86_64
nspr-4.19.0-1.el7_5.x86_64
glibc-2.17-260.el7_6.3.x86_64
Which debuginfo package needs to be installed
yum install --enablerepo=epel-debuginfo 389-ds-base-debuginfo
http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-crashes
I dont have information on the right packages to install for the version
installed on the server. Any documentation or pointer?
Best Regards
On Mon, Jan 27, 2020 at 2:47 PM Rob Crittenden <rcritten(a)redhat.com> wrote:
Navi Aujla via FreeIPA-users wrote:
> Named service is generating core dumps under /var/named and
ipa-dnskeysyncd.service is failing.
Since you are getting core dumps I'd install the debuginfo packages for
bind and ipa-slapi-nis and see if you can get a decent backtrace from
one of the core files.
Knowing the versions of packages would be helpful too.
rob
10:19 a.m.
Navi Aujla wrote:
Here are the package information on CentOS 7
rpm -q ipa-server slapi-nis 389-ds-base openldap db4 nss nspr glibc
ipa-server-4.6.4-10.el7.centos.2.x86_64
slapi-nis-0.56.0-8.el7.x86_64
389-ds-base-1.3.8.4-22.el7_6.x86_64
openldap-2.4.44-21.el7_6.x86_64
package db4 is not installed
nss-3.36.0-7.1.el7_6.x86_64
nspr-4.19.0-1.el7_5.x86_64
glibc-2.17-260.el7_6.3.x86_64
Which debuginfo package needs to be installed
|yum install --enablerepo=epel-debuginfo 389-ds-base-debuginfo|
http://www.port389.org/docs/389ds/FAQ/faq.html#debugging-crashes
I'd start with bind and bind-dyndb-ldap.
rob
I dont have information on the right packages to install for the version
installed on the server. Any documentation or pointer?
Best Regards
On Mon, Jan 27, 2020 at 2:47 PM Rob Crittenden <rcritten(a)redhat.com
<mailto:rcritten@redhat.com>> wrote:
Navi Aujla via FreeIPA-users wrote:
> Named service is generating core dumps under /var/named and
ipa-dnskeysyncd.service is failing.
Since you are getting core dumps I'd install the debuginfo packages for
bind and ipa-slapi-nis and see if you can get a decent backtrace from
one of the core files.
Knowing the versions of packages would be helpful too.
rob
1544
days inactive
1545
days old
freeipa-users@lists.fedorahosted.org
6 comments
3 participants
participants (3)
-
Navi Aujla -
Rob Crittenden -
Robbie Harwood