LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 01-29-2016, 03:11 AM   #1
SAbhi
Member
 
Registered: Aug 2009
Location: Bangaluru, India
Distribution: CentOS 6.5, SuSE SLED/ SLES 10.2 SP2 /11.2, Fedora 11/16
Posts: 665

Rep: Reputation: Disabled
Problem installing ipaserver


hi All,

i have my test machine in which i am tying to install ipaserver and have issues :

Code:
ipa-server-install --setup-dns

The log file for this installation can be found in /var/log/ipaserver-install.log
==============================================================================
This program will set up the IPA Server.

This includes:
  * Configure a stand-alone CA (dogtag) for certificate management
  * Configure the Network Time Daemon (ntpd)
  * Create and configure an instance of Directory Server
  * Create and configure a Kerberos Key Distribution Center (KDC)
  * Configure Apache (httpd)
  * Configure DNS (bind)

To accept the default shown in brackets, press the Enter key.

Existing BIND configuration detected, overwrite? [no]: yes
Enter the fully qualified domain name of the computer
on which you're setting up server software. Using the form
<hostname>.<domainname>
Example: master.example.com.


Server host name [testvmcentos.testlab.test]:

Warning: skipping DNS resolution of host testvmcentos.testlab.test
The domain name has been determined based on the host name.

Please confirm the domain name [testlab.test]:

The kerberos protocol requires a Realm name to be defined.
This is typically the domain name converted to uppercase.

Please provide a realm name [TESTLAB.TEST]:
Certain directory server operations require an administrative user.
This user is referred to as the Directory Manager and has full access
to the Directory for system management tasks and will be added to the
instance of directory server created for IPA.
The password must be at least 8 characters long.

Directory Manager password:
Password (confirm):

The IPA server requires an administrative user, named 'admin'.
This user is a regular system account used for IPA server administration.

IPA admin password:
Password (confirm):

Do you want to configure DNS forwarders? [yes]:
Enter the IP address of DNS forwarder to use, or press Enter to finish.
Enter IP address for a DNS forwarder: 192.168.xxx.xxx
DNS forwarder 192.168.217.128 added
Enter IP address for a DNS forwarder:
Do you want to configure the reverse zone? [yes]:
Please specify the reverse zone name [xxx.168.192.in-addr.arpa.]:
Using reverse zone 217.168.192.in-addr.arpa.

The IPA Master Server will be configured with:
Hostname:      testvmcentos.testlab.test
IP address:    192.168.xxx.xxx
Domain name:   testlab.test
Realm name:    TESTLAB.TEST

BIND DNS server will be configured to serve IPA domain with:
Forwarders:    192.168.xxx.xxx
Reverse zone:  xxx.168.192.in-addr.arpa.

Continue to configure the system with these values? [no]: yes

The following operations may take some minutes to complete.
Please wait until the prompt is returned.

Configuring NTP daemon (ntpd)
  [1/4]: stopping ntpd
  [2/4]: writing configuration
  [3/4]: configuring ntpd to start on boot
  [4/4]: starting ntpd
Done configuring NTP daemon (ntpd).
Configuring directory server for the CA (pkids): Estimated time 30 seconds
  [1/3]: creating directory server user
  [2/3]: creating directory server instance
  [3/3]: restarting directory server
Done configuring directory server for the CA (pkids).
Configuring certificate server (pki-cad): Estimated time 3 minutes 30 seconds
  [1/20]: creating certificate server user
  [2/20]: configuring certificate server instance
ipa         : ERROR    Cannot open configuration file.[Errno 2] No such file or directory: '/var/lib/pki-ca/conf/CS.cfg'
Unexpected error - see /var/log/ipaserver-install.log for details:
IOError: [Errno 2] No such file or directory: '/var/lib/pki-ca/conf/CS.cfg'
if you see the last line error, i am not sure where did this directory went and how it was deleted, anyone who can help me with any url or process to restore this directory and its content.

I have tried installing whole pki package but it looks like this is some other issue.

Last edited by SAbhi; 01-29-2016 at 03:13 AM.
 
Old 01-29-2016, 11:15 AM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 19,316

Rep: Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460
Quote:
Originally Posted by SAbhi View Post
hi All,
i have my test machine in which i am tying to install ipaserver and have issues :
Code:
ipa-server-install --setup-dns

The log file for this installation can be found in /var/log/ipaserver-install.log
==============================================================================
This program will set up the IPA Server.

This includes:
  * Configure a stand-alone CA (dogtag) for certificate management
  * Configure the Network Time Daemon (ntpd)
  * Create and configure an instance of Directory Server
  * Create and configure a Kerberos Key Distribution Center (KDC)
  * Configure Apache (httpd)
  * Configure DNS (bind)

To accept the default shown in brackets, press the Enter key.

Existing BIND configuration detected, overwrite? [no]: yes
Enter the fully qualified domain name of the computer
on which you're setting up server software. Using the form
<hostname>.<domainname>
Example: master.example.com.

Server host name [testvmcentos.testlab.test]:

Warning: skipping DNS resolution of host testvmcentos.testlab.test
The domain name has been determined based on the host name.

Please confirm the domain name [testlab.test]:

The kerberos protocol requires a Realm name to be defined.
This is typically the domain name converted to uppercase.

Please provide a realm name [TESTLAB.TEST]:
Certain directory server operations require an administrative user.
This user is referred to as the Directory Manager and has full access
to the Directory for system management tasks and will be added to the
instance of directory server created for IPA.
The password must be at least 8 characters long.

Directory Manager password:
Password (confirm):

The IPA server requires an administrative user, named 'admin'.
This user is a regular system account used for IPA server administration.

IPA admin password:
Password (confirm):

Do you want to configure DNS forwarders? [yes]:
Enter the IP address of DNS forwarder to use, or press Enter to finish.
Enter IP address for a DNS forwarder: 192.168.xxx.xxx
DNS forwarder 192.168.217.128 added
Enter IP address for a DNS forwarder:
Do you want to configure the reverse zone? [yes]:
Please specify the reverse zone name [xxx.168.192.in-addr.arpa.]:
Using reverse zone 217.168.192.in-addr.arpa.

The IPA Master Server will be configured with:
Hostname:      testvmcentos.testlab.test
IP address:    192.168.xxx.xxx
Domain name:   testlab.test
Realm name:    TESTLAB.TEST

BIND DNS server will be configured to serve IPA domain with:
Forwarders:    192.168.xxx.xxx
Reverse zone:  xxx.168.192.in-addr.arpa.

Continue to configure the system with these values? [no]: yes

The following operations may take some minutes to complete.
Please wait until the prompt is returned.

Configuring NTP daemon (ntpd)
  [1/4]: stopping ntpd
  [2/4]: writing configuration
  [3/4]: configuring ntpd to start on boot
  [4/4]: starting ntpd
Done configuring NTP daemon (ntpd).
Configuring directory server for the CA (pkids): Estimated time 30 seconds
  [1/3]: creating directory server user
  [2/3]: creating directory server instance
  [3/3]: restarting directory server
Done configuring directory server for the CA (pkids).
Configuring certificate server (pki-cad): Estimated time 3 minutes 30 seconds
  [1/20]: creating certificate server user
  [2/20]: configuring certificate server instance
ipa         : ERROR    Cannot open configuration file.[Errno 2] No such file or directory: '/var/lib/pki-ca/conf/CS.cfg'
Unexpected error - see /var/log/ipaserver-install.log for details:
IOError: [Errno 2] No such file or directory: '/var/lib/pki-ca/conf/CS.cfg'
if you see the last line error, i am not sure where did this directory went and how it was deleted, anyone who can help me with any url or process to restore this directory and its content.

I have tried installing whole pki package but it looks like this is some other issue.
Since you've been posting here for some time now, you should know that you need to provide actual DETAILS when asking a question...like version/distro of Linux, version of this software, where you got it from, and what you did to install it, and get to the point where you're now finding problems.

There are reported bugs for RHEL/CentOS/Fedora, with fixes, that are found by looking up that error. But we don't know if they apply, since you don't tell us what you're using.
 
Old 02-01-2016, 04:12 AM   #3
SAbhi
Member
 
Registered: Aug 2009
Location: Bangaluru, India
Distribution: CentOS 6.5, SuSE SLED/ SLES 10.2 SP2 /11.2, Fedora 11/16
Posts: 665

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by TB0ne View Post
Since you've been posting here for some time now, you should know that you need to provide actual DETAILS when asking a question...like version/distro of Linux, version of this software, where you got it from, and what you did to install it, and get to the point where you're now finding problems.

There are reported bugs for RHEL/CentOS/Fedora, with fixes, that are found by looking up that error. But we don't know if they apply, since you don't tell us what you're using.
I am very sorry for my mistake. i have another VM setup and installed these again for time being and sake of the test work i was doing which is working now but still have the faulty one in place and on my radar to find a solution to this issue as soon as i can with all i can to search for it.

OS : Centos 6.5

version info:

ipa-gothic-fonts-003.02-4.2.el6.noarch
ipa-pki-common-theme-9.0.3-7.el6.noarch
ipa-admintools-3.0.0-37.el6.i686
ipa-server-selinux-3.0.0-37.el6.i686
ipa-pmincho-fonts-003.02-3.1.el6.noarch
ipa-python-3.0.0-37.el6.i686
ipa-client-3.0.0-37.el6.i686
ipa-server-3.0.0-37.el6.i686
ipa-pgothic-fonts-003.02-4.1.el6.noarch
ipa-pki-ca-theme-9.0.3-7.el6.noarch
ipa-mincho-fonts-003.02-3.1.el6.noarch

So this is what i have followed:
installed via yum --> ipa-server ipa-client
since i already have ldap, kerberos and bind with all their needed packages running for other different purposes.

ipa-server was earlier installed on this test VM and i uninstalled it for some training purposes on some configs, since then when i try to install this again it is ending up in error.

the file /var/lib/pki-ca/conf/CS.cfg is already there and nothing more details which i could find in any other place or files, cant say that i have looked up every where but most places related to this config.

Last edited by SAbhi; 02-01-2016 at 04:15 AM.
 
Old 02-01-2016, 04:12 AM   #4
SAbhi
Member
 
Registered: Aug 2009
Location: Bangaluru, India
Distribution: CentOS 6.5, SuSE SLED/ SLES 10.2 SP2 /11.2, Fedora 11/16
Posts: 665

Original Poster
Rep: Reputation: Disabled
I will ddd some more details as i dig into it more and post here.
 
Old 02-01-2016, 11:25 AM   #5
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 19,316

Rep: Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460
Quote:
Originally Posted by SAbhi View Post
I am very sorry for my mistake. i have another VM setup and installed these again for time being and sake of the test work i was doing which is working now but still have the faulty one in place and on my radar to find a solution to this issue as soon as i can with all i can to search for it.

OS : Centos 6.5

version info:

ipa-gothic-fonts-003.02-4.2.el6.noarch
ipa-pki-common-theme-9.0.3-7.el6.noarch
ipa-admintools-3.0.0-37.el6.i686
ipa-server-selinux-3.0.0-37.el6.i686
ipa-pmincho-fonts-003.02-3.1.el6.noarch
ipa-python-3.0.0-37.el6.i686
ipa-client-3.0.0-37.el6.i686
ipa-server-3.0.0-37.el6.i686
ipa-pgothic-fonts-003.02-4.1.el6.noarch
ipa-pki-ca-theme-9.0.3-7.el6.noarch
ipa-mincho-fonts-003.02-3.1.el6.noarch

So this is what i have followed:
installed via yum --> ipa-server ipa-client
since i already have ldap, kerberos and bind with all their needed packages running for other different purposes.

ipa-server was earlier installed on this test VM and i uninstalled it for some training purposes on some configs, since then when i try to install this again it is ending up in error.

the file /var/lib/pki-ca/conf/CS.cfg is already there and nothing more details which i could find in any other place or files, cant say that i have looked up every where but most places related to this config.
So if that file is already there, then you may be facing a permissions issue...did the log file mentioned have further details? What are the permissions on that file/directory, and you ARE running the configuration as root, correct???
 
Old 02-02-2016, 05:40 AM   #6
fmattheus
Member
 
Registered: Nov 2015
Posts: 104

Rep: Reputation: 38
The permissions problem could be anywhere along the path to the file as well. A cool command to show the permissions of all steps along the path is this one.

Code:
namei -l /var/lib/pki-ca/conf/CS.cfg
 
1 members found this post helpful.
Old 02-02-2016, 08:28 AM   #7
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 19,316

Rep: Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460Reputation: 4460
Quote:
Originally Posted by fmattheus View Post
The permissions problem could be anywhere along the path to the file as well. A cool command to show the permissions of all steps along the path is this one.

Code:
namei -l /var/lib/pki-ca/conf/CS.cfg
Nice one, fmattheus. Adding that one to my repertoire.
 
Old 02-02-2016, 08:32 AM   #8
fmattheus
Member
 
Registered: Nov 2015
Posts: 104

Rep: Reputation: 38
Ya, cool isn't it. I just found it today while answering his post. Try it on a path where there is a link in the directory structure somewhere. That's even cooler
 
Old 02-22-2016, 08:14 AM   #9
SAbhi
Member
 
Registered: Aug 2009
Location: Bangaluru, India
Distribution: CentOS 6.5, SuSE SLED/ SLES 10.2 SP2 /11.2, Fedora 11/16
Posts: 665

Original Poster
Rep: Reputation: Disabled
thats a very nice one..
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
installing problem xp after installing linux paruhang Linux - Newbie 2 10-20-2011 03:38 PM
Installing Simplescalar: Problem installing simpleutils yy_current_buffer’ undeclared niteshg Linux - Software 1 07-03-2009 05:09 PM
problem doing yum updates and what may be a similar problem installing vlm bad horsie Linux - Newbie 3 12-27-2008 03:51 AM
Problem Installing Limewire - Received Errors While Installing taurusx5 Linux - Software 2 08-05-2008 03:39 AM
Installing Red5 - Problem @ Installing fedora-rpmdevtools Aziz Linux - Software 2 11-04-2006 03:57 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 11:18 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration