[Freeipa] [Bug 1853863] [NEW] freeipa replica crashes near end of basic install

2019-11-25 Thread Harry Coin
Public bug reported: Just trying to see if freeipa works on Ubuntu, I installed freeipa- server on one system, then tried to install the freeipa-replica on another. The two system setup works just fine on Fedora, but I need to standardize on one distro so I'm evaluating Ubuntu hoping that Canonic

[Freeipa] [Bug 1853863] Re: freeipa replica crashes near end of basic install

2019-11-25 Thread Harry Coin
Both registry1 and registry2 are 'vanilla' eoan mate vms. Host registry1... has a working freeipa-server based on eoan installed. No other packages. It does include the dns support. registry2 is the attempt to install a replica. No other packages. -- You received this bug notification becaus

[Freeipa] [Bug 1853863] Re: freeipa replica crashes near end of basic install

2019-11-25 Thread Harry Coin
Of some interest, a curl of exactly the same link works (kinit admin in effect, just after failure above). root@registry2:/tmp# curl https://registry1.1.quietfountain.com/ipa/keys/ca/caSigningCert%20cert-pki-ca?type=kem&value=eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJraWQiOm51bGx9.Fj

[Freeipa] [Bug 1853863] Re: freeipa replica crashes near end of basic install

2019-11-25 Thread Harry Coin
Here's the shell script log root@registry2:~# kinit admin Password for ad...@1.quietfountain.com: root@registry2:~# ipa-replica-install --setup-dns --no-forwarders WARNING: conflicting time&date synchronization service 'ntp' will be disabled in favor of chronyd Lookup failed: Preferred host regis

[Freeipa] [Bug 1853863] Re: freeipa replica crashes near end of basic install

2019-11-25 Thread Timo Aaltonen
replica install is untested, not surprising to see it being broken and freeipa is in universe and not officially supported -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1853863 Title: freeip

Re: [Freeipa] [Bug 1853863] Re: freeipa replica crashes near end of basic install

2019-11-25 Thread Harry Coin
Timo, Thank you.  I didn't understand freeipa wasn't supported on Ubuntu.  You can consider this matter closed, I have to move to a different distro. On 11/25/19 2:20 PM, Timo Aaltonen wrote: > replica install is untested, not surprising to see it being broken > > and freeipa is in universe and

[Freeipa] [Bug 1853863] Re: freeipa replica crashes near end of basic install

2019-11-25 Thread Timo Aaltonen
The error here could be due to a race, where the first server isn't serving yet when the replica install tries to connect. Also, no mod_nss should be used anywhere anymore, just mod_ssl. -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in U

[Freeipa] [Bug 1853863] Re: freeipa replica crashes near end of basic install

2019-11-25 Thread Timo Aaltonen
'community' supported, by me essentially as time permits, and the next LTS isn't here yet But yes, for critical systems probably use a distro that has official support. Or buy UA and demand it ;) -- You received this bug notification because you are a member of FreeIPA, which is subscribed to fr

[Freeipa] [Bug 1853863] Re: freeipa replica crashes near end of basic install

2019-11-25 Thread Harry Coin
I appreciate your efforts. The thing is folks who use freeipa put it in the same 'has-got-to-work' 'no-regressions' category as the kernel. While it might lack a feature or need work in this or that area, it just can't 'not install' or have some major user-facing thing like the 'here's how you cha