redhat customer portal info

Red Hat, Fedora, CentOS

hi,

https://access.redhat.com/solutions/3192722

Kikerul onnan az info vhova? Pl. beszivarog vhova a centos-nel?
Kene a tartalma nekem igennagyon.

  • 1277 megtekintés

( freeoli v | 2017. 11. 16., cs – 06:58 )

Nem szivarog.

Biztos, hogy van itt olyan akinek van elofizetese.

Ha regisztralsz egy frlhasznalot, azzal nem latod?

( lberes (nem ellenőrzött) | 2017. 11. 16., cs – 07:47 )

Nem lehet neked mailt irni, baratom.

--
L

( asrob v | 2017. 11. 16., cs – 08:59 )

Amúgy miért nem regisztrálsz? Van developer subscription-jük is teljesen ingyen, aztán akkor láthatod a fentebb említett oldal tartalmát.

( neutrino v | 2017. 11. 16., cs – 09:09 )

Environment

IPA4.5
RHEL7.4
Issue

Unable to start ipa-custodia service after upgrading from RHEL7.3 to RHEL7.4:
Raw

[root@tigger]# ipactl start
Existing service file detected!
Assuming stale, cleaning and proceeding
Starting Directory Service
Starting krb5kdc Service
Starting kadmin Service
Starting named Service
Starting httpd Service
Starting ipa-custodia Service
Failed to start ipa-custodia Service <<<<<<<<<<<<<<<
Shutting down
Hint: You can use --ignore-service-failure option for forced start in case that a non-critical service failed
Aborting ipactl

Resolution

Stop the individual IPA stacks if they have been started up manually, launch the ipa-server-upgrade and then start the entire IPA stack via "ipactl start" once "ipa-server-upgrade" has completed succssfully.
Root Cause

This was due to the fact that IPV6 was disabled prior to the upgrade, which prevented upgrade from succeeding:
Raw

2017-09-19T15:16:39Z DEBUG stderr=
2017-09-19T15:16:39Z DEBUG wait_for_open_ports: localhost [8080, 8443] timeout 300
2017-09-19T15:21:40Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.

The configuration for ipa-custodia service is kept in the /etc/ipa/custodia/custodia.conf file.
Raw

# cat /etc/ipa/custodia/custodia.conf
...
[authz:kemkeys]
handler = ipaserver.secrets.kem.IPAKEMKeys <<<<<<<<<<<<<
paths = /keys
store = ipa
server_keys = /etc/ipa/custodia/server.keys

The "handler" line indicates that the file $PYTHONPATH/ipaserver/secrets/kem.py will be used. On a RHEL7.3 IPA server, the line points to a different location:
Raw

handler = ipapython.secrets.kem.IPAKEMKeys

Hence ipa-server-upgrade needs to be relaunched manually after enabling IPV6, in order to update custodia.conf and have it using the right module for IPAKEMKeys.

-------------------------
Dropbox refer - mert kell a hely: https://db.tt/V3RtXWLl
neut @ présház