freeipa

#6867 [ipa-replica-install] - KDC has no support for encryption type
Closed: fixed Opened by mreznik.

Closed: fixed
Reopen Issue

While executing "test_line_topology" tests we got the following error during "ipa-replica-install".

2017-04-11T21:30:29Z DEBUG The ipa-replica-install command failed, exception: KerberosError: Major (851968): Unspecified GSS failure.  Minor code may provide more information, Minor (2529638926): KDC has no support for encryption type
2017-04-11T21:30:29Z ERROR Major (851968): Unspecified GSS failure.  Minor code may provide more information, Minor (2529638926): KDC has no support for encryption type
2017-04-11T21:30:29Z ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information

Running the following packages:

freeipa-server.x86_64 4.5.90.dev201704111739+gita726e98-0.fc25  
gssproxy-0.7.0-3.fc25.x86_64

The issue is not reproducible. According to Simo we should check "krb5kdc.log" which was unfortunately not collected. PR#710 deals with the logging.

Will try to get more info if the issue reappears . If not, we can close the case.

The issue reoccured again. Attaching "krb5_kdc.log" and "ipareplica-install.log"

freeipa-server.x86_64 4.5.90.dev201704131741+git2493f81-0.fc25
krb5-server.x86_64 1.15.1-3.fc25
gssproxy-0.7.0-3.fc25.x86_64

ticket6867_krb5_kdc.log

ticket6867_ipareplica-install.log

vm-061 is original master then vm-058-210 is master for vm-058-231.

Attaching logs from the line topology failed test:

ticket6867_test_line_topo_withca.log

Metadata Update from @pvoborni:
- Issue assigned to mbabinsk
- Issue priority set to: critical
- Issue set to the milestone: FreeIPA 4.5.1
- Issue tagged with: regression

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1442233

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1442233

Issue linked to bug 1442233

Metadata Update from @pvoborni:
- Issue assigned to jcholast (was: mbabinsk)

Metadata Update from @pvoborni:
- Issue priority set to: blocker (was: critical)

Metadata Update from @mbasti:
- Issue set to the milestone: FreeIPA 4.5.2 (was: FreeIPA 4.5.1)

FreeIPA 4.5.1 has been released, moving to FreeIPA 4.5.2 milestone

master:

  • ab71cd5a1693c221950bdfa9ffdfb99b9c317004 httpinstance: wait until the service entry is replicated

ipa-4-5:

  • 9871bc08f8b8f51e2a05c4dfa18d844f9c141b8d httpinstance: wait until the service entry is replicated

Metadata Update from @mbabinsk:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

regression

None
None
Lowest
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.