April 2017 – 一江春水向东流

未分类

ipa client 安装记

安装ipa-client的时候, 总是如下报错: [root@optdocker1-iuap-hb2-ali sean]# ipa-replica-install –setup-dns –forwarder 8.8.8.8 –setup-ca –auto-reverse –principal admin –admin-password XXXXXX Discovery was successful! Client hostname: optdocker1-iuap-hb2-ali.yonyouiuap.com Realm: YONYOUIUAP.COM DNS Domain: yonyouiuap.com IPA Server: freeipa1-iuap-hb2-ali.yonyouiuap.com BaseDN: dc=yonyouiuap,dc=com Continue to configure the system with these values? [no]: yes Error trying to clean keytab: /usr/sbin/ipa-rmkeytab returned 1 Synchronizing time Read more…

By sean, 8 years04/21/2017 ago

未分类

freeipa replica安装记

在安装ipa多主时: ipa-replica-install –setup-dns –forwarder 8.8.8.8 –setup-ca –auto-reverse –principal admin –admin-password XXXXX 执行以上命令安装时, 一直在报错:

 [28/44]: restarting directory server
ipa         : CRITICAL Failed to restart the directory server (Command '/bin/systemctl restart dirsrv@YONYOUIUAP-COM.service' returned non-zero exit status 1). See the installation log for details.
  [29/44]: setting up initial replication
  [error] error: [Errno 111] 拒绝连接
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.

ipa.ipapython.install.cli.install_tool(Replica): ERROR    [Errno 111] 拒绝连接
ipa.ipapython.install.cli.install_tool(Replica): ERROR    The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information
[root@freeipa1-iuap-hb2-ali sean]# ipa-replica-install --principal admin --admin-password xxxxxxx
ipa.ipapython.install.cli.install_tool(Replica): ERROR    IPA server is already configured on this system.
If you want to reinstall the IPA server, please uninstall it first using 'ipa-server-install --uninstall'.
ipa.ipapython.install.cli.install_tool(Replica): ERROR    The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information

[28/44]: restarting directory server

ipa : CRITICAL Failed to restart the directory server (Command '/bin/systemctl restart dirsrv@YONYOUIUAP-COM.service' returned non-zero exit status 1). See the installation log for details.

[29/44]: setting up initial replication

[error] error: [Errno 111] 拒绝连接

Your system may be partly configured.

Run /usr/sbin/ipa-server-install --uninstall to clean up.

ipa.ipapython.install.cli.install_tool(Replica): ERROR [Errno 111] 拒绝连接

ipa.ipapython.install.cli.install_tool(Replica): ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information

[root@freeipa1-iuap-hb2-ali sean]# ipa-replica-install --principal admin --admin-password xxxxxxx

ipa.ipapython.install.cli.install_tool(Replica): ERROR IPA server is already configured on this system.

If you want to reinstall the IPA server, please uninstall it first using 'ipa-server-install --uninstall'.

ipa.ipapython.install.cli.install_tool(Replica): ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information

查了下google, 终于找到一篇文章: https://pagure.io/freeipa/issue/6613 具体就是: pki-tomcat的8009端口没启来, 原因是: This is a duplicate of https://fedorahosted.org/freeipa/ticket/6575. We’re working on a fix. As mentioned in comment:16, changing ::1 to localhost or 127.0.0.1 in /var/lib/pki/pki-tomcat/conf/server.xml in ‘address’ field of AJP/1.3 Connector fixes the Read more…

By sean, 8 years04/16/2017 ago

未分类

openvpn web ui 安装记

之前让同事架设了一个openvpn, 后来同事离职, 用命令注销账号, 确老是报错, 后来不断有新账号加入需要, 后来想要是有个web页面去管理就好了,就在github上搜, 后来找到了这个项目: https://github.com/Chocobozzz/OpenVPN-Admin 正符合需要, 于是就开始clone下来安装. 依次输入命令:

# yum install epel-release
# yum install openvpn httpd php-mysql mariadb-server php nodejs unzip git wget sed npm
# npm install -g bower
# systemctl enable mariadb
# systemctl start mariadb

# yum install epel-release

# yum install openvpn httpd php-mysql mariadb-server php nodejs unzip git wget sed npm

# npm install -g bower

# systemctl enable mariadb

# systemctl start mariadb

./install.sh /data/apps/www_openvpn sean admin Server Hostname/IP: x.x.x.x Port [443]: xxxx MySQL root password: MySQL user name for OpenVPN-Admin (will be created): admin MySQL user password for OpenVPN-Admin: ############ Certificates informations ################## Key size (1024, 2048 or 4096) [2048]: Read more…

By sean, 8 years04/02/2017 ago