安装ipa-client的时候, 总是如下报错:
[root@optdocker1-iuap-hb2-ali sean]#
ipa-replica-install –setup-dns –forwarder 8.8.8.8 –setup-ca –auto-reverse –principal admin –admin-password XXXXXX
Discovery was successful!
Client hostname: optdocker1-iuap-hb2-ali.yonyouiuap.com
Realm: YONYOUIUAP.COM
DNS Domain: yonyouiuap.com
IPA Server: freeipa1-iuap-hb2-ali.yonyouiuap.com
BaseDN: dc=yonyouiuap,dc=com
Continue to configure the system with these values? [no]: yes
Error trying to clean keytab: /usr/sbin/ipa-rmkeytab returned 1
Synchronizing time with KDC…
Attempting to sync time using ntpd. Will timeout after 15 seconds
Attempting to sync time using ntpd. Will timeout after 15 seconds
Attempting to sync time using ntpd. Will timeout after 15 seconds
Attempting to sync time using ntpd. Will timeout after 15 seconds
Attempting to sync time using ntpd. Will timeout after 15 seconds
Unable to sync time with NTP server, assuming the time is in sync. Please check that 123 UDP port is opened.
User authorized to enroll computers: admin
Password for admin@YONYOUIUAP.COM:
Please make sure the following ports are opened in the firewall settings:
TCP: 80, 88, 389
UDP: 88 (at least one of TCP/UDP ports 88 has to be open)
Also note that following ports are necessary for ipa-client working properly after enrollment:
TCP: 464
UDP: 464, 123 (if NTP enabled)
Kerberos authentication failed: kinit: Included profile directory could not be read while initializing Kerberos 5 library
Installation failed. Rolling back changes.
IPA client is not configured on this system.
解决方法:
缺少目录,
mkdir /etc/krb5.conf.d
mkdir /var/log/sssd
mkdir /etc/ipa/
可以从好的client端拷贝/etc/ipa/所有, 然后
ipa-client-install –uninstall -U
rm -rf /etc/ipa/ca.crt
再重新安装, 就成功了
注:
安装replica, 别忘了加–setup-dns –setup-ca 参数!!!
1 Comment
Everett Fland · 06/22/2020 at 8:58 PM
I was curious if you ever considered changing the layout of your website? Its very well written; I love what youve got to say. But maybe you could a little more in the way of content so people could connect with it better. Youve got an awful lot of text for only having 1 or two images. Maybe you could space it out better?