rhsummitlabs-2018 icon indicating copy to clipboard operation
rhsummitlabs-2018 copied to clipboard

IDM (ipa) instance not working

Open rafaeltuelho opened this issue 6 years ago • 0 comments

I tried to use this demo recently and noticed the IDM instance is not working. After accessing it through SSH the following status is shown for ipa service:

[root@idm-c90e ~]# systemctl status ipa
● ipa.service - Identity, Policy, Audit
   Loaded: loaded (/usr/lib/systemd/system/ipa.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Tue 2019-02-26 05:51:40 EST; 9h ago
  Process: 962 ExecStart=/usr/sbin/ipactl start (code=exited, status=1/FAILURE)
 Main PID: 962 (code=exited, status=1/FAILURE)

Feb 26 05:51:25 idm.local systemd[1]: Starting Identity, Policy, Audit...
Feb 26 05:51:40 idm-c90e.rhpds.opentlc.com ipactl[962]: Failed to start Directory Service: Command '/bin/systemctl start [email protected]' returned non-zero exit status 1
Feb 26 05:51:40 idm-c90e.rhpds.opentlc.com ipactl[962]: Starting Directory Service
Feb 26 05:51:40 idm-c90e.rhpds.opentlc.com systemd[1]: ipa.service: main process exited, code=exited, status=1/FAILURE
Feb 26 05:51:40 idm-c90e.rhpds.opentlc.com systemd[1]: Failed to start Identity, Policy, Audit.
Feb 26 05:51:40 idm-c90e.rhpds.opentlc.com systemd[1]: Unit ipa.service entered failed state.
Feb 26 05:51:40 idm-c90e.rhpds.opentlc.com systemd[1]: ipa.service failed.
Hint: Some lines were ellipsized, use -l to show in full.
[root@idm-c90e ~]# systemctl restart ipa
Job for ipa.service failed because the control process exited with error code. See "systemctl status ipa.service" and "journalctl -xe" for details.
[root@idm-c90e ~]# systemctl status ipa
● ipa.service - Identity, Policy, Audit
   Loaded: loaded (/usr/lib/systemd/system/ipa.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Tue 2019-02-26 15:49:00 EST; 6s ago
  Process: 2564 ExecStart=/usr/sbin/ipactl start (code=exited, status=1/FAILURE)
 Main PID: 2564 (code=exited, status=1/FAILURE)

Feb 26 15:48:57 idm-c90e.rhpds.opentlc.com systemd[1]: Starting Identity, Policy, Audit...
Feb 26 15:48:59 idm-c90e.rhpds.opentlc.com ipactl[2564]: Failed to start Directory Service: Command '/bin/systemctl start [email protected]' returned non-zero...t status 1
Feb 26 15:48:59 idm-c90e.rhpds.opentlc.com ipactl[2564]: Starting Directory Service
Feb 26 15:49:00 idm-c90e.rhpds.opentlc.com systemd[1]: ipa.service: main process exited, code=exited, status=1/FAILURE
Feb 26 15:49:00 idm-c90e.rhpds.opentlc.com systemd[1]: Failed to start Identity, Policy, Audit.
Feb 26 15:49:00 idm-c90e.rhpds.opentlc.com systemd[1]: Unit ipa.service entered failed state.
Feb 26 15:49:00 idm-c90e.rhpds.opentlc.com systemd[1]: ipa.service failed.
Hint: Some lines were ellipsized, use -l to show in full.
[root@idm-c90e ~]# journalctl -xe
Feb 26 15:45:29 idm-c90e.rhpds.opentlc.com sudo[2520]: ec2-user : TTY=pts/0 ; PWD=/home/ec2-user ; USER=root ; COMMAND=/bin/su -
Feb 26 15:45:30 idm-c90e.rhpds.opentlc.com su[2521]: (to root) ec2-user on pts/0
Feb 26 15:45:30 idm-c90e.rhpds.opentlc.com su[2521]: pam_unix(su-l:session): session opened for user root by ec2-user(uid=0)
Feb 26 15:46:35 idm-c90e.rhpds.opentlc.com sshd[2548]: error: maximum authentication attempts exceeded for admin from 45.5.101.15 port 4813 ssh2 [preauth]
Feb 26 15:46:35 idm-c90e.rhpds.opentlc.com sshd[2548]: Disconnecting: Too many authentication failures [preauth]
Feb 26 15:48:57 idm-c90e.rhpds.opentlc.com polkitd[595]: Registered Authentication Agent for unix-process:2558:3588005 (system bus name :1.47 [/usr/bin/pkttyagent --notify-fd 5 --f
Feb 26 15:48:57 idm-c90e.rhpds.opentlc.com systemd[1]: Starting Identity, Policy, Audit...
-- Subject: Unit ipa.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit ipa.service has begun starting up.
Feb 26 15:48:59 idm-c90e.rhpds.opentlc.com systemd[1]: Failed to load environment files: No such file or directory
Feb 26 15:48:59 idm-c90e.rhpds.opentlc.com systemd[1]: [email protected] failed to run 'start-pre' task: No such file or directory
Feb 26 15:48:59 idm-c90e.rhpds.opentlc.com systemd[1]: Failed to start 389 Directory Server EXAMPLE-COM..
-- Subject: Unit [email protected] has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit [email protected] has failed.
--
-- The result is failed.
Feb 26 15:48:59 idm-c90e.rhpds.opentlc.com systemd[1]: [email protected] failed.
Feb 26 15:48:59 idm-c90e.rhpds.opentlc.com systemd[1]: Starting 389 Directory Server EXAMPLE-COM....
-- Subject: Unit [email protected] has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit [email protected] has begun starting up.
Feb 26 15:48:59 idm-c90e.rhpds.opentlc.com ipactl[2564]: Failed to start Directory Service: Command '/bin/systemctl start [email protected]' returned non-zero exit status
Feb 26 15:48:59 idm-c90e.rhpds.opentlc.com ipactl[2564]: Starting Directory Service
Feb 26 15:49:00 idm-c90e.rhpds.opentlc.com systemd[1]: ipa.service: main process exited, code=exited, status=1/FAILURE
Feb 26 15:49:00 idm-c90e.rhpds.opentlc.com systemd[1]: Failed to start Identity, Policy, Audit.
-- Subject: Unit ipa.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit ipa.service has failed.
--
-- The result is failed.
Feb 26 15:49:00 idm-c90e.rhpds.opentlc.com systemd[1]: Unit ipa.service entered failed state.
Feb 26 15:49:00 idm-c90e.rhpds.opentlc.com systemd[1]: ipa.service failed.
Feb 26 15:49:00 idm-c90e.rhpds.opentlc.com polkitd[595]: Unregistered Authentication Agent for unix-process:2558:3588005 (system bus name :1.47, object path /org/freedesktop/Policy
[root@idm-c90e ~]# exit
logout
[ec2-user@idm-c90e ~]$ exit
logout
Connection to idm-c90e.rhpds.opentlc.com closed.

[ec2-user@idm-c90e ~]$ sudo su -
Last login: Tue Mar 27 13:45:38 EDT 2018 from nat-pool-rdu-t.redhat.com on pts/0
[root@idm-c90e ~]# ipactl status
Directory Service: STOPPED
Directory Service must be running in order to obtain status of other services
ipa: INFO: The ipactl command was successful

rafaeltuelho avatar Feb 26 '19 20:02 rafaeltuelho