#2154 Unable to install ipa-server on a specified interface in dual nic machines.
Closed: Fixed None Opened 12 years ago by mkosek.

https://bugzilla.redhat.com/show_bug.cgi?id=759100

Description of problem:


Version-Release number of selected component (if applicable):
ipa-server-2.1.3-9.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Configure DNS to have multiple A records for a single hostname.
[root@jetfire ~]# dig jetfire.testrelm
...
;; QUESTION SECTION:
;jetfire.testrelm.              IN      A

;; ANSWER SECTION:
jetfire.testrelm.       86400   IN      A       10.65.201.113
jetfire.testrelm.       86400   IN      A       10.65.201.71

;; AUTHORITY SECTION:
testrelm.               86400   IN      NS
bumblebee.lab.eng.pnq.redhat.com.

;; ADDITIONAL SECTION:
bumblebee.lab.eng.pnq.redhat.com. 86400 IN A    10.65.201.64
...
[root@jetfire ~]#

2. Install ipa-server on a machine with multiple nic's which resolves to the
same hostname as in step 1.


[root@jetfire ~]# ipa-server-install

The log file for this installation can be found in
/var/log/ipaserver-install.log
...
Server host name [jetfire.testrelm]:

Unexpected error - see ipaserver-install.log for details:
 The network address 10.65.201.113 does not match the DNS lookup 10.65.201.71.
Check /etc/hosts and ensure that 10.65.201.113 is the IP address for
jetfire.testrelm
[root@jetfire ~]#

3. Update /etc/hosts as:
[root@jetfire ~]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
:1         localhost localhost.localdomain localhost6 localhost6.localdomain6
10.65.201.71    jetfire.testrelm        jetfire
[root@jetfire ~]#

4. And re-run the installer
[root@jetfire ~]# ipa-server-install --ip-address=10.65.201.71
--hostname=jetfire.testrelm

The log file for this installation can be found in
/var/log/ipaserver-install.log
...
Server host name [jetfire.testrelm]:

The domain name has been calculated based on the host name.

Please confirm the domain name [testrelm]:

Error: the hostname resolves to an IP address that is different
from the one provided on the command line.  Please fix your DNS
or /etc/hosts file and restart the installation.
[root@jetfire ~]#


Actual results:
Unable to install ipa-server on a specified interface (eth0 in this case).

Expected results:
Should provide a way to select the interface to install ipa-server on.

Additional info:

2011-12-01 13:28:25,849 DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2011-12-01 13:28:25,849 DEBUG Loading Index file from
'/var/lib/ipa/sysrestore/sysrestore.index'
2011-12-01 13:28:25,849 DEBUG httpd is not configured
2011-12-01 13:28:25,850 DEBUG ipa_kpasswd is not configured
2011-12-01 13:28:25,850 DEBUG dirsrv is not configured
2011-12-01 13:28:25,850 DEBUG pki-cad is not configured
2011-12-01 13:28:25,850 DEBUG pkids is not configured
2011-12-01 13:28:25,850 DEBUG install is not configured
2011-12-01 13:28:25,850 DEBUG krb5kdc is not configured
2011-12-01 13:28:25,850 DEBUG ntpd is not configured
2011-12-01 13:28:25,851 DEBUG named is not configured
2011-12-01 13:28:25,851 DEBUG filestore is tracking no files
2011-12-01 13:28:25,851 DEBUG Loading Index file from
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2011-12-01 13:28:25,851 DEBUG /usr/sbin/ipa-server-install was invoked with
options: {'reverse_zone': None, 'realm_name': None, 'zone_refresh': 30,
'conf_ntp': True, 'subject': None, 'no_forwarders': False, 'ui_redirect': True,
'domain_name': None, 'idmax': 0, 'hbac_allow': False, 'no_reverse': False,
'dirsrv_pkcs12': None, 'unattended': False, 'selfsign': False,
'external_ca_file': None, 'no_host_dns': False, 'http_pkcs12': None,
'forwarders': None, 'idstart': 102000000, 'external_ca': False, 'ip_address':
None, 'zonemgr': None, 'setup_dns': False, 'host_name': None, 'debug': False,
'external_cert_file': None, 'uninstall': False}
2011-12-01 13:28:25,851 DEBUG missing options might be asked for interactively
later

2011-12-01 13:28:25,851 DEBUG Loading Index file from
'/var/lib/ipa/sysrestore/sysrestore.index'
2011-12-01 13:28:25,852 DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2011-12-01 13:28:26,877 DEBUG The network address 10.65.201.113 does not match
the DNS lookup 10.65.201.71. Check /etc/hosts and ensure that 10.65.201.113 is
the IP address for jetfire.testrelm
  File "/usr/sbin/ipa-server-install", line 1151, in <module>
    sys.exit(main())

  File "/usr/sbin/ipa-server-install", line 743, in main
    host_name = read_host_name(host_default,options.no_host_dns)

  File "/usr/sbin/ipa-server-install", line 381, in read_host_name
    verify_fqdn(host_name,no_host_dns)

  File "/usr/lib/python2.6/site-packages/ipaserver/install/installutils.py",
line 196, in verify_fqdn
    verify_dns_records(host_name, rs, resaddr, 'ipv4')

  File "/usr/lib/python2.6/site-packages/ipaserver/install/installutils.py",
line 113, in verify_dns_records
    raise RuntimeError("The network address %s does not match the DNS lookup
%s. Check /etc/hosts and ensure that %s is the IP address for %s" %
(dns_addr.format(), resaddr, dns_addr.format(), host_name))

Patch freeipa-mkosek-189-fix-ipa-server-install-for-dual-nics.patch sent for review

Metadata Update from @mkosek:
- Issue assigned to mkosek
- Issue set to the milestone: FreeIPA 2.2 Core Effort - 2012/01

7 years ago

Login to comment on this ticket.

Metadata