freeipa

#5888 ipa-server-install does not detect or configure IPv6 properly
Closed: Duplicate Opened by rootwyrm.

Closed: Duplicate
Reopen Issue

Given a clean install with a complete /etc/hosts file, ipa-server-install will fail to configure the IPv6 reverse zone if DNS server setup is specified. This appears to be caused by a failure in the IPv6 address retrieval.

/etc/hosts:

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.0.100   demo.test.lan demo
2001:2002:2003:2004:1234::100     demo.test.lan demo

Relevant portions of /var/log/ipaserver-install.log

2016-05-14T21:12:59Z DEBUG Logging to /var/log/ipaserver-install.log
2016-05-14T21:12:59Z DEBUG ipa-server-install was invoked with arguments [] and options: {'no_dns_sshfp': None, 'verbose': False, 'ip_addresses': None, 'domainlevel': None, 'mkhomedir': None, 'no_pkinit': None, 'http_cert_files': None, 'no_ntp': None, 'subject': None, 'no_forwarders': None, 'external_ca_type': None, 'ssh_trust_dns': None, 'domain_name': None, 'idmax': None, 'http_cert_name': None, 'dirsrv_cert_files': None, 'ca_signing_algorithm': None, 'no_reverse': None, 'pkinit_cert_files': None, 'ca_cert_files': None, 'setup_dns': True, 'no_host_dns': None, 'no_sshd': None, 'no_ui_redirect': None, 'realm_name': None, 'forwarders': None, 'idstart': None, 'external_ca': None, 'pkinit_cert_name': None, 'no_ssh': None, 'external_cert_files': None, 'no_hbac_allow': None, 'dirsrv_cert_name': None, 'unattended': False, 'zonemgr': None, 'quiet': False, 'no_dnssec_validation': None, 'host_name': None, 'log_file': None, 'reverse_zones': None, 'uninstall': False}
2016-05-14T21:12:59Z DEBUG IPA version 4.2.0-15.0.1.el7.centos.6.1
2016-05-14T21:12:59Z DEBUG Starting external process
2016-05-14T21:12:59Z DEBUG args='/usr/sbin/selinuxenabled'
2016-05-14T21:12:59Z DEBUG Process finished, return code=1
...
2016-05-14T21:12:59Z DEBUG stderr=
2016-05-14T21:13:00Z DEBUG Check if demo.test.lan is a primary hostname for localhost
2016-05-14T21:13:00Z DEBUG Primary hostname for localhost: demo.test.lan
2016-05-14T21:13:00Z DEBUG will use host_name: demo.test.lan
2016-05-14T21:13:01Z DEBUG read domain_name: test.lan
2016-05-14T21:13:01Z DEBUG read realm_name: TEST.LAN
...
2016-05-14T21:13:10Z DEBUG Starting external process
2016-05-14T21:13:10Z DEBUG args='/sbin/ip' '-family' 'inet6' '-oneline' 'address' 'show'
2016-05-14T21:13:10Z DEBUG Process finished, return code=0
2016-05-14T21:13:10Z DEBUG stdout=1: lo    inet6 ::1/128 scope host \       valid_lft forever preferred_lft forever
2: eth0    inet6 2001:2002:2003:2004:1234::100/128 scope global \       valid_lft forever preferred_lft forever
2: eth0    inet6 fe80::250:56ff:fe9a:63b8/64 scope link \       valid_lft forever preferred_lft forever
2016-05-14T21:13:10Z DEBUG stderr=
2016-05-14T21:13:10Z WARNING Invalid IP address 2001:2002:2003:2004:1234::100 for demo.test.lan: cannot use IP network address

Hello, /etc/hosts is not relevant in this case. The issue is caused by prefix /128 in the IPv6 address.

This will be fixed in IPA 4.4 please see https://fedorahosted.org/freeipa/ticket/5814

I propose to close this ticket as duplicated.

Workaround:
set prefix to /64 (temporarily if needed)

Agreed by user on #freeipa, that this can be closed as duplicate of #5814

Metadata Update from @rootwyrm:
- Issue assigned to someone
- Issue set to the milestone: 0.0 NEEDS_TRIAGE
Metadata
None
None
None
Normal
defect
DNS
0
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.