2020-06-19T10:01:29Z DEBUG Logging to /var/log/ipaclient-install.log 2020-06-19T10:01:29Z DEBUG ipa-client-install was invoked with arguments [] and options: {'no_dns_sshfp': False, 'force': False, 'verbose': False, 'ip_addresses': None, 'configure_firefox': False, 'realm_name': None, 'force_ntpd': False, 'on_master': False, 'no_nisdomain': False, 'ssh_trust_dns': False, 'principal': 'join', 'keytab': None, 'no_ntp': False, 'domain_name': 'lin.test.lan', 'request_cert': False, 'fixed_primary': False, 'no_sudo': False, 'ca_cert_files': None, 'all_ip_addresses': False, 'ntp_pool': None, 'ntp_servers': None, 'enable_dns_updates': False, 'no_sshd': False, 'kinit_attempts': None, 'no_krb5_offline_passwords': False, 'servers': None, 'no_ssh': False, 'force_join': True, 'firefox_dir': None, 'unattended': True, 'quiet': False, 'nisdomain': None, 'prompt_password': False, 'host_name': 'debian10.lin.test.lan', 'permit': False, 'automount_location': None, 'preserve_sssd': False, 'mkhomedir': True, 'log_file': None, 'uninstall': False} 2020-06-19T10:01:29Z DEBUG IPA version 4.7.2 2020-06-19T10:01:29Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2020-06-19T10:01:29Z DEBUG Deleting invalid keytab: '/etc/krb5.keytab'. 2020-06-19T10:01:29Z DEBUG [IPA Discovery] 2020-06-19T10:01:29Z DEBUG Starting IPA discovery with domain=lin.test.lan, servers=None, hostname=debian10.lin.test.lan 2020-06-19T10:01:29Z DEBUG Search for LDAP SRV record in lin.test.lan 2020-06-19T10:01:29Z DEBUG Search DNS for SRV record of _ldap._tcp.lin.test.lan 2020-06-19T10:01:29Z DEBUG DNS record found: 0 100 389 freeipareplica.lin.test.lan. 2020-06-19T10:01:29Z DEBUG DNS record found: 0 100 389 freeipaserver.lin.test.lan. 2020-06-19T10:01:29Z DEBUG [Kerberos realm search] 2020-06-19T10:01:29Z DEBUG Search DNS for TXT record of _kerberos.lin.test.lan 2020-06-19T10:01:29Z DEBUG DNS record found: "LIN.TEST.LAN" 2020-06-19T10:01:29Z DEBUG Search DNS for SRV record of _kerberos._udp.lin.test.lan 2020-06-19T10:01:29Z DEBUG DNS record found: 0 100 88 freeipareplica.lin.test.lan. 2020-06-19T10:01:29Z DEBUG DNS record found: 0 100 88 freeipaserver.lin.test.lan. 2020-06-19T10:01:29Z DEBUG [LDAP server check] 2020-06-19T10:01:29Z DEBUG Verifying that freeipareplica.lin.test.lan (realm LIN.TEST.LAN) is an IPA server 2020-06-19T10:01:29Z DEBUG Init LDAP connection to: ldap://freeipareplica.lin.test.lan:389 2020-06-19T10:01:32Z DEBUG LDAP Error: impossible de se connecter à « ldap://freeipareplica.lin.test.lan:389 » : Transport endpoint is not connected 2020-06-19T10:01:32Z WARNING Skip freeipareplica.lin.test.lan: LDAP server is not responding, unable to verify if this is an IPA server 2020-06-19T10:01:32Z DEBUG Verifying that freeipaserver.lin.test.lan (realm LIN.TEST.LAN) is an IPA server 2020-06-19T10:01:32Z DEBUG Init LDAP connection to: ldap://freeipaserver.lin.test.lan:389 2020-06-19T10:01:32Z DEBUG Search LDAP server for IPA base DN 2020-06-19T10:01:32Z DEBUG Check if naming context 'dc=lin,dc=test,dc=lan' is for IPA 2020-06-19T10:01:32Z DEBUG Naming context 'dc=lin,dc=test,dc=lan' is a valid IPA context 2020-06-19T10:01:32Z DEBUG Search for (objectClass=krbRealmContainer) in dc=lin,dc=test,dc=lan (sub) 2020-06-19T10:01:32Z DEBUG Found: cn=LIN.TEST.LAN,cn=kerberos,dc=lin,dc=test,dc=lan 2020-06-19T10:01:32Z DEBUG Discovery result: Success; server=freeipaserver.lin.test.lan, domain=lin.test.lan, kdc=freeipareplica.lin.test.lan,freeipaserver.lin.test.lan, basedn=dc=lin,dc=test,dc=lan 2020-06-19T10:01:32Z DEBUG Validated servers: freeipaserver.lin.test.lan 2020-06-19T10:01:32Z DEBUG will use discovered domain: lin.test.lan 2020-06-19T10:01:32Z DEBUG Start searching for LDAP SRV record in "lin.test.lan" (Validating DNS Discovery) and its sub-domains 2020-06-19T10:01:32Z DEBUG Search DNS for SRV record of _ldap._tcp.lin.test.lan 2020-06-19T10:01:32Z DEBUG DNS record found: 0 100 389 freeipareplica.lin.test.lan. 2020-06-19T10:01:32Z DEBUG DNS record found: 0 100 389 freeipaserver.lin.test.lan. 2020-06-19T10:01:32Z DEBUG DNS validated, enabling discovery 2020-06-19T10:01:32Z DEBUG will use discovered server: freeipaserver.lin.test.lan 2020-06-19T10:01:32Z INFO Discovery was successful! 2020-06-19T10:01:32Z DEBUG will use discovered realm: LIN.TEST.LAN 2020-06-19T10:01:32Z DEBUG will use discovered basedn: dc=lin,dc=test,dc=lan 2020-06-19T10:01:32Z INFO Client hostname: debian10.lin.test.lan 2020-06-19T10:01:32Z DEBUG Hostname source: Provided as option 2020-06-19T10:01:32Z INFO Realm: LIN.TEST.LAN 2020-06-19T10:01:32Z DEBUG Realm source: Discovered from LDAP DNS records in freeipaserver.lin.test.lan 2020-06-19T10:01:32Z INFO DNS Domain: lin.test.lan 2020-06-19T10:01:32Z DEBUG DNS Domain source: Discovered LDAP SRV records from lin.test.lan 2020-06-19T10:01:32Z INFO IPA Server: freeipaserver.lin.test.lan 2020-06-19T10:01:32Z DEBUG IPA Server source: Discovered from LDAP DNS records in freeipaserver.lin.test.lan 2020-06-19T10:01:32Z INFO BaseDN: dc=lin,dc=test,dc=lan 2020-06-19T10:01:32Z DEBUG BaseDN source: From IPA server ldap://freeipaserver.lin.test.lan:389 2020-06-19T10:01:32Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2020-06-19T10:01:32Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:32Z DEBUG Starting external process 2020-06-19T10:01:32Z DEBUG args=['/usr/sbin/ipa-rmkeytab', '-k', '/etc/krb5.keytab', '-r', u'LIN.TEST.LAN'] 2020-06-19T10:01:32Z DEBUG Process finished, return code=3 2020-06-19T10:01:32Z DEBUG stdout= 2020-06-19T10:01:32Z DEBUG stderr=Échec de l'ouverture du tableau de clés « /etc/krb5.keytab » : Aucun fichier ou dossier de ce type 2020-06-19T10:01:32Z DEBUG Backing up system configuration file '/etc/hostname' 2020-06-19T10:01:32Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2020-06-19T10:01:32Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:32Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:32Z DEBUG Starting external process 2020-06-19T10:01:32Z DEBUG args=['/usr/bin/hostnamectl', 'set-hostname', 'debian10.lin.test.lan'] 2020-06-19T10:01:33Z DEBUG Process finished, return code=0 2020-06-19T10:01:33Z DEBUG stdout= 2020-06-19T10:01:33Z DEBUG stderr= 2020-06-19T10:01:33Z DEBUG Starting external process 2020-06-19T10:01:33Z DEBUG args=['/usr/sbin/service', 'ntp', 'status', ''] 2020-06-19T10:01:33Z DEBUG Process finished, return code=4 2020-06-19T10:01:33Z DEBUG stdout= 2020-06-19T10:01:33Z DEBUG stderr=Unit ntp.service could not be found. 2020-06-19T10:01:33Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:33Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:33Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:33Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:33Z INFO Synchronizing time 2020-06-19T10:01:33Z DEBUG Search DNS for SRV record of _ntp._udp.lin.test.lan 2020-06-19T10:01:33Z DEBUG DNS record not found: NXDOMAIN 2020-06-19T10:01:33Z WARNING No SRV records of NTP servers found and no NTP server or pool address was provided. 2020-06-19T10:01:33Z DEBUG Starting external process 2020-06-19T10:01:33Z DEBUG args=['/bin/systemctl', 'enable', 'chronyd.service'] 2020-06-19T10:01:33Z DEBUG Process finished, return code=1 2020-06-19T10:01:33Z DEBUG stdout= 2020-06-19T10:01:33Z DEBUG stderr=Failed to enable unit: Too many levels of symbolic links 2020-06-19T10:01:33Z DEBUG Starting external process 2020-06-19T10:01:33Z DEBUG args=['/bin/systemctl', 'restart', 'chronyd.service'] 2020-06-19T10:01:33Z DEBUG Process finished, return code=0 2020-06-19T10:01:33Z DEBUG stdout= 2020-06-19T10:01:33Z DEBUG stderr= 2020-06-19T10:01:33Z DEBUG Starting external process 2020-06-19T10:01:33Z DEBUG args=['/bin/systemctl', 'is-active', 'chronyd.service'] 2020-06-19T10:01:33Z DEBUG Process finished, return code=0 2020-06-19T10:01:33Z DEBUG stdout=active 2020-06-19T10:01:33Z DEBUG stderr= 2020-06-19T10:01:33Z DEBUG Restart of chronyd.service complete 2020-06-19T10:01:33Z INFO Attempting to sync time with chronyc. 2020-06-19T10:01:33Z DEBUG Starting external process 2020-06-19T10:01:33Z DEBUG args=['/usr/bin/chronyc', 'waitsync', '3', '-d'] 2020-06-19T10:01:43Z DEBUG Process finished, return code=0 2020-06-19T10:01:43Z DEBUG stdout=try: 1, refid: 00000000, correction: 0.000000000, skew: 0.000 try: 2, refid: A29FC801, correction: 0.000001762, skew: 1000000.000 2020-06-19T10:01:43Z DEBUG stderr= 2020-06-19T10:01:43Z INFO Time synchronization was successful. 2020-06-19T10:01:43Z DEBUG Starting external process 2020-06-19T10:01:43Z DEBUG args=['/bin/keyctl', 'get_persistent', '@s', '0'] 2020-06-19T10:01:43Z DEBUG Process finished, return code=1 2020-06-19T10:01:43Z DEBUG stdout= 2020-06-19T10:01:43Z DEBUG stderr=keyctl_get_persistent: Operation not supported 2020-06-19T10:01:43Z DEBUG Writing Kerberos configuration to /tmp/tmpmYvnas: 2020-06-19T10:01:43Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = LIN.TEST.LAN dns_lookup_realm = false dns_lookup_kdc = false rdns = false dns_canonicalize_hostname = false ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 [realms] LIN.TEST.LAN = { kdc = freeipaserver.lin.test.lan:88 master_kdc = freeipaserver.lin.test.lan:88 admin_server = freeipaserver.lin.test.lan:749 kpasswd_server = freeipaserver.lin.test.lan:464 default_domain = lin.test.lan pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .lin.test.lan = LIN.TEST.LAN lin.test.lan = LIN.TEST.LAN debian10.lin.test.lan = LIN.TEST.LAN 2020-06-19T10:01:43Z DEBUG Writing configuration file /tmp/tmpmYvnas 2020-06-19T10:01:43Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = LIN.TEST.LAN dns_lookup_realm = false dns_lookup_kdc = false rdns = false dns_canonicalize_hostname = false ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 [realms] LIN.TEST.LAN = { kdc = freeipaserver.lin.test.lan:88 master_kdc = freeipaserver.lin.test.lan:88 admin_server = freeipaserver.lin.test.lan:749 kpasswd_server = freeipaserver.lin.test.lan:464 default_domain = lin.test.lan pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .lin.test.lan = LIN.TEST.LAN lin.test.lan = LIN.TEST.LAN debian10.lin.test.lan = LIN.TEST.LAN 2020-06-19T10:01:43Z DEBUG Initializing principal join@LIN.TEST.LAN using password 2020-06-19T10:01:43Z DEBUG Starting external process 2020-06-19T10:01:43Z DEBUG args=['/usr/bin/kinit', u'join@LIN.TEST.LAN', '-c', '/tmp/krbccCD7n1k/ccache'] 2020-06-19T10:01:43Z DEBUG Process finished, return code=0 2020-06-19T10:01:43Z DEBUG stdout=Password for join@LIN.TEST.LAN: 2020-06-19T10:01:43Z DEBUG stderr= 2020-06-19T10:01:43Z DEBUG trying to retrieve CA cert via LDAP from freeipaserver.lin.test.lan 2020-06-19T10:01:43Z DEBUG retrieving schema for SchemaCache url=ldap://freeipaserver.lin.test.lan:389 conn= 2020-06-19T10:01:43Z INFO Successfully retrieved CA cert Subject: CN=Certificate Authority,O=LIN.TEST.LAN Issuer: CN=Certificate Authority,O=LIN.TEST.LAN Valid From: 2020-06-17 10:07:21 Valid Until: 2040-06-17 10:07:21 2020-06-19T10:01:43Z DEBUG Starting external process 2020-06-19T10:01:43Z DEBUG args=['/usr/sbin/ipa-join', '-s', 'freeipaserver.lin.test.lan', '-b', 'dc=lin,dc=test,dc=lan', '-h', 'debian10.lin.test.lan', '-f'] 2020-06-19T10:01:43Z DEBUG Process finished, return code=0 2020-06-19T10:01:43Z DEBUG stdout= 2020-06-19T10:01:43Z DEBUG stderr=Failed to parse result: Insufficient access rights Retrying with pre-4.0 keytab retrieval method... Failed to retrieve encryption type Camellia-128 CTS mode with CMAC (#25) Failed to retrieve encryption type Camellia-256 CTS mode with CMAC (#26) Keytab successfully retrieved and stored in: /etc/krb5.keytab 2020-06-19T10:01:43Z INFO Enrolled in IPA realm LIN.TEST.LAN 2020-06-19T10:01:43Z DEBUG Starting external process 2020-06-19T10:01:43Z DEBUG args=['/usr/bin/kdestroy'] 2020-06-19T10:01:43Z DEBUG Process finished, return code=0 2020-06-19T10:01:43Z DEBUG stdout= 2020-06-19T10:01:43Z DEBUG stderr= 2020-06-19T10:01:43Z DEBUG Initializing principal host/debian10.lin.test.lan@LIN.TEST.LAN using keytab /etc/krb5.keytab 2020-06-19T10:01:43Z DEBUG using ccache /etc/ipa/.dns_ccache 2020-06-19T10:01:43Z DEBUG Attempt 1/5: success 2020-06-19T10:01:43Z DEBUG Backing up system configuration file '/etc/ipa/default.conf' 2020-06-19T10:01:43Z DEBUG -> Not backing up - '/etc/ipa/default.conf' doesn't exist 2020-06-19T10:01:43Z DEBUG Writing configuration file /etc/ipa/default.conf 2020-06-19T10:01:43Z DEBUG #File modified by ipa-client-install [global] basedn = dc=lin,dc=test,dc=lan realm = LIN.TEST.LAN domain = lin.test.lan server = freeipaserver.lin.test.lan host = debian10.lin.test.lan xmlrpc_uri = https://freeipaserver.lin.test.lan/ipa/xml enable_ra = True 2020-06-19T10:01:43Z INFO Created /etc/ipa/default.conf 2020-06-19T10:01:43Z DEBUG Backing up system configuration file '/etc/sssd/sssd.conf' 2020-06-19T10:01:43Z DEBUG -> Not backing up - '/etc/sssd/sssd.conf' doesn't exist 2020-06-19T10:01:43Z DEBUG New SSSD config will be created 2020-06-19T10:01:43Z DEBUG Backing up system configuration file '/etc/nsswitch.conf' 2020-06-19T10:01:43Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2020-06-19T10:01:43Z DEBUG Updating configuration file /etc/nsswitch.conf 2020-06-19T10:01:43Z DEBUG # /etc/nsswitch.conf # # Example configuration of GNU Name Service Switch functionality. # If you have the `glibc-doc-reference' and `info' packages installed, try: # `info libc "Name Service Switch"' for information about this file. passwd: files systemd sss group: files systemd sss shadow: files sss gshadow: files hosts: files dns networks: files protocols: db files services: db files sss ethers: db files rpc: db files netgroup: nis sss sudoers: files sss 2020-06-19T10:01:43Z INFO Configured sudoers in /etc/nsswitch.conf 2020-06-19T10:01:43Z INFO Configured /etc/sssd/sssd.conf 2020-06-19T10:01:43Z DEBUG Backing up system configuration file '/etc/krb5.conf' 2020-06-19T10:01:43Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2020-06-19T10:01:43Z DEBUG Starting external process 2020-06-19T10:01:43Z DEBUG args=['/bin/keyctl', 'get_persistent', '@s', '0'] 2020-06-19T10:01:43Z DEBUG Process finished, return code=1 2020-06-19T10:01:43Z DEBUG stdout= 2020-06-19T10:01:43Z DEBUG stderr=keyctl_get_persistent: Operation not supported 2020-06-19T10:01:43Z DEBUG Writing Kerberos configuration to /etc/krb5.conf: 2020-06-19T10:01:43Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = LIN.TEST.LAN dns_lookup_realm = true dns_lookup_kdc = true rdns = false dns_canonicalize_hostname = false ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 [realms] LIN.TEST.LAN = { pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .lin.test.lan = LIN.TEST.LAN lin.test.lan = LIN.TEST.LAN debian10.lin.test.lan = LIN.TEST.LAN 2020-06-19T10:01:43Z DEBUG Writing configuration file /etc/krb5.conf 2020-06-19T10:01:43Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = LIN.TEST.LAN dns_lookup_realm = true dns_lookup_kdc = true rdns = false dns_canonicalize_hostname = false ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 [realms] LIN.TEST.LAN = { pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .lin.test.lan = LIN.TEST.LAN lin.test.lan = LIN.TEST.LAN debian10.lin.test.lan = LIN.TEST.LAN 2020-06-19T10:01:43Z INFO Configured /etc/krb5.conf for IPA realm LIN.TEST.LAN 2020-06-19T10:01:43Z DEBUG Starting external process 2020-06-19T10:01:43Z DEBUG args=['/usr/bin/certutil', '-d', '/tmp/tmpQUv86E', '-N', '-f', '/tmp/tmpQUv86E/pwdfile.txt', '-@', '/tmp/tmpQUv86E/pwdfile.txt'] 2020-06-19T10:01:43Z DEBUG Process finished, return code=0 2020-06-19T10:01:43Z DEBUG stdout= 2020-06-19T10:01:43Z DEBUG stderr= 2020-06-19T10:01:43Z DEBUG Starting external process 2020-06-19T10:01:43Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/tmp/tmpQUv86E', '-A', '-n', 'CA certificate 1', '-t', 'C,,', '-a', '-f', '/tmp/tmpQUv86E/pwdfile.txt'] 2020-06-19T10:01:43Z DEBUG Process finished, return code=0 2020-06-19T10:01:43Z DEBUG stdout= 2020-06-19T10:01:43Z DEBUG stderr= 2020-06-19T10:01:43Z DEBUG failed to find session_cookie in persistent storage for principal 'host/debian10.lin.test.lan@LIN.TEST.LAN' 2020-06-19T10:01:43Z DEBUG trying https://freeipaserver.lin.test.lan/ipa/json 2020-06-19T10:01:43Z DEBUG New HTTP connection (freeipaserver.lin.test.lan) 2020-06-19T10:01:44Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=l30KSQXn4fPhVTNhP06E0Dc8gqVkK98Kh55ofIm6XzonjBXHxa%2f%2be9Ud7Voz6BKnAEa%2bgEbdRWunbx%2bAZ16gF3ek0dt0M86CKCwQfS4ga1JzMmESqHxdPC1MUBEH9iPHglLbP%2b6OTvqS3JYed7aMthck%2fbrNzXyD2Zj%2fXt%2bokrAOWQn3PJPy%2baFd5NxRHi42GvfyuQCawA2cup94sgfq6TCpWXqAKSsbN7X4Z5Ndi1SvRMQ%2beE9P%2bG2CzhbNI2a6KHqk6k8PbPh4CUkKjpxxPg%3d%3d;path=/ipa;httponly;secure;']' 2020-06-19T10:01:44Z DEBUG storing cookie 'ipa_session=MagBearerToken=l30KSQXn4fPhVTNhP06E0Dc8gqVkK98Kh55ofIm6XzonjBXHxa%2f%2be9Ud7Voz6BKnAEa%2bgEbdRWunbx%2bAZ16gF3ek0dt0M86CKCwQfS4ga1JzMmESqHxdPC1MUBEH9iPHglLbP%2b6OTvqS3JYed7aMthck%2fbrNzXyD2Zj%2fXt%2bokrAOWQn3PJPy%2baFd5NxRHi42GvfyuQCawA2cup94sgfq6TCpWXqAKSsbN7X4Z5Ndi1SvRMQ%2beE9P%2bG2CzhbNI2a6KHqk6k8PbPh4CUkKjpxxPg%3d%3d;' for principal host/debian10.lin.test.lan@LIN.TEST.LAN 2020-06-19T10:01:44Z DEBUG Created connection context.rpcclient_140300857634128 2020-06-19T10:01:44Z DEBUG [try 1]: Forwarding 'schema' to json server 'https://freeipaserver.lin.test.lan/ipa/json' 2020-06-19T10:01:44Z DEBUG HTTP connection keep-alive (freeipaserver.lin.test.lan) 2020-06-19T10:01:45Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;path=/ipa;httponly;secure;']' 2020-06-19T10:01:45Z DEBUG storing cookie 'ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;' for principal host/debian10.lin.test.lan@LIN.TEST.LAN 2020-06-19T10:01:45Z DEBUG Destroyed connection context.rpcclient_140300857634128 2020-06-19T10:01:45Z DEBUG importing all plugin modules in ipaclient.remote_plugins.schema$ca42e939... 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.remote_plugins.schema$ca42e939.plugins 2020-06-19T10:01:45Z DEBUG importing all plugin modules in ipaclient.plugins... 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.automember 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.automount 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.ca 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.cert 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.certmap 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.certprofile 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.csrgen 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.dns 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.hbacrule 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.hbactest 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.host 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.idrange 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.internal 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.location 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.migration 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.misc 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.otptoken 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.otptoken_yubikey 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.passwd 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.permission 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.rpcclient 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.server 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.service 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.sudorule 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.topology 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.trust 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.user 2020-06-19T10:01:45Z DEBUG importing plugin module ipaclient.plugins.vault 2020-06-19T10:01:46Z DEBUG found session_cookie in persistent storage for principal 'host/debian10.lin.test.lan@LIN.TEST.LAN', cookie: 'ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d' 2020-06-19T10:01:46Z DEBUG setting session_cookie into context 'ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;' 2020-06-19T10:01:46Z DEBUG trying https://freeipaserver.lin.test.lan/ipa/session/json 2020-06-19T10:01:46Z DEBUG New HTTP connection (freeipaserver.lin.test.lan) 2020-06-19T10:01:46Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;path=/ipa;httponly;secure;']' 2020-06-19T10:01:46Z DEBUG storing cookie 'ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;' for principal host/debian10.lin.test.lan@LIN.TEST.LAN 2020-06-19T10:01:46Z DEBUG Created connection context.rpcclient_140300852041424 2020-06-19T10:01:46Z DEBUG Try RPC connection 2020-06-19T10:01:46Z DEBUG [try 1]: Forwarding 'ping' to json server 'https://freeipaserver.lin.test.lan/ipa/session/json' 2020-06-19T10:01:46Z DEBUG HTTP connection keep-alive (freeipaserver.lin.test.lan) 2020-06-19T10:01:46Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;path=/ipa;httponly;secure;']' 2020-06-19T10:01:46Z DEBUG storing cookie 'ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;' for principal host/debian10.lin.test.lan@LIN.TEST.LAN 2020-06-19T10:01:46Z DEBUG [try 1]: Forwarding 'ca_is_enabled' to json server 'https://freeipaserver.lin.test.lan/ipa/session/json' 2020-06-19T10:01:46Z DEBUG HTTP connection keep-alive (freeipaserver.lin.test.lan) 2020-06-19T10:01:46Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;path=/ipa;httponly;secure;']' 2020-06-19T10:01:46Z DEBUG storing cookie 'ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;' for principal host/debian10.lin.test.lan@LIN.TEST.LAN 2020-06-19T10:01:46Z DEBUG [try 1]: Forwarding 'config_show' to json server 'https://freeipaserver.lin.test.lan/ipa/session/json' 2020-06-19T10:01:46Z DEBUG HTTP connection keep-alive (freeipaserver.lin.test.lan) 2020-06-19T10:01:46Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;path=/ipa;httponly;secure;']' 2020-06-19T10:01:46Z DEBUG storing cookie 'ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;' for principal host/debian10.lin.test.lan@LIN.TEST.LAN 2020-06-19T10:01:46Z DEBUG Starting external process 2020-06-19T10:01:46Z DEBUG args=['/usr/bin/certutil', '-d', '/etc/ipa/nssdb', '-N', '-f', '/etc/ipa/nssdb/pwdfile.txt', '-@', '/etc/ipa/nssdb/pwdfile.txt'] 2020-06-19T10:01:46Z DEBUG Process finished, return code=0 2020-06-19T10:01:46Z DEBUG stdout= 2020-06-19T10:01:46Z DEBUG stderr= 2020-06-19T10:01:46Z DEBUG Adding CA certificates to the IPA NSS database. 2020-06-19T10:01:46Z DEBUG Starting external process 2020-06-19T10:01:46Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/etc/ipa/nssdb', '-A', '-n', u'LIN.TEST.LAN IPA CA', '-t', 'CT,C,C', '-a', '-f', '/etc/ipa/nssdb/pwdfile.txt'] 2020-06-19T10:01:46Z DEBUG Process finished, return code=0 2020-06-19T10:01:46Z DEBUG stdout= 2020-06-19T10:01:46Z DEBUG stderr= 2020-06-19T10:01:46Z DEBUG Starting external process 2020-06-19T10:01:46Z DEBUG args=['/usr/sbin/update-ca-certificates'] 2020-06-19T10:01:47Z DEBUG Process finished, return code=0 2020-06-19T10:01:47Z DEBUG stdout=Updating certificates in /etc/ssl/certs... 1 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done. 2020-06-19T10:01:47Z DEBUG stderr= 2020-06-19T10:01:47Z INFO Systemwide CA database updated. 2020-06-19T10:01:47Z DEBUG The DNS query name does not exist: debian10.lin.test.lan. 2020-06-19T10:01:47Z WARNING Hostname (debian10.lin.test.lan) does not have A/AAAA record. 2020-06-19T10:01:47Z DEBUG IP check failed: cannot use loopback IP address 127.0.0.1 2020-06-19T10:01:47Z DEBUG IP check failed: cannot use loopback IP address ::1 2020-06-19T10:01:47Z DEBUG IP check successful: 10.0.0.154 2020-06-19T10:01:47Z DEBUG IP check failed: cannot use link-local IP address fe80::5054:ff:fe43:da67%enp1s0 2020-06-19T10:01:47Z DEBUG IP check successful: 10.0.0.154 2020-06-19T10:01:47Z DEBUG IP check failed: cannot use link-local IP address fe80::5054:ff:fe43:da67%enp1s0 2020-06-19T10:01:47Z DEBUG Searching for an interface of IP address: 10.0.0.154 2020-06-19T10:01:47Z DEBUG Testing local IP address: 127.0.0.1/255.0.0.0 (interface: lo) 2020-06-19T10:01:47Z DEBUG Testing local IP address: 10.0.0.154/255.255.255.0 (interface: enp1s0) 2020-06-19T10:01:47Z DEBUG Writing nsupdate commands to /etc/ipa/.dns_update.txt: 2020-06-19T10:01:47Z DEBUG debug update delete debian10.lin.test.lan. IN A show send update delete debian10.lin.test.lan. IN AAAA show send update add debian10.lin.test.lan. 1200 IN A 10.0.0.154 show send 2020-06-19T10:01:47Z DEBUG Starting external process 2020-06-19T10:01:47Z DEBUG args=['/usr/bin/nsupdate', '-g', '/etc/ipa/.dns_update.txt'] 2020-06-19T10:01:48Z DEBUG Process finished, return code=0 2020-06-19T10:01:48Z DEBUG stdout=Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: debian10.lin.test.lan. 0 ANY A Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30561 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1214318775.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ADDITIONAL SECTION: 1214318775.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592560908 3 NOERROR 821 YIIDMQYGKwYBBQUCoIIDJTCCAyGgDTALBgkqhkiG9xIBAgKiggMOBIID CmCCAwYGCSqGSIb3EgECAgEAboIC9TCCAvGgAwIBBaEDAgEOogcDBQAg AAAAo4IB8mGCAe4wggHqoAMCAQWhDhsMTElOLlRFU1QuTEFOoiwwKqAD AgEBoSMwIRsDRE5TGxpmcmVlaXBhc2VydmVyLmxpbi50ZXN0LmxhbqOC AaMwggGfoAMCARKhAwIBAqKCAZEEggGNu2J8YjKB4U4ceeQXndNhZBzz ec6khZgkdsszSe7yIcwxRQovAGKclkQJDIXdqfqHuUEIeyJaS3n9BeWk fL4GPAeednIZv8u1Q2QB8POQNZAv+8Q8HEyAxYeTjNLzFtfYgI3NDUV/ Uqz+/HK6btg5fKEy3IOoBdhnlUc1IozD0cqXerU0vuXAlPSBdERG03TC qubjkuwXTXJWqQo0I0GYuCJuN3DZayH9XPKow4lCnhWgRtbB5p0HYI4J GyA/RE7IomDKauqP3pO255biFKhuvrK6WChRU0NN9frfisBfC8nxIkRa u0ML008Ee4GU0sknEM5/JTv19CJryfyqw90u5ogcHP6uBJ5oomchTrdh KXjw1W3TpIlYA/WQvSFQ0TAUFoUH/GYnOdRp3lV86E9PcurmvLoQS3EK LTTaYXsJiuWpcgTVO1DmBfoE1uz5ty2hsycHZYloajaGnSWB3CO7O46o CTS+rfO3QCi97kyDocbVJfXSe+5t+GQqX8GRoNTtSuKBE3tBzPfQCBbf 0aSB5TCB4qADAgESooHaBIHXUjACOiPBY+VvLmYDY0e0J0+JojMyGnGs GvqJSvv2IR6mM/jVVYCDXJD6kx1Rcu11cPgKqaP+VBonJHxcRhCAXfYK cbWIKBMx+/LAXtbH0IUkT+WWf55cc7ox0OK70ed+5kwVvzGimvsdHGEC k/Gem+e/rRsdjECcV9zKJxs/BfMfUiBM3mC3fLlSb4SaqHS6g9RGlXU/ +cLeBiXi41IAnvlTDPYzdQ31DizU/EPfVKiSr56IuRVuI0JZw+iVW7AZ mazQMJvNu5qcEmv/ogy9P3AKshN58LQ= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 38032 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1 ;; UPDATE SECTION: debian10.lin.test.lan. 0 ANY A ;; TSIG PSEUDOSECTION: 1214318775.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQE//////8AAAAAGk3jtONDVtwb4BHlbhCzag== 38032 NOERROR 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: debian10.lin.test.lan. 0 ANY AAAA Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36444 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;2152041907.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ADDITIONAL SECTION: 2152041907.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592560908 3 NOERROR 821 YIIDMQYGKwYBBQUCoIIDJTCCAyGgDTALBgkqhkiG9xIBAgKiggMOBIID CmCCAwYGCSqGSIb3EgECAgEAboIC9TCCAvGgAwIBBaEDAgEOogcDBQAg AAAAo4IB8mGCAe4wggHqoAMCAQWhDhsMTElOLlRFU1QuTEFOoiwwKqAD AgEBoSMwIRsDRE5TGxpmcmVlaXBhc2VydmVyLmxpbi50ZXN0LmxhbqOC AaMwggGfoAMCARKhAwIBAqKCAZEEggGNu2J8YjKB4U4ceeQXndNhZBzz ec6khZgkdsszSe7yIcwxRQovAGKclkQJDIXdqfqHuUEIeyJaS3n9BeWk fL4GPAeednIZv8u1Q2QB8POQNZAv+8Q8HEyAxYeTjNLzFtfYgI3NDUV/ Uqz+/HK6btg5fKEy3IOoBdhnlUc1IozD0cqXerU0vuXAlPSBdERG03TC qubjkuwXTXJWqQo0I0GYuCJuN3DZayH9XPKow4lCnhWgRtbB5p0HYI4J GyA/RE7IomDKauqP3pO255biFKhuvrK6WChRU0NN9frfisBfC8nxIkRa u0ML008Ee4GU0sknEM5/JTv19CJryfyqw90u5ogcHP6uBJ5oomchTrdh KXjw1W3TpIlYA/WQvSFQ0TAUFoUH/GYnOdRp3lV86E9PcurmvLoQS3EK LTTaYXsJiuWpcgTVO1DmBfoE1uz5ty2hsycHZYloajaGnSWB3CO7O46o CTS+rfO3QCi97kyDocbVJfXSe+5t+GQqX8GRoNTtSuKBE3tBzPfQCBbf 0aSB5TCB4qADAgESooHaBIHXpCnoB4NjDtf7vmPklibRf/3JOUWZhLm6 fxXPWODg1R+Qvb1rVJCfZMasbgq6EP0D0t4RS7x5kC4VQ5aM5XzQqt/t WCs4L/IJNRfBXhnqrcFnNqxV5unUNer49cMAihJi99WIG3VPrNRj0HV+ qK6zRVF/6gm6QD7z5mY72u51LdJ4BC1AIkFzJ4gpJy+p0HPYU8oBQE8v FhiQFIVnrJJk/aXbKM/drvNVr1RfipQbDXTNCyYlt6ASVytzMIcZO09O am5o6/dGXkT/Rwi6KQFGfkAWBlSm3P0= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 20324 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1 ;; UPDATE SECTION: debian10.lin.test.lan. 0 ANY AAAA ;; TSIG PSEUDOSECTION: 2152041907.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQE//////8AAAAAG09i6c00QXQdeaDkGXXFIA== 20324 NOERROR 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: debian10.lin.test.lan. 1200 IN A 10.0.0.154 Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29133 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1727750166.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ADDITIONAL SECTION: 1727750166.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592560908 3 NOERROR 821 YIIDMQYGKwYBBQUCoIIDJTCCAyGgDTALBgkqhkiG9xIBAgKiggMOBIID CmCCAwYGCSqGSIb3EgECAgEAboIC9TCCAvGgAwIBBaEDAgEOogcDBQAg AAAAo4IB8mGCAe4wggHqoAMCAQWhDhsMTElOLlRFU1QuTEFOoiwwKqAD AgEBoSMwIRsDRE5TGxpmcmVlaXBhc2VydmVyLmxpbi50ZXN0LmxhbqOC AaMwggGfoAMCARKhAwIBAqKCAZEEggGNu2J8YjKB4U4ceeQXndNhZBzz ec6khZgkdsszSe7yIcwxRQovAGKclkQJDIXdqfqHuUEIeyJaS3n9BeWk fL4GPAeednIZv8u1Q2QB8POQNZAv+8Q8HEyAxYeTjNLzFtfYgI3NDUV/ Uqz+/HK6btg5fKEy3IOoBdhnlUc1IozD0cqXerU0vuXAlPSBdERG03TC qubjkuwXTXJWqQo0I0GYuCJuN3DZayH9XPKow4lCnhWgRtbB5p0HYI4J GyA/RE7IomDKauqP3pO255biFKhuvrK6WChRU0NN9frfisBfC8nxIkRa u0ML008Ee4GU0sknEM5/JTv19CJryfyqw90u5ogcHP6uBJ5oomchTrdh KXjw1W3TpIlYA/WQvSFQ0TAUFoUH/GYnOdRp3lV86E9PcurmvLoQS3EK LTTaYXsJiuWpcgTVO1DmBfoE1uz5ty2hsycHZYloajaGnSWB3CO7O46o CTS+rfO3QCi97kyDocbVJfXSe+5t+GQqX8GRoNTtSuKBE3tBzPfQCBbf 0aSB5TCB4qADAgESooHaBIHXubM9uvbbIbp2mC3j/o5Ld8r1tpZCGhOm ag45hsN078bTqsGhWjm8mOv3G18YL2CHNYP0grwU13TdtIqCwEY4jl8y I2aFnGIi8aRIEuh4rkB7zsqtdA20fGPWrAdLlA4HKSOrb2UZ2fyAwy8e ymfIIOQQz8CKtdogu4Wkx5nR4xZyJEkh/U1BOHP0/JOpOKjla/hZjLZB OT/d6kDTSdwUcY8jVSxYX9ai4waR5rW8+FAISUS3U9VOTPtuP1hVpqlF +OI91eB90jjGygeX80dtSdqhP2QjHdE= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 49722 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1 ;; UPDATE SECTION: debian10.lin.test.lan. 1200 IN A 10.0.0.154 ;; TSIG PSEUDOSECTION: 1727750166.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQE//////8AAAAAP8FsSvLefZ0lG2fGyonCtw== 49722 NOERROR 0 2020-06-19T10:01:48Z DEBUG stderr=Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55960 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;debian10.lin.test.lan. IN SOA ;; AUTHORITY SECTION: lin.test.lan. 0 IN SOA freeipaserver.lin.test.lan. hostmaster.lin.test.lan. 1592559988 3600 900 1209600 3600 Found zone name: lin.test.lan The master is: freeipaserver.lin.test.lan start_gssrequest Found realm from ticket: LIN.TEST.LAN send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30561 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1214318775.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ANSWER SECTION: 1214318775.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592564508 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvnFB6GqG9a5GF /xeDC08YAzn3BL07neXGEmd9vJwpKQpFAC0p8tKUZjzXaez+T8Msp1l7 etWw+T3SWmW82D23FJp0MJVOTyRqEPze3Hwd346AfjXZj4gjKXAvUlsn 5jH0i/Bbo6naMchd8E3HG7k2 0 ;; TSIG PSEUDOSECTION: 1214318775.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAADIWEQyD9MTBqqP0X9sP8Iw== 30561 NOERROR 0 Sending update to 10.0.0.179#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 38032 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;lin.test.lan. IN SOA ;; TSIG PSEUDOSECTION: 1214318775.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAADIWEREIa1E2HCdwJZZz+eQ== 38032 NOERROR 0 Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2082 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;debian10.lin.test.lan. IN SOA ;; AUTHORITY SECTION: lin.test.lan. 0 IN SOA freeipaserver.lin.test.lan. hostmaster.lin.test.lan. 1592560912 3600 900 1209600 3600 Found zone name: lin.test.lan The master is: freeipaserver.lin.test.lan start_gssrequest send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36444 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;2152041907.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ANSWER SECTION: 2152041907.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592564508 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvNr+DgBeoDS/H slJZLTu/GhwJj8E76L2nJ9opRXtPf6nTfV70/0UCRH8cn2Y9Z7irr8Xn SjVU46A/YGN+5H69h2HHb7l1gRfrnkRKaF/Wyoju8a1yGIgEUiIec1u3 GIQezCsPZDYSF2ScJZSn7Nep 0 ;; TSIG PSEUDOSECTION: 2152041907.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAAL3U6+Xit+xWsIuPFfS3l6Q== 36444 NOERROR 0 Sending update to 10.0.0.179#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 20324 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;lin.test.lan. IN SOA ;; TSIG PSEUDOSECTION: 2152041907.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAAL3U6+pJek/411zbFgzjbcg== 20324 NOERROR 0 Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52957 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;debian10.lin.test.lan. IN SOA ;; AUTHORITY SECTION: lin.test.lan. 0 IN SOA freeipaserver.lin.test.lan. hostmaster.lin.test.lan. 1592560912 3600 900 1209600 3600 Found zone name: lin.test.lan The master is: freeipaserver.lin.test.lan start_gssrequest send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29133 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1727750166.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ANSWER SECTION: 1727750166.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592564508 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvdTOrO03XtKmY 3mMvtKfSJF/Y597fFXIj6lnIFThgWN99/WNXPsV3G47AEab+qbMv2igB 42X+q7NVOud3cjAOEB8l8lKfCc6NEk3KjCt7hb2VwpDsLX9tlURNYqB0 gErnVwdzWN9oIyndVhs6eX8j 0 ;; TSIG PSEUDOSECTION: 1727750166.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAAJT+57VCmblJt5u9GmJdNYw== 29133 NOERROR 0 Sending update to 10.0.0.179#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 49722 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;lin.test.lan. IN SOA ;; TSIG PSEUDOSECTION: 1727750166.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAAJT+57tmN7QSailSuz7r0xQ== 49722 NOERROR 0 2020-06-19T10:01:48Z DEBUG DNS resolver: Query: debian10.lin.test.lan IN A 2020-06-19T10:01:48Z DEBUG DNS resolver: No record. 2020-06-19T10:01:48Z DEBUG DNS resolver: Query: debian10.lin.test.lan IN AAAA 2020-06-19T10:01:48Z DEBUG DNS resolver: No record. 2020-06-19T10:01:48Z DEBUG DNS resolver: Query: 154.0.0.10.in-addr.arpa. IN PTR 2020-06-19T10:01:48Z WARNING Missing A/AAAA record(s) for host debian10.lin.test.lan: 10.0.0.154. 2020-06-19T10:01:48Z WARNING Incorrect reverse record(s): 2020-06-19T10:01:48Z WARNING 10.0.0.154 is pointing to debian10. instead of debian10.lin.test.lan. 2020-06-19T10:01:48Z INFO Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub 2020-06-19T10:01:48Z INFO Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub 2020-06-19T10:01:48Z INFO Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub 2020-06-19T10:01:48Z DEBUG [try 1]: Forwarding 'host_mod' to json server 'https://freeipaserver.lin.test.lan/ipa/session/json' 2020-06-19T10:01:48Z DEBUG HTTP connection keep-alive (freeipaserver.lin.test.lan) 2020-06-19T10:01:48Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;path=/ipa;httponly;secure;']' 2020-06-19T10:01:48Z DEBUG storing cookie 'ipa_session=MagBearerToken=USYn3%2ffmwxgpRTSDBc08vE2aYhgI1pFgFqa5nlt4LcQ0%2figAwy0uumYzyOogLxgV9PJt8jKTDN4eKXazQmyYdsjiI3KblMt4fOHb9FvjtKt%2fFRzrzVZ4jcMg6F9T4wrssc8%2f8wsuvin8cS3n6GIeMsb0vTUs21%2bNM5EUch8pfv8GxGrDurBVSJECTujRaGR8U44hl%2fUa%2bWb2H2OoZN85PKibnMxCfrjK9bwh0qb7Gm7%2fodFMj6xuWNAVOpO%2bX5pcEh%2bR9y%2fV0Gfp37UJhcopBg%3d%3d;' for principal host/debian10.lin.test.lan@LIN.TEST.LAN 2020-06-19T10:01:48Z DEBUG Writing nsupdate commands to /etc/ipa/.dns_update.txt: 2020-06-19T10:01:48Z DEBUG debug update delete debian10.lin.test.lan. IN SSHFP show send update add debian10.lin.test.lan. 1200 IN SSHFP 1 1 3D0D118DD08B60A5621FA65B92CB35172DCF5488 update add debian10.lin.test.lan. 1200 IN SSHFP 1 2 BA7EC9D2CD4A486F3B9E2021A3F8EA7C602A170CAB36F0580BFA8D6E41057B9C update add debian10.lin.test.lan. 1200 IN SSHFP 4 1 68B94365FC088F1DB2FB15B2868EE1C34C63702E update add debian10.lin.test.lan. 1200 IN SSHFP 4 2 77B8010D9ADABAF8941BED5BEE626C459E9659F593C334D31746A8E0CFACEF3D update add debian10.lin.test.lan. 1200 IN SSHFP 3 1 F616C5A351A18EE94121766622B3E7B988386D6B update add debian10.lin.test.lan. 1200 IN SSHFP 3 2 0ABFA2EE737562C147B659F7A4C36F85076437D8F70099BCEBE129925FC6A3CB show send 2020-06-19T10:01:48Z DEBUG Starting external process 2020-06-19T10:01:48Z DEBUG args=['/usr/bin/nsupdate', '-g', '/etc/ipa/.dns_update.txt'] 2020-06-19T10:01:48Z DEBUG Process finished, return code=0 2020-06-19T10:01:48Z DEBUG stdout=Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: debian10.lin.test.lan. 0 ANY SSHFP Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7950 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1436913629.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ADDITIONAL SECTION: 1436913629.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592560908 3 NOERROR 821 YIIDMQYGKwYBBQUCoIIDJTCCAyGgDTALBgkqhkiG9xIBAgKiggMOBIID CmCCAwYGCSqGSIb3EgECAgEAboIC9TCCAvGgAwIBBaEDAgEOogcDBQAg AAAAo4IB8mGCAe4wggHqoAMCAQWhDhsMTElOLlRFU1QuTEFOoiwwKqAD AgEBoSMwIRsDRE5TGxpmcmVlaXBhc2VydmVyLmxpbi50ZXN0LmxhbqOC AaMwggGfoAMCARKhAwIBAqKCAZEEggGNu2J8YjKB4U4ceeQXndNhZBzz ec6khZgkdsszSe7yIcwxRQovAGKclkQJDIXdqfqHuUEIeyJaS3n9BeWk fL4GPAeednIZv8u1Q2QB8POQNZAv+8Q8HEyAxYeTjNLzFtfYgI3NDUV/ Uqz+/HK6btg5fKEy3IOoBdhnlUc1IozD0cqXerU0vuXAlPSBdERG03TC qubjkuwXTXJWqQo0I0GYuCJuN3DZayH9XPKow4lCnhWgRtbB5p0HYI4J GyA/RE7IomDKauqP3pO255biFKhuvrK6WChRU0NN9frfisBfC8nxIkRa u0ML008Ee4GU0sknEM5/JTv19CJryfyqw90u5ogcHP6uBJ5oomchTrdh KXjw1W3TpIlYA/WQvSFQ0TAUFoUH/GYnOdRp3lV86E9PcurmvLoQS3EK LTTaYXsJiuWpcgTVO1DmBfoE1uz5ty2hsycHZYloajaGnSWB3CO7O46o CTS+rfO3QCi97kyDocbVJfXSe+5t+GQqX8GRoNTtSuKBE3tBzPfQCBbf 0aSB5TCB4qADAgESooHaBIHXtXmCO7HVsb+hVBok4z2c7k48609Hc/Rc N6Or/iuWMpv8nl+zDMKkhWtCqZZF62z9kGyoszOCLrb0NT6log4yKJmK qN1KOBo7KkwHACc+KDyGW29eGjWRB6/vwEJyTwSTJ9iEBawRxkDn3NuS 0RZIcpszoACPn1CO2Fd9F7z6FLGxKhFMjlsqMb3JSqBYu1VuMeiqy8O/ b+qtS3+qajCGYuF64tYuhYjyoW4b/7TRp9eXU2PXHuU7nbZjgz8g8142 NYeXbq3GgT514M7bryUJNoTMVSY0aCU= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 21592 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1 ;; UPDATE SECTION: debian10.lin.test.lan. 0 ANY SSHFP ;; TSIG PSEUDOSECTION: 1436913629.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQE//////8AAAAACet3wJJNJMDQe2qVH213SQ== 21592 NOERROR 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: debian10.lin.test.lan. 1200 IN SSHFP 1 1 3D0D118DD08B60A5621FA65B92CB35172DCF5488 debian10.lin.test.lan. 1200 IN SSHFP 1 2 BA7EC9D2CD4A486F3B9E2021A3F8EA7C602A170CAB36F0580BFA8D6E 41057B9C debian10.lin.test.lan. 1200 IN SSHFP 4 1 68B94365FC088F1DB2FB15B2868EE1C34C63702E debian10.lin.test.lan. 1200 IN SSHFP 4 2 77B8010D9ADABAF8941BED5BEE626C459E9659F593C334D31746A8E0 CFACEF3D debian10.lin.test.lan. 1200 IN SSHFP 3 1 F616C5A351A18EE94121766622B3E7B988386D6B debian10.lin.test.lan. 1200 IN SSHFP 3 2 0ABFA2EE737562C147B659F7A4C36F85076437D8F70099BCEBE12992 5FC6A3CB Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39092 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;3633409840.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ADDITIONAL SECTION: 3633409840.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592560908 3 NOERROR 821 YIIDMQYGKwYBBQUCoIIDJTCCAyGgDTALBgkqhkiG9xIBAgKiggMOBIID CmCCAwYGCSqGSIb3EgECAgEAboIC9TCCAvGgAwIBBaEDAgEOogcDBQAg AAAAo4IB8mGCAe4wggHqoAMCAQWhDhsMTElOLlRFU1QuTEFOoiwwKqAD AgEBoSMwIRsDRE5TGxpmcmVlaXBhc2VydmVyLmxpbi50ZXN0LmxhbqOC AaMwggGfoAMCARKhAwIBAqKCAZEEggGNu2J8YjKB4U4ceeQXndNhZBzz ec6khZgkdsszSe7yIcwxRQovAGKclkQJDIXdqfqHuUEIeyJaS3n9BeWk fL4GPAeednIZv8u1Q2QB8POQNZAv+8Q8HEyAxYeTjNLzFtfYgI3NDUV/ Uqz+/HK6btg5fKEy3IOoBdhnlUc1IozD0cqXerU0vuXAlPSBdERG03TC qubjkuwXTXJWqQo0I0GYuCJuN3DZayH9XPKow4lCnhWgRtbB5p0HYI4J GyA/RE7IomDKauqP3pO255biFKhuvrK6WChRU0NN9frfisBfC8nxIkRa u0ML008Ee4GU0sknEM5/JTv19CJryfyqw90u5ogcHP6uBJ5oomchTrdh KXjw1W3TpIlYA/WQvSFQ0TAUFoUH/GYnOdRp3lV86E9PcurmvLoQS3EK LTTaYXsJiuWpcgTVO1DmBfoE1uz5ty2hsycHZYloajaGnSWB3CO7O46o CTS+rfO3QCi97kyDocbVJfXSe+5t+GQqX8GRoNTtSuKBE3tBzPfQCBbf 0aSB5TCB4qADAgESooHaBIHXxxsmtowKIpZUca911kNCq2i3dJLfDEy6 TkNOb694h0ivV3ukvsWX8oF5jPGKvY3PNPA9B1QGBkj9geRmEbklXBeC nAFYfAlgegbnKPhcFv92VzB8In50s4p0CW0u9Bvx6Y5dtEC6moycksIX Ajbd8k/PWMRPUNYeZpJqGRC+sIV6i4k1CkQoXIiRlvGB9ZlNesFLHKtQ GGuSuXZ+yOVuERlfc73YwCMEhhRp1AoKF0ASHSepXVUV0/q/MRq9FA/H aCMoiyY8ZBHHEp+p2Niw0sIykAGhuZA= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 7601 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 6, ADDITIONAL: 1 ;; UPDATE SECTION: debian10.lin.test.lan. 1200 IN SSHFP 1 1 3D0D118DD08B60A5621FA65B92CB35172DCF5488 debian10.lin.test.lan. 1200 IN SSHFP 1 2 BA7EC9D2CD4A486F3B9E2021A3F8EA7C602A170CAB36F0580BFA8D6E 41057B9C debian10.lin.test.lan. 1200 IN SSHFP 4 1 68B94365FC088F1DB2FB15B2868EE1C34C63702E debian10.lin.test.lan. 1200 IN SSHFP 4 2 77B8010D9ADABAF8941BED5BEE626C459E9659F593C334D31746A8E0 CFACEF3D debian10.lin.test.lan. 1200 IN SSHFP 3 1 F616C5A351A18EE94121766622B3E7B988386D6B debian10.lin.test.lan. 1200 IN SSHFP 3 2 0ABFA2EE737562C147B659F7A4C36F85076437D8F70099BCEBE12992 5FC6A3CB ;; TSIG PSEUDOSECTION: 3633409840.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQE//////8AAAAACh2ABxGMwklGCzGTX4Q6fw== 7601 NOERROR 0 2020-06-19T10:01:48Z DEBUG stderr=Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22660 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;debian10.lin.test.lan. IN SOA ;; AUTHORITY SECTION: lin.test.lan. 3600 IN SOA freeipaserver.lin.test.lan. hostmaster.lin.test.lan. 1592560913 3600 900 1209600 3600 Found zone name: lin.test.lan The master is: freeipaserver.lin.test.lan start_gssrequest Found realm from ticket: LIN.TEST.LAN send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7950 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1436913629.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ANSWER SECTION: 1436913629.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592564508 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvjmz7Mqd3tpIB rMSAM9yfHShiH079FpuYIPUd6tU5xslHOTE16AlWLpK9jswYvdEYZQbX /KWHtYbihNRalrw6QaCQBWdqchNgBkdDJK2umS5iT76cWxP/P6Lya2JL ffdC0jNuuWQs0uJAPek5etuK 0 ;; TSIG PSEUDOSECTION: 1436913629.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAANHgXFIGtb6CWLYhxbyBOxQ== 7950 NOERROR 0 Sending update to 10.0.0.179#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 21592 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;lin.test.lan. IN SOA ;; TSIG PSEUDOSECTION: 1436913629.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAANHgXFdoU3JnceKjHednn3A== 21592 NOERROR 0 Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55340 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;debian10.lin.test.lan. IN SOA ;; AUTHORITY SECTION: lin.test.lan. 3600 IN SOA freeipaserver.lin.test.lan. hostmaster.lin.test.lan. 1592560913 3600 900 1209600 3600 Found zone name: lin.test.lan The master is: freeipaserver.lin.test.lan start_gssrequest send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39092 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;3633409840.sig-freeipaserver.lin.test.lan. ANY TKEY ;; ANSWER SECTION: 3633409840.sig-freeipaserver.lin.test.lan. 0 ANY TKEY gss-tsig. 1592560908 1592564508 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRv9/giKtvAtnCF Gnza6bB2+DNEPLmErrW4Y1nLiut4SYuA0T32MtM7f8gR2FTbES6zilo5 J+RMDP1gc2g3nN4brZl3k/vfNX5lt9Fm4oZ5Mf5RcC5wJ8RB+HUc24tV /RX2Y7fH9ZBc8+BSGA8FlrDF 0 ;; TSIG PSEUDOSECTION: 3633409840.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAAJU/q4IKjQcSVRxbL4gelVw== 39092 NOERROR 0 Sending update to 10.0.0.179#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 7601 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;lin.test.lan. IN SOA ;; TSIG PSEUDOSECTION: 3633409840.sig-freeipaserver.lin.test.lan. 0 ANY TSIG gss-tsig. 1592560908 300 28 BAQF//////8AAAAAJU/q4RD7ljjNFLvFwWR44g== 7601 NOERROR 0 2020-06-19T10:01:48Z DEBUG Starting external process 2020-06-19T10:01:48Z DEBUG args=['/bin/systemctl', 'list-unit-files', '--full'] 2020-06-19T10:01:48Z DEBUG Process finished, return code=0 2020-06-19T10:01:48Z DEBUG stdout=UNIT FILE STATE proc-sys-fs-binfmt_misc.automount static -.mount generated dev-hugepages.mount static dev-mqueue.mount static media-cdrom0.mount generated proc-sys-fs-binfmt_misc.mount static sys-fs-fuse-connections.mount static sys-kernel-config.mount static sys-kernel-debug.mount static systemd-ask-password-console.path static systemd-ask-password-wall.path static session-5.scope transient session-7.scope transient apparmor.service enabled apt-daily-upgrade.service static apt-daily.service static autovt@.service enabled bootlogd.service masked bootlogs.service masked bootmisc.service masked certmonger.service enabled checkfs.service masked checkroot-bootclean.service masked checkroot.service masked chrony-dnssrv@.service static chrony.service enabled chronyd.service enabled console-getty.service disabled console-setup.service enabled container-getty@.service static cron.service enabled cryptdisks-early.service masked cryptdisks.service masked dbus-org.freedesktop.hostname1.service static dbus-org.freedesktop.locale1.service static dbus-org.freedesktop.login1.service static dbus-org.freedesktop.timedate1.service static dbus-org.freedesktop.timesync1.service enabled dbus.service static debug-shell.service disabled emergency.service static fstrim.service static getty-static.service static getty@.service enabled halt.service masked hostname.service masked hwclock.service masked ifup@.service static ifupdown-pre.service static ifupdown-wait-online.service disabled initrd-cleanup.service static initrd-parse-etc.service static initrd-switch-root.service static initrd-udevadm-cleanup-db.service static keyboard-setup.service enabled killprocs.service masked kmod-static-nodes.service static kmod.service static logrotate.service static man-db.service static module-init-tools.service static motd.service masked mountall-bootclean.service masked mountall.service masked mountdevsubfs.service masked mountkernfs.service masked mountnfs-bootclean.service masked mountnfs.service masked networking.service enabled oddjobd.service enabled procps.service static quotaon.service static rc-local.service static rc.local.service static rc.service masked rcS.service masked reboot.service masked rescue.service static rmnologin.service masked rsyslog.service enabled sendsigs.service masked serial-getty@.service disabled single.service masked ssh.service enabled ssh@.service static sshd.service enabled sssd-secrets.service indirect sssd.service enabled stop-bootlogd-single.service masked stop-bootlogd.service masked sudo.service masked syslog.service enabled system-update-cleanup.service static systemd-ask-password-console.service static systemd-ask-password-wall.service static systemd-backlight@.service static systemd-binfmt.service static systemd-bless-boot.service static systemd-boot-check-no-failures.service disabled systemd-exit.service static systemd-fsck-root.service enabled-runtime systemd-fsck@.service static systemd-fsckd.service static systemd-halt.service static systemd-hibernate-resume@.service static systemd-hibernate.service static systemd-hostnamed.service static systemd-hwdb-update.service static systemd-hybrid-sleep.service static systemd-initctl.service static systemd-journal-flush.service static systemd-journald.service static systemd-kexec.service static systemd-localed.service static systemd-logind.service static systemd-machine-id-commit.service static systemd-modules-load.service static systemd-networkd-wait-online.service disabled systemd-networkd.service disabled systemd-poweroff.service static systemd-quotacheck.service static systemd-random-seed.service static systemd-reboot.service static systemd-remount-fs.service static systemd-resolved.service disabled systemd-rfkill.service static systemd-suspend-then-hibernate.service static systemd-suspend.service static systemd-sysctl.service static systemd-sysusers.service static systemd-time-wait-sync.service disabled systemd-timedated.service static systemd-timesyncd.service enabled systemd-tmpfiles-clean.service static systemd-tmpfiles-setup-dev.service static systemd-tmpfiles-setup.service static systemd-udev-settle.service static systemd-udev-trigger.service static systemd-udevd.service static systemd-update-utmp-runlevel.service static systemd-update-utmp.service static systemd-user-sessions.service static systemd-volatile-root.service static udev.service static umountfs.service masked umountnfs.service masked umountroot.service masked urandom.service static user-runtime-dir@.service static user@.service static x11-common.service masked machine.slice static user.slice static dbus.socket static ssh.socket disabled sssd-secrets.socket enabled syslog.socket static systemd-fsckd.socket static systemd-initctl.socket static systemd-journald-audit.socket static systemd-journald-dev-log.socket static systemd-journald.socket static systemd-networkd.socket disabled systemd-rfkill.socket static systemd-udevd-control.socket static systemd-udevd-kernel.socket static basic.target static bluetooth.target static boot-complete.target static cryptsetup-pre.target static cryptsetup.target static ctrl-alt-del.target disabled default.target static emergency.target static exit.target disabled final.target static getty-pre.target static getty.target static graphical.target static halt.target disabled hibernate.target static hybrid-sleep.target static initrd-fs.target static initrd-root-device.target static initrd-root-fs.target static initrd-switch-root.target static initrd.target static kexec.target disabled local-fs-pre.target static local-fs.target static multi-user.target static network-online.target static network-pre.target static network.target static nss-lookup.target static nss-user-lookup.target static paths.target static poweroff.target disabled printer.target static reboot.target disabled remote-cryptsetup.target disabled remote-fs-pre.target static remote-fs.target enabled rescue-ssh.target static rescue.target static rpcbind.target static runlevel0.target disabled runlevel1.target static runlevel2.target static runlevel3.target static runlevel4.target static runlevel5.target static runlevel6.target disabled shutdown.target static sigpwr.target static sleep.target static slices.target static smartcard.target static sockets.target static sound.target static suspend-then-hibernate.target static suspend.target static swap.target static sysinit.target static system-update-pre.target static system-update.target static time-sync.target static timers.target static umount.target static apt-daily-upgrade.timer enabled apt-daily.timer enabled chrony-dnssrv@.timer disabled fstrim.timer disabled logrotate.timer enabled man-db.timer enabled systemd-tmpfiles-clean.timer static 236 unit files listed. 2020-06-19T10:01:48Z DEBUG stderr= 2020-06-19T10:01:48Z DEBUG Starting external process 2020-06-19T10:01:48Z DEBUG args=['/bin/systemctl', 'list-unit-files', '--full'] 2020-06-19T10:01:49Z DEBUG Process finished, return code=0 2020-06-19T10:01:49Z DEBUG stdout=UNIT FILE STATE proc-sys-fs-binfmt_misc.automount static -.mount generated dev-hugepages.mount static dev-mqueue.mount static media-cdrom0.mount generated proc-sys-fs-binfmt_misc.mount static sys-fs-fuse-connections.mount static sys-kernel-config.mount static sys-kernel-debug.mount static systemd-ask-password-console.path static systemd-ask-password-wall.path static session-5.scope transient session-7.scope transient apparmor.service enabled apt-daily-upgrade.service static apt-daily.service static autovt@.service enabled bootlogd.service masked bootlogs.service masked bootmisc.service masked certmonger.service enabled checkfs.service masked checkroot-bootclean.service masked checkroot.service masked chrony-dnssrv@.service static chrony.service enabled chronyd.service enabled console-getty.service disabled console-setup.service enabled container-getty@.service static cron.service enabled cryptdisks-early.service masked cryptdisks.service masked dbus-org.freedesktop.hostname1.service static dbus-org.freedesktop.locale1.service static dbus-org.freedesktop.login1.service static dbus-org.freedesktop.timedate1.service static dbus-org.freedesktop.timesync1.service enabled dbus.service static debug-shell.service disabled emergency.service static fstrim.service static getty-static.service static getty@.service enabled halt.service masked hostname.service masked hwclock.service masked ifup@.service static ifupdown-pre.service static ifupdown-wait-online.service disabled initrd-cleanup.service static initrd-parse-etc.service static initrd-switch-root.service static initrd-udevadm-cleanup-db.service static keyboard-setup.service enabled killprocs.service masked kmod-static-nodes.service static kmod.service static logrotate.service static man-db.service static module-init-tools.service static motd.service masked mountall-bootclean.service masked mountall.service masked mountdevsubfs.service masked mountkernfs.service masked mountnfs-bootclean.service masked mountnfs.service masked networking.service enabled oddjobd.service enabled procps.service static quotaon.service static rc-local.service static rc.local.service static rc.service masked rcS.service masked reboot.service masked rescue.service static rmnologin.service masked rsyslog.service enabled sendsigs.service masked serial-getty@.service disabled single.service masked ssh.service enabled ssh@.service static sshd.service enabled sssd-secrets.service indirect sssd.service enabled stop-bootlogd-single.service masked stop-bootlogd.service masked sudo.service masked syslog.service enabled system-update-cleanup.service static systemd-ask-password-console.service static systemd-ask-password-wall.service static systemd-backlight@.service static systemd-binfmt.service static systemd-bless-boot.service static systemd-boot-check-no-failures.service disabled systemd-exit.service static systemd-fsck-root.service enabled-runtime systemd-fsck@.service static systemd-fsckd.service static systemd-halt.service static systemd-hibernate-resume@.service static systemd-hibernate.service static systemd-hostnamed.service static systemd-hwdb-update.service static systemd-hybrid-sleep.service static systemd-initctl.service static systemd-journal-flush.service static systemd-journald.service static systemd-kexec.service static systemd-localed.service static systemd-logind.service static systemd-machine-id-commit.service static systemd-modules-load.service static systemd-networkd-wait-online.service disabled systemd-networkd.service disabled systemd-poweroff.service static systemd-quotacheck.service static systemd-random-seed.service static systemd-reboot.service static systemd-remount-fs.service static systemd-resolved.service disabled systemd-rfkill.service static systemd-suspend-then-hibernate.service static systemd-suspend.service static systemd-sysctl.service static systemd-sysusers.service static systemd-time-wait-sync.service disabled systemd-timedated.service static systemd-timesyncd.service enabled systemd-tmpfiles-clean.service static systemd-tmpfiles-setup-dev.service static systemd-tmpfiles-setup.service static systemd-udev-settle.service static systemd-udev-trigger.service static systemd-udevd.service static systemd-update-utmp-runlevel.service static systemd-update-utmp.service static systemd-user-sessions.service static systemd-volatile-root.service static udev.service static umountfs.service masked umountnfs.service masked umountroot.service masked urandom.service static user-runtime-dir@.service static user@.service static x11-common.service masked machine.slice static user.slice static dbus.socket static ssh.socket disabled sssd-secrets.socket enabled syslog.socket static systemd-fsckd.socket static systemd-initctl.socket static systemd-journald-audit.socket static systemd-journald-dev-log.socket static systemd-journald.socket static systemd-networkd.socket disabled systemd-rfkill.socket static systemd-udevd-control.socket static systemd-udevd-kernel.socket static basic.target static bluetooth.target static boot-complete.target static cryptsetup-pre.target static cryptsetup.target static ctrl-alt-del.target disabled default.target static emergency.target static exit.target disabled final.target static getty-pre.target static getty.target static graphical.target static halt.target disabled hibernate.target static hybrid-sleep.target static initrd-fs.target static initrd-root-device.target static initrd-root-fs.target static initrd-switch-root.target static initrd.target static kexec.target disabled local-fs-pre.target static local-fs.target static multi-user.target static network-online.target static network-pre.target static network.target static nss-lookup.target static nss-user-lookup.target static paths.target static poweroff.target disabled printer.target static reboot.target disabled remote-cryptsetup.target disabled remote-fs-pre.target static remote-fs.target enabled rescue-ssh.target static rescue.target static rpcbind.target static runlevel0.target disabled runlevel1.target static runlevel2.target static runlevel3.target static runlevel4.target static runlevel5.target static runlevel6.target disabled shutdown.target static sigpwr.target static sleep.target static slices.target static smartcard.target static sockets.target static sound.target static suspend-then-hibernate.target static suspend.target static swap.target static sysinit.target static system-update-pre.target static system-update.target static time-sync.target static timers.target static umount.target static apt-daily-upgrade.timer enabled apt-daily.timer enabled chrony-dnssrv@.timer disabled fstrim.timer disabled logrotate.timer enabled man-db.timer enabled systemd-tmpfiles-clean.timer static 236 unit files listed. 2020-06-19T10:01:49Z DEBUG stderr= 2020-06-19T10:01:49Z DEBUG Starting external process 2020-06-19T10:01:49Z DEBUG args=['pam-auth-update', '--package', '--enable', 'mkhomedir'] 2020-06-19T10:01:49Z DEBUG Process finished, return code=0 2020-06-19T10:01:49Z DEBUG stdout= 2020-06-19T10:01:49Z DEBUG stderr= 2020-06-19T10:01:49Z DEBUG Starting external process 2020-06-19T10:01:49Z DEBUG args=['/bin/systemctl', 'is-active', 'oddjobd.service'] 2020-06-19T10:01:49Z DEBUG Process finished, return code=0 2020-06-19T10:01:49Z DEBUG stdout=active 2020-06-19T10:01:49Z DEBUG stderr= 2020-06-19T10:01:49Z DEBUG Starting external process 2020-06-19T10:01:49Z DEBUG args=['/bin/systemctl', 'is-enabled', 'oddjobd.service'] 2020-06-19T10:01:49Z DEBUG Process finished, return code=0 2020-06-19T10:01:49Z DEBUG stdout=enabled 2020-06-19T10:01:49Z DEBUG stderr= 2020-06-19T10:01:49Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:49Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:49Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:49Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:49Z INFO SSSD enabled 2020-06-19T10:01:49Z DEBUG Starting external process 2020-06-19T10:01:49Z DEBUG args=['/bin/systemctl', 'restart', 'sssd.service'] 2020-06-19T10:01:49Z DEBUG Process finished, return code=0 2020-06-19T10:01:49Z DEBUG stdout= 2020-06-19T10:01:49Z DEBUG stderr= 2020-06-19T10:01:49Z DEBUG Starting external process 2020-06-19T10:01:49Z DEBUG args=['/bin/systemctl', 'is-active', 'sssd.service'] 2020-06-19T10:01:49Z DEBUG Process finished, return code=0 2020-06-19T10:01:49Z DEBUG stdout=active 2020-06-19T10:01:49Z DEBUG stderr= 2020-06-19T10:01:49Z DEBUG Restart of sssd.service complete 2020-06-19T10:01:49Z DEBUG Starting external process 2020-06-19T10:01:49Z DEBUG args=['/bin/systemctl', 'enable', 'sssd.service'] 2020-06-19T10:01:50Z DEBUG Process finished, return code=0 2020-06-19T10:01:50Z DEBUG stdout= 2020-06-19T10:01:50Z DEBUG stderr=Synchronizing state of sssd.service with SysV service script with /lib/systemd/systemd-sysv-install. Executing: /lib/systemd/systemd-sysv-install enable sssd 2020-06-19T10:01:50Z DEBUG Backing up system configuration file '/etc/ldap/ldap.conf' 2020-06-19T10:01:50Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2020-06-19T10:01:50Z DEBUG Updating configuration file /etc/ldap/ldap.conf 2020-06-19T10:01:50Z DEBUG # File modified by ipa-client-install # We do not want to break your existing configuration, hence: # URI, BASE, TLS_CACERT and SASL_MECH # have been added if they were not set. # In case any of them were set, a comment has been inserted and # "# CONF_NAME modified by IPA" added to the line above. # To use IPA server with openLDAP tools, please comment out your # existing configuration for these options and uncomment the # corresponding lines generated by IPA. # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example,dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never # TLS certificates (needed for GnuTLS) # TLS_CACERT modified by IPA #TLS_CACERT /etc/ipa/ca.crt TLS_CACERT /etc/ssl/certs/ca-certificates.crt URI ldaps://freeipaserver.lin.test.lan BASE dc=lin,dc=test,dc=lan SASL_MECH GSSAPI 2020-06-19T10:01:50Z INFO Configured /etc/openldap/ldap.conf 2020-06-19T10:01:50Z DEBUG Starting external process 2020-06-19T10:01:50Z DEBUG args=['/usr/bin/getent', 'passwd', 'join@lin.test.lan'] 2020-06-19T10:01:50Z DEBUG Process finished, return code=0 2020-06-19T10:01:50Z DEBUG stdout=join:*:363600015:363600015:Jo In:/home/join:/bin/sh 2020-06-19T10:01:50Z DEBUG stderr= 2020-06-19T10:01:50Z DEBUG Backing up system configuration file '/etc/ssh/ssh_config' 2020-06-19T10:01:50Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2020-06-19T10:01:50Z INFO Configured /etc/ssh/ssh_config 2020-06-19T10:01:50Z DEBUG Backing up system configuration file '/etc/ssh/sshd_config' 2020-06-19T10:01:50Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2020-06-19T10:01:50Z DEBUG Starting external process 2020-06-19T10:01:50Z DEBUG args=['/usr/sbin/sshd', '-t', '-f', '/dev/null', '-o', 'AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys', '-o', 'AuthorizedKeysCommandUser=nobody'] 2020-06-19T10:01:50Z DEBUG Process finished, return code=0 2020-06-19T10:01:50Z DEBUG stdout= 2020-06-19T10:01:50Z DEBUG stderr= 2020-06-19T10:01:50Z INFO Configured /etc/ssh/sshd_config 2020-06-19T10:01:50Z DEBUG Starting external process 2020-06-19T10:01:50Z DEBUG args=['/bin/systemctl', 'is-active', 'sshd.service'] 2020-06-19T10:01:50Z DEBUG Process finished, return code=0 2020-06-19T10:01:50Z DEBUG stdout=active 2020-06-19T10:01:50Z DEBUG stderr= 2020-06-19T10:01:50Z DEBUG Starting external process 2020-06-19T10:01:50Z DEBUG args=['/bin/systemctl', 'restart', 'sshd.service'] 2020-06-19T10:01:50Z DEBUG Process finished, return code=0 2020-06-19T10:01:50Z DEBUG stdout= 2020-06-19T10:01:50Z DEBUG stderr= 2020-06-19T10:01:50Z DEBUG Starting external process 2020-06-19T10:01:50Z DEBUG args=['/bin/systemctl', 'is-active', 'sshd.service'] 2020-06-19T10:01:50Z DEBUG Process finished, return code=0 2020-06-19T10:01:50Z DEBUG stdout=active 2020-06-19T10:01:50Z DEBUG stderr= 2020-06-19T10:01:50Z DEBUG Restart of sshd.service complete 2020-06-19T10:01:50Z INFO Configuring lin.test.lan as NIS domain. 2020-06-19T10:01:50Z DEBUG Starting external process 2020-06-19T10:01:50Z DEBUG args=['/usr/bin/nisdomainname'] 2020-06-19T10:01:50Z DEBUG Process finished, return code=1 2020-06-19T10:01:50Z DEBUG stdout=nisdomainname: Local domain name not set 2020-06-19T10:01:50Z DEBUG stderr= 2020-06-19T10:01:50Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:50Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:50Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:50Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2020-06-19T10:01:50Z INFO Client configuration complete. 2020-06-19T10:01:50Z INFO The ipa-client-install command was successful