有人在阿里云上部署过 FreeIPA 么？

This topic created in 2768 days ago, the information mentioned may be changed or developed.

之前在 Linode, AWS 和自用的机器上好像都没阿里这毛病

刚开始是

IPv6 stack is enabled in the kernel but there is no interface that has ::1 address assigned. Add ::1 address resolution to 'lo' interface. You might need to enable IPv6 on the interface 'lo' in sysctl.conf.

按照这个介绍改了下 net.ipv6.conf.all.disable_ipv6 的配置

结果继续死

Configuring directory server (dirsrv). Estimated time: 30 seconds
  [1/45]: creating directory server instance
  [2/45]: enabling ldapi
  [3/45]: configure autobind for root
  [4/45]: stopping directory server
  [5/45]: updating configuration in dse.ldif
  [6/45]: starting directory server
  [error] timeout: Timeout exceeded
ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall): ERROR    Timeout exceeded
ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall): ERROR    The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information

郁闷，弄不下去了

端口问题: 我 SELinux 已关，FirewallD 原本就是 masked，找不到啥阻碍的...

3 replies

julyclyde

Nov 13, 2018

See /var/log/ipaserver-install.log for more information

连看日志这么基础的动作都没意识去做，你可能不该玩 FreeIPA 这么高级的东西

yuikns

Nov 13, 2018

@julyclyde 为啥你觉得我就没看呢？

日志中内容和文档一致，就是 ldap timeout，389 端口等不到内容。然后加个 backtrace。之前内容呢？没有任何异常报错。

后来找了下源码和前面写操作。确认了下之前的安装和删除脚本都不干净。然后手工操作重置了下。

另外之后还有依赖不对，certmonger 连 dbus 跪等等。

我承认安装起来特烦，各种神奇的跑飞了都得自己来收拾。但这就“高级”了？厉害。

julyclyde

Nov 13, 2018

@yuikns 因为你的提问方式不像是看过之后应该的样子